The newer Universal Forwarders require a password change once run after install. I use Microfocus server automation which does not accept input; I cant configure a working software policy due to this. In the past, I could configure the password after the install with the 'splunk edit user admin-password xxx -role admin -auth admin:changeme" CLI.
have a look here there's a couple ways to set that password