Unlocking user accounts using the appliance CLI

By default, authentication failures are tracked, and users are locked out after five failed log in attempts. Use the CLI commands in this topic to view the authentication history and unlock the user accounts.

Note

For a managed appliance, you can perform this procedure on the Central Management System appliance as well as the local appliance. The procedure remains the same. However, you will need to take the additional step to locate the appliance on the Central Management System CLI. For instructions on locating an appliance on the Central Management System CLI, see the Trellix Central Management System Administration Guide.

Prerequisites

Admin access

To unlock a single user account:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Determine the user who is locked out using the show aaa authentication attempts command:
```
hostname (config) # show aaa authentication attempts
```

To unlock the account, use the following command:

aaa authentication attempts reset user <username>

Save your changes:
```
hostname (config) # write memory 
```

To unlock all user accounts:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Determine the user who is locked out using the show aaa authentication attempts command:
```
hostname (config) # show aaa authentication attempts
```
Unlock all user accounts by using the aaa authentication attempts reset all command:
```
hostname (config) # aaa authentication attempts reset all
```
Save your changes:
```
hostname (config) # write memory
```