Is it possible to reset the password on a SuperMicro IPMI interface? My motherboard is model X8STI-F.
-
I've done it on a HP DL585 system, and manipulated IPMI values on Sun X2200-M2 and V20z computers, so there's probably a way. I'd poke around on the Supermicro site. – David Mackintosh Nov 16 '09 at 04:14
-
what about same procedure for JBOD? You can't connect with ipmicfg or tool. Need to target the IP address and authenticate before you can change anything. Is there a battery to pull or a jumper to reset that actually resets the creds back to default? Thanks. – Kevin Aug 02 '16 at 20:52
-
@Kevin the method to do this varies by manufacturer and management interface. This is for Supermicro motherboards. Clearing the main system BIOS may or may not clear a BMC BIOS depending on the type of system. In Server systems you generally don't want to nuke the System bios because that can affect complex boot order or processor timing configurations which may not be the manufacturer defaults for specific needs of hardware within the system or because it was changed to support functions for a VAR. – Rowan Hawkins Jun 30 '21 at 15:06
8 Answers
If you access it locally you can specify a new password. On Linux this would be done via ipmitool
. Something like this should work:
ipmitool -I open lan set 1 password NEWPASSWORD
If you don't know which channel is your ethernet interface, just page through them one at at time, like so:
# ipmitool -I open channel info 1 Channel 0x1 info: Channel Medium Type : 802.3 LAN Channel Protocol Type : IPMB-1.0 Session Support : multi-session Active Session Count : 0 Protocol Vendor ID : 7154 Volatile(active) Settings Alerting : disabled Per-message Auth : disabled User Level Auth : enabled Access Mode : always available Non-Volatile Settings Alerting : disabled Per-message Auth : disabled User Level Auth : enabled Access Mode : always available
Note that the medium type is "802.3 LAN". That's the one you want. Other channels may look like this:
# ipmitool -I open channel info 2 Channel 0x2 info: Channel Medium Type : Serial/Modem Channel Protocol Type : IPMB-1.0 Session Support : single-session Active Session Count : 0 Protocol Vendor ID : 7154 # ipmitool -I open channel info 3 Channel 0x3 info: Channel Medium Type : System Interface Channel Protocol Type : KCS Session Support : session-less Active Session Count : 0 Protocol Vendor ID : 7154
![](../../users/profiles/10380.webp)
- 9,314
- 2
- 27
- 45
-
When you refer to linux os, you mean that i should connect to the server locally with a laptop under linux and then issue those commands? Also, do i need to connect directly to the ipmi interface right? – madpato Nov 17 '09 at 13:53
-
When I mentioned Linux, it was because you didn't specify the OS in your post and that's the only one I know. If you're using Windows, it wouldn't work to just connect with a Linux laptop, but you should be able to boot off a Linux live CD (e.g., Knoppix) and use the ipmitool command there. It would probably be easier to find a native utility for Windows. It looks like ipmiutil is available for Windows. It looks like ipmiutil is available. Also check this out http://serverfault.com/questions/1395/how-to-utilize-ipmi-on-windows – Insyte Nov 17 '09 at 17:29
-
well i forgot to mention that it is a linux os, debian lenny 64. so i could do it remotely (i dont wanna go to my dc) The system is running fine, i'm just worried if i ever need it i will not have the password to access it. – madpato Nov 23 '09 at 16:34
-
1Then what I described should work: Log in remotely via ssh and set the IPMI password. When I said "locally" I meant that you would be running `ipmitool` while logged into the server, not on another host. – Insyte Nov 23 '09 at 20:25
-
i did not have ipmitool installed so i did apt-get install ipmi tool, then i got this: Setting up ipmitool (1.8.9-2) ... ipmievd: using pidfile /var/run/ipmievd.pid0 Could not open device at /dev/ipmi0 or /dev/ipmi/0 or /dev/ipmidev/0: No such file or directory Unable to open interface invoke-rc.d: initscript ipmievd, action "start" failed. Unable to start ipmievd during installation. Trying to disable. Is there anything i'm missing? thank you. – madpato Nov 24 '09 at 18:12
-
4You'll need to load the modules: `modprobe ipmi_si; modprobe ipmi_devintf; modprobe ipmi_msghandler` – Insyte Nov 24 '09 at 23:02
-
I've managed to change the password with the instructions, but now i can't even see the login page in the web browser, but i can still ping the ip. Is there anything extra that needs to be done? thank you. – madpato Dec 14 '09 at 21:25
-
Sorry, can't help you there. I'm not familiar with the Supermicro IPMI setup. I didn't even know it had a web interface. Now that you have the ability to manage the IPMI interface via the CLI you should be able to poke around and identify the options for the web interface... – Insyte Dec 16 '09 at 00:36
-
I just had to deal with this same issue yesterday, I was not able to log into my SuperMicro IPMI web interface because I had not used it frequently and forgot the password. The command in Insyte's answer did not work for me but it was close. This command worked to reset the ADMIN account's password:
ipmitool -I open user set password 2 ADMIN
The number 2 there is the user id. The ADMIN account defaults to user id 2. So I'm setting user id 2's password to ADMIN which is the default, but you could put any other password there.
Thank you to Insyte for pointing me on the right track of using ipmitool, after a few searches online I was able to find this working command. Hopefully it will help someone else that stumbles on this question.
![](../../users/profiles/69542.webp)
- 415
- 6
- 9
-
1Thanks, this worked for an X8DTU. I needed to 'yum install OpenIPMI' and then 'service ipmi start' which loads the modules for you. EL6 in this case. – Bill McGonigle Aug 20 '15 at 17:31
-
1This worked for me too (while Insyte's answer did not). Remember to run this command as `root`. Thanks @ben-baron – sajjadG Jul 05 '19 at 10:53
Supermicro IPMI BMCs can be fairly erratic and troublesome. You should always use the utilities and tools provided by Supermicro before attempting a fix with universal tools such as IPMITool.
It is not necessary to reset the entire unit as others have suggested.
If you have physical access to the server, follow these simple steps to reset the ADMIN password on your IPMI:
- Create a bootable DOS USB stick using Rufus.
- Download the latest IPMICFG utility released by Supermicro.
- Extract the archive and copy the contents of the 'DOS' folder on to your bootable DOS USB.
- Boot your server into DOS and navigate to the 'DOS' folder you copied on to the USB.
Get the user ID of the IPMI user whose password you want to set:
ipmicfg -user list
Set a new password for that user (the ADMIN user typically has an ID of 2):
ipmicfg -user setpwd 2 your_password_here
Login to the IPMI web GUI using the password you just set.
I've reset the ADMIN password on dozens of Supermicro IPMI BMCs. Of all the methods I've tried, this is the only procedure that works 100% of the time.
Note: If you already have Windows or Linux installed on your system, then you can skip steps 1, 3 and 4 and merely execute the commands in steps 5 and 6 using the appropriate executable from the Supermicro toolkit downloaded in step 2. If you are using Linux and you encounter kcs_error_exit
messages when invoking ipmicfg
commands, then you need to install the OpenIPMI library and enable the ipmi_devintf
kernel module.
The following commands work on CentOS 6:
yum -y install OpenIPMI
modprobe ipmi_devintf
Remember that the command modprobe ipmi_devintf
will need to be re-run every time you reboot the server.
![](../../users/profiles/115445.webp)
- 1,316
- 2
- 18
- 28
-
1You may also use IPMICFG recorder on USB flash directly from UEFI Shell (F11 while boot) without other OS. It was much simpler and faster rather creating bootable stick. Still above pt. 5 and 6 works like a charm! – Marek Multarzyński Dec 19 '19 at 23:04
-
1For some reason the ftp server did not work. I found ipmicfg here: https://www.supermicro.com/SwDownload/SwSelect_Free.aspx?cat=IPMI – krdx Aug 28 '21 at 18:57
Best way is to reset to defaults and clear FRU&LAN with SuperMicro native tool, like so:
./ipmicfg-linux.x86_64 -fde
(All this may take a few seconds to take effect, so wait between commands!)
Now turn off the DHCP setting restored from factory defaults with
./ipmicfg-linux.x86_64 -dhcp off
then, restore your network settings with:
./ipmicfg-linux.x86_64 -m $IP_ADDRESS
./ipmicfg-linux.x86_64 -k $NETMASK
./ipmicfg-linux.x86_64 -g $GATEWAY_IP
I've noticed, that sometimes, you need to reset BMC unit for it to take effect. Just today, was unable to ping my server's IPMI IP address set via ipmicfg utility until after BMC reset:
./ipmicfg-linux.x86_64 -r
You'll have to configure the IP/Netmask/Gateway again with the same tool, but this is the only way I could make it work.
OpenIPMI and IPMITools did not work for me on Debian Squeeze. I've tried resetting the password, cold resetting BMC, to no avail. However, they are good for setting IP and reading sensor data.
You can get the appropriate version for your OS from SuperMicro FTP:
ftp://ftp.supermicro.com/utility/IPMICFG/
![](../../users/profiles/131440.webp)
- 199
- 1
- 6
-
1Be sure to write down the network information first. People who do this are likely in a datacenter without a pad of paper. – Stefan Lasiewski Sep 06 '12 at 23:26
-
2this definitely works! We couldn't get subsequent commands to work because it reverts to DHCP, so we connected via DHCP and got the IP, then were able to reconfigure. I updated your answer to reflect turning DHCP off first. – Jeff Atwood Oct 22 '12 at 23:52
If you rarely use the IPMI interface it's possible it's still using the default username/password ADMIN/ADMIN (case sensitive).
![](../../users/profiles/16797.webp)
- 1,708
- 3
- 18
- 36
-
i tried with ADMIN/ADMIN but found out that itis admin/admin ie small letters , anyway thans for the hint – Jul 03 '12 at 02:44
-
I should add an update here: Any of 9th gen or newer motherboards no longer ship with the ADMIN/ADMIN default (due to a California law about default maintenance passwords). Their default password can be located in two locations: 1) The pull out 'toe-tag' if the motherboard and chassis were shipped as a system from Supermicro. 2) A sticker on the motherboard directly either near the SMC port or near the Motherboard Serial number sticker. It is in all CAPS with a barcode and usually says BMCPWD: – Rowan Hawkins Jun 30 '21 at 14:55
The suggested solutions did not work for me on my SuperMicro X11SCL-F running Ubuntu 18.04. Here is how I was able to successfully reset the ADMIN password:
ipmitool user set password 2
It then prompts you to enter the new password. Hope this helps somebody out there. After that, just use the web interface to login with ADMIN / #NEWPASS#
![](../../users/profiles/603435.webp)
- 161
- 6
This simple answer is different than then others which need some other formal OS installed to reset the password.
Boot a thumb drive with the proper IPMI firmware file and the proper flashing utility for your motherboard from SuperMicro's website. We use a dos based one for simplicity. If you already have the current IPMI firmware Simply flash it with the same version you already have.
Most of our systems are X8 based boards that have onboard IPMI. These use YAFUKcs (Yet Another Firmware Updater).
If you normally save the config while updating, simply leave off the -c option yafukcs -full romfile.ima
instead of yafukcs -full -c romfile.ima
Interestingly enough, leaving off the -c
option does not cause IPMI static addressing to be reset in the BIOS. It only affects settings within the IPMI environment, such as LDAP, NTP and any alert notifications you have configured.
You should consider flashing the system BIOS after the IPMI update, however it isn't required. If you flash the system BIOS, those settings will be reset, but the IPMI LAN settings will not change.
![](../../users/profiles/342838.webp)
- 590
- 2
- 18
Hate to dig up "old threads" but this one still comes up first when looking for a solution to the listed problem.
I've just found that the IPMIView tool from the Supermicro website can change the ADMIN password on the IPMI admin account! :)
![](../../users/profiles/55514.webp)
- 78,442
- 20
- 178
- 229
![](../../users/profiles/370537.webp)
- 11
- 1
-
The ipmiview tool can only change the password after you authenticate with the existing password. All of the other answers and the question are about what to do **without** the password. – Rowan Hawkins Mar 27 '20 at 23:55