Logins and passwords

You never type the switch password into a login prompt in ICX Setup. The app authenticates for you, using a fixed username and a list of passwords it tries in order. This page explains that list so you know exactly what it will try — and how to add your own.

The username is always super

RUCKUS ICX switches log in with the user super. ICX Setup uses that username on every connection, over both serial and SSH. The SSH connection screen pre-fills super and you can leave it as is.

The password order

ICX Setup tries passwords in this order until one works:

1. sp-admin — the built-in factory first-boot password, always tried first.
2. Your default password — the entry you starred in Settings (if any).
3. The rest of your saved passwords, in order.

If you haven’t saved any passwords, the app seeds a single default entry with the password icx-setup. So out of the box the effective order is sp-admin then icx-setup.

Two different defaults

sp-admin is the factory password a brand-new ICX switch ships with. icx-setup is the password this app sets on a switch when the switch forces a password change on first login (and the fallback it saves for you). They are different values, and the app tries both.

Forced password change on first login

A factory-fresh ICX switch demands a new password the first time you log in with the factory credentials. ICX Setup handles this automatically: when it hits the “new password” / “confirm” prompts, it sets the password to icx-setup and carries on. After that, icx-setup is the working password — which is why it’s in the default list.

Adding your own passwords

If your switches already have custom passwords, add them in Settings → Switch Passwords:

• Give each entry a label and the password, and optionally mark one as the default (the star) so it’s tried right after sp-admin.
• You can store up to 10 passwords.
• Passwords are saved in the macOS Keychain, never in plain preferences.

The Settings footer restates the rule: “Passwords are tried in order: sp-admin (built-in), then your default password, then the rest. Username is always ‘super’.” See the Settings reference.

Getting to the privileged prompt

After login, ICX Setup escalates to the switch’s privileged (#) prompt with enable, trying each of your passwords and then an empty password. All of the app’s read and configuration commands run from there. If login is rejected outright you’ll see “The switch rejected the login credentials.” — add the correct password in Settings and reconnect.

---

More on where secrets live: Security and privacy · Contact support.