Menu

Virtual Geek

Tales from real IT system administrators world and non-production environment

Reset Dell iDRAC password from ESXi server

While working on new client's environment, I had limited information about Dell iDRAC ips and password. I found iDRAC IPs list with earlier articles Find Dell iDrac, HPE ilo IPMI ip address on VMware ESXi. The next task was to find out iDRAC password. In this task I tried with standard passwords provided by clients but they were not working. So I decided to reset the password with standard password set by client's policy. For HPE follow article Reset HP ILO password from Esxi server.

To start configuration I downloaded Dell EMC iDRAC tool for ESXi from below url.

https://www.dell.com/support/home/en-in/product-support/product/poweredge-r830/drivers

Dell product suspport poweredge rack idrack tool esxi vib vmware vsphere vcenter idrac password reset support hponcfg hpe ilo.png

As I am installing VIB zip depot file on ESXi I will need SSH enabled on ESXi server, for the same you can find article VMWARE SECURITY BEST PRACTICES: POWERCLI ENABLE OR DISABLE ESXI SSH. Next upload downloaded VIB zip file using article Upload files to vmware ESXi datastore: Different methods (I uploaded zip file on /tmp folder on VMware esxi server). Login onto ESXi server and execute below esxcli command to install iDRAC tools. 

esxcli software vib install - /tmp/DellEMC-iDRACTools-Web-ESX70i.VIB-10.1.0.0-4568_A00.zip

Installation Result
    Message: Operation finished successfully.
    Reboot Required: false
    VIBs Installed: DEL_bootbank_racadm_10.1.0.0.4568-DEL.700.0.0.15843807
    VIBs Removed:
    VIBs Skipped:

esxcli software vib install -d depot zip vib racadm bootbank vibs vmware vsphere vCenter esxi dell idrac tools reset password.png

Once Dell iDRAC racadm tools are installed use below command to reset password (Password is standard suggested by client). I am resetting root user password whos id is 2.

racadm set iDRAC.Users.2.Password P@ssw0rd
[Key=iDRAC.Embedded.1#Users.2]
Object value modified successfully

vmware vsphere esxi vcenter racadm set iDRAC.Users.2.Password idrac embedded object value modified vib zip metadata depot esxcli software install.png

After root user password is reset, I tested it on Integrated Dell Remote Access Controller (iDRAC) web portal and created a extra user for future use.

Idrac integrated remote access controller vmware vsphere esxi vcenter virtualization racadm user authentication password reset idrac settings dell server rack tower physcial disks.png

racadm command is not only limited to resetting iDRAC user password, but there are other use cases and subcommands you can use to configure iDRAC from ESXi Server.

[root@starlord:~] racadm help
 help                 -- Display list of RACADM sub commands with help string
 help [subcommand]    -- display usage summary for a subcommand
 arp                  -- display the networking ARP table
 autoupdatescheduler  -- Automatic Platform Update of the devices on the server.
 clearasrscreen       -- clear the last ASR (crash) screen
 clearpending         -- clear pending attribute(s) value of a Device Class
 closessn             -- close a session
 clrsel               -- clear the System Event Log (SEL)
 config               -- Deprecated: modify RAC configuration properties
 coredump             -- display the last RAC coredump
 coredumpdelete       -- delete the last RAC coredump
 debug                -- Field Service Debug Authorization facility commands
 eventfilters         -- Alerts configuration commands
 fwupdate             -- update the RAC firmware
 get                  -- display RAC configuration properties
 getconfig            -- Deprecated: display RAC configuration properties
 gethostnetworkinterfaces -- Display host network interface details
 getled               -- Get the state of the LED on a module.
 getniccfg            -- display current network settings
 getraclog            -- display the RAC log
 getractime           -- display the current RAC time
 getremoteservicesstatus -- Get remote services status
 getsel               -- display records from the System Event Log (SEL)
 getsensorinfo        -- display system sensors
 getssninfo           -- display session information
 getsvctag            -- display service tag information
 getsysinfo           -- display general RAC and system information
 gettracelog          -- display the RAC diagnostic trace log
 getuscversion        -- Deprecated: display the current USC version details
 getversion           -- display the current version details
 ifconfig             -- display network interface information
 inlettemphistory     -- inlet temperature history operations
 krbkeytabupload      -- upload kerberose keytab file to the RAC
 license              -- License Manager commands
 lclog                -- LCLog operations
 localConRedirDisable -- Deprecated: disable the Virtual Console from a local Console
 frontpanelerror      -- hide LCD errors - color amber to blue
 netstat              -- display routing table and network statistics
 ping                 -- send ICMP echo packets on the network
 ping6                -- send ICMP echo packets on the network
 racdump              -- display RAC diagnostic information
 racreset             -- perform a RAC reset operation
 racresetcfg          -- restore the RAC configuration to factory defaults
 remoteimage          -- make a remote ISO image available to the server
 rollback             -- Rollback firmware to its previous version.
 serveraction         -- perform system power management operations
 set                  -- modify RAC configuration properties
 setled               -- Set the state of the LED on a module.
 setniccfg            -- modify network configuration properties
 sshpkauth            -- manage SSH PK authentication keys on the RAC
 sslcertupload        -- upload an SSL certificate to the RAC
 sslcertdelete        -- delete an SSL certificate on the iDRAC
 sslcertdownload      -- download an SSL certificate from the RAC
 sslcertview          -- view SSL certificate information
 sslcsrgen            -- generate a certificate CSR from the RAC
 sslencryptionstrength -- Deprecated: Display or modify the SSL Encryption strength.
 sslkeyupload         -- upload an SSL key to the RAC
 sslresetcfg          -- Reset iDRAC to apply new certificate. Until iDRAC is reset old certificate will be active.
 swinventory          -- Display the list of S/W Installed on the server.
 systemconfig         -- Backup &/or Restore of iDRAC Config and Firmware
 systemerase          -- Performs system erase on a selected component.
 testemail            -- test RAC e-mail notifications
 testtrap             -- test RAC SNMP trap notifications
 testalert            -- test RAC SNMP - FQDN trap notifications
 traceroute           -- print the route packets trace to network host
 traceroute6          -- print the route packets trace to network host
 techsupreport        -- Tech Support Report operations.
 usercertupload       -- upload an user certificate to the DRAC
 vflashpartition      -- manage partitions on the vFlash SD card
 vflashsd             -- perform vFlash SD Card initialization
 vmdisconnect         -- disconnect Virtual Media connections
 raid                 -- Monitoring and Inventory of H/W RAID connected to the server.
 storage              -- Monitoring and Inventory of H/W RAID connected to the server.
 hwinventory          -- Monitoring and Inventory of H/W NICs connected to the server.
 nicstatistics        -- Statistics for NICs connected to the server.
 fcstatistics         -- Statistics for FCs connected to the server.
 update               -- Platform Update of the devices on the server
 jobqueue             -- Jobqueue of of the jobs currently scheduled
 sensorsettings       -- Set the sensor threshold levels.
 diagnostics          -- Remote Diagnostic commands
 systemperfstatistics -- Display or Modify System Performance Statistics

 Groups
 BIOS                -- Configuration of BIOS attributes
 iDRAC               -- Configuration of iDRAC attributes
 LifecycleController -- Configuration of LifecycleController attributes
 Nic                 -- Configuration of NIC attributes
 Storage             -- Configuration of Storage attributes
 System              -- Configuration of System attributes
 FC                  -- Configuration of Fiber Channel attributes

For Help on configuring the properties of a group - racadm help set
-----------------------------------------------------------------------

[root@starlord:~] racadm get
System.Backplane
System.LCD
System.Location
System.Power
System.Power.Supply
System.QuickSync
System.ServerOS
System.ThermalConfig
System.ThermalSettings
LifeCycleController.LCAttributes
iDRAC.ActiveDirectory
iDRAC.ADGroup
iDRAC.ASRConfig
iDRAC.AutoOSLock
iDRAC.EmailAlert
iDRAC.IMC
iDRAC.Info
iDRAC.IOIDOpt
iDRAC.IPBlocking
iDRAC.IPMILan
iDRAC.IPMISerial
iDRAC.IPMISOL
iDRAC.IPv6URL
iDRAC.LDAP
iDRAC.LDAPRoleGroup
iDRAC.LocalSecurity
iDRAC.Logging
iDRAC.NTPConfigGroup
iDRAC.OS-BMC
iDRAC.Racadm
iDRAC.Redfish
iDRAC.RedfishEventing
iDRAC.RemoteHosts
iDRAC.RFS
iDRAC.SecureDefaultPassword
iDRAC.Security
iDRAC.Serial
iDRAC.SerialRedirection
iDRAC.ServerBoot
iDRAC.ServiceModule
iDRAC.SmartCard
iDRAC.SNMP
iDRAC.SNMP.Alert
iDRAC.SSH
iDRAC.SupportAssist
iDRAC.SysLog
iDRAC.Telnet
iDRAC.Time
iDRAC.Tuning
iDRAC.Update
iDRAC.USB
iDRAC.UserDomain
iDRAC.Users
iDRAC.vFlashPartition
iDRAC.vFlashSD
iDRAC.VirtualConsole
iDRAC.VirtualMedia
iDRAC.VNCServer
iDRAC.WebServer
iDRAC.IPv4
iDRAC.IPv4Static
iDRAC.IPv6
iDRAC.IPv6Static
iDRAC.NIC
iDRAC.NICStatic

Useful Information
Resolved: HP ILO this page cannot be displayed ERR_SSL_BAD_RECORD_MAC_ALERT
Reset/Restart HP ILO (Integrated Lights-outs) using putty
Reset HP ILO password from Esxi server
ESXi HP Blade start issue Enclosure power event detected, System Halted until power condition is corrected
Esxi update individual component firmware on HP hardware: disk degraded not authenticated
Resolved syslog error: Call OptionManager.UpdateValues for object ha-adv-options on ESXi failed
Solved: Esxi server cannot joined into active directory domain
Solved Esxi host disconnected evaluation license expired
Connect-VIServer Error: Invalid server certificate. Use Set-PowerCLIConfiguration
Generate new self-signed certificates for ESXi using OpenSSL
Push SSL certificates to client computers using Group Policy
Replacing a default ESXi certificate with a CA-Signed certificate
Troubleshooting replacing a corrupted certificate on Esxi server 

Go Back



Comment

Blog Search

Page Views

11360909

Follow me on Blogarama