topic Re: Changing multiple ILO password on Proliant servers in HPE OneView

Changing multiple ILO password on Proliant servers

Brian Culver — Thu, 25 Jul 2019 15:34:12 GMT

Can multiple ILO passwords get changed within HPOneView? Can it be done with XML or a powershell script?

Re: Changing multiple ILO password on Proliant servers

BradV — Fri, 26 Jul 2019 09:01:16 GMT

You can manage the iLO users with a server profile template. You change the administrator account, add more local accounts, connect to LDAP/AD and set up LDAP/AD groups with various access levels. Is that what you were after?

Re: Changing multiple ILO password on Proliant servers

Brian Culver — Fri, 26 Jul 2019 11:11:59 GMT

I was really wanting some kind of script because I don't have OneView license for all my servers

Re: Changing multiple ILO password on Proliant servers

BradV — Fri, 26 Jul 2019 15:42:31 GMT

Well, not from one place, but from each host, you can use hponcfg to change user password in iLO. hponcfg is available for both Linux, Windows, and ESXi.

Re: Changing multiple ILO password on Proliant servers

Brian Culver — Fri, 26 Jul 2019 16:45:02 GMT

I have almost 400 Servers I really don't want to chance each host manually

Re: Changing multiple ILO password on Proliant servers

BradV — Mon, 29 Jul 2019 08:38:30 GMT

Do you have salt or ansible setup on your servers? If so, you can use that to run hponcfg on each server from a central location. You would have to consult with HPE. I'm not sure you need licensed mode to change iLO passwords, but you might? Note with hponcfg, if your iLO is running in production mode, then you can run it from the root account without having to know the current iLO administrator password. If your iLO is one of the higher security modes, then you will need to know the current iLO administrator password.

Re: Changing multiple ILO password on Proliant servers

Steve_Tippett — Wed, 14 Aug 2019 19:29:33 GMT

Import-Module HPEiLoCmdlets
$iLo_Inventory_File = "iLo-Inventory.txt"
$Results_File = "pswd-change-results.txt"
IF (Test-Path $Results_File)
{ Remove-Item $Results_File }

$Target_List = Get-Content $iLo_Inventory_File
ForEach ($Target_iLo in $Target_List)
{
$Connected_iLo = Connect-HPEiLO -IP $Target_iLo -Username 'localAdminIDgoeshere' -Password 'pswdgoeshere' -DisableCertificateAuthentication
IF ($Connected_iLo -eq $null) # -ErrorAction Stop was not capturing this situation!
{
$Text_Line = $Target_iLo + ';DID NOT ACCEPT THE CONNECTION REQUEST'
Out-File -FilePath $Results_File -Encoding ascii -InputObject $Text_Line -Append
Continue
}

$Result1 = Set-HPEiLoUser -Connection $Connected_iLo -LoginName TargetID -NewPassword "newPSWDhere" `
-OutputType Object -ErrorAction Stop

$Text_Line = $Target_iLo + ';' + $Result1.Hostname + ';' + $Result1.Status + ';' + $Result1.StatusInfo.Message + ';' + $Result1.StatusInfo.AffectedAttribute

Out-File -FilePath $Results_File -Encoding ascii -InputObject $Text_Line -Append
Write-Host $Text_Line -ForegroundColor Cyan
$null = Disconnect-HPEiLO -Connection $Connected_iLo
}
Write-Host "Execution has completed. Please press ENTER to exit the script" -ForegroundColor DarkYellow
Read-Host