EDR appliance enters Linux emergency mode


Article ID: 194040


Updated On:


Endpoint Detection and Response Endpoint Detection and Response Hardware Advanced Threat Protection Platform Endpoint Detection and Response with Network and Email


Advanced Threat Protection (ATP) Platform or Endpoint Detection and Response (EDR) appliance console fails to complete boot sequence. Instead, it enters Linux emergency mode and prompts for a root password.


Identifying root cause is not possible in these circumstances because the root password is disabled in ATP Platform and EDR appliance console in both the virtual and physical hardware versions.


To return to a working state:

  1. Do one of the following:
    - For virtual, re-deploy the OVA
    - For physical hardware, re-image from ISO

  2. If you enter emergency mode after re-deploy or re-image, contact support for assistance.