ProLiant Servers - Netservers

Changing passwords on 100 iLos

 
Aaron.S
Frequent Advisor

Changing passwords on 100 iLos

Hello,

A little bit of an issue on this end. Because of a recent worm outbreak from another department, management is worried about security. So I have been tasked with applying new passwords to every single one of our iLo boxes.

A batch script to detect the iLo manager (just combing the IP ranges) and then update the administrator account on each box would be ideal.

I would greatly appreciate any insight or feedback to possible solutions.


-Aaron
5 REPLIES 5
Sylvain Gelinas 2
Frequent Advisor

Re: Changing passwords on 100 iLos

Use "HP Lights-Out Directories Migration Utility" and use https and a central account.

Update firmware to latest with this tool.

Search for : HP sp31581

Good Luck.
Jason Antman
Occasional Advisor

Re: Changing passwords on 100 iLos

I don't know what OS's you're comfortable with, or whether it's available for Windows, but this is a classic example of a use for an Expect (expect.nist.gov) script. Assuming you have a list of IPs and current passwords (you have that, right???) it should be trivial to have an Expect script SSH into each iLO and change the password.
Linux System Administrator, Rutgers University, NJ, USA
Sole IT Person (volunteer), Midland Park Volunteer Ambulance Corps, Midland Park, NJ, USA
(My posts or comments here express my own opinion and views only, and have nothing whatsoever to do with those of my employer.)
Aaron.S
Frequent Advisor

Re: Changing passwords on 100 iLos

Alright, I've downloaded the sp31581, installed the directories migration utility... and it shows absolutely nothing?

Is there a syntax I can throw at the 'addresses' field to just scan every IP in the the range of 153.47.23.12 -> 153.47.26.248 for a management device?
Aaron.S
Frequent Advisor

Re: Changing passwords on 100 iLos

My appologies for being so hasty in my first reply.

I dont actually have direct access to the AD structure in the network. Could you please elaborate on "Use https and a central account"?
Sylvain Gelinas 2
Frequent Advisor

Re: Changing passwords on 100 iLos

See Lights-Out Security section :

http://h18013.www1.hp.com/products/servers/management/directorysupp/index.html

Best Practices :
http://h18013.www1.hp.com/products/servers/management/ilobest-practice.html

If you cannot integrate with Directory and you only want to change password, refer to :

http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.jsp?lang=en&cc=us&prodTypeId=18964&prodSeriesId=1146658&prodNameId=1135772&swEnvOID=1005&swLang=8&mode=2&taskId=135&swItem=MTX-84d9a19b43b84516ac2d26d01f

1. Download and install the Light-Out Configuration Utility on your client system. 2. Download and modify these sample scripts. 3. Run the CPQLOCFG program in a batch process or using Systems Insight Manager.

Good Luck.