Reset ILO password without OS

If you have an OS installed is simple, just use hponcfg and you can change the password as explained in https://blog.toma.guru/2015/04/hp-ilo-linux-reset-password.html but if no OS is available, then hope is not lost, you can use the iLO Physical Presence Button.

On RX2800 Itanium iLO Physical Presence Button is hidden behind the small red hole

 

As stated on https://support.hpe.com/hpesc/public/docDisplay?docId=c02728748

The iLO 3 physical presence button enables to reset iLO 3 and reset the user-specific values to factory default values. A momentary press causes a soft reset of iLO 3 when the button is released. The iLO 3 Physical Presence button enables to reset iLO, enter TPM physical presence mode, and enter security override mode.

• A momentary press of the button resets iLO and clears any security override or TPM physical presence mode that were initiated by this button.

• A greater than 4 seconds less than 8 seconds, press of the button places the system in physical presence mode for up to 15 minutes.

• A greater than 8 seconds less than 12 seconds, press of this button places iLO into security override mode for up to 15 minutes. Security override mode enables to enter iLO without being challenged for a password enabling to set up users.

  The UID LED blinks once after holding the button for 4 seconds and once after holding the button for 8 seconds to help gauge how long the button press has been held.

 

 

Install HPSUM on an rpm base distro

mount /dev/cdrom /mnt

cp /mnt/compaq/psp/linux /tmp/

cd /tmp/linux

./hpsum

- check for the prerequisite, usually you need expect, kernel-headers, rpm-build, gcc, libnl, redhat-rpm-config, openipmi and net-snmp  either form the redhat installation dvd (rpm -Uvh package), or you can use "yum install package" if you have yum repositories configured.

- you need to manually install hp-snmp-agents package from the hp dvd, it is not installed by hpsum (I presume it's a glitch). hp-snmp-agents needs hp-health (you find them both in the /tmp/linux directory that you just copied from the dvd)

- re-run ./hpsum untill you have no conflicts/unresolved dependecies!

- after installation and reboot run /sbin/hpsnmpconfig - you have to provide only the readonly (public) and the read/write (private) comunity for snmp.

- if everything seems ok, edit /opt/hp/hp-snmp-agents/cma.conf lin 22: trapemail . at the end of the line replace root with your email address - REMEMBER: you need a functional sendmail in order to be able to send emails!

HP Important Note:   The server needs to have 'sudo' installed in order to start or stop the snmp daemon and to send test traps.   'sudo' grants controlled root access to groups or users.   If installed after hp-snmp-agents please run a '/sbin/hpsnmpconfig'. In case of VMware ESX 3.x series, please run '/etc/init.d/hpasm reconfigure' after installation of hpasm.   These buttons will NOT work if 'sudo' is configured to only run when the user is logged into a 'real' tty.   To be able to perform the operations of start, stop, restart of the snmpd daemon, the user must comment out the line 'Defaults requiretty' in the /etc/sudoers file.   See man sudoers for details about the 'requiretty' flag.   If present, this flag will need to be removed from the '/etc/sudoers' configuration file.   The 'send trap' button also requires a tool snmptrap to be present on the system.   This tool is often bundled with the snmp stack (Suse) or in a package called 'net-snmp-util' (Red Hat).

HP ILO Linux - reset password

(hpsum must be already installed)

Reset Administrator password to “newpass”:

vi reset-password.xml

<ribcl VERSION="2.0">

<login USER_LOGIN="Administrator" PASSWORD="something_without_importance">

  <user_INFO MODE="write">

   <mod_USER USER_LOGIN="Administrator">

    <password value="newpass"/>

   </mod_USER>

  </user_INFO>

</login>

</ribcl>

hponcfg -f reset-password.xml -l log.txt ; cat log.txt

Add user "admin" with password "nosecurity":

vi  adduser.xml

<ribcl version="2.0">

<login user_login="Administrator" password="blah_blah_it_doesnt_matter">

<user_info mode="write">

<add_USER

USER_NAME="admin"

USER_LOGIN="admin"

PASSWORD="nosecurity">

<reset_SERVER_PRIV   value = "Y" />

<admin_PRIV   value = "Y" />

</add_USER>

</user_info>

</login>

</ribcl>

hponcfg -f adduser.xml -l log.txt ; cat log.txt