Cray System Management Documentation > Cray System Management (CSM) Administration Guide > system configuration service > Set BMC Credentials

Set BMC Credentials

Use the System Configuration Service (SCSD) to set the BMCs credentials to unique values, or set them all to the same value. Redfish BMCs get installed into the system with default credentials. Once the machine is shipped, the Redfish credentials must be changed on all BMCs. This is done using System Configuration Service (SCSD) through the Cray CLI.

Important: If the credentials for other devices need to be changed, refer to the following device-specific credential changing procedures:

To change liquid-cooled BMC credentials, refer to Change Cray EX Liquid-Cooled Cabinet Global Default Password.
To change air-cooled Node BMC credentials, refer to Change Air-Cooled Node BMC Credentials.
To change ServerTech PDU credentials, refer to Change Credentials on ServerTech PDUs.
To change Slingshot switch BMC credentials, refer to “Change Rosetta Login and Redfish API Credentials” in the Slingshot Operations Guide (> 1.6.0).

Prerequisites

The Cray command line interface (CLI) tool is initialized and configured on the system. See Configure the Cray CLI.

Procedure

Determine the live BMCs in the system.

The list of BMCs must include air-cooled compute BMCs, air-cooled High Speed Network (HSN) switch BMCs, liquid-cooled compute BMCs, liquid-cooled switch BMCs, and liquid-cooled chassis BMCs.

ncn-m001# for fff in `cray hsm inventory redfishEndpoints list --format json \
            | jq '.RedfishEndpoints[] | select(.FQDN | contains("-rts") | not) | \
                    select(.DiscoveryInfo.LastDiscoveryStatus == "DiscoverOK") | select(.Enabled==true) | .ID' \
            | sed 's/"//g'`
          do
            echo "Pinging ${fff}..." ;
            xxx=`curl -k https://${fff}/redfish/v1/`
            [[ "${xxx}" != "" ]] && echo "PRESENT" || echo "NOT PRESENT"
          done

Create a new JSON file containing the BMC credentials for all BMCs returned in the previous step.

Select one of the options below to set the credentials for the BMCs:

Set all BMCs with the same credentials.

Example file contents:

{
  "Force": false,
  "Username": "root",
  "Password": "new.root.password"
  "Targets": [
    "x0c0s0b0",
    "x0c0s1b0"
  ]
}

Set all BMCs with different credentials.

Example file contents:

{
  "Force": true,
  "Targets": [
    {
      "Xname": "x0c0s0b0",
      "Creds": {
        "Username": "root",
        "Password": "pw-x0c0s0b0"
      }
    },
    {
      "Xname": "x0c0s0b1",
      "Creds": {
        "Username": "root",
        "Password": "pw-x0c0s0b1"
      }
    }
  ]
}

Apply the new BMC credentials.

Use only one of the following options depending on how the credentials are being set:
- Apply global credentials to BMCs with the same credentials.
```
ncn-m001# cray scsd bmc globalcreds create ./bmc_creds_glb.json
```
- Apply discrete credentials to BMCs with different credentials.
```
ncn-m001# cray scsd bmc discreetcreds create ./bmc_creds_dsc.json
```
Troubleshooting: If either command has any components that do not have the status of OK, they must be retried until they work, or the retries are exhausted and noted as failures. Failed modules need to be taken out of the system until they are fixed.