Reset the Emergency UI Password¶

The Emergency Host UI on :8443 uses HTTP Basic Auth. Credentials are stored as a bcrypt hash at /etc/mfcloud-agent.htpasswd.

Method 1 — From the UI (you remember the current password)¶

Browse to https://<node-ip>:8443/.
Sign in.
Admin sidebar entry → Reset Emergency UI Password.
Type a new password (or click Generate Random for an 18-character password — it's revealed for 4 seconds so you can record it).
Set Password. Your browser will prompt you to re-authenticate.

Method 2 — From SSH (you forgot the password)¶

PW=$(openssl rand -base64 18 | tr -d '=+/' | cut -c1-20)
HASH=$(python3 -c "import bcrypt; print(bcrypt.hashpw('$PW'.encode(), bcrypt.gensalt(rounds=12)).decode())")
echo "root:$HASH" > /etc/mfcloud-agent.htpasswd
chmod 600 /etc/mfcloud-agent.htpasswd
echo "New password: $PW"
systemctl restart mfcloud-agent

The password is printed once. Capture it before the terminal scrolls.

Why bcrypt rounds=12?

Matches the cost factor used by mfcloud-firstboot.sh when the password is first generated. Anything lower would lose entropy on a re-hash; anything higher slows down login on weaker BMC-reachable consoles.

Method 3 — Lost the SSH password too¶

If you can't SSH in either, boot the node from rescue media and chroot into the system, then run Method 2. Or re-image the node — all VM state is on shared storage (LINSTOR/Ceph/NFS) and survives an OS reinstall.