How to Set/Change Grub Boot Loader Password in Redhat/Centos/Fedora

In this article we are going to discuss on how to Set/Change GRUB Boot loader password in Linux. GRUB stands for [ Grand Unified Boot Loader ] is a boot loader package from the GNU Project. GRUB is the reference implementation of the Free Software Foundation’s Multiboot Specification, which provides a user the choice to boot one of multiple operating systems installed on a computer or select a specific kernel configuration available on a particular operating system’s partitions.GRUB is a very important part of linux operating system from where we can perform so many administrative tasks and booting configurations, It is highly recommended that it should be protected by password.

How to Set/Change Grub Boot Loader Password in Redhat/Centos/Fedora

Follow the below Steps to Change GRUB Boot Loader Password :

Step: 1 Generate GRUB Password

Reset the GRUB password by below command.

$  grub-md5-crypt    # To Generate MD5 hash password

How to Set/Change Grub Boot Loader Password in Redhat/Centos/Fedora

Generate GRUB Password

After above command it will ask to enter the password which will later on used as a password to unlock the GRUB.

So Enter the Password twice to protect the GRUB.

How to Set/Change Grub Boot Loader Password in Redhat/Centos/Fedora

GRUB Password Generated

As we can see that after set the password it given a MD5 hash password which we need to paste in main configuration file of GRUB.

/boot/grub/grub.conf” is the main configuration file of GRUB OR we can access the same file in different path i.e.  “/boot/grub/menu.lst” which is the Symlink or Symbolic Link or Shortcut of the main file i.e. “/boot/grub/grub.conf“.

Step: 2 Generate GRUB Password

Note: it’s highly recommended to do a backup of grub.conf file by using below command.

$  cd /boot/grub/

$  cp grub.conf grub.conf.backup

Now edit the “grub.conf” file with “vi” command.

$  vi /boot/grub/grub.conf    # Edit the GRUB configuration file

Paste the MD5 hash password on “grub.conf” file, For Example :-

password –md5 <MD5 hash Password created created above>

In our Case it’s like below shown :-

Note :- (Paste the below line in “grub.conf” file below the hiddenmenu line as shown in Snapshot below)

password –md5 $1$.zE70/$pk4kZhx6Zu9IHz6.4m7Kf0

How to Set/Change Grub Boot Loader Password in Redhat/Centos/Fedora

Configure GRUB Configuration file

Now we successfully set the GRUB password, Now its time for Testing.

Also Read – How to Reset Forgotten Root Password in Rhel/Centos 7

Step: 3 Edit the GRUB

Reboot the system and press any key before 5 Seconds to interrupt the normal boot process to edit the GRUB entry.

How to Set/Change Grub Boot Loader Password in Redhat/Centos/Fedora

Press “p” to Enter Password to Edit GRUB

As we can see above System is asking to enter “p” to edit the GRUB to unlock the next set of features.

After enter “p” It will ask for password which we reset now as shown below.

How to Set/Change Grub Boot Loader Password in Redhat/Centos/Fedora

Unlocking GRUB by Entering Password

Also Read – How To Protect Grub2 Bootloader With Password In Rhel/Centos

That’s all, In this article, we have explained How to Set/Change Grub Boot Loader Password in Redhat/Centos/Fedora. I hope you enjoy this article. If you like this article, then just share it. If you have any questions about this article, please comment.

Sidebar