ILO default password

[Wouter van Eekelen]

Where can I find the default username/password of ILO? I have the toetag with C/N and PID, but neither of them work as password.

[gregersenj]

It depends. on age/model and if system I/O bd has been replaced.

On old systems and systems wich has had the system I/O bd replaced.
There's a tag, attached to the server.
With the default dns name and password.

On other system
There's a sticker on the top lid.

BR
/jag

[Zygmunt Krawczyk]

If you can't find default username/password for iLO, you can use iLO Security Override switch described in server user guide.

"The iLO Security Override switch allows emergency access to the administrator with physical control over
the server system board. Setting the iLO Security Override switch allows login access, with all privileges,
without a user ID and password.
The iLO Security Override switch is located inside the server and cannot be accessed without opening the
server enclosure. To set the iLO Security Override switch, the server must be powered off and
disconnected from the power source. Set the switch and then power on the server. Reverse the procedure
to clear the iLO Security Override switch.
A warning message is displayed on the iLO Web pages, indicating that the iLO Security Override switch
is currently in use. An iLO log entry is added recording the use of the iLO Security Override switch. An
SNMP alert may also be sent upon setting or clearing the iLO Security Override switch."

[Wouter van Eekelen]

Thanks a lot, I will check this the next time when I'm in the datacenter and get back to you once I found out.

[gregersenj]

You're welcome.

BR
/jag

[dcason]

Hi Guys,

Sorry for butting in ....but if I HAVE the server tag showing the admin password and the name and it does not work, I did just open the case and flip sw 1 to disable the password for the iLO.   I have a DL 360 G5 that I'm trying to get in to.

I've tried the password which is iLO 2 according to the tag, and I've tried it with sw off (default) and on, and both times on the XP machine I have installed the integrated remote console on - it keeps saying "Login Failed:  Please verify your login creds.  When using the program do I just put in the server IP and leave both the username and password fields blank when I have sw 1 on?

What else can I try ?  Is there a way to reset the login ID and password ?  My reason for doing this is the servers console is dark when I try to boot the server so I'm trying the iLo as a back door in to the server ....

Cheers'
Dave

[Matti_Kurkela]

The iLO should be accessible with just a regular HTTPS-capable web browser - for the console functionality, iLO will send a suitable ActiveX/Java applet to the browser.

If you have a dedicated application ("the program"?) for the console functionality, iLO may reject it if the console function cannot be activated because it thinks the server is down - in this case, use the browser to access the iLO web GUI: you should be able to view the iLO settings and the hardware log (IML) even if the console proper is not accessible.

As far as I know, the default iLO username is usually Administrator and the password is a random alphanumeric string - but it might have been a standard string with older models.

[Jimmy Vance]

Depending on the ProLiant model, the default administator password is on a sticker affixed to the server. a cardboard toetag tied to the server, or a plastic toetag that slides out of a slot on the front of the server.

If the default Administrator password is not working, more than likely it was changed.  During POST you can access iLO by pressing F8 when prompted and go into user settings and reset the administrator password. If POST security is enabled, you can open the server and set SW1 to the ON position to disabel iLO security.  With iLO security disabled you can then access the settings during POST, or via the web GUI and reset the password. Once changed, set SW1 back to the OFF position.

The default iLO password contains 8 random alphanumeric characters.

[steven Prinz]

Dave,

I have never seen the default iLO2 password labeled as ILO 2 on the server tag. From my experience with the G5 series, the iLO2 username is always "Administrator" and the password is always set to a random 8 digit alphanumeric string (and the default DNS name for the iLO2 device is always "ILO" followed by the serial number for the server) which is documented on a cardboard tag attached to the server.

Perhaps you are looking at the wrong place

If the tag is not attached to the server any more, the iLO2 password can be changed to something of your liking by rebooting the server and pressing F8 when prompted during the system POST.

[dcason]

GOT IT !

Well that was an easy fix .... ordered a new MB for $32 bucks and 16 GB of RAM for 180 and it's alive.

Thanks for all your help guys  .....

[ausrasul]

Zygmunt Krawczyk  Life saver, thanks!!

[Andrew_Haak]

Hello there,

If you have an Ilo that you don't know the password of and the OS is still installed. Install the HP Lights-Out Online Configuration Utility for Windows. From here you can config network and change the password of the Administrator user.

Kind regards,

Andrew

[thestevinator]

Correct, top of the lid. Its still there on servers purchased in 2014. Just had to slide my rack mount server a few inches out to see it.

[dextrovix]

---

@Andrew_Haak wrote:
Hello there,

If you have an Ilo that you don't know the password of and the OS is still installed. Install the HP Lights-Out Online Configuration Utility for Windows. From here you can config network and change the password of the Administrator user.

Kind regards,

Andrew

---

Thanks Andrew, that was good advice as the server was already booted into Windows. The HP Lights-Out Online Configuration Utility allowed me to change the password without a server reboot, thus no distruption to users.

[Keith Sauer]

Does this work if the server is running VMWare ESXi 5.0?  Is there a vmware based utility or can this be installed to a windows VM running on esxi?

What happened to me to mitigate a security vulnerability scan, I enabled FIPS mode and AES 256bit encryption.  Also disabled IPMI to mitigate the cipher-0 vulnerability.  However after agreeing to reset the iLO, and waiting, the iLo page no longer accepts our custom ilo admin user and password.  Also all of a suddon the certificate is no longer trusted and its like it chagned the cert to an HP generated one, rather than the one from our CA that we had installed prior.

[Jimmy Vance]

I don't think VMware has the CHIF driver that is required for the utility to access iLO via the OS

[Chris Davenport]

FIPS standards require clearing all "security parameters" in cluding names, passwords, keys, and certificates.

So when iLO enters FIPS mode, it will reset the name/passwords to defaults.  You have to recreate your accounts after the iLO is in FIPS mode.

[krzysztoflaskow]

hm

[tallship]

If you go in from the local console w/F8, you can set your network settings (Whether you're a DHCP client or what your static IP, Mask, etc. will be in the Network settings. In the User settings, you can add users by username and password to the list of accounts with access to iLO.

I mention this because, if the default password (on the tag or sticker of the server) has been changed, and you don't want to reset everything back to defaults, you can merely add the user here instead of going back to the very start.

At that point, you'll be able to access iLO remotely with the username password, and IP address that you have set.