Hello @Marija,
thank you for reaching out again.
I fixed the issue with my particular device in the meantime (I used RMS to reset the admin password; luckily I registered the device once beforehand, otherwise the required MAC and Serial Number also would have been scratched…).
In November, I received a Product Change Notification Email which said that from December 2024, the engravings will be replaced by stickers again:
I was very irritated back then because of the aforementioned problem (which I am by no means alone with, there seem to be many topics in this forum), and how the prevention of that problem was now being reverted.
Does this mean that the switch to stickers is now being rolled back again soon in favor of engravings? That would be awesome—I am very happy with the other RUTX50 I use that has black casing with engraving on top and bottom, no stickers at all.
By the way, regarding the security measures, may I suggest to take inspiration from Mikrotik’s “consumer” devices: They have unique-per-device passwords (which are also not stored by them I think), that also persist after a full reset, but when flashed using their “Netinstall” tool, they have no password on first login. Of course, when being re-flashed, all potentially sensitive data is long gone, so no risk of losing security there. I think it should be possible to allow for TFTP flashing a firmware that has no admin password to regain control over the device. This would allow sufficiently advanced users to regain access to a device themselves, without possibly complicated RMA process.
I hope you or your colleagues could consider this idea, as—especially when there still is some time before we have engraved devices again—this issue is a real bummer.
Best regards,
Karl
(sent using a RUTX50
)
