Reset password on a IBM RSA II

I got the hand on three nice servers built by IBM. All of them include a Remote Supervisor Adapter II slimline (RSA II) for system management. There was a unknown password on it and I had to bring the RSA II back to it's factory default.

I followed several ways how to do it and read many forum posts about it but it took a long time until it worked for me (Don't try MPCLI, never got a connection to my RSA II!). So hopefully this short how-to will bring you back access to your RSA II too!

This manual uses a Linux live system loaded from CD, so you don't have to touch your already installed operating system!

To follow this instructions you have to download the following files:

Step by step instruction

  1. Burn the Fedora iso image to a CD rewritable (to save the environment), else use a normal CD-R
  2. Copy the other downloaded files to a USB memory stick
  3. Boot your IBM system and select the CD as boot media
  4. Wait until the Fedora live system is finished booting
  5. Plug-in the memory stick and open it in a file browser
  6. Open ibm_svc_rsa2_hlp253a_linux_32-64.tgz go to RPMS and extract ibmusbasm-1.53-2.rhel5.i686.rpm
  7. Install (by double clicking on it): ibmusbasm-1.53-2.rhel5.i686.rpm
  8. Install ( by double clicking on it): ibm_utl_asu-3.60-asut69k.i386.rpm
  9. Open a terminal (In the starter menu under system tools)
  10. Get root, the live CD does not ask for a password, type and press enter: “su”
  11. Install libusb, type and press enter: “yum install libusb-devel”
  12. Reload ibmasm daemon, type and press enter: “ibmspdown && ibmspup”
  13. Wait about 10s
  14. Make sure it was loaded correctly, type and press enter: “tail /var/log/messages” and you should find a line: localhost ibmasm: V1.51 IBM RSA II 32-bit device support loaded. when not, write me an email.
  15. Go to the asu install directory, type and press enter: “cd /opt/ibm/toolscenter/asu”
  16. Try to get information from your RSA II, type and press enter: ”./asu show –group rsa” You should get a long list of values.
  17. Revert your RSA II back to factory defaults, type and press enter: ”./asu resetrsa”
  18. Connect the RSA II to your network or computer, it is accessible now on the IP 192.168.70.125 with the default user USERID and the password PASSW0RD (with a digit '0', not a char 'o')

Discussion

Simon Munk, 2012/01/21 22:08

Love that someone takes the time to put solid guides like this on the net - thanks.

Though was going through the guide on a x3650 when I ran into problems on the “Install libusb”, where a module wasn't found. Continued anyway but the resetrsa command didn't find any hardware. Read through the comments on RSA not being set to Linux mode, which I knew it wasn't, and there while in the BIOS under RSA II Settings I saw ”«RESTORE RSA II DEFAULTS»”. I thought I could give it a try, and that completely resat the RSA and I were able to log on using defaults.

Might be a bit easier for others like my self trying to find a way to reset the RSA II.

Cheers Simon

Christoph Zimmermann, 2012/03/07 16:08

I would have loved a «RESTORE RSA II DEFAULTS» on my x336 BIOS. Would have saved me several hours of work :-)

Nice to hear, that on newer machines this is now just a small thing that is solved in seconds.

Lennart, 2011/12/02 04:41

Tanx man, Worked like a charm.

Joe Dalton, 2011/07/29 13:06

It works great on IBM x346, but just one tip to others:

It is possible that DHCP is enabled by default, anyway what's given in the setup of the x346. Try the given IP from the DHCP Server and not the default IP 192.168.70.125. Logon to the given IP and then disable DHCP in “ASM Control” and “Network Settings” over the Webdialog. Only after that procedure you are able setting a Static IP over the Webdialog or x346 Setup! Don't forget to restart the ASM!

Don't know what the cause is, but I discover this behavior on two x346 with RSA II Card.

Many Thanks to the Author for this great Tutorial!

Joe

Sam, 2011/06/16 14:02

Thanks for the tutorial. Works great on the x436

Dave, 2011/05/16 11:30

Hi!

Everything went fine up to ibmspdown && ibmspup when it gave two lines of “Command not found”. ./asu rsareset gives “Error communicationg with RSA/RSA2” A result of the “Command not found” errors?

Truly hope you can help.

The card is reacheable via the LAN and seems to be working, was it noy for the userid and password.

Thanks for helping!!

Dave

Christoph Zimmermann, 2011/05/16 22:15

hi dave

indeed the “Error communicationg with RSA/RSA2” is a result of the error you had before. this means that no driver was loaded.

the two commands “ibmspdown” and “ibmspup” are only visible when you are root. make sure you are root and not a ordinary user before trying to access your RSA2.

another possibility for errors could be the installation of “ibmusbasm-1.53-2.rhel5.i686.rpm” as it was described in step 7. start the package manager and search for “ibm” and validate that the ibmusbasm stuff is installed correctly, else try to reinstall it in the console and post here the errors you get.

Dave, 2011/05/17 23:45

Morning Christoph

Many thanks so far. Ended up installing from the console and got error as follows:

“No IBM Remote Supervisor Adaptor II was found” and it goes on about cables and being set up for Linux. The card is indeed installed, the (20 pin I think) connected to the M/board and set up for Linux OS.

I'm beginning to wonder if this is the right card? Don't know how to describe it save to say it's got a daughter/second smaller board fitted on top of the card, has a push-button reset (that I've tried, 5-5-10, and which doesn't seem to work). Anything else I can look for?

Any idea will be appreciated greatly!!

Many thanks

Dave

Art Crego, 2011/04/02 10:18

this works just like it says until I get to step 11 and it gives me an error about a missing repository and and I should check the location. this usually means that I don't see the line from #14. I try to run the ASU and it just runs and brings nothing back. Help?

Christoph Zimmermann, 2011/04/02 16:44

hi art crego,

make sure that your network connection is working (lan cable pluged in, ip adress configuration, dns server, kernel module and firmware for your network card etc.) because yum tries to download libusb-devel from the internet.

Enter your comment. Wiki syntax is allowed:
EPKLS
 
Last modified: 2011/03/18 16:27