3 ms·

"Latest generation" = last 2 years. Three years ago I was buying SMC servers which were the first round configured with randomized passwords to comply with CA

"Latest generation" = last 2 years. Three years ago I was buying SMC servers which were the first round configured with randomized passwords to comply with CA law (some batches had ADMIN/ADMIN) and gigabyte servers still were out of compliance.

dijit 5y ago
I bought my last batch of Dell machines in 2017 (so, 5 years? wow), and they had randomised passwords. But yes, some providers put the BMC on the internet because it's easier, a provider I used once did this and I was quite displeased as iDRAC's are quite weak and suffer under the weight of bot-spam. -- even if there were no security issues.
- zerd 5y ago
  HP Microserver Gen8 with iLO from 2014 also had generated admin password.
  - skinkestek 5y ago
    HP DL 380 G6 and G7 had back in 2010, maybe before I think. At least the ones I worked with. It was printed on a slide out tag. Some earlier generations had paper/cardboard tags tied to them I think but I cannot remember if passwords were there.
- iancarroll 5y ago
  For whatever reason you can still today choose the legacy "root:calvin" password when you order new Dell servers, probably does more harm than good: https://www.dell.com/en-us/work/lp/hmc-idrac-password-14g https://www.dell.com/en-us/work/lp/hmc-idrac-password-14g
  - dijit 5y ago
    Probably to work with auto provisioning automation. It’s nice to slide in a server, watch as the arps/dhcp requests go out and see the machine spring to life without human intervention. Easier if there’s a known username/password.
    - LinuxBender 5y ago
      It is possible not every gets this option from Dell but one can get a text file that has all the MAC addresses and programmed passwords for the dracs from them. Ask your rep how to get this. One can potentially use this information in their automation. The list has serial numbers, eth macs, ilo mac, password, model, etc...

dijit 5y ago

I bought my last batch of Dell machines in 2017 (so, 5 years? wow), and they had randomised passwords. But yes, some providers put the BMC on the internet because it's easier, a provider I used once did this and I was quite displeased as iDRAC's are quite weak and suffer under the weight of bot-spam. -- even if there were no security issues.

zerd 5y ago
HP Microserver Gen8 with iLO from 2014 also had generated admin password.
- skinkestek 5y ago
  HP DL 380 G6 and G7 had back in 2010, maybe before I think. At least the ones I worked with. It was printed on a slide out tag. Some earlier generations had paper/cardboard tags tied to them I think but I cannot remember if passwords were there.
iancarroll 5y ago
For whatever reason you can still today choose the legacy "root:calvin" password when you order new Dell servers, probably does more harm than good: https://www.dell.com/en-us/work/lp/hmc-idrac-password-14g https://www.dell.com/en-us/work/lp/hmc-idrac-password-14g
- dijit 5y ago
  Probably to work with auto provisioning automation. It’s nice to slide in a server, watch as the arps/dhcp requests go out and see the machine spring to life without human intervention. Easier if there’s a known username/password.
  - LinuxBender 5y ago
    It is possible not every gets this option from Dell but one can get a text file that has all the MAC addresses and programmed passwords for the dracs from them. Ask your rep how to get this. One can potentially use this information in their automation. The list has serial numbers, eth macs, ilo mac, password, model, etc...