Recover the Admin using the adminreset Command

Use this command to reset the admin access settings to defaults and restart the admin service. This command allows you to recover the Unified Access Gateway admin portal when the portal cannot be accessed due to misconfiguration of settings like TLS ciphers, admin SAML Authentication.

This command resets the following admin access settings to defaults.

• TLS settings - ciphers, protocol, signature schemes, and named groups.
• TLS Certificate - admin TLS certificate is replaced with a new self-signed certificate.
• SAML login for the admin - if this setting is configured, deactivates the admin SAML login and reverts to password login.

Procedure

1. Log in to Unified Access Gateway console with configured user (usually root).

2. Enter the following command to reset the admin access settings.

   adminreset
   

   Note: If a non-root administrator is configured for Unified Access GatewayOS login, run the command with sudo. For example, sudo adminreset.

   Alternatively, use the following arguments if you want to reset the access for a specific setting.

   • --adminSaml deactivates the admin SAML login and reverts to password login.
   • --adminTlsCert replaces the admin TLS certificate with a new self-signed certificate.
   • --tlsSettings resets TLS settings.
     
     For example, enter the following commands to reset TLS settings for the admin.
     
     adminreset --tlsSettings
     
     
   • --allowedHostHeader [append|replace|view] <comma separated host values> - supports modification, removal, and viewing of allowedHostHeaders field in the System configuration.
     
     For example, enter the following command to reset allowedHostHeader settings for the admin.
     
     adminreset --allowedHostHeader append uag1.mycompany.com,uag2.mycompany.com - append the provided values to the previously configured allowed host.
     
     adminreset --allowedHostHeader replace uag1.mycompany.com,uag2.mycompany.com - replace previously configured values with provided values. This is the default operation if no append option is specified.
     
     adminreset --allowedHostHeader view - view the existing values.

3. Enter y to confirm.

   Note: Alternatively, use the adminreset -f command to forcefully reset all admin access settings, without prompting for confirmation.

Results

The admin reset is completed successfully.

Note: You can set the admin password using adminpwd command. See Reset the Admin Password using the Unified Access Gateway Console.