This document tells you what to do when you have lost the LOM(Lights Out Management) password on the following servers:

Netra[TM] X1, Sun Fire V100/V120, Netra[TM] 100/120, Netra [TM]20, Netra [TM]T1 AC/DC 200.

If you do not know your LOM password and are unable to log into the LOM prompt, you can use the telnet command and log in as root on the console.

If you do not know your LOM password and are unable to log into the LOM prompt, and you can not log in to the box due at least one of the following:

-You do not knowing the IP address or the host name. -The system is not configured to allow root logons from non-system console.

Follow the steps below if both of the following conditions are true:

-You still remember the root password and IP address of the machine. -The machine is configured to allow root login from non-system consoles.

1. Apply power to the system.

2. To get the system to boot, use the power switch on the rear of the machine to start the automatic boot process.

3. Once the system has had a few minutes to boot to UNIX, telnet or rlogin to the system as the root user from another machine on the network.

4. When you are logged in, edit the /platform/sun4u/kernel/drv/lom.conf file and modify the line that reads "serial_security=1" to read "serial_security=0".

5. Write the modified file and then reboot the machine by issuing an "init 6" or a "reboot" command.

  As the system boots, it examines this file as part of the boot process and
  disables the security passwords setup in the LOM processor, allowing
  access to the LOM without passwords. 

6. On the LOM/Console port, issue the "#." escape sequence to access the LOM and use the "usershow" command to list the users that have been configured.

7. Use the "userdel" command to delete the users and their passwords.

  The system is now configured without serial security, to issue the "console"
  command to get back to the system console. 

8. Edit the /platform/sun4u/kernel/drv/lom.conf file and modify the line that reads "serial_security=0" to read "serial_security=1" to re-enable the security checks following the next system reboot.

You will need to locate another machine to resolve the password problem if one of the following conditions are true:

-You cannot remember the system root password. -The system is not configured to allow root logons from non-system consoles. -You do not know the IP address of the machine.

1. Locate another server platform that does NOT have the above security problems.

Note: You will need to make some modifications to the machine's setup and then remove the boot drive from this machine and temporarily place it in the problem machine.

2. Having located another X1, make the following modifications to the configuration:

  a. Edit the /etc/default/login file on the machine and insert the number sign
     (#) at the start of the line that reads "CONSOLE=/dev/console". 

  b. Edit the /platform/sun4u/kernel/drv/lom.conf file and modify the line that
     reads "serial_security=1" to read "serial_security=0". 

3. Power down the machine using "init 5".

4. Remove the top cover of the machine and remove the boot disk drive.

5. Remove the boot disk drive from the problem machine.

6. Replace the boot disk drive from the problem boot disk with the boot disk you prepared in the other machine.

7. Boot the machine and follow the process above starting from Step 6 (immediately above).

8. Once the LOM passwords have been removed at Step 7 (immediately above), you may shut the system down and replace the original disk drive.

   hank.danico@sun.com, gail.waldron@sun.com, warren.moxley@sun.com