Change all blade iLO admin passwords with one script?

[Alex Morris]

Some background information first:

I've several c7000 enclosures, each fully populated with 16 BL465c blades.

I've been trying to update the iLO2 firmware on each blade to v1.50 by means of some scripts and CPQLOCFG. I found some template scripts in the Firmware Deployment Tool package, and some other sample RIBCL scripts elsewhere on HP's site.

The first time I tried to run the firmware update script one on enclosure it blasted through all sixteen blades very quickly without doing anything. This is because the script I was using connected to the OA first to obtain details of each blade, then connected to each blade individually to run the firmware update. I hadn't changed the iLO2 Administrator password on each blade from the default, so putting the OA password into the firmware update script didn't work.

I connected to the OA via SSH, connected to half of the blades manually, set the Administrator password to the one I wanted to use, and then tried running the firmware update script again. As expected, the firmware update worked on half of the blades, the half for which I'd manually set the Administrator password. It failed on the remaining half, whose passwords I had not changed.

Now to my question. Is there an easier way of changing the Administrator password on all blades at once? Can it be scripted?

Typing "connect server x", "set /map1/accounts1/Administrator password=xxxxxxxx", "exit", sixteen times in a row for every enclosure isn't impossible, just laborious. I'd like to automate it if possible. The benefits of doing so are twofold: less of the boring typing for me, plus less risk of making a typo and messing up one or more passwords.

[JKytsi]

Hi,

I have tried this myself too.

You should run HPONCFG from OA with RIBCL script which is meant for admin pw reset.

[JKytsi]

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1201370

[Alex Morris]

About 10 minutes after posting I found the OA command line guide, which mentions HPONCFG.

http://h20000.www2.hp.com/bc/docs/support/SupportManual/c00702815/c00702815.pdf

I haven't had a chance to play again until tonight, hence the delay in replying.

I've got it to work. It requires a separate webserver.

I signed into the OA and issued the command:

hponcfg all http://10.20.30.40/path/to/script.xml

(replace 10.20.30.40 with the address of your webserver)

The password-changing script itself is thus:











I deliberately put an invalid login password in the XML file to test the OA's pass-through authentication. It still worked. It looks as if that entry is needed only for XML validation but is ignored thereafter.

I've not yet experimented with sending the HPONCFG command to the OA via CPQLOCFG; that's next on the list of things to play with tonight.

[Alex Morris]

CPQLOCFG doesn't seem to want to play nice with the OA, but SSH does. Using "ssh Administrator@enclosure HPONCFG ALL http://10.20.30.40/path/to/script.xml" works a treat