topic Re: ILO password change in HPE OneView

ILO password change

Kerry Quillen — Fri, 13 Aug 2021 04:54:03 GMT

We have to change all of our ILO passwords. Not an issue with that as we have a script to do it. But once those are changed, is there a way to update the credintials for each ILO in Oneveiw aside from refreshing each server and manually entering the new ILO credentials?

Re: ILO password change

ChrisLynch — Thu, 12 Aug 2021 21:45:22 GMT

No. The special account OneView creates is what is used to authenticate to the iLO. You should not be changing this password, as it is managed by the appliance it was added to. Each iLO account, while shares the same user account name, has a different uniquely random password.

Re: ILO password change

Kerry Quillen — Fri, 13 Aug 2021 16:45:03 GMT

We'll just be changing the local ILO password that was used to add the servers to Oneview. Not the Oneview special account.

Re: ILO password change

ChrisLynch — Fri, 13 Aug 2021 17:07:44 GMT

That account is only temporarily used to add the server to the OneView appliance. Changing it will have zero impact to OneView.

Re: ILO password change

Kerry Quillen — Thu, 16 Sep 2021 17:15:31 GMT

So we've changed all ILO passwords. This did require us to refresh each server and enter the new ILO credentials. Is there a way to do this other than one at a time? All ILO's use the same password.

Re: ILO password change

ChrisLynch — Thu, 16 Sep 2021 17:25:13 GMT

If you changed the privileged user account OneView deploys (_HPOneViewAdmin, _HPEOneViewAdmin, _OneViewAdmin, _HPOneViewMonitor, _HPEOneViewMonitor, _OneViewMonitor), you should not have done that as I stated above. You do not manage that password, OneView does. Changing it causes this unmanaged/disconnected server state. The only way to fix this is per server.

Re: ILO password change

Kerry Quillen — Sun, 19 Sep 2021 17:56:02 GMT

We did not change the privileged user account password. We changed the local ILO admin password on each server. We do not use the default Administrator user. We have always used out own admin user. We'll call it USER1. After changing USER1's password on every ILO, we would see alerts in Oneview, most commonly Unable to collect firmware inventory from the server. Alert details instruct to refresh the server hardware. The first refresh fails with error Unable to login to the management processor. A second refresh prompts to re-enter the ILO credentials. AFter entering USER1 and the new password, the refresh completes successfully. We painstakingly had to do this on every server. So what I'm looking for is whether this refresh process is scriptable via REST-API or some other method?