Changing the Cisco FI 6536 Password in Intersight Managed Mode

When the admin password needs to change - whether after a security incident or just as routine hygiene - access needs to be restored quickly. In environments managed through Cisco Intersight, the process has shifted slightly compared to older management modes, but there are still clear steps for both cases: when the password is known and when it has been forgotten. The option to change the password through the UCS Manager web UI no longer exists, and the FI’s device console doesn’t offer any menu items for this either.

Changing the password when the current password is known

If the Fabric Interconnect is already managed through Intersight and you have physical access via the console, you can change the password directly through the CLI or via SSH:

1. Connect to the console or via SSH to the primary FI.

2. Run the following command:

   change-password
   

3. Follow the prompts to enter and confirm the new admin password twice.

4. Once complete, you can log in with the new password.

This approach is straightforward and requires no additional tools. It works for both single Fabric Interconnects and twin-FI pairs.

Resetting the password when it’s lost

If you no longer have valid credentials or are in standalone mode, a recovery process via the console is required. The following steps reset the password and restart the system:

1. Temporarily power-cycle the primary FI.

2. During the boot process, interrupt it by pressing Ctrl + L or Ctrl + Shift + R until you reach the loader prompt.

3. Boot the kernel firmware:

   loader > boot /installables/switch/kernel_firmware_version
   

4. Enter configuration mode:

   switch(boot)# config terminal
   

5. Set the new admin password:

   switch(boot)(config)# admin-password YourNewStrongPassword
   

6. Exit configuration mode:

   switch(boot)(config)# exit
   

7. Load the system firmware:

   switch(boot)# load /installables/switch/system_firmware_version
   

8. Once loading finishes, the device reboots and you can log in with the newly set password.

If the FIs are running as a cluster node pair, there’s no need to also change the password on the secondary Fabric Interconnect - it’s picked up automatically.

Best practices for the new password

• Use a strong, random string of at least 12 characters combining upper- and lowercase letters, numbers, and special characters.
• Store the new password securely - ideally in a password manager - and avoid saving it in plain text on the device or in notes.
• Document the password change for your security team, especially if multiple administrators need access.

Conclusion

Whether you’re changing a known password or dealing with a complete loss of credentials, the process is manageable with the right approach. In Intersight Managed Mode, the change-password command simplifies changes when access is available, while recovery via the loader prompt provides a reliable safety net for a total loss scenario.