Skip to content

Commit 0836357

Browse files
committed
Update Blog “how-to-change-the-factory-generated-ilo-administrator-password”
1 parent b028e7f commit 0836357

File tree

3 files changed

+19
-13
lines changed

3 files changed

+19
-13
lines changed
Lines changed: 19 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,23 @@
11
---
2-
title: "How to change the factory generated iLO Administrator password"
2+
title: How to change the factory generated iLO Administrator password
33
date: 2018-03-29T15:34:24.958Z
4-
author: François Donzé
5-
tags: ["iLO","Redfish","ilorest"]
6-
authorimage: "/img/blogs/Avatar6.svg"
74
featuredBlog: false
8-
priority:
9-
thumbnailimage:
5+
priority: null
6+
author: François Donzé
7+
authorimage: /img/fdz-photoprofile.png
8+
thumbnailimage: null
9+
tags:
10+
- iLO
11+
- Redfish
12+
- ilorest
1013
---
11-
# Boosting your server deployment: How to change the factory generated iLO administrator password
14+
<style> li { font-size: 27px; line-height: 33px; max-width: none; } </style>
1215

16+
Updated March 6, 2024
1317

1418
You receive a bunch of brand new rack-mount ProLiant servers and want to get them up and running as soon as possible. Ansible, Chef, Puppet, Ironic, Python, PowerShell are your friends but, before being able to use those powerful and flexible tools to fully deploy the servers, you need one little thing: An access to the iLO to configure low level system parameters (i.e. iLO network, BIOS, storage…).
1519

16-
This blog proposes a simple, quick and modern method to modify the factory randomly generated Administrator iLO password without knowing it. It can be used on one or several thousands of rack-mount ProLiant servers starting at Gen9 models. This problem does not exist for blades or Synergy compute modules because their embedded management modules (respectively OA and Composer) have the ability to perform those tasks without any credentials.
20+
This blog proposes a simple, quick and modern method to modify the factory randomly generated Administrator iLO password without knowing it. It can be used on one or several thousands of rack-mount ProLiant servers starting at Gen9 models. This problem does not exist for blades or Synergy compute modules because their embedded management modules (respectively OA and Composer) have the ability to perform those tasks without any credentials.
1721

1822
## In-band management with `ilorest` does the trick
1923

@@ -23,31 +27,33 @@ Instead, I will use an in-band management access method with the [ilorest(8)](ht
2327

2428
To set the iLO 4/5 Administrator password, when logged in to the OS as a privileged user (root or Administrator), I just need to create a text file (i.e. `MyPassword.txt`) with the following content:
2529

26-
27-
~~~
30+
```
2831
{
2932
"path": "/redfish/v1/AccountService/Accounts/1/",
3033
"body": {
3134
"Password": "MyPassword"
3235
}
3336
}
34-
~~~
37+
```
3538

3639
Then, using the `ilorest` tool, I connect to the iLO via an internal path (no credential required here) and send the password request modification:
3740

38-
![Changing the iLO factory generated Administrator password with ilorest](https://redfish-lab.sourceforge.io/media/redfish-wiki/how-to-change-factory-generated-password/1-change-password-with-ilorest.png)
41+
![Changing the iLO factory generated Administrator password with ilorest](/img/1-change-password-with-ilorest.png "Changing the iLO factory generated Administrator password with ilorest")
3942

4043
# Data model clean crawling
4144

4245
But are you sure you changed the Administrator password and not another password account? What if the Administrator account is not located at position “1” in this collection of object?
4346

4447
`ilorest` can help you isolate the exact location of the Administrator account. The following command returns in JSON format what you need:
4548

46-
![List iLO user account 1 with ilorest](https://redfish-lab.sourceforge.io/media/redfish-wiki/how-to-change-factory-generated-password/2-ilorest-list-manager-account.png)
49+
![List iLO user account 1 with ilorest](/img/2-ilorest-list-manager-account.png)
4750

4851
With a simple parsing of the output of this command, you can create an error prone script to change the desired password.
4952

5053
Should you need to perform more complex digging to retrieve objects from this data model, the [Managing HP Servers Using the HP RESTful API](http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=c04423967) manual explains very well with pseudo code examples how to crawl the data model without making bad assumptions.
5154

5255
# Building the complete solution
56+
5357
Using this in-band management feature you can easily foresee an entire solution starting with a PXE boot of the servers on a minimal WinPE or PE-Linux operating system containing the `ilorest(8)` tool and an automatic trigger of a script performing the iLO password change and other tasks if desired.
58+
59+
Don't forget to check out some of my other <a href="https://developer.hpe.com/search/?term=donze" target="_blank">blog posts</a> on the HPE Developer portal to learn more about Redfish tips and tricks.
21.6 KB
Loading
16.6 KB
Loading

0 commit comments

Comments
 (0)