How to handle forced security changes during software update

Yeap! We have just the experience of creating those devices and management tools for them.

Passwords and communities are changed by one single template in CnMaestro.

Are you using Radius authentication? What issues are yo expecting?