Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products

Dell Unity: Reset the Admin and Service Password by Pressing the NMI Button May Not Work

Summary: If STIG and /user/account/settings are both enabled, following knowledge base article 22355 to reset the admin and service passwords, may not work for one of them (Dell correctable).

This article applies to   This article does not apply to 

Symptoms

The user may not know the admin or the service passwords and resetting them by pressing the NMI button does not work for one of them.

 

Dell Knowledge Base article 22355, Dell Unity: How to change, unlock, or reset the admin or service passwords (User Correctable).

 

Observations:

  • User has pressed the NMI button on both SPA and SPB, but still cannot log in using the default admin or service passwords.
  • Either the admin password or the service password is found to reset with the NMI reset procedure but not both.
  • If the STIG banner is not disabled when the admin password is entered at the Unisphere login screen, it displays the first STIG banner again. The banner must be disabled using svc_banner -d in order to see the admin password reset fail to log in Unisphere. The banner should not be disabled unless necessary as it can be resolved with engineering assistance.
  • With the STIG banner disabled, attempting to log in to Unisphere with the admin password from an NMI reset still gives the error: "The username or password you entered is incorrect. Please try again."
  • The same error above is also seen when using a command from the sshcli that requires the admin password.

 

Cause

When user/account/settings is enabled, the "Password Minimum Size" by default is 15. It could be a bigger number if the user has ever changed it. The current NMI reset procedure uses a fake Password before resetting to the default password. This fake Password is not long enough to meet the STIG "Password Minimum Size" requirement. In this case, the NMI reset fails.

 

Resolution

Addressing the NMI issue is handled differently depending on whether or not it is the Service password or the Admin password that must be reset.


 

Use case #1: Service password NMI reset is not working.

Do the following to allow the NMI process to work if the service user password reset is not working:

  1. Disable the /user/account/settings on the primary SP before pressing the NMI button. This could work using admin role or security administrator role users.
uemcli -no -d <Unity_IP> -u admin -p <password> /user/account/settings set -enabled no

 

Or

uemcli -no -d <Unity_IP> -u <security administrator role user> -p <password> /user/account/settings set -enabled no

 

  1. Press the NMI button on the primary SP to reset the passwords of both admin and service users.
    For STIG requirements, the user must set the "Password Minimum Size" to the value they want in /user/account/settings later.

 


Use case #2: Admin password NMI reset is not working.

Resolution:
Dell is adding an enhancement to a future Unity OE release. The enhancement allows the NMI reset procedure to work by resetting the "Password minimum size" to 8. This is the default value without the /user/account/settings enabled. Watch this knowledge base article for more details.

 

Workaround:
If the user forgets the admin password and does not have any security administrator role users, escalate to Dell Technical Support. This is to request a "customized admin password reset tool" based on the minimum password length requirement and OE code level in use.

 

Contact Dell Technical Support or your Authorized Service Provider and quote this knowledge base article ID for further assistance.

 

Additional Information

If the STIG default banner seen before login is disabled during troubleshooting when using svc_banner -d, the banner must be added back using Custom Banner procedure.

 

Go to Dell Support Unity Family Product Page, and review the document Service Commands Technical Notes found in the Administration tab.

 

/etc/motd typically contains a copy of the STIG default banner. The contents can be copied to the en_US.txt file which is used to add the STIG banner content. Typically there are two banners for STIG depending on whether Category 1 or Category 2 STIG is enabled.

 

Affected Products

Dell Unity 300, Dell EMC Unity 300F, Dell EMC Unity 350F, Dell EMC Unity XT 380, Dell EMC Unity XT 380F, Dell EMC Unity 400, Dell EMC Unity 400F, Dell EMC Unity 450F, Dell EMC Unity XT 480, Dell EMC Unity XT 480F, Dell EMC Unity 500 , Dell EMC Unity 500F, Dell EMC Unity 550F, Dell EMC Unity 600, Dell EMC Unity 600F, Dell EMC Unity 650F, Dell EMC Unity XT 680, Dell EMC Unity XT 680F, Dell EMC Unity XT 880, Dell EMC Unity XT 880F, Dell EMC Unity Hybrid ...
Article Properties
Article Number: 000212222
Article Type: Solution
Last Modified: 06 Feb 2024
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.