Check Point LOM Remotely Reset Password from GAiA.

tl;dr

  • Connect to the GAiA CLI in expert mode.
  • service ipmi start
  • ipmitool user list 0x1
  • ipmitool user set password 2 “Password01”
  • service ipmi stop

System Setup:


Hardware:
Check Point 6200 Plus


Operating System:
R80.30

Introduction

In the event you have forgotten the password for your Check Point LOM interface don’t fear, IPMI is here. Intelligent Platform Management Interface (IPMI) allows us to interact with the LOM system from the Check Points underlying Linux OS. All you need to do is connect to GAiA CLI in expert mode, start the IPMI service, reset the password and then stop the IPMI service. Simple so lets get into it and start the IPMI service.

[Expert@hostname:0]# service ipmi start

After this we can look at what users we currently have configured. We can see on the output below admin is configured with an ID of “2”. I have put the important bit in bold to help it stand out.

[Expert@hostname:0]# ipmitool user list 0x1
ID Name Enabled Callin Link Auth IPMI Msg Channel Priv Limit
1 true false false true ADMINISTRATOR
2 admin true false false true ADMINISTRATOR

We can now set the users password using the following command. Note the “2” in the below command relates to the 2 in bold above. I’m sure I don’t need to tell you “Password01” is just to demonstrate the point and really shouldn’t be used in production!

[Expert@hostname:0]# ipmitool user set password 2 "Pas

Providing we can now connect without issue we can stop the IPMI service.

[Expert@hostname:0]# service ipmi stop

Enjoy!

Leave a Reply

Your email address will not be published. Required fields are marked *