IBM Support

Checking and Setting the Integrated Management Module (IMM) Authentication for FDT Upgrade to 4.1 or Higher

Question & Answer


Question

In order for the FDT 4.1 remote host updater to run, the IMM configuration must be set to default. Alternatively if it is not set to default, the script will prompt to enter the current authentication credentials. Use the following to check and or set the IMM Authentication from the PureData System:

Cause

IMM credentials could have been changed manually and will either need to be set to default or entered at the login prompt of the Firmware Updater command to pass successfully.

Answer

CHECKING IMM USER NAMES

There are a few ways to query and change these values. Check the first configurable slot with this command:

[root@host1]# ipmitool channel getaccess 1
Maximum User IDs     : 13
Enabled User IDs     : 2

User ID              : 1
User Name            :
Fixed Name           : Yes
Access Available     : call-in / callback
Link Authentication  : disabled
IPMI Messaging       : disabled
Privilege Level      : NO ACCESS

User ID              : 2
User Name            : USERID

Fixed Name           : No
Access Available     : call-in / callback
Link Authentication  : disabled
IPMI Messaging       : enabled
Privilege Level      : ADMINISTRATOR

The first user ID, 1, is not configurable (Fixed Name = Yes). So the first configurable slot is the second user id, which is 2. Here, it is set to USERID.


Here's an example with a second user:

[root@host1]# ipmitool channel getaccess 1
Maximum User IDs     : 13
Enabled User IDs     : 3

User ID              : 1
User Name            :
Fixed Name           : Yes
Access Available     : call-in / callback
Link Authentication  : disabled
IPMI Messaging       : disabled
Privilege Level      : NO ACCESS

User ID              : 2
User Name            : USERID
Fixed Name           : No
Access Available     : call-in / callback
Link Authentication  : disabled
IPMI Messaging       : enabled
Privilege Level      : ADMINISTRATOR

User ID              : 3
User Name            : test1
Fixed Name           : No
Access Available     : call-in / callback
Link Authentication  : disabled
IPMI Messaging       : enabled
Privilege Level      : ADMINISTRATOR

The first configurable slot, user id 2, is still set to USERID. And the second configurable slot is set to test1.

Alternatively, you can check configurable slots using asu (note that this is much slower, and slots start at 1, not 2 like above):

[root@host1]# /nz/export/tools/asu/asu show IMM.LoginId.1
IBM Advanced Settings Utility version 9.40.80O
Licensed Materials - Property of IBM
(C) Copyright IBM Corp. 2007-2013 All Rights Reserved
Successfully discovered the IMM via SLP.
Discovered IMM at IP address 169.254.95.118
Connected to IMM at IP address 169.254.95.118
IMM.LoginId.1=USERID



CHANGING IMM USERS AND PASSWORDS


One way to set the first configurable slot is via ASU:

[root@host1]# /nz/export/tools/asu/asu set IMM.LoginID.1 USERID
IBM Advanced Settings Utility version 9.00.76R
Licensed Materials - Property of IBM
(C) Copyright IBM Corp. 2007-2012 All Rights Reserved
Unable to locate a script required to set up LAN-over-USB device, tried location cdc_interface.sh
Successfully discovered the IMM via SLP.
Discovered IMM at IP address 169.254.95.118
Connected to IMM at IP address 169.254.95.118
IMM.LoginId.1=USERID
Waiting for command completion status.
Command completed successfully.

After setting the user, the authority level needs to be reset.

[root@host1]# /nz/export/tools/asu/asu set IMM.AuthorityLevel.1 Supervisor
IBM Advanced Settings Utility version 9.00.76R
Licensed Materials - Property of IBM
(C) Copyright IBM Corp. 2007-2012 All Rights Reserved
Unable to locate a script required to set up LAN-over-USB device, tried location cdc_interface.sh
Successfully discovered the IMM via SLP.
Discovered IMM at IP address 169.254.95.118
Unable to validate userid/password on IMM.
Please make sure input the correct userid/password with supervisor authority level.
Unable to locate a script required to set up LAN-over-USB device, tried location cdc_interface.sh
Unable to connect to IMM via LAN : Could not configure in band network.
Connected via IPMI device driver (KCS interface)
IMM.AuthorityLevel.1=Supervisor
Waiting for command completion status.
Command completed successfully.

There is also a "/nz/export/tools/asu/asu set IMM.Password.1 <password>" command that can be used to change the password.

[{"Product":{"code":"SSULQD","label":"IBM PureData System"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Host","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"1.0.0","Edition":"All Editions","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
17 October 2019

UID

swg21693972