Cisco

Cisco ASA5506H-X Password Recovery

Step-by-step password recovery for the Cisco ASA5506H-X (ASA 5506-X / 5508-X / 5516-X). Console access required.

Overview

This guide provides step-by-step instructions for resetting lost or forgotten administrative passwords on enterprise networking hardware. Follow the procedure below carefully to regain access while preserving your device configuration.

Prerequisites

Before proceeding with password recovery, ensure you have a console cable, terminal emulation software configured to 9600 baud, and physical access to the device.

Step 1: Establish Console Connection

Connect your terminal cable to the console port of the device and open your serial terminal session.

Step 2: Interrupt the Boot Sequence

Power cycle the hardware and issue a Break key sequence during initial system startup to enter ROMMON mode.

Step 3: Reset Password & Configuration

Bypass startup configuration loading, boot into system software, set your new credentials, and save changes back to non-volatile memory.

Overview

This procedure recovers administrator access to the Cisco ASA 5506H-X. The ASA 5506-X, 5508-X, and 5516-X are the first ASA models with no break-to-ROMMON — they use the Esc key to reach the ROMMON prompt instead of Ctrl+Break. The startup configuration is bypassed via confreg 0x41 and restored afterwards.

Prerequisites

Console cable (RJ-45 to DB-9 or USB) with a terminal session at 9600 baud, 8N1. Physical or remote power access to reboot the ASA.

Recovery Procedure — Esc-Key ROMMON Method

Connect the console cable and open a terminal session (9600 8N1).
Power-cycle the ASA (or issue reload).
Watch the console output during boot. When you see "Launching BootLoader..." (or immediately at power-on on some firmware versions), press and HOLD the Esc key repeatedly until the ROMMON prompt appears: rommon #>. You must press Esc early — once the ASA OS (ASAOS) starts loading, it is too late and you must reboot and try again.
Set the configuration register to skip the startup config: confreg 0x41
Boot the ASA: boot (or boot disk0:/asa<version>.bin if prompted).
The ASA boots with an empty configuration; you are in privileged mode (prompt ends with #).
Restore the startup configuration: copy startup-config running-config.
Enter configuration mode: configure terminal.
Remove and reset the enable password: no enable password, then enable password <new-password>. Reset the login password if configured: password <new-password>.
Restore the normal config register: config-register 0x1.
Exit and save: end, then write memory.
Reboot to verify: reload. Confirm normal boot with the restored config and new passwords.

Important Notes

Esc, not Ctrl+Break. The 5506-X/5508-X/5516-X do not respond to break; the documented method is pressing Esc during the BootLoader phase. If you miss the window, reboot and try again — the window is short.
The config is not erased — skipped via confreg 0x41 and restored in step 7. Restore config-register 0x1 (step 10) or the ASA will keep booting empty.
If no password-recovery is in the config, the bypass is blocked — only a config wipe remains possible.
Baud rate is 9600 on these models.

Protecting Your Configuration

Before recovery, back up the config: copy running-config tftp://<server>/<filename>. After recovery, verify show running-config and show version (config register 0x1).