====== Infrastructure Credentials: HPE iLO 4 ======


===== ⚠️ Core Password Governance Rules =====

When updating or rotating credentials for this hardware, the following strict physical and protocol limitations must be followed:

  * **Strict Length Limit:** Passwords **MUST** be between **8 and 20 characters** in length. The underlying IPMI protocol silently truncates anything past 20 characters, which causes a silent mismatch that locks users out of the Web Dashboard.
  * **Character Requirements:** Passwords must contain a mix of uppercase letters, lowercase letters, and numeric digits. 
  * **The Special Character Limitation:** If utilizing symbols (such as ''!'', ''$'', or ''*''), the password must be injected via the local host CLI using **single quotes (`'...'`)** to prevent Linux Bash history expansion from corrupting the string. 


---

===== Verification & Access Methods =====

==== Local CLI Verification ====
To audit the state of these accounts at any time from the local host shell, load the IPMI driver modules and query channel 2:
<code bash>
sudo modprobe ipmi_si && sudo modprobe ipmi_devintf
sudo ipmitool user list 2
</code>

==== Network SSH Access ====
Remote command-line access requires passing legacy cryptographic ciphers to accommodate the iLO 4 management processor:
<code bash>
ssh -o KexAlgorithms=+diffie-hellman-group14-sha1 -o HostKeyAlgorithms=+ssh-rsa Administrator@<iLO_IP>
</code>