How to change the Citrix ADC MPX and VPX root password

Occasionally, you must change the root password of the Citrix ADC appliance occasionally, for security reasons or compliance of password rotation policy.

This document describes the steps required to change the root password of the Citrix ADC MPX and VPX appliances managed through Citrix ADM cloud.

If you change the ADC password, you must modify the Citrix ADM admin profile that is associated with the ADC. An Citrix ADM admin profile maintains the ADC credentials for REST API, SSH, SCP, or SNMP based communication with the ADC appliance. Through admin profiles, Citrix ADM manages Citrix ADC MPX and VPX appliances.

For more information about how to change the ADC nsroot password on an individual appliance, see article CTX224027
.

Change password using the Configuration Jobs feature

By using the Citrix ADM Configuration Jobs feature, you can simplify the repetitive password change process and apply the changes to the Citrix ADC appliances, without accessing the individual instances.

Follow these steps to change the password:

Step 1. Create a Configuration Template.Step 2. Create a Configuration Job.Step 3. Create an admin profile and modify it.

Note: If the ADC appliances are managed by other tools as well, you must change the credentials on those tools as well.

Step 1. Create a Configuration Template

1. From the Citrix ADM GUI, navigate to Infrastructure > Configuration Jobs > Configuration Templates.

   

2. Select Add. Create a Configuration Template with by typing the SSH command set system user $ROOT_USER_NAME$ $ROOT_USER_PASSWORD$.

   

3. Select the $ROOT_USER_NAME$ variable, and select Text Field as Type.

4. Optionally, provide the default value for the root user name. Select Done to save the variable settings.

   

5. Select the $ROOT_USER_PASSWORD$ variable, and select Password Field as Type. Select Done to save the variable settings.

6. Select OK to save the Configuration Template.

7. The new Configuration Template appears under Configuration Templates.

Create a Configuration Job

1. From the Citrix ADM GUI, navigate to Infrastructure > Configuration Jobs.

2. Select Create Job and click the “+” icon of the new configuration template. Select Next.

   

3. Select the ADC instance or instances for which the password must be modified.

   

4. In the Select Instances pane, select the instances, and click Next.

5. In the Specify Variable Values pane provide values for user name and password, and click Next.

6. Under Job Preview, check the actual CLI commands that the Citrix ADM will run on the ADC instances. If the preview looks fine, click Next.

   

7. In the Execute pane, you have the choice to run the Job immediately or schedule it for later. You can also choose to run the Job in parallel on all the selected instances or do it sequentially. Select Finish after you’ve provided the execution details.

8. Configuration Job shows if the execution succeeded or failed.

   

9. Select the Job and click Details. The execution details show the status at individual instance level.

Modify the admin profile

After you’ve modified the ADC passwords, you must add and modify the admin profiles of the instances. Follow these steps:

1. Navigate to Infrastructure > Instances > Citrix ADC.

2. Click Profiles to see all the admin profiles.

3. Select Add to create an admin profile and provide new Citrix ADC credentials.

   

4. The newly created profile appears under Admin Profiles.

5. Go to Network > Instances > Citrix ADC. Select the Citrix ADC instance for which the password has been modified, and the select Edit.

6. Select the newly created Profile Name and click OK.

   

7. Select the instance again, right-click, select Rediscover.

   

These steps complete the password reset process in Citrix ADM.