topic Re: ILO Admin Password in Server Management - Remote Server Management

ILO Admin Password

Shaun Wells_4 — Fri, 26 Nov 2004 06:06:20 GMT

Does anybody know of a quick way that I can configure all the Admin passwords on the ILO's without actually connecting to each individual box. Thanks.

Re: ILO Admin Password

acartes — Tue, 30 Nov 2004 17:02:42 GMT

This can be a hassle if the servers are already deployed...

But here are a few options:

1) servers can be ordered configured with a password of your choice.

2) lights-out devices can integrate with Directory Services so you do not have to deal with this in the future. (Yes, you will have to perform the initial migration).

3) You can script password updates using CPQLOCFG. Of course, this requires that you have all of the current credentials in order to do this task. If you do, it is straight-forward to write a single script that sets the same password and then run it against all of the lights-out processors you have.

4) If you do not have the current credentials, you can install them using a utility that runs on the host OS. Here is a link with more details:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=453732

Re: ILO Admin Password

acartes — Tue, 30 Nov 2004 18:22:25 GMT

Here's an example of using CPQLOCFG to script the Administrator password update to multiple lights-out processors over teh network. It is broken down into several simple steps.

Step 1: Node + credentials list
You will need this information for each node. A minimum of username/password + IP or DNS name is needed for each node. You will use this data to script the changes, so having it in a text file or spreadsheet is convenient.

Step 2: Download the latest CPQLOCFG.EXE http://h18013.www1.hp.com/support/files/lights-out/us/download/22097.html

Step 3: Develop a template RIBCL/XML script with the new password value.
A script like this (c:\pwupdate.xml) contains the new password:

Step 4: credential substitution on the command-line using CPQLOCFG

Note that the login credentials can be overridden on the command line like this: C:\>cpqlocfg -s 192.168.1.1 -f c:\pwupdate.xml -u Administrator -p TopSecret

Step 5: Create a bulk update batch file
Create a batch file using the list of credentials unique to each Lights-Out instance, something like this:
C:\>cpqlocfg -s 192.168.1.1 -f c:\pwupdate.xml -u Administrator -p TopSecret
C:\>cpqlocfg -s 192.168.1.2 -f c:\pwupdate.xml -u Administrator -p Password2
C:\>cpqlocfg -s 192.168.1.3 -f c:\pwupdate.xml -u Administrator -p password3
C:\>cpqlocfg -s 192.168.1.4 -f c:\pwupdate.xml -u Administrator -p rootpass
...

Verify this process on a single node and then you can roll it out using the batch file. Monitor the output and address any discrepancies.

Step 6: verify the change:
You can verify that the password has changed using a CPQLOCFG script like the following. All it does is attempt to authenticate.

If the script is successful (thus credentials are valid), the errorlevel will be 0.