Is it possible to reset the password on a SuperMicro IPMI interface?

Question

Is it possible to reset the password on a SuperMicro IPMI interface? My motherboard is model X8STI-F.

score 32 · Answer 1 · answered Nov 16 '09 at 07:37

If you access it locally you can specify a new password. On Linux this would be done via ipmitool. Something like this should work:

ipmitool -I open lan set 1 password NEWPASSWORD

If you don't know which channel is your ethernet interface, just page through them one at at time, like so:

# ipmitool -I open channel info 1
Channel 0x1 info:
  Channel Medium Type   : 802.3 LAN
  Channel Protocol Type : IPMB-1.0
  Session Support       : multi-session
  Active Session Count  : 0
  Protocol Vendor ID    : 7154
  Volatile(active) Settings
    Alerting            : disabled
    Per-message Auth    : disabled
    User Level Auth     : enabled
    Access Mode         : always available
  Non-Volatile Settings
    Alerting            : disabled
    Per-message Auth    : disabled
    User Level Auth     : enabled
    Access Mode         : always available

Note that the medium type is "802.3 LAN". That's the one you want. Other channels may look like this:

# ipmitool -I open channel info 2
Channel 0x2 info:
  Channel Medium Type   : Serial/Modem
  Channel Protocol Type : IPMB-1.0
  Session Support       : single-session
  Active Session Count  : 0
  Protocol Vendor ID    : 7154
# ipmitool -I open channel info 3
Channel 0x3 info:
  Channel Medium Type   : System Interface
  Channel Protocol Type : KCS
  Session Support       : session-less
  Active Session Count  : 0
  Protocol Vendor ID    : 7154

score 30 · Answer 2 · answered Jul 14 '11 at 21:00

I just had to deal with this same issue yesterday, I was not able to log into my SuperMicro IPMI web interface because I had not used it frequently and forgot the password. The command in Insyte's answer did not work for me but it was close. This command worked to reset the ADMIN account's password:

ipmitool -I open user set password 2 ADMIN

The number 2 there is the user id. The ADMIN account defaults to user id 2. So I'm setting user id 2's password to ADMIN which is the default, but you could put any other password there.

Thank you to Insyte for pointing me on the right track of using ipmitool, after a few searches online I was able to find this working command. Hopefully it will help someone else that stumbles on this question.

Elliot B. · Answer 3 · 2017-05-16T00:50:58.673

Supermicro IPMI BMCs can be fairly erratic and troublesome. You should always use the utilities and tools provided by Supermicro before attempting a fix with universal tools such as IPMITool.

It is not necessary to reset the entire unit as others have suggested.

If you have physical access to the server, follow these simple steps to reset the ADMIN password on your IPMI:

Create a bootable DOS USB stick using Rufus.
Download the latest IPMICFG utility released by Supermicro.
Extract the archive and copy the contents of the 'DOS' folder on to your bootable DOS USB.
Boot your server into DOS and navigate to the 'DOS' folder you copied on to the USB.
Get the user ID of the IPMI user whose password you want to set:

ipmicfg -user list
Set a new password for that user (the ADMIN user typically has an ID of 2):

ipmicfg -user setpwd 2 your_password_here
Login to the IPMI web GUI using the password you just set.

I've reset the ADMIN password on dozens of Supermicro IPMI BMCs. Of all the methods I've tried, this is the only procedure that works 100% of the time.

Note: If you already have Windows or Linux installed on your system, then you can skip steps 1, 3 and 4 and merely execute the commands in steps 5 and 6 using the appropriate executable from the Supermicro toolkit downloaded in step 2. If you are using Linux and you encounter kcs_error_exit messages when invoking ipmicfg commands, then you need to install the OpenIPMI library and enable the ipmi_devintf kernel module.

The following commands work on CentOS 6:

yum -y install OpenIPMI
modprobe ipmi_devintf

Remember that the command modprobe ipmi_devintf will need to be re-run every time you reboot the server.

anapsix · Answer 4 · 2013-07-25T15:06:12.677

Best way is to reset to defaults and clear FRU&LAN with SuperMicro native tool, like so:

./ipmicfg-linux.x86_64 -fde

(All this may take a few seconds to take effect, so wait between commands!)

Now turn off the DHCP setting restored from factory defaults with

./ipmicfg-linux.x86_64 -dhcp off

then, restore your network settings with:

./ipmicfg-linux.x86_64 -m $IP_ADDRESS
./ipmicfg-linux.x86_64 -k $NETMASK
./ipmicfg-linux.x86_64 -g $GATEWAY_IP

I've noticed, that sometimes, you need to reset BMC unit for it to take effect. Just today, was unable to ping my server's IPMI IP address set via ipmicfg utility until after BMC reset:

./ipmicfg-linux.x86_64 -r

You'll have to configure the IP/Netmask/Gateway again with the same tool, but this is the only way I could make it work.
OpenIPMI and IPMITools did not work for me on Debian Squeeze. I've tried resetting the password, cold resetting BMC, to no avail. However, they are good for setting IP and reading sensor data.

You can get the appropriate version for your OS from SuperMicro FTP:
ftp://ftp.supermicro.com/utility/IPMICFG/

score 3 · Answer 5 · answered Jul 14 '11 at 21:07

3

If you rarely use the IPMI interface it's possible it's still using the default username/password ADMIN/ADMIN (case sensitive).

answered Jul 14 '11 at 21:07

zippy

1,728

codemonkey · Answer 6 · 2020-12-06T03:59:19.393

2

The suggested solutions did not work for me on my SuperMicro X11SCL-F running Ubuntu 18.04. Here is how I was able to successfully reset the ADMIN password:

ipmitool user set password 2

It then prompts you to enter the new password. Hope this helps somebody out there. After that, just use the web interface to login with ADMIN / #NEWPASS#

edited Dec 06 '20 at 03:59

answered Dec 06 '20 at 00:55

codemonkey

191

score 1 · Answer 7 · answered Jan 06 '24 at 04:49

I have some additional information to add following other answers that helped me along my way.

In my case, I have a Supermicro X10SLM-F (from around 2014 or so) which I had purchased from someone who forgot to reset the IPMI settings on one of the boards I had purchased from them.

These steps were performed on ipmitool version 1.8.19 on Debian 12. The Debian package version used is 1.8.19-4. I know about the 'IANA PEN registry' error, but ignored it at the time as I was using a temporary installation left over on a spare SSD from a different task. The mainboard used on has IPMI ROM version 01.35 dated 14/3/2014 and BIOS version 3.0a dated 21/12/2015 (d/m/y). The tool has to be run as the root user, but I decided to just use sudo instead.

In my case, it appeared that user ID 1 wasn't used.

kevin@temporary:~$ sudo ipmitool -I open user set password 1 ADMIN
IANA PEN registry open failed: No such file or directory
Received a response with unexpected ID 0 vs. 1
IPMI command failed: Invalid data field in request
Set User Password command failed (user 1)

With that, I tried just creating a separate IPMI user, which failed due to a typo ('username' when it should just be 'name') but did trigger a help prompt showing me that I can still just list the users.

kevin@temporary:~$ sudo ipmitool -I open user set username 2 kevin
IANA PEN registry open failed: No such file or directory
User Commands:
               summary      [<channel number>]
               list         [<channel number>]
               set name     <user id> <username>
               set password <user id> [<password> [<16|20>]]
               disable      <user id>
               enable       <user id>
               priv         <user id> <privilege level> [<channel number>]
                     Privilege levels:
                      * 0x1 - Callback
                      * 0x2 - User
                      * 0x3 - Operator
                      * 0x4 - Administrator
                      * 0x5 - OEM Proprietary
                      * 0xF - No Access
           test         &lt;user id&gt; &lt;16|20&gt; [&lt;password]&gt;

Upon listing the IPMI users for the mainboard, I found that the default admin account was actually assigned to user ID 2, not user ID 1.

kevin@temporary:~$ sudo ipmitool -I open user list
IANA PEN registry open failed: No such file or directory
ID  Name             Callin  Link Auth  IPMI Msg   Channel Priv Limit
1                    true    false      false      Unknown (0x00)
2   ADMIN            true    false      false      Unknown (0x00)
3   IPMI_USER        true    false      false      Unknown (0x00)
4                    true    false      false      Unknown (0x00)
5                    true    false      false      Unknown (0x00)
6                    true    false      false      Unknown (0x00)
7                    true    false      false      Unknown (0x00)
8                    true    false      false      Unknown (0x00)
9                    true    false      false      Unknown (0x00)
10                   true    false      false      Unknown (0x00)

ADMIN (user ID 2) appeared to be the default admin account and IPMI_USER (user ID 3) appeared to be an account added by the previous owner.

kevin@temporary:~$ sudo ipmitool -I open user set password 2 <insert new password here>
IANA PEN registry open failed: No such file or directory
Set User Password command successful (user 2)

Knowing that the default admin account was on user ID 2 instead of 1, I was able to successfully reset the admin password (which I redacted for privacy).

From there, I was successfully able to access the Web interface, where I changed the username and password for the other user account, though I could also just do it in the command line. I also found through there that user ID 1 is used for a hidden 'Anonymous' user, which I think was not present on older versions of AMI MegaRAC from prior to 2014 or thereabouts.

score 1 · Answer 8 · answered Nov 04 '24 at 19:53

took me some time to go through all these answers - and nothing worked. Turns out, user name is CASE-SENSITIVE! So here is what worked for my Supermicro x11ssm-f motherboard:

# find ADMIN user's ID - probably it's 2
sudo ipmitool -I open user list
use ID from ^^^ to set password for admin:
sudo ipmitool user set password 2 ##NEW_PASS##

and then you can login from the web UI using ADMIN / ##NEW_PASS## pair.

score 1 · Answer 9 · answered Apr 11 '16 at 16:22

This simple answer is different than then others which need some other formal OS installed to reset the password.

Boot a thumb drive with the proper IPMI firmware file and the proper flashing utility for your motherboard from SuperMicro's website. We use a dos based one for simplicity. If you already have the current IPMI firmware Simply flash it with the same version you already have.

Most of our systems are X8 based boards that have onboard IPMI. These use YAFUKcs (Yet Another Firmware Updater).

If you normally save the config while updating, simply leave off the -c option yafukcs -full romfile.ima instead of yafukcs -full -c romfile.ima

Interestingly enough, leaving off the -c option does not cause IPMI static addressing to be reset in the BIOS. It only affects settings within the IPMI environment, such as LDAP, NTP and any alert notifications you have configured.

You should consider flashing the system BIOS after the IPMI update, however it isn't required. If you flash the system BIOS, those settings will be reset, but the IPMI LAN settings will not change.

score 1 · Answer 10 · edited Aug 15 '16 at 07:59

1

Hate to dig up "old threads" but this one still comes up first when looking for a solution to the listed problem.

I've just found that the IPMIView tool from the Supermicro website can change the ADMIN password on the IPMI admin account! :)

edited Aug 15 '16 at 07:59

MadHatter

81,580

answered Aug 15 '16 at 07:53

Stuart Summerville

11

Is it possible to reset the password on a SuperMicro IPMI interface?

10 Answers10

use ID from ^^^ to set password for admin:

Linked