How to reset the Symantec EDR User Interface (UI) password if you forget or password is corrupted.

Products

• Endpoint Detection and Response
• Advanced Threat Protection Platform
• Endpoint Protection with Endpoint Detection and Response

Issue/Introduction

Forgot SEDR password or a user forgot their SEDR web GUI password.

Environment

Symantec EDR 4.x

Resolution

1. Open a browser and go to the log in prompt for SEDR UI (ATP UI).
2. Click on the Forgot password.
   
   
    
3.  This will prompt you for the User name.
   
   
    
4. Type in the User name for the password you want to have reset.
   
   Note: The SMTP server has to be setup already in the SEDR (ATP) configuration in order to receive the email. A email address also needs to be associated with the User name.  If none of this has been done, there are no further options for recovery. If no users can log in, you will need to redeploy the SEDR software.
   
   
    
5. If the SMTP has been setup and the User name has email address associated with it, then you should receive an email with a temporary password to log into the EDR UI (ATP UI). Once successfully logged into the SEDR UI (ATP UI) you will be prompted to change the password.

*Note: Another user with admin level access has the ability to change the password for any other user on the SEDR UI (ATP UI).

**Note: If the password can not be recovered using the above steps, then the SEDR appliance will need to be rebuilt.

***Note: A valid connection to a SMTP Mail Server should be already configured in SEDR

 

Additional Information

For more information see:

Requesting a New EDR appliance console Logon Password

Configuring the connection to an SMTP mail server

For a lost admin CLI password see - https://knowledge.broadcom.com/external/article?articleId=197322