JetAdmin SNMP v3 credentials lost

[SergeZ]

Hi, I recently inherited an instance of JetAdmin. My issue is I don't know the SNMPv3 password and encryption password that was used to set up my devices. I am able to change the password through each individual printer's web interface but as far as I know, if SNMP v3 was setup using JetAdmin, changing the password on the web interface does not work.

The credentials are saved in the credential store but I have no idea how to access them. Any ideas on what my options are?

I cannot change the password through JetAdmin since it asks for current credentials first.

TLDR: Took over JetAdmin, need to reset SNMPv3 username/password for use with additional monitoring tools

[IDDT]

I work for HP, but my posts and replies are my own. .....

SergZ,

I hate to tell you this but you are stuck.  The people that knew the secrets should have documented them somewhere.  They are all stored encrypted and the only way you'll be able to reset them is through device EWS one device at a time.  The WJA model is to secure the devices from having their passwords changed by individuals that don't already know the secrets.  That is why you are being prompted to supply the existing credentials.  You have probably already looked at the White Paper on WJA security at www.hp.com/go/wja.

Hope this helps you if even a little...

Regards,

BikeRider

[IDDT]

I work for HP, but my posts and replies are my own. .....

SergZ,

I want to supply one more bit of information.  In the EWS you should simply turn off SNMPv3 after clearing those credentials.  You may have to force WJA to reset the protocol then by running a new discovery on the device.  At this point you are ready to manage the new creds w/ WJA by setting them onto the device and then allowing WJA to use them as they are cached securly in WJA device data.  I think these steps will be very key to your success.  It will be nice to know how this works out for you.

Regards,

BikeRider

[SergeZ]

BikeRider,

Thanks for the quick reply. I actually don't mind changing them through the web interface but I was under the impression that if SNMPv3 was originally set up using WJA, changing the password indidually will not be allowed.

Page 5 of the following paper states:

Best practices
If HP Web Jetadmin is initially used to
configure SNMPv3 on devices,
HP Web Jetadmin must always be used
instead of HP EWS. Administrators can
continue to use HP EWS as a
management interface with the
exception of SNMPv3 settings

http://bizsupport1.austin.hp.com/bc/docs/support/SupportManual/C01941786/C01941786.pdf

So, how do I do this

[IDDT · Accepted solution]

I work for HP, but my posts and replies are my own. .....

Sorry for multiple replies SergZ...  Most of the JetDirect products don't allow using passphrase at the EWS interface.  Newer ones do but I don't have specifics on which firmwares & models.  Because of this, it's impossible to sync a device w/ WJA's global credential store found under Tools, Options.  My last post pretty much tells you you have to start from scratch.  For this reason and one other....

When WJA discovers a device through V3 it assumes some portion of the managment will go through V3.  So, I gave you a few steps:

- go to device EWS and disable v3 altogether (may want to clear the credential fields as part of that action, I am not sure...)

- either run a discovery in WJA that re-captures that device w/ no V3 enabled ( you can also do Refresh Selection (full) but you have to wait one polling cycle to get the device recaputred in to WJA data, there is no good indication when this will happen)

- use WJA to set the new credentials and enable V3

- document the credentials!

I think you'll have success if you follow this path.  Please let me know, thanks!

BikeRider

[SergeZ]

Ahh, I replied before seeing this post. This makes a lot of sense and I will attempt to go with this route. I'll report back ASAP. Thanks again!

[SergeZ]

Just wanted to give you the update. I followed the steps you outlined and was able to remove and re-add all my devices after changing the password. All is well again! Big thanks.

-Serge

[IDDT]

Very glad to hear that worked out for you!

[vartloc]

i'm trying to create a print spooler (cola de impresion i don't know how is called in english) when i finish creating the print spooler it shows error just error nothing else could you help me i don't know why it shows the error ???