How To
Summary
The HMC stores credentials with which to access its own BMC to monitor for platform events. This document contains the steps required to remove or clear those stored credentials on the HMC. It also includes steps on how to reset the BMC to default, which is usually needed when access to the BMC as a privilege level user is lost or forgotten.
Objective
Outlines the steps required to remove the stored BMC Console Inband Communications Credentials on the HMC and how to reset the BMC to default settings, which might be necessary if access to the BMC as a privilege level user is not possible.
Environment
7063-CR2
HMC Version 9 Release 2 and higher
Steps
Depending on the HMC version, it might be necessary to access the HMC as root, which requires contacting IBM Support to obtain the daily access password for the HMC.
Steps for HMC at v10r2.1030 and newer:
1) Login as user hscpe.
If the user does not exist yet, you can create it with:
mkhmcusr -u hscpe -a hmcpe --passwd <password>
mkhmcusr -u hscpe -a hmcpe --passwd <password>
If the user exists already but the password is not known, the hscroot user can change hscpe's password:
chhmcusr -u hscpe -t passwd
chhmcusr -u hscpe -t passwd
2) As hscpe run the following signal command to remove the file containing the credentials:
runsig -s 750 -p delete
3) Verify the file was removed:
ls /opt/hsc/data/HmcNetConfigCR2
If the file was removed, the command returns the following:
ls: cannot access '/opt/hsc/data/HmcNetConfigCR2': No such file or directory
If the file is still listed, repeat step 2 to remove it.
NOTE: Once it is verified that the file was removed, you must reboot the HMC immediately. Delaying the reboot might cause a blank file to be re-created by the next inband communications cycle.
4) Reboot the HMC
hmcshutdown -t now -r
hmcshutdown -t now -r
5) If there is a need to reset the BMC to default settings (because access to a privilege level user is not available and neither is root access to the BMC), then continue with step 6, otherwise skip to step 10.
6) Stop the automatic boot at Petitboot by moving the selected option by using the up or down arrow keys.
7) Select Exit to shell
8) Reset the BMC to factory settings by entering this command:
ipmitool raw 0x3A 0x11
NOTE: Wait for the HMC to power off and for the LED on the Power button to come back to a blinking pattern. The operation can take 5 - 10 minutes.
9) Power the HMC On by pressing the power button.
The HMC should automatically boot the "Hardware Management Console" image. If this doesn't happen automatically, manually select "Hardware Management Console" and press Enter.
10) Log in to the HMC and set up the BMC network settings under "HMC Management -> BMC connectivity"
See https://www.ibm.com/support/pages/node/6483593 for details.
11) Connect to the BMC "HMC Management -> BMC Web Log In"
12) Log in as root.
If you reset the BMC to default settings, use the default password 0penBmc and continue, otherwise skip to step 14
13) Change the root password when prompted
14) Create a BMC user with Administrator privilege, to be used for inband communications, unless one exists.
See https://www.ibm.com/support/pages/how-add-user-bmc-7063-cr2-hmc for details.
15) Set the inband communications credentials "HMC Management -> Inband BMC credentials"
See https://www.ibm.com/support/pages/node/6454865 for details.
End of procedure.
Steps for HMC v10r1.1010.1 (PTF MF68970) or newer:
1) Login as user hscpe.
If the user does not exist yet, you can create it with:
mkhmcusr -u hscpe -a hmcpe --passwd <password>
mkhmcusr -u hscpe -a hmcpe --passwd <password>
If the user exists already but the password is not known, the hscroot user can change hscpe's password:
chhmcusr -u hscpe -t passwd
chhmcusr -u hscpe -t passwd
2) As hscpe run the following signal command to remove the file containing the credentials:
runsig -s 750 -p delete
3) Verify the file was removed:
ls /opt/hsc/data/HmcNetConfigCR2
If the file was removed, the command returns the following:
ls: cannot access '/opt/hsc/data/HmcNetConfigCR2': No such file or directory
If the file is still listed, repeat step 2 to remove it.
NOTE: Once it is verified that the file was removed, you must reboot the HMC immediately. Delaying the reboot might cause a blank file to be re-created by the next inband communications cycle.
4) Reboot the HMC
hmcshutdown -t now -r
hmcshutdown -t now -r
5) If there is a need to reset the BMC to default settings (because access to a privilege level user is not available and neither is root access to the BMC), then continue with step 6, otherwise skip to step 10.
6) Stop the automatic boot at Petitboot by moving the selected option by using the up or down arrow keys.
7) Select Exit to shell
8) Reset the BMC to factory settings by entering this command:
ipmitool raw 0x3A 0x11
NOTE: Wait for the HMC to power off and for the LED on the Power button to come back to a blinking pattern. The operation can take 5 - 10 minutes.
9) Power the HMC On by pressing the power button.
The HMC should automatically boot the "Hardware Management Console" image. If this doesn't happen automatically, manually select "Hardware Management Console" and press Enter.
10) Log in to the HMC and set up the BMC network settings under "Console Management -> Console Settings -> Change BMC/IPMI Network Settings".
See https://www.ibm.com/support/pages/node/6483593 for details.
11) Connect to the BMC "Console Management -> Console Settings -> Launch BMC/IPMI Login".
12) Log in as root.
If you reset the BMC to default settings, use the default password 0penBmc and continue, otherwise skip to step 14.
13) Change the root password when prompted.
14) Create a BMC user with Administrator privilege, to be used for inband communications, unless one exists.
See https://www.ibm.com/support/pages/how-add-user-bmc-7063-cr2-hmc for details.
15) Set the inband communications credentials "Console Management -> Console Settings -> Console Inband Communications Credentials"
See https://www.ibm.com/support/pages/node/6454865 for details.
End of procedure.
Steps for HMC not yet at v10r1.1010.1 (PTF MF68970) or newer:
These steps require root access, which in turn requires contacting IBM Support to obtain the daily access password for the HMC.
1) Login as user hscpe.
If the user does not exist yet, you can create it with:
mkhmcusr -u hscpe -a hmcpe --passwd <password>
mkhmcusr -u hscpe -a hmcpe --passwd <password>
If the user exists already but the password is not known, the hscroot user can change hscpe's password:
chhmcusr -u hscpe -t passwd
chhmcusr -u hscpe -t passwd
2) Enter the pesh command followed by the HMC serial number:
pesh <HMC serial number>
For example, for an HMC with serial 1234567
pesh 1234567
3) When prompted, enter the daily password.
The daily access password can be obtained by contacting IBM Support.
If the correct password is entered, the user is returned to the hscpe prompt without errors being displayed.
4) Enter the following command:
su -
5) Enter the root password when prompted.
If the root password is not known, the hscroot user can change root's password
6) As root, remove the HmcNetConfigCR2 file:
rm /opt/hsc/data/HmcNetConfigCR2
NOTE: Reboot the HMC immediately following the execution of the command. Delaying the reboot might cause a blank file to be re-created by the next inband communications cycle.
7) Reboot the HMC
10) Select Exit to shell
11) Reset the BMC to factory settings by entering this command:
ipmitool raw 0x3A 0x11
13) Log in to the HMC and set up the BMC network settings under "Console Management -> Console Settings -> Change BMC/IPMI Network Settings"
14) Connect to the BMC "Console Management -> Console Settings -> Launch BMC/IPMI Login"
15) Log in as root.
16) Change the root password when prompted
17) Create a BMC user with Administrator privilege, to be used for inband communications, unless one exists.
18) Set the inband communications credentials "Console Management -> Console Settings -> Console Inband Communications Credentials"
End of procedure.
hmcshutdown -t now -r
8) If there is a need to reset the BMC to default settings (because access to a privilege level user is not available and neither is root access to the BMC), then continue with step 9, otherwise skip to step 13.
9) Stop the automatic boot at Petitboot by moving the selected option by using the up or down arrow keys.
10) Select Exit to shell
11) Reset the BMC to factory settings by entering this command:
ipmitool raw 0x3A 0x11
NOTE: Wait for the HMC to power off and for the LED on the Power button to come back to a blinking pattern. The operation can take 5 - 10 minutes.
12) Power the HMC On by pressing the power button.
13) Log in to the HMC and set up the BMC network settings under "Console Management -> Console Settings -> Change BMC/IPMI Network Settings"
See https://www.ibm.com/support/pages/node/6483593 for details.
14) Connect to the BMC "Console Management -> Console Settings -> Launch BMC/IPMI Login"
15) Log in as root.
If you reset the BMC to default settings, use the default password 0penBmc and continue, otherwise skip to step 17
16) Change the root password when prompted
17) Create a BMC user with Administrator privilege, to be used for inband communications, unless one exists.
See https://www.ibm.com/support/pages/how-add-user-bmc-7063-cr2-hmc for details.
18) Set the inband communications credentials "Console Management -> Console Settings -> Console Inband Communications Credentials"
See https://www.ibm.com/support/pages/node/6454865 for details.
End of procedure.
Additional Information
Related documents:
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"7063-CR2","label":"Hardware Management Console (7063-CR2)"},"ARM Category":[],"ARM Case Number":[],"Platform":[{"code":"PF025","label":"Platform Independent"}]}]
Was this topic helpful?
Document Information
Modified date:
13 July 2023
UID
ibm16550862