iLO Password changes in an enterprise environment

[M Carmody]

I manage about 1200 HP servers (some have iLOs some don't) and we are required to change the password on them quarterly. I have in the past used the Hponcfg.exe and it was hit and miss on changing the passwords. Is there an enterprise solution for managing the iLOs?

Mike

[Matti_Kurkela]

Welcome to the ITRC Forums!

The newer iLO2 models allow the use of a centralized LDAP password directory. If I recall correctly, the Active Directory of Windows is suitable for this.

You may have to buy an iLO Advanced license to enable LDAP integration, but it should reduce the password management workload significantly.

MK

[WFHC-WI]

You can use LDAP authentication only with an Advanced License purchase.

Of course the iLO processors by default will still have local accounts enabled. You can disable these once LDAP authentication has been enabled. HPONCFG is the simplest way to modify a group of iLO processors; I suggest doing this with a batchfile!

[Vwdl]

Check out cpqlocfg.
Is cli, you can use it remote and in batch and it will provide a log and it comes with a bunch of example scripts.