ILO password change

[Kerry Quillen]

We have to change all of our ILO passwords.  Not an issue with that as we have a script to do it.  But once those are changed, is there a way to update the credintials for each ILO in Oneveiw aside from refreshing each server and manually entering the new ILO credentials?

[ChrisLynch]

No.  The special account OneView creates is what is used to authenticate to the iLO.  You should not be changing this password, as it is managed by the appliance it was added to.  Each iLO account, while shares the same user account name, has a different uniquely random password.

[Kerry Quillen]

We'll just be changing the local ILO password that was used to add the servers to Oneview.  Not the Oneview special account.

[ChrisLynch]

That account is only temporarily used to add the server to the OneView appliance. Changing it will have zero impact to OneView.

[Kerry Quillen]

So we've changed all ILO passwords.  This did require us to refresh each server and enter the new ILO credentials.  Is there a way to do this other than one at a time?  All ILO's use the same password.

[ChrisLynch]

If you changed the privileged user account OneView deploys (_HPOneViewAdmin, _HPEOneViewAdmin, _OneViewAdmin, _HPOneViewMonitor, _HPEOneViewMonitor, _OneViewMonitor), you should not have done that as I stated above.  You do not manage that password, OneView does.  Changing it causes this unmanaged/disconnected server state.  The only way to fix this is per server.

[Kerry Quillen]

We did not change the  privileged user account password.  We changed the local ILO admin password on each server.  We do not use the default Administrator user.  We have always used out own admin user.  We'll call it USER1.  After changing USER1's password on every ILO,  we would see alerts in Oneview, most commonly Unable to collect firmware inventory from the server.  Alert details instruct to refresh the server hardware.  The first refresh fails with error Unable to login to the management processor.  A second refresh prompts to re-enter the ILO credentials.  AFter entering USER1 and the new password, the refresh completes successfully.  We painstakingly had to do this on every server.  So what I'm looking for is whether this refresh process is scriptable via REST-API or some other method?