PowerEdge: Changing the Integrated Dell Remote Access Controller 9 (iDRAC9) Default Login Password

Summary: This article provides the methods to change the Integrated Dell Remote Access Controller 9 (iDRAC9) default login password.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

If the default password is used, a warning message is displayed to alert you about this security vulnerability. This message is displayed if:

  • You log in to the iDRAC with Configure User privilege.
  • The default password warning feature is enabled.
  • The default iDRAC username and password are provided on the system information tag.

The warning message is also displayed when you log in to the iDRAC using SSH, Telnet, remote RACADM, or the Web interface. For the Web interface, SSH, and Telnet, a single warning message is displayed for each session. For remote RACADM, the warning message is displayed for each command.

Cause

The default iDRAC username and password are widely known, and any user with access to the server could change the default password. The Default Password Warning feature in iDRAC warns you if the default login credentials are still in place.

Whenever a user with Configure User privileges logs in to iDRAC or SSH/Telnet or runs RACADM commands remotely using the default login credentials, the system displays a warning message (SEC0701). Because UI and SSH/Telnet users log in once per session, they see a single warning message for each session. Because remote RACADM users log in for every command, they see a warning message for every command.

An iDRAC with default login credentials is even less secure if the system is Internet-accessible or part of a large network with different trust boundaries.

Resolution

For more information about iDRAC9, go to the iDRAC9 support pages, then select the iDRAC9 firmware version for documentation including the User's Guide for additional information. What is the default username and password for Integrated Dell Remote Access Controller (iDRAC)? explains the default username and password.

iDRAC recommended characters in usernames and passwords

To improve security, it is recommended to use complex passwords that have eight or more characters and include lowercase alphabets, uppercase alphabets, numbers, and special characters. It is also recommended to change the passwords, if possible regularly.

Note: The password must include one uppercase and one lower case letter, one number, and a special character.

Recommended characters for usernames
Characters Length
0 1 2 3 4 5 6 7 8 9
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
a b c d e f g h i j k l m n o p q r s t u v w x y z
- ! # $ % & ( ) * / ; ? @ [ \ ] ^ _ ' { | } ~ + < = >		 1 to 16 characters

Recommended characters for passwords
Characters iDRAC Firmware Version Length
0 1 2 3 4 5 6 7 8 9
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
a b c d e f g h i j k l m n o p q r s t u v w x y z
- ! # $ % & ( ) *, . / : ; ? @ [ \ ] ^ _ ' { | } ~ + < = >		 3.xx 1 to 20 characters
4.xx, 5.xx, and 6.xx 1 to 40 characters

 7.xx

 1 to 127 characters

You may be able to create usernames and passwords that include other characters. However, to ensure compatibility with all interfaces, Dell Technologies recommends using only the characters listed here.

Note: The network-share type determines the characters allowed in usernames and passwords for network shares. iDRAC supports valid characters for network share credentials as defined by the share type, except <, >, and , (comma).

Changing the default iDRAC login password using the web interface

When you log in to the iDRAC web interface, if the Default Password Warning page is displayed, you can change the password.

iDRAC9 default username and password warning message
Figure 1: iDRAC9 default username and password warning message

  1. Select the Change Default Password option.
  2. In the New Password field, enter the new password.
  3. Click Continue. The new password is configured, and you are logged in to iDRAC.
Note: Continue is enabled only if the passwords entered in the New Password and Confirm Password fields match.

Alternately, if the default password warning page is disabled:

  1. In the iDRAC Web Interface, go to iDRAC Settings and then User.
  2. In the User ID column, select user ID 2 and click Edit.
  3. Modify the user settings as needed.
  4. Click Save.
Note: The default password warning message can be enabled or disabled by going to iDRAC Settings and then under User.

Changing the default login password using iDRAC settings utility

Note:This procedure is also valid if the original password is lost.
 

  1. Press F2 during system POST to access System Settings. Select the iDRAC Settings.

System Setup Main Menu
Figure 2: System Setup Main Menu

  1. In the iDRAC Settings utility, go to User Configuration. The iDRAC Settings User Configuration page is displayed.

iDRAC Settings
Figure 3: iDRAC Settings

  1. In the Change Password field, enter the new password.

User Configuration
Figure 4: User Configuration

  1. Type the new password and then click OK or press Enter.

Change Password
Figure 5: Change Password

  1. After changing the password, click the Back button or press Enter.

Password changed
Figure 6: Password changed

  1. Click Finish or press Enter.

Clicking Finish
Figure 7: Clicking Finish

  1. Confirm the changes by clicking Yes or by pressing Enter.

System Setup, iDRAC Settings, Warning to Save Changes
Figure 8: Warning to Save Changes

  1. Click OK or press Enter at the confirmation prompt.

Settings saved confirmation
Figure 9: Settings saved confirmation

  1. Click Finish or press Enter.

Clicking Finish
Figure 10: Clicking Finish

Changing the default login password using RACADM

To change the password, run the following RACADM command:

racadm set iDRAC.Users.<INDEX>.Password <PASSWORD>

Note:
  • <INDEX> = A value from 1 to 16 that indicates the user account
  • <PASSWORD> = The new user-defined password
  • The index for the default account is 2.
 

Additional Information

PowerEdge: What is the Default Username and Password for an Integrated Dell Remote Access Controller

Affected Products

iDRAC9, PowerEdge XR2, Poweredge C4140, PowerEdge C6420, PowerEdge C6520, PowerEdge C6525, PowerEdge C6615, PowerEdge C6620, PowerEdge FC640, PowerEdge HS5610, PowerEdge HS5620, PowerEdge M640, PowerEdge M640 (for PE VRTX), PowerEdge MX740C , PowerEdge MX750c, PowerEdge MX760c, PowerEdge MX840C, PowerEdge R240, PowerEdge R250, PowerEdge R340, PowerEdge R350, PowerEdge R440, PowerEdge R450, PowerEdge R540, PowerEdge R550, PowerEdge R640, PowerEdge R6415, PowerEdge R650, PowerEdge R650xs, PowerEdge R6515, PowerEdge R6525, PowerEdge R660, PowerEdge R660xs, PowerEdge R6615, PowerEdge R6625, PowerEdge R740, PowerEdge R740XD, PowerEdge R740XD2, PowerEdge R7415, PowerEdge R7425, PowerEdge R750, PowerEdge R750XA, PowerEdge R750xs, PowerEdge R7515, PowerEdge R7525, PowerEdge R760, PowerEdge R760XA, PowerEdge R760xd2, PowerEdge R760xs, PowerEdge R7615, PowerEdge R7625, PowerEdge R840, PowerEdge R860, PowerEdge R940, PowerEdge R940xa, PowerEdge R960, PowerEdge T140, PowerEdge T150, PowerEdge T340, PowerEdge T350, PowerEdge T440, PowerEdge T550, PowerEdge T560, PowerEdge T640, PowerEdge XE2420, PowerEdge XE7420, PowerEdge XE7440, PowerEdge XE8545, PowerEdge XE8640, PowerEdge XE9680, PowerEdge XR11, PowerEdge XR12, PowerEdge XR4510c, PowerEdge XR4520c, PowerEdge XR5610, PowerEdge XR7620, PowerEdge XR8610t, PowerEdge XR8620t ...

Products

PowerFlex appliance R650, PowerFlex appliance R6525, PowerFlex appliance R660, PowerFlex appliance R6625, Powerflex appliance R750, PowerFlex appliance R760, PowerFlex appliance R7625, PowerFlex appliance R640, PowerFlex appliance R740XD , PowerFlex appliance R7525, PowerFlex appliance R840 ...
Article Properties
Article Number: 000177787
Article Type: Solution
Last Modified: 22 Nov 2024
Version:  13
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.