EDR appliance enters Linux emergency mode

Products

• Endpoint Detection and Response
• Endpoint Detection and Response Hardware
• Advanced Threat Protection Platform
• Endpoint Detection and Response with Network and Email

Issue/Introduction

Advanced Threat Protection (ATP) Platform or Endpoint Detection and Response (EDR) appliance console fails to complete boot sequence. Instead, it enters Linux emergency mode and prompts for a root password.

Cause

Identifying root cause is not possible in these circumstances because the root password is disabled in ATP Platform and EDR appliance console in both the virtual and physical hardware versions.

Resolution

To return to a working state:

1. Do one of the following:
   - For virtual, re-deploy the OVA
   - For physical hardware, re-image from ISO
   
   
2. If you enter emergency mode after re-deploy or re-image, contact support for assistance.