PowerVault: ME4, ME5 Restoring Management Access when a Password is Lost

• Considerations before you begin
• Procedure for PowerVault ME4 G275 controller firmware
• Procedure for PowerVault ME4 G280 controller firmware and PowerVault ME5

Before you begin:

Should a PowerVault system administrator lose the management login password there is no way to recover the original password. The next option is to restore the default user accounts on the PowerVault ME array.

• This procedure does not delete data or configuration information.
• This procedure deletes all user accounts including the manage/admin level account.
• This procedure cannot be implemented using SSH or telnet access to the management port.
• Physical access by the administrator to the PowerVault ME series SAN using the serial cable supplied with the PowerVault ME series is required.
• PowerVault ME4 series arrays are supplied with a serial cable that has a DB9 connector at one end and a 3.5mm audio jack at the other end.
• PowerVault ME4 series arrays can also use a USB A to mini-B (five pin) cable. The USB ports on the controller module emulate a serial connection. This cable is not supplied by Dell.
• PowerVault ME5 series arrays are supplied with a micro-B USB cable serial cable. The USB ports on the controller module emulate a serial connection.
• When using USB serial cable, some Microsoft Windows hosts may require driver support. Download the "Dell ME Series Storage Array USB Utility" from the "Drivers & Downloads" section for your SAN model on Dell Support.

PowerVault ME firmware loads a USB serial driver which emulates a virtual serial port. When connected to the controller CLI port using USB cable, the host operating system must also load a USB serial driver. Most Windows versions have an inbox driver, if support must be installed, the driver is available on Dell Support under the PowerVault ME Drivers & Downloads.

Serial cable interfaces

PowerVault ME4 series (G275, pre-G280 firmware)

1. The administrator needs the serial cable that shipped with the equipment and physical access to the equipment.
2. With the serial cable connected, open a connection to the controller using a terminal emulator such as PuTTY. (8,N,1,115200, no flow control.) See PowerVault ME4: How to establish connections to controller serial ports - All Models
3. With the session-established, press Enter on the keyboard to begin the session. You must copy or note the controller Serial Number:

System Version: GT275R003-01
OS Version: GPM275R003-01
MC Version: GXM275R007-01
Serial Number: 00C0FF3C0XXX
10.0.0.2 login:

4. Login using the username restoreusers, using the Serial Number: Value as the password.

System Version: GT275R003-01
OS Version: GPM275R003-01
MC Version: GXM275R007-01
Serial Number: 00C0FF3C0XXX
10.0.0.2 login: restoreusers
Password: 00C0FF3C0XXX

/home/restore/shell: 2018-08-14 13:19:23: Restoring other controller's users to default

5. The management controller (MC) immediately restarts on both controllers and afterwards the password for the default admin user manage becomes "!manage."
6. Change the managed password using the CLI or ME Storage Manager (MESM) management user interface.

How to use the CLI to change the default users password on G275 firmware releases.

The default users are "manage," "monitor," and "ftp" and cannot be deleted in G275 firmware versions.

Use the command "set user <user name> password <your complex password>" to change the Admin (manage) password and repeat the procedure for the other default users monitor and ftp.

# set user manage password <C0mpl3x!-password>
Success: Command completed successfully. - The settings were changed successfully. (2018-08-14 13:40:46)

PowerVault ME5 & ME4 (G280 firmware) series

1. The administrator needs the serial cable that shipped with the array and physical access to the array.
2. With the serial cable connected, open a connection to the controller using a terminal emulator such as PuTTY. (8,N,1,115200, no flow control.) See PowerVault ME4: How to establish connections to controller serial ports - All Models
3. With the session established, press Enter on the keyboard to begin the session. You must copy or note the controller Serial Number:
4. Login as the user restoreusers and use the controller Serial Number: as the password

System Version: GT280R004-01
OS Version: GPM280R001-01
MC Version: GXM280R004-01
Serial Number: 00C0FF3C0XXX

DellEMCF03185A login: restoreusers
Password:  00C0FF3C0XXX

5. After logging in with restoreusers, the management controller restarts. This is expected. This process removes ALL previous existing users.
6. You must log in with the username setup and there is no password (press Enter).
7. You are prompted to configure an administrative user and password. This username does not have to be a manage. A PowerVault administrator could choose "manage," "administrator," "meadmin" or other name. 

NOTE: Usernames such as "root" or "admin" are not allowed. If you attempt to use these, a message is displayed "This username is reserved. Retry with another username." 
 

8. You must use a complex password, for example, C0mpl3x!

System Version: GT280R004-01
OS Version: GPM280R001-01
MC Version: GXM280R004-01
Serial Number: 00C0FF3C0XXX

DellEMCF03185A login: setup
Password: <no password press enter to continue>

DELL EMC ME4012
System Name: Uninitialized Name
System Location: Uninitialized Location
Version: GT280R004-01
This system has been factory configured.  You must create a new user to manage this system.  You will be asked to provide a username and password.  
Once the password is confirmed, the system will automatically log you in with your new user credentials in order to continue setting up the system.  
Would you like to continue? (y) y

Enter username> manage
Enter Password> ********
Confirm password> ********

PowerVault ME5 administrators who use LDAP must reconfigure the LDAP groups using PowerVault manager. See PowerVault ME5: Login Failure Using LDAP With Message "Unable to Authenticate Login, Try Again"