Score:0

How to reset iLO 4 to default without credentials?

br flag

Is there a way to reset iLO (in order to see system health and configuration details) with just a keyboard and a display (no web interface)?

If a web interface is an absolute must, then how to reset iLO without knowing the IP address and credentials?

Reason for asking: I got my eyes on a nice HP ProLiant ML350p tower server. The problem is that the person got it from a sale (refurbished) from a cleanup at a company nearby. We don't know whether and how the server has been used so I go with the assumption that credentials are unknown and the IP has been set probably as static. The person in question has zero knowledge about all that so I am looking for an easy to follow guide, preferably without any external tools and just display, keyboard and a mouse (if required).

Score:0
za flag

The iLO implements standard IPMI device interface protocol. For example, you can boot Linux on that server and use ipmitool or ipmiutil utility to look or change iLO network settings, create user accounts or change passwords and privileges, read event logs and sensor values and so on:

root@serv4:~# ipmitool lan print
Get Device ID command failed: 0xff Unspecified error
Set in Progress         : Set Complete
Auth Type Support       : 
Auth Type Enable        : Callback : 
                        : User     : 
                        : Operator : 
                        : Admin    : 
                        : OEM      : 
IP Address Source       : Static Address
IP Address              : x.x.x.x
Subnet Mask             : x.x.x.x
MAC Address             : xx:xx:xx:xx:xx:xx
SNMP Community String   : 
BMC ARP Control         : ARP Responses Enabled, Gratuitous ARP Disabled
Default Gateway IP      : x.x.x.x
802.1q VLAN ID          : Disabled
802.1q VLAN Priority    : 0
Cipher Suite Priv Max   : Not Available
Bad Password Threshold  : Not Available

root@serv4:~# ipmitool user list 2
ID  Name             Callin  Link Auth  IPMI Msg   Channel Priv Limit
1   Administrator    true    false      true       ADMINISTRATOR
2   xxxxxx           true    false      true       ADMINISTRATOR
3   (Empty User)     true    false      false      NO ACCESS
4   (Empty User)     true    false      false      NO ACCESS
...

root@serv4:~# ipmitool user set password 1 nEwPaSsWoRd
...

and so on.

For that to work you'll need ipmi_devintf kernel module loaded.

rbaleksandar avatar
br flag
As states I need to do this on the phone with someone, who has no clue about the machine, boot process, operating system installation etc. While this is a viable option, for my scenario it is not a good one.
Score:0
ng flag

You can reset the ILO to factory default from the system BIOS or from Intelligent Provisioning.

https://techlibrary.hpe.com/docs/iss/proliant_uefi/UEFI_TM_030617/s_reset_ilo_defaults.html

rbaleksandar avatar
br flag
I saw that. However it doesn't say anything about the credentials. As far as I know there is a random 8 digit password that needs to be used the first time iLO is configured. Some people say it should be on a sticker somewhere but I have my doubts that it is there. Does the reset also create some standard password (e.g. "admin" or similar)?
Nikita Kipriyanov avatar
za flag
On modern servers that sticker is usually glued to the some plastic plate. That plate could be partially pulled off the server from the front panel revealing the sticker. Try exploring front panel, there may be some pictogram like (i) near it.
ewwhite avatar
ng flag
@rbaleksandar The reset sets the factory default settings. But you can also assign the ILO password from the same BIOS and Intelligent Provisioning interfaces.
ewwhite avatar
ng flag
The HPE server will also have an [asset tag](https://www.google.com/search?q=ilo+tag&tbm=isch&ved=2ahUKEwj6nMamy7LxAhWTYqwKHVXxDCMQ2-cCegQIABAA&oq=ilo+tag&gs_lcp=CgNpbWcQAzICCAAyBAgAEBgyBAgAEBhQ2bYBWNm2AWDWuAFoAHAAeACAAUiIAUiSAQExmAEAoAEBqgELZ3dzLXdpei1pbWfAAQE&sclient=img&ei=k7HVYLqHAZPFsQXV4rOYAg&bih=973&biw=1377&client=safari) with the default password.
rbaleksandar avatar
br flag
@ewwhite No asset tag, nothing. However I was able to reset the password without any issues from iLO (not the web interface but the one that looks like coming straight from the 80s/early 90s). It's actually very easy, which was a surprise to me since we are talking about deleting or editing any user account incl. admin.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.