Check Point

Check Point CP 15400 Password Recovery

Step-by-step password recovery for the Check Point CP 15400 (15000 Series (Gaia)). Console access required.

Overview

This guide provides step-by-step instructions for resetting lost or forgotten administrative passwords on enterprise networking hardware. Follow the procedure below carefully to regain access while preserving your device configuration.

Prerequisites

Before proceeding with password recovery, ensure you have a console cable, terminal emulation software configured to 9600 baud, and physical access to the device.

Step 1: Establish Console Connection

Connect your terminal cable to the console port of the device and open your serial terminal session.

Step 2: Interrupt the Boot Sequence

Power cycle the hardware and issue a Break key sequence during initial system startup to enter ROMMON mode.

Step 3: Reset Password & Configuration

Bypass startup configuration loading, boot into system software, set your new credentials, and save changes back to non-volatile memory.

Overview

This procedure recovers administrator access to the Check Point CP-15400 running Check Point Gaia (the operating system on Check Point 5000–69000 appliances) when the admin password is lost. Gaia's GRUB boot loader supports single-user mode, which drops to a root shell where the admin password can be reset — the configuration is preserved.

Prerequisites

Console cable (RJ-45 serial on most Check Point appliances) with a terminal session at 115200 baud, 8N1. Physical or remote power access to reboot the appliance.

Recovery Procedure — GRUB Single-User Mode

Connect the console cable and open a terminal session at 115200 baud, 8N1 (Check Point appliances use 115200).
Reboot the appliance (power-cycle or reboot if you have access).
When the GRUB boot menu appears, press a key to stop the auto-boot countdown.
Select the Gaia boot entry, press e to edit it.
Find the kernel line (starting with linux or kernel) and append single (or init=/bin/bash if single does not work) to the end.
Press Ctrl+X (or F10) to boot with the modified entry. The appliance drops to a root shell.
Mount the root filesystem read-write: mount -o remount,rw / (if not already writable).
Reset the admin password: passwd admin (Gaia's admin user). If the expert user exists, also: passwd expert.
Reboot: reboot. Log in as admin with the new password.

Important Notes

Gaia uses 115200 baud on the console — connecting at 9600 produces garbage characters.
Single-user mode preserves the configuration — only the admin (and expert) password is reset.
Check Point appliances may also have a maintenance mode (reached via the boot menu "Maintenance") that offers password reset — if available, prefer it over GRUB editing.
The expert user is optional; reset it only if expert mode was enabled and its password is lost.
If the appliance is managed by SmartConsole/Smart-1, re-establish management connectivity after recovery (the management server password may differ from the local admin).

Protecting Your Configuration

Before recovery, back up the config: from expert mode, cpinfo -z /var/log/CPbackup or use the SmartConsole backup. After recovery, verify the configuration is intact.