USG FLEX 100AX FW 5.43(ACFN.0) Forces ADMIN Password Reset Every Login

Options
SierraTech
SierraTech image  Ally Member
First Comment Friend Collector Eighth Anniversary
edited August 14 in Security

I updated firmware V5.43(ACFN.0) to Partition 1 and left 5.40(ACFN.0) in Partition 2. Every time I login to 5.43(ACFN.0) it claims my password has to be changed but the status shows it was changed recently and expires in 2027.

When I log into 5.40(ACFN.0), this does not occur. I seem to recall this issue previously, but don't remember if I cleared it by checking "Don't show me again".

I attached to screenshots that show the issue!

Zyxel USG FLEX 100AX Password Reset On Every Login FW 5.43(ACFN.0).png Zyxel USG FLEX 100AX Security Best Practices assword Reset Every Login FW 5.40(ACFN.0) vs 5.43(ACFN.0).png

Password Reset is set to 180 Days!

All Replies

  • Zyxel_Luna
    Zyxel_Luna image  Zyxel Employee
    5 Answers First Comment Friend Collector
    Options

    Hi @SierraTech

    Thank you for reaching out and sharing the screenshots.

    Upon verification, this behavior occurs because the Security Best Practices wizard state is not synchronized across the firmware partitions during the upgrade. We will address and refine this behavior in a future firmware release. In the meantime, you can avoid seeing this prompt again by using either of the following methods:

    Method 1. Update your password once through the [Security Best Practices wizard] on the login interface.

    image.png

    Method 2. Check the 'Do not show again' option and click Skip to complete the Security Best Practices wizard.

    image.png

    Thank you for choosing Zyxel products and services. Please feel free to let us know if you have any questions. Have a wonderful day!

  • SierraTech
    SierraTech image  Ally Member
    First Comment Friend Collector Eighth Anniversary
    Options

    @Zyxel_Luna

    Strangely, this resolved itself, not sure how.

    You mentioned the following workaround:

    "Method 1. Update your password once through the [Security Best Practices wizard] on the login interface."

    I tried this several times when I would login in and switched password back and forth. I believe I reverted to 5.40 and then back and had to repeat several times. Then suddenly it stopped asking.

    Don't know why (I did not check "Don't show this again").

    -Bob