Use the following steps to recover from a lost DXL, TIE, or MAR root password for a McAfee Linux operating system.
IMPORTANT: McAfee strongly recommends not hacking the root password because it introduces a security vulnerability to your McAfee Linux operating system and environment.
Recover from a lost root password for DXL
If you forget or lose the root password for a DXL Broker system:
- Decommission the system.
- Delete it from the system tree on the ePO server.
- Redeploy a new DXL broker.
- Make sure that all DXL clients are configured to communicate to the new server by reviewing the DXL client policies in the ePO policy catalog.
Recover from a lost root password for TIE
If you forget or lose the root password for a TIE Server:
- If the system is anything different from the Primary server:
- Decommission the system.
- Deploy a new system.
- Assign the same operation mode as your old system.
- If the affected system is the primary server:
- Deploy a new server.
- Transition the operation mode to secondary.
- Promote the newly deployed server to primary.
- After the database is fully replicated, decommission the affected system where the root password was lost:
- Shut down the system.
- Delete it from the system tree.
Recover from a lost root password for MAR:
MAR 2.4 is installed as a Service under the TIE platform. If you forget or lose the root password for a MAR server on a TIE Server platform:
- Follow the appropriate TIE solution listed above.
- Delete the MAR node from the system tree.
- When the newly created server is in the system tree, register it in ePolicy Orchestrator (ePO):
- Click Menu, Configuration, Registered Servers, Active Response Server.
- From the Actions menu, select Edit.
- In the Details tab, add the IP address and Port for the newly created MAR server.
