Technical Tip: How to change the default root password for the hosts in FortiAnalyzer BigData

[heng]

Description

This article describes how to change the default root password and its behavior for all the hosts or all the blades via the active controller in FortiAnalyzer BigData. The password should only be changed in the active controller and the changes will be set to all the hosts or all the blades and it is not necessary to set on each blade individually. 

It is highly recommended to reset the default root password once the system is set up for security enhancement purposes. 

Scope

FortiAnalyzer BigData 4500F, FortiAnalyzer -BD-VM

Solution

1. The default credential for all hosts is username root and password fortinet@123 .
2. To reset the default root password, it is possible run CLI command: fazbdctl set password. It is only possible to run the CLI command in the active controller.

[root@blade-198-18-1-2 package]$ fazbdctl set password
New Password: *************
Retype new password: *************
Finished setting password to all hosts

Note:

Note down the new password after the change. Reset root password is only supported after version 7.2.5 GA and above via the bootloader.

See KB article: 

Technical Tip: How to reset the lost OS root password in FortiAnalyzer BigData

3. A failed message will appear if a try to set or change the password in none active controller is processed:

[root@blade-10-0-1-3 ~]$ fazbdctl set password
Failed: this can only be executed on current controller

4.  How to log into the active controller, refer to:

Technical Tip: How to verify the current active controller in FortiAnalyzer BigData