Switch in April 2024 Patch: Force Change Password via CLI

Zyxel_Claudia
Zyxel_Claudia Posts: 164  Zyxel Employee
Network Detective-New Adventure Badge Network Detective Badge First Comment Friend Collector

To further strengthen device security, Zyxel Networks has extended the "Force Change Password" policy to include the CLI (Command Line Interface) login for supported switch models starting with the April 2024 patch release.

Previous Behavior: Web GUI-Only Enforcement

Previously, the Force Change Password feature only applied when users logged in through the Web GUI for the first time. Upon initial login, administrators were required to change the default password to a new one — ensuring basic protection against unauthorized access.

What’s New in the April 2024 Patch

In the April 2024 firmware patch, the Force Change Password feature now applies to CLI logins as well.

Key Details:

  • On first login via CLI, users must now change the default password.
  • The enforcement behavior is identical to the Web GUI experience.
  • This applies only if the switch has the updated April 2024 firmware installed.

If you're managing these switches via CLI, be prepared for the new password prompt during your first login after the firmware upgrade.

This enhancement ensures consistent security enforcement across both GUI and CLI interfaces, reducing risks related to unchanged default credentials.