Sophos XG Admin Password lost

You cannot do it from a webUI or SSH. 

The only way is via Console / keyboard/monitor.

See: support.sophos.com/.../KB-000035990

thanks for the anwser.

Did you read what i wrote?  Is it possible to reset the admin password without having to enter the old PW (reset)?

First point at your Link is: Reset the password via Web Admin. So, at this point, you must also enter the old admin password. very difficult when you've lost it

Second point: reset the password via Console.
My problem: I don't know where to find the console? Normally, this point would also be in the WebGui, top right, if you click on the pull-down menu for the logged in user. There should also be the entry Console, but this is NOT the case for my user with the role of Administrator!

Ok, this plan doesn't work like that either, what next? oh, via SFLoader

third point: SFLoader

Problem: For me there is no point under Troubleshoot, for whatever reason: "reset Console password" as shown in the screenshots in your link, what now?

Why don't I have this point? 
My Sophos XG runs on a mini PC, just as information, by the way

Console is the serial connection to the appliance or the keyboard and monitor attached to it. Then you can do the step: Reset the password via Console (SFOS 17.5 and later)

There is no other way to do this, because everything else would mean a security issue. Only if you are able to be access the physical appliance, you can reset the password.

I have physical access to my MiniPC. He's in my living room :-)

But: Is it really the case that, despite physical access to the Sophos XG Firewall on my Mini PC, I can only change the admin password if I connect to the MINI PC via the serial interface, provided that it works at all?

- My mini PC has 2 serial interfaces (2x RS232)
- My console cable has an RS232 interface at one end and an RJ45 interface at the other end.
- My ThinkPad X1 Yoga Notebook has NO RJ45 interface.
But: I would have an adapter from RJ45 to USB.

I've already tried this constellation, but then I didn't know which interface (COM 1, 2, 3, 4 or what?) I should have specified?

Because in the device manager of my Windows 10 Pro I can't find any COM ports 1, 2 or so (as you could still find them on old notebooks)

Can my hardware constellation even successfully establish a serial connection?

Does your mini pc has a keyboard and a vga/hdmi output? This can be used as well. 

Sure. But, this is not the key to reset the admin password. And new? 

If you have access to the CLI (console) via keyboard and monitor, you can simply reset the password. See the KB. 

Thanks for the feedback. what did I write above regarding CLI? 

I wrote: 

Second point: reset the password via Konsole.

My problem: I don't know where to find the console? 

Normally, this point would also be in the WebGui, top right, if you click on the pull-down menu for the logged in user!

There should also be the entry Console, but this is NOT the case for my user with the role of Administrator!

Ok, this plan doesn't work like that either, what next? 

AndréAegerter said:

My problem: I don't know where to find the console?

Connect to your MiniPC with a keyboard and monitor, It will be the easiest way.

After It, insert anything on the password for the first time, then at the second time insert "RESET", all uppercase.

At last, a window should appear asking if you want to reset the admin password. (Option 4.)

For more information look at this KB, and follow the steps of: "Reset the password via Console (SFOS 17.5 and later)"

That was the solution, great *smile*. 

That was the solution, great *smile*.