Сброс пароля ipmi windows

Преамбула. Обновляю серверную инфраструктуру. Купил несколько б/у серверов Supermicro не дорого. И надо бы их настроить. Как? Ну а как еще? Через IPMI, не цеплять же к ним древние KVM, чтобы подключить к монитору, клавиатуре и мыши. И … ожидаемо встал на грабли. IPMI есть, а логинов и паролей к нему нет.

На нескольких подошел стандартный логин/пароль Supermicro:
ADMIN
/
ADMIN
(регистр имеет значение)

Значит надо как-то узнать или сбросить логины и пароли. Стал разбираться и нашел, что есть четыре рабочих способа это сделать с разной степенью возни.

Пароль IPMI на наклейке производителя (BMC)

Как описано в документации к серверам, на корпусе должны быть две наклейки с логинами и паролями, которые задаются производителем BMC. В каждом сервере Supermicro они представлены на специальных табличках.

Расположение этой табличка может быть, например здесь.

Картинка с сайта: winitpro.ru

Но, как правильно указано на рисунке, это касается только поздних моделей, выпущеных после ноября 2019 года. У моих серверов такой выдвижной таблички не было. Второе место – на материнской плате. Этот способ я использовать не стал.

Аппаратный сброс пароля на сервере Supermicro

Сбросить пароль администратора IPMI на сервере Supermicro можно аппаратным способом при наличии физического доступа к нему:

1. Выключить сервер и отключить кабель питания.
2. С помощью маленькой плоской отвёртки открутить кнопку сброса IPMI на задней панели сервера.
3. Нажать и удерживать кнопку сброса IPMI в течение 10–15 секунд.
4. Вставить кабель питания обратно в сервер и включить его.
5. Войти в IPMI через веб-браузер и ввести
   ADMIN
   в качестве логина и пароля (для устройств, сделанных после ноября 2019 года — уникальное имя пользователя и пароль с бирки).
6. Перейти в меню IPMI в раздел «Конфигурация», затем выбрать «Конфигурация пользователя».
7. Выбрать своё имя пользователя и изменить пароль на более безопасный, чем ADMIN по умолчанию.
8. Сохранить изменения и выйти из IPMI.

Этот способ я тоже не использовал. Раз нет таблички, то и ADMIN/ADMIN скорее всего не восстановились бы.

Сброс паролей IPMI через BIOS

В серверах Supermicro используется AMI BIOS. Подключаем к серверу монитор и клавиатуру, перезагружаемся. Для входа в BIOS Setup нажать
Del
. Но там оказалось, что можно настроить IP для IPMI, перезапустить IPMI и всё. Опять же, повторюсь, это в тех серверах, которые ко мне попали. Значит и этот способ мне не подошел бы, скорее всего.

Сброс пароля с помощью утилиты IPMICFG от Supermicro

Если с IPMI возникли проблемы, но возможность входа в систему сохраняется, можно выполнить перезагрузку IPMI контроллера (cold reset) или сброс пароля IPMI из запущенной ОС при помощи утилиты IPMICFG для Windows.

1. Загружаем ОС на сервере
2. Качаем с официального ftp-сервера Supermicro архив
   IPMICFG
   (https://www.supermicro.com/wftp/utility/IPMICFG/) и распаковать на диске
3. В командной строке от администратора получаем ID пользователей:
   C:\IPMICFG\Windows\64Bit\IPMICFG-Win.exe –user list
   ID пользователя ADMIN представлен в графе User ID и равняется
   2
   .
   

   Картинка с сайта: winitpro.ru

4. Задать новый пароль
   C:\IPMICFG\Windows\64Bit\IPMICFG-Win.exe –user setpwd 2 password
   , где
   2
   — ID пользователя ADMIN, а
   password
   — новый пароль.
   

   Картинка с сайта: winitpro.ru

   На моих северах пользователь ADMIN был просто … удален. Видимо из соображений безопасности. Но были оставлены другие пользователи с административными правами. Я использовал именно эту команду, но пароль поменялся у пользователя USERKVM

5. В случае успешного выполнения команды появится сообщение Done.

Выполняем холодную перезагрузку Baseboard Management Controller (BMC) (потребуется пару минут):

C:\IPMICFG\Windows\64Bit\IPMICFG-Win.exe -r -d

И перезагружаем сервер целиком. После сможете подключиться к серверу по IPMI через Web интерфейс или IPMIview

Картинка с сайта: winitpro.ru

Осталось навести порядок — удалить всех лишних пользователей, создать пользователя ADMIN и т.д.

Are you trying to reset the Supermicro IPMI password?

IPMI provides remote access to multiple users at different locations for networking. The default username and password are ADMIN / ADMIN.

At Bobcares, we get requests to reset the IPMI password as a part of our Server Management Services.

Today, let’s look at how our Support Engineers reset the IPMI password.

How to reset the Supermicro IPMI password

Let’s discuss how our Support Engineers reset the password using different methods.

An Overview:

• Reset IPMI Password via the web interface
• Reset IPMI Password via Windows servers
• Reset IPMI Password via Linux servers
• Reset IPMI Password via physical access to the server
• Reset IPMI Password via BIOS Setup
• Reset IPMI Password Using DOS LiveCD/USB
• Reset IPMI Password Using IPMI Module Reset

How to Reset IPMI Password via the web interface

Recently, one of our customers contacted us to change the default admin password. Let’s see how our Support Engineers reset the password from the web interface.

The password can be reset from the panel only if we know the password.

1. First, we log in to the web console using the administrator account.

2. In the menu layout, we select Configuration. Then, select the Users menu.

3. Now we select the ADMIN user then we select the Modify User button.

4. In Modify User, we tick the checkbox Change Password.

Картинка с сайта: bobcares.com

5. Now, we enter the password twice.

6. Finally, click on modify. A success confirmation prompt pops up.

How to Reset IPMI Password via Windows servers

We can also reset the IPMI password from the Windows server. Initially, we log in to the server.

1. First, we download the IPMI Configuration utility. We download it based on the OS architecture.

2. Now, we unzip the downloaded file. Next, we open a command prompt as administrator. Then, move to the directory.

3. We reset to the default password using the command,

C:\Users\Administrator\Downloads\64bit>IPMICFG-Windows.exe -fd
Reset to the factory default completed.
Since the factory reset is done, we will assign the IP address, Subnet Mask, and gateway. We turn DHCP off if we are going to use a static IP. Else, we leave DHCP ON. We use the below commands.
C:\Users\Administrator\Downloads\64bit>IPMICFG-Windows.exe -dhcp off
Successfully disable DHCP.
C:\Users\Administrator\Downloads\64bit>IPMICFG-Windows.exe -m x.x.x.x
IP=x.x.x.x
C:\Users\Administrator\Downloads\64bit>IPMICFG-Windows.exe -k 255.255.255.xxx
Subnet Mask=255.255.255.x
C:\Users\Administrator\Downloads\64bit>IPMICFG-Windows.exe -g x.x.x.x
Gatway=x.x.x.x
4. Now, we can log in via default username and password. Now, we can change the password from the panel or leave it as is.
How to Reset IPMI Password via Linux servers
To reset the password for Linux servers, we download the ipmitool. For that, we use the command.
yum -y install ipmitool
Then, we use the below command to reset the admin password.
modprobe ipmi_devintf
ipmitool -I open user set password 2 NEW_PASSWORD
We replace NEW_PASSWORD with the required password.
Thus, we reset the password.
How to Reset IPMI Password via physical access to the server
We provide the below steps to our customers if they have physical access to the server.
1. Initially, download the latest IPMICFG utility released by Supermicro.
2. Then, copy the extracted contents to the server.
3. Open a command window as an administrator.
4. Change directory to the ipmicfg-win.exe appropriate for your architecture (32-bit or 64-bit)
5. Get the user ID of the IPMI user whose password you want to set:
ipmicfg-win.exe -user list
6. Set a new password for that user:
ipmicfg-win.exe -user setpwd 2 New_Password
Login to the IPMI web GUI using the password you just set.
How to Reset IPMI Password via BIOS Setup
Follow these steps to access the BIOS during boot to check for default credentials for devices manufactured before November 2019:

First, restart the server and press the appropriate key (usually Del, F2, or F10) during boot to enter the BIOS setup.

Then, look for a tab or section labeled IPMI Configuration or similar. This location may vary depending on the motherboard model.

Here, we will find the default username and password displayed (often ADMIN / ADMIN).

If we make any changes, ensure to save them before exiting. Otherwise, exit without saving.

How to Reset IPMI Password Using DOS LiveCD/USB
This method involves creating a bootable USB drive with DOS and using the IPMICFG utility to reset the BMC.

First, download Rufus from its official website.

Then, insert a USB drive into the computer.

Open Rufus and select the USB drive.

Now, choose FreeDOS as the partition scheme and start formatting the USB.

Then, go to Supermicro’s website and download the IPMICFG utility package.

Extract the contents and copy the DOS folder to the bootable USB drive.

After that, insert the USB drive into the Supermicro server.

Then, restart the server and press the boot menu key (usually F11) to select the USB drive as the boot device.

Once we boot into DOS, we will see a command prompt. So, change the directory to where we copied IPMICFG:
CD IPMICFG
Then, run the following command to reset to factory defaults:
IPMICFG.EXE -fd
Now, we have to wait for a few moments as it resets. After resetting, we may need to disable DHCP and set a static IP address:


IPMICFG.EXE -dhcp off

IPMICFG.EXE -m xxx.xxx.xxx.xxx  # Set static IP

IPMICFG.EXE -k 255.255.255.xxx  # Set subnet mask

IPMICFG.EXE -g xxx.xxx.xxx.xxx  # Set gateway


Finally, set a new password for the ADMIN user:
ipmicfg.exe -user setpwd 2 NEW_PASSWORD
Now, reboot the server to apply changes.
How to Reset IPMI Password Using IPMI Module Reset
This method lets us reset the BMC settings directly using commands locally or through a VPN connection.

First, ensure we have access to the server either physically or through a secure VPN connection.

If not already installed, download and install the correct version of IPMICFG for the OS.

Then, run the following command to reset to factory defaults:
ipmicfg –fdM
This command will reset all settings, including user accounts, back to defaults.

After resetting, we have to reconfigure network settings as previously described.

Do You need any assistance resetting the Supermicro IPMI password?- We’ll help you]
Conclusion
In short, we’ve discussed how our Support Engineers change the IPMI password on Linux and Windows servers, as well as how we change the password on the web interface and the physical server.

var google_conversion_label = «owonCMyG5nEQ0aD71QM»;

Картинка с сайта: www.servethehome.com

Generally speaking, the default username and password for Supermicro IPMI is ADMIN / ADMIN. Since Supermicro platforms are plentiful, it is best practice to change the default, especially if you are going to colo the server. All too often, the server runs in the field fine for a year or two, then comes the need to perform some maintenance. When the time comes, it is easy to have forgotten the username and password. This just happens. In fact, I had a machine at home that had a 643 day uptime (Supermicro X8ST3-F if you were wondering) that I recently had to log into. I could not remember the password for the life of me. This guide will show you how to use ipmicfg to reset a lost password. The guide does assume you have physical access to the machine. I will do another guide shortly on how to reset the IPMI password under Linux and Windows. Bookmark this page, you never know when you will need it.

Update 2020: Default Passwords Changed

As a quick note here, due to SB327, the Supermicro default password is no longer “ADMIN”. Instead, it is now a randomized unique password. You can read more about this in: Why Your Favorite Default Passwords Are Changing. Check out the video here if you want to learn about why as you go through the procedure in this piece:

Ipmicfg is still a tool we recommend to change the ADMIN password over ipmitool. You can also use Supemicro SUM and the python scripts we mention in the above piece. Below, you can find the ipmicfg version we reference which still works.

Test Configuration

For this guide, I am using the new SSD test configuration.

1. CPUs: 2x Intel Xeon E5-2690 CPUs
2. Motherboard: Supermicro X9DR7-LN4F
3. Memory: 8x 4GB Kingston unbuffered ECC 1333MHz DIMMs
4. SSD: Corsair Force3 120GB
5. Power Supply: Corsair AX850 850w 80 Plus Gold
6. Chassis: Norco RPC-4220
7. Operating System: FreeDOS

For those wondering, I utilized a USB DVD drive and my LiveCD that was updated with IPMIcfg and the new Supermicro X9DR7-LN4F BIOS for flashing.

How to Reset Supermicro IPMI Username and Password to Default

This guide will show how to use a DOS LiveCD or USB to modify IPMI users and reset the IPMI BMC to factory defaults. The first step is to get ipmicfg. Supermicro has a package that includes DOS, Windows and Linux versions. The current revision is 1.02.

Картинка с сайта: www.servethehome.com

Since we have physical access to this machine, we are using a DOS LiveCD to do the IPMI Password reset.

Картинка с сайта: www.servethehome.com

The IPMICFG.EXE that one can see above is the tool that we will use. One of the first things that you should do is make sure you get the IPMI IP address and MAC address. Use ipmicfg -m to get this information. It may be a good idea to write this down.

Картинка с сайта: www.servethehome.com

One of the most useful tools is just creating a new user. During this process, you need three pieces of information:

1. User Number
2. User Name
3. Password
4. Privileges

The first three are fairly easy. The fourth is a bit harder. IPMI security allows you to use

Картинка с сайта: www.servethehome.com

The next thing I will generally do is create a new user. The below creates a user with the username Patrick and the password Password. The user is created in the third spot. User 1 is anonymous and user 2 is ADMIN if that is still active. As will be obvious, it is easy to create a user with an IPMI password that you can use to login.

Картинка с сайта: www.servethehome.com

One thing you may want to consider is making an operator user. Using ipmicfg -user level 3 3 we can turn Patrick (user 3) into an operator (privilege level 3) in that order.

Картинка с сайта: www.servethehome.com

If this does not work, you can use ipmicfg -user level 3 4 and then see Patrick changed to an Administrator.

Картинка с сайта: www.servethehome.com

All that is well and good, but there is a way to reset the unit to factory defaults, thereby resetting the IPMI password and user to ADMIN / ADMIN. Use ipmicfg -fd and in a few seconds, the BMC will restart. It should be noted, while you are restoring to factory defaults, you will not be able to use other commands.

Картинка с сайта: www.servethehome.com

As you can see, the Patrick user we created is no longer there. The factory default username and password have been re-enabled.

Картинка с сайта: www.servethehome.com

Hopefully, that quick guide helps those who have a Supermicro server or motherboard with IPMI that they are locked out of. The total process takes a few minutes at most.