How to reset HP iLO Lights-Out User and Password Settings with IPMItool

Do NOT follow guides that suggest to make a DOS boot disk, this is over complicated.

Use the ipmitool which ships with most Unix based operating systems. I tested on SmartOS and Ubuntu Linux. Use a live boot disk if you must.

  1. Run ipmitool user list to list all users installed on the iLO.
  2. Choose a user ID from the list and run ipmitool user set password [ID] .
  3. Last, make sure the user is enabled with ipmitool user enable [ID].

Here is a complete set of commands I used to reset user ID 6:

[root@1c-c1-de-f0-ad-36 /opt]# ipmitool user list
ID  Name             Callin  Link Auth  IPMI Msg   Channel Priv Limit
2   ROUSER           true    false      false      Unknown (0x00)
3   USERID           true    false      false      Unknown (0x00)
4   OEM              true    false      false      Unknown (0x00)
5   Operator         true    false      false      Unknown (0x00)
6   admin            true    false      false      Unknown (0x00)
... truncated ...
15  admin            true    false      false      Unknown (0x00)
16  OEM              true    false      false      Unknown (0x00)

[root@1c-c1-de-f0-ad-36 /opt]# ipmitool user set password 6 mynew-password

[root@1c-c1-de-f0-ad-36 /opt]# ipmitool user enable 6

Next I logged into the web GUI and cleaned up this crazy list of users. You may also need to change the privileges on a user ID to grant admin level access. Run ipmitool user for a list of possible sub-commands.

After I finished poking around with the web GUI, I decided to learn a bit more about IPMI and the ipmitool command.

I figured out how to get sensor information over the LAN using this command:

sudo ipmitool -I lan -H guy-ilo.foxhop.net -U admin sensor

I was even able to log into the server OS via Serial-over-LAN (SOL) using this command:

sudo ipmitool -I lanplus -H guy-ilo.foxhop.net -U admin sol activate

Serial-over-LAN completely resolves the need for a complicated JAVA/KVM (keyboard video mouse) setup, I was able to reboot the server and watch the machine POST over the serial connection! I uploaded a video showing Serial-Over-LAN with IPMItools to an HP Proliant DL160 G6 running SmartOS. Now you don’t need to shell out $229+ on an Advanced 1 yr single server Licence for HP Lights-Out 100i (LO100i)!

Update: just documenting a few other useful commands for myself here. Power on and off the server chassis:
sudo ipmitool -I lan -H guy-ilo.foxhop.net -U admin chassis power status
sudo ipmitool -I lan -H guy-ilo.foxhop.net -U admin chassis power on
sudo ipmitool -I lan -H guy-ilo.foxhop.net -U admin chassis power soft
sudo ipmitool -I lan -H guy-ilo.foxhop.net -U admin chassis power off
sudo ipmitool -I lan -H guy-ilo.foxhop.net -U admin chassis power cycle

Also check this out for firmware upgrades: (SPP 2014.09.0) SPP2014090.2014_0827.10.iso

ftp://ftp.hp.com/pub/softlib2/software1/cd-generic/p1513074441/v101117/SPP2014090.2014_0827.10.iso

Update:

I ended up flashing the my P410 smart array raid card with CP019316.scexe [6.00] (SPP 2013.02.0) because the newer patches wouldn’t run properly. This was enough however to get my 3TB disks to show up in the raid configuration!

CP023869.scexe [6.60] (SPP 2014.09.0) is the next version of the firmware. I restarted the machine which I believe is important between firmware flashing. I was able to use the scexe to flash from 6.00 to 6.60!

I used CP021014.scexe [4.26] to upgrade my DL180 G6 ILO from 4.22 to 4.26. Cool but I don’t notice any changes besides the version number…

Update: apparently after you know the ILO username and password you may also use SSH to connect and manage the server:
ssh admin@guy-ilo.foxhop.net
admin@guile-ilo.foxhop.net's password: 

Lights-Out 100 Management
Copyright 2005-2007 ServerEngines Corporation
Copyright 2006-2007 Hewlett-Packard Development Company, L.P.

/./-> help
Root Directory

/./-> show
    /./
    Targets
        system1
        map1
        
    Properties
        
    Verbs
        cd
        version
        exit
        show
        help

/./-> cd system1
/./system1/-> show
    /./system1/
    Targets
        oemhp_sensors
        oemhp_frus
        console1
        led1
        
    Properties
        name=DL180(Aspen)    _R
        enabledstate=enabled
        
    Verbs
        cd
        version
        exit
        show
        reset
        start
        stop
        help

You can even trigger the server OS to stop change run levels or mess with chassis power for more extreme measures.
/./system1/-> stop
System1 stopped.

6 thoughts on “How to reset HP iLO Lights-Out User and Password Settings with IPMItool

  1. Thank you, Russell. Yours was the only resource that led me in the correct direction to finally reset the unknown password on our iLO100.

  2. Hi Russell
    I do not have success with you command on my server. Can you see what I am doing wrong?
    The OS is Suse 10 with HP agents 9.10 installed

    MP-server:/opt # ipmitool user list
    Could not open device at /dev/ipmi0 or /dev/ipmi/0 or /dev/ipmidev/0: No such file or directory
    Get User Access command failed (channel 14, user 1)

    Regards
    Jesper

Leave a Reply

Your email address will not be published. Required fields are marked *