Hello,
One of my clients has forgotten their master-password for the mxmc; is there anyway to retrieve it, or to reset it?
Regards
Hello,
if the administrator/master password of an MxMC project has been forgotten, it cannot be retrieved or reset. There is intentionally no backdoor or recovery mechanism for a protected MxMC project.
This is an important security-by-design principle.
An MxMC project can contain the credentials required to access all cameras within the project. Depending on the assigned rights, access to the project may therefore provide extensive access to camera live and recorded video, configuration, system settings and other security-relevant functions.
For this reason, the MxMC project configuration and the credentials stored within it must be protected against unauthorized access. Providing a backdoor or master recovery mechanism would introduce an additional attack vector and could undermine this protection.
This is particularly important for installations with high cybersecurity requirements, including critical infrastructure environments and organizations subject to security frameworks such as KRITIS and NIS2.
If another administrator account for the same project is available, this account can be used to manage the users and assign a new password.
If no other administrator account is available, the protected project cannot be recovered without the valid credentials. In this case, the options are to restore a backup for which the administrator credentials are known or to create a new MxMC project.
We therefore strongly recommend:
-
securely documenting the administrator credentials,
-
maintaining a protected backup of the MxMC project, and
-
ensuring that appropriate credential-management processes are in place.
Regards,
Jörg