Download Nutanix cvm reset factory defaults and more Exercises English in PDF only on Docsity!
How to reset the CVM password back to default when
user forgot Prism and CVM passwords
Article # KB-4344^ Last modified on Sep 28th 2025^ Visibility Customers
Summary: How to reset the CVM Nutanix password or admin back to default value of nutanix/4u
when the password for Prism or any of the CVMs is forgotten.
Versions affected: All Versions, ALL AOS Version
Troubleshooting Foundation Infrastructure Phoenix
Description:
This article contains instructions on resetting the CVM nutanix user password or admin password back to the default nutanix/4u. The process requires a node reboot. If you have access to Prism or any of the CVMs, follow one of the processes below where node reboot is not necessary:
If you have a Prism password, refer to KB 2233 for instructions. If you have access to any CVM, you can use that CVM to SSH into the CVM that needs the password reset. RSA keys will be used, so there will be no password prompts. If you have access to any of the CVM, try to reset the Prism admin user password with the command below. Replace with the new password.
Solution:
Follow the below procedure to reset CVM nutanix/admin password.
For AOS >= 6.
NOTE : This process requires booting a node into a Phoenix ISO, which means the hypervisor will be powered off during part of the process.
Preparation steps:
- Download Phoenix ISO from Nutanix Portal (version 5.6 or later).
nutanix@CVM:~$ ncli user reset-password user-name='admin' password=''
- Evacuate all User VMs off of the hypervisor.
- Put the hypervisor into maintenance mode (if applicable).
- Power off the hypervisor.
Reset password procedure :
- Create a public and private key pair by following the steps outlined in KB-1895.
- Use any browser to open the IPMI Web Page of the node that needs the CVM password reset and launch the remote console: Remote Control > Console Redirection > Launch Console
- Mount the Phoenix ISO: Remote Console > Virtual Media > Virtual Storage > CDROM & ISO > ISO File > Open Image and select Phoenix ISO > Plug in > OK
- Reboot the node into the mounted Phoenix ISO: Remote Console > Power Control > Power Reset
- Keep pressing the Down Arrow during the boot up process until the Phoenix Boot Menu is shown, and then select Rescue Shell and press Enter.
- Set up network access on the node booted into Phoenix Shell using KB-
- Check the partition using the following commands:
a. If the node has dual SSDs, mount md2 to /home directory:
- b. If the node has a single SSD, mount /dev/sda3 or /dev/sdc3 to the home directory.
- Add the public key generated in Step 1 to the /home/nutanix/.ssh/authorized_keys file.
Replace with your actual public key. Example:
[root@phoenix phoenix]# ls -la /dev/md* [root@phoenix phoenix]# ls -la /dev/sd*
[root@phoenix phoenix]# mount /dev/md2 /home
[root@phoenix phoenix]# mount /dev/sda3 /home or [root@phoenix phoenix]# mount /dev/sdc3 /home
[root@phoenix phoenix]# echo "" >> /home/nutanix/.ssh/authorized_keys
[root@phoenix phoenix]# echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOTLhOmm/5dGHo+AM/WNbOpqvH5jlvz590+odnT7h dWb5UXBic7dTNrs9cFJR7TG5tO9IerhT/XvBeerY/MnNdb/0mT3jiyhF3hq7oDaYStOhP8K pN9jA8FJPqejpOv0+58Nbk9Rvhi+3NGl1Hbix6EHMwAx6R51F5z2WWiHGlBLKBdkQIa/8Ts fMDqhY8j2ov+H2bOPyAcYi2AMl5dtB+pyySsk67xAHXCaeZwW+3tHTA2PzRR4Rt3004cLW/
b. To reset a specific user password, for example, for user admin:
- Unmount the Phoenix ISO from the physical host: Remote Console > Virtual Media > Virtual Storage > Plug Out > OK. Use the reboot command to reboot the node. Once the node boots back to hypervisor and CVM, use the default password nutanix/4u to log in
Internal Comments:
Note: Please ensure that the identity of the customer is validated before resetting any passwords. Use open ended questions such as "What is your block serial number" and "Who am I speaking with" before performing the steps below. Further, only perform this activity with the customer present on the phone, do not reset passwords over the tunnel or via any other methodology.
- Resetting Prism Central password
- Script failed to execute
- Resetting the CVM password back to default for a Single SSD platform
- Resetting the CVM password back to default for a Dual SSD platform
- The /home directory is full and the script is failing
- If the reset_passwd script fails with any error about not being able to write
Resetting Prism Central Password
The reset password script can be used to reset the Prism Central password, as well.
Procedure:
- Follow the hypervisor-appropriate steps in the solution section of KB-6584 (Solution Section for Scenario 3, but only for booting into Phoenix... Do NOT run any fsck commands as in step 6 and 7)
5.17.1-stable-c7e5a018e90efaa8518006a28cb756860e7fff Proceed with CVM password reset for user nutanix y/n [Y/n]: y INFO:root:Mounting : /dev/md INFO:root:Executing : chpasswd -R /mnt/disk <<< "nutanix:nutanix/4u" INFO:root:Executing : touch /mnt/disk/.autorelabel
[root@phoenix phoenix]# ./reset_passwd -u admin INFO:root:Found /.nutanix_active_svm_partition marker in INFO:root:Partition : /dev/md0 Release: el7.3-release-euphrates- 5.17.1-stable-c7e5a018e90efaa8518006a28cb756860e7fff Proceed with CVM password reset for user admin y/n [Y/n]: y INFO:root:Mounting : /dev/md INFO:root:Executing : chpasswd -R /mnt/disk <<< "admin:nutanix/4u" INFO:root:Executing : touch /mnt/disk/.autorelabel
to boot the PCVM into Phoenix NOTE : Make sure to download and use the latest version of the Phoenix ISO.
- Identify the active partition by creating a temporary directory, mounting a partition to it, and listing its contents:
- If the .nutanix_active_svm_partiton is not present in the sdXX partition you mounted, unmount it and check the next one (by mounting it as above):
- Navigate to the phoenix directory, if you are not already there:
- Reset the password (sdXX being whichever partition contains .nutanix_active_svm_partition):
- Follow hypervisor-appropriate steps in the solution section of KB-6584 (Solution Section for Scenario 3, but only for unmounting Phoenix... Do NOT run any fsck commands as in step 6 and 7) to unmount the CD-ROM that had the Phoenix ISO and start the PCVM
Script failed to execute
[root@phoenix phoenix]# mkdir /mnt/tmp [root@phoenix phoenix]# lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda 8:0 0 15G 0 disk ├─sda1 8:1 0 14M 0 part /boot sdb 8:16 0 70G 0 disk └─sdb1 8:17 0 10G 0 part └─sdb2 8:18 0 10G 0 part └─sdb3 8:19 0 50G 0 part sdc 8:32 0 2.5T 0 disk └─sdc1 8:33 0 2.5T 0 part sdd 8:48 0 357.1G 0 disk sde 8:48 0 100G 0 disk └─sde1 8:65 0 100G 0 part sdf 8:80 0 30G 0 disk [root@phoenix phoenix]# mount /dev/sdXX /mnt/tmp [root@phoenix phoenix]# ls -larth /mnt/tmp1 | grep .nutanix_active_svm_partition
[root@phoenix phoenix]# umount /mnt/tmp
[root@phoenix phoenix]# cd phoenix
[root@phoenix phoenix]# ./reset_passwd -p /dev/sdXX
[root@phoenix phoenix]# ./reset_passwd INFO:root:Found /.nutanix_active_svm_partition marker in
Choose one of the two options, depending on whether the Nutanix platform is a Single SSD or a Dual SSD platform:
Resetting the CVM password back to default for a Single SSD platform Resetting the CVM password back to default for a Dual SSD platform
Resetting the CVM password back to default for a Single SSD platform
Follow the steps below to reset the CVM password for a Single SSD platform: Note: This process requires booting a node into a Phoenix ISO which means the hypervisor will be powered off during part of the process.
Preparation steps:
- Download a Phoenix ISO.
- Evacuate all User VMs off of the hypervisor
- Put hypervisor into maintenance mode (if applicable)
- SSH into the CVM and properly power it down using cvm_shutdown -P now
- Power off the hypervisor
Reset password procedure:
- Use any browser to open the IPMI Web Page of the node that needs the CVM password reset and launch the Java Console: Remote Control > Console Redirection > Launch Console
- Mount the Phoenix ISO: Java Console > Virtual Media > Virtual Storage > CDROM & ISO > ISO File > Open Image and select Phoenix ISO > Plug in > OK
- Reboot the node into the mounted Phoenix ISO: Java Console > Power Control > Power Reset
- Keep pressing the Down Arrow during the boot up process until the Phoenix Boot Menu is shown, and then select Rescue Shell and press Enter.
- At the Phoenix prompt, type the command below to list all devices and note the device path for the SSD drive (e.g. /dev/sd c )
- Create temporary directories and mount the SSD partitions so file access is possible:
lsscsi
sudo mkdir /mnt/sd c sudo mkdir /mnt/sd c sudo mount /dev/sd c1 /mnt/sd c sudo mount /dev/sd c2 /mnt/sd c
- Run the command below and note the mount point (/mnt/ sdc# ) that has the .nutanix_active_svm_partition file, not the one that is labeled with .old
- Open the shadow file. Replace sdc# with the value from Step 7.
- Go to the user nutanix line and carefully modify the SHA512 hash between the first and second colon that starts with $6$. Replace that value with the default Nutanix hash below. Type a to edit. Type ESC : wq! and press Enter to save and exit.
- Within the Java Console, navigate to: Java Console > Virtual Media > Virtual Storage > CDROM & ISO > Plug Out > OK
- Reboot the node into the hypervisor: Java Console > Power Control > Power Reset
- Take the hypervisor out of maintenance mode (if applicable) and power on the CVM. Once the CVM is booted, the password will be the default password which is nutanix/4u
Resetting the CVM password back to default for a Dual SSD platform
Follow the steps below to reset the CVM password for a Dual SSD platform: NOTE: This process requires booting a node into a Phoenix ISO which means the hypervisor will be powered off during part of the process.
Preparation steps:
- Download a Phoenix ISO.
- Evacuate all User VMs off of the hypervisor
- Put hypervisor into maintenance mode (if applicable)
- SSH into the CVM and properly power it down using cvm_shutdown -P now
- Power off the hypervisor
Reset password procedure:
ls -al /mnt/sdc/.nutanix
sudo vi /mnt/ sdc# /etc/shadow
$6$Mkd8T74/$wkYZOYa2rjGG005bgEYM6kmT.oux3QHyn22RTwVdXKrUlzjeP7DZpwG ubPTeJiZcUPxtyBefH7Ck0dQua/
Before: nutanix: $6$0cU.1MBr$aTX14sgSbAQRHSfa27wIoKUF6Rnh401tq71ibg8Q.cKvhAx1b qEVsgK3cKoYSmxuEHuTOiS0PnXTMocH5IATy0 :17268:1:99999:7:::
After: nutanix:$6$Mkd8T74/$wkYZOYa2rjGG005bgEYM6kmT.oux3QHyn22RTwVdXKrUlzjeP 7DZpwG32ubPTeJiZcUPxtyBefH7Ck0dQua/21:17268:1:99999:7:::
- Java Console > Virtual Media > Virtual Storage > CDROM & ISO > Plug Out > OK
- Reboot the node into the hypervisor: Java Console > Power Control > Power Reset
- Take the hypervisor out of maintenance mode (if applicable) and power on the CVM. Once the CVM is booted, the password will be the default password which is nutanix/4u
The /home directory is full and the script is failing to execute
TH-7051 has more details about this issue
Steps to recover:
- Log in to the PCVM/CVM via SSH with admin credentials
- Run this command and enter the admin password
NOTE: Due to SELinux restrictions, navigating through the filesystem /home (non-root owned dirs and files) causes permission denied
- Switch to nutanix user instead of touching the files/folder permissions
- Clean space in /home drive KB-1540 for PE or KB-5228 for PC Once the cluster is normal, use Prism web console to change nutanix user password - KB- Note: For troubleshooting purposes, it might be necessary to set the nutanix user password on CVMs to default 'nutanix/4u' when the customer has the current nutanix user password. The command below can be used :
If the reset_passwd script fails with any error about not being able to write
When running the password reset script, if you encounter an error about being unable to write, we should confirm we have available inodes with the following command. If we discover high inode utilization, we should follow KB 6082 to address that and re-run the script.
After: nutanix:$6$Mkd8T74/$wkYZOYa2rjGG005bgEYM6kmT.oux3QHyn22RTwVdXKrUlzjeP 7DZpwG32ubPTeJiZcUPxtyBefH7Ck0dQua/21:17268:1:99999:7:::
sudo bash
sudo su - nutanix
nutanix@CVM:~$ echo 'nutanix:nutanix/4u' | sudo chpasswd
nutanix@NTNX-19FM6H130137-A-CVM:x.x.x.x:~$ df -i Filesystem Inodes IUsed IFree IUse% Mounted on devtmpfs 3598199 538 3597661 1% /dev tmpfs 3602093 1 3602092 1% /dev/shm
JIRA Template:
//START//
JIRA: ENG-
Relevancy: phoenix 5.5: reset_passwd script immediately fails with "name 'raw_input' is not defined Disposition: Foundation 5. Always Link Case: N //END//
//START// JIRA: ENG- Relevancy: Need password reset script Disposition: Foundation 4. Always Link Case: N //END//
//START// JIRA: ENG- Relevancy: Phoenix reset_password script doesn't change the passwords to default with AOS 6. Disposition: Always Link Case: N //END//
tmpfs 3602093 732 3601361 1% /run tmpfs 3602093 16 3602077 1% /sys/fs/cgroup /dev/md0 655360 57394 597966 9% / /dev/loop0 65536 40 65496 1% /tmp /dev/md2 2621440 230023 2391417 9% /home tmpfs 3602093 1 3602092 1% /run/user/ /dev/sdf1 61049728 67599 60982129 1% /home/nutanix/data/stargate-storage/disks/W461VF9G /dev/sdd1 61049728 76518 60973210 1% /home/nutanix/data/stargate-storage/disks/W461SRTD /dev/sdc1 61049728 75161 60974567 1% /home/nutanix/data/stargate-storage/disks/W461VQNC /dev/sde1 61049728 70921 60978807 1% /home/nutanix/data/stargate-storage/disks/W461SREV /dev/sda4 225247232 506392 224740840 100% /home/nutanix/data/stargate-storage/disks/S456NY0M /dev/sdb4 225247232 388659 224858573 1% /home/nutanix/data/stargate-storage/disks/S456NY0M tmpfs 3602093 1 3602092 1% /run/user/
