docs/documentation/platform/secret-rotation/hp-ilo-local-account.mdx
This rotation updates a single credential set in place. Old credentials become invalid immediately upon rotation. This means that clients using the previous credentials will fail to authenticate until they retrieve the new credentials.
This is a limitation of the iLO provider and cannot be rectified by Infisical. </Note>
<Warning> **iLO Password Constraints**HP iLO has a maximum password length of 39 characters. Infisical uses iLO-specific defaults (39 characters, no symbols) to ensure compatibility. If you customize password requirements, ensure the total length does not exceed 39 characters. </Warning>
2. Select the **HP iLO Local Account** option.
3. Select the **SSH Connection** to use and configure the rotation behavior. Then click **Next**.
- **SSH Connection** - the connection that will perform the rotation of the configured user's password.
- **Rotation Interval** - the interval, in days, that once elapsed will trigger a rotation.
- **Rotate At** - the local time of day when rotation should occur once the interval has elapsed.
- **Auto-Rotation Enabled** - whether secrets should automatically be rotated once the rotation interval has elapsed. Disable this option to manually rotate secrets or pause secret rotation.
<Note>
Due to HP iLO Local Account Rotations rotating a single credential set, auto-rotation may result in service interruptions. If you need to ensure service continuity, we recommend disabling this option.
</Note>
4. Configure the required Parameters for your rotation. Then click **Next**.
- **Rotation Method** - The method to use when rotating the target user's password.
- **Login as Target** - Infisical will use the provided iLO username and password to log in and rotate its own password.
- **Login as Root** - Infisical will use the SSH Connection's credentials to log in and rotate the provided user's password.
- **Username** - The target iLO username whose password will be rotated.
- **Current Password** - The current password of the target user (required when **Rotation Method** is set to **Login as Target**).
- **Password Requirements** - The constraints to apply when generating new passwords.
5. Specify the secret names that the HP iLO credentials should be mapped to. Then click **Next**.
- **Username** - the name of the secret that the iLO username will be stored in.
- **Password** - the name of the secret that the rotated password will be stored in.
6. Give your rotation a name and description (optional). Then click **Next**.
- **Name** - the name of the secret rotation configuration. Must be slug-friendly.
- **Description** (optional) - a description of this rotation configuration.
7. Review your configuration, then click **Create Secret Rotation**.
8. Your **HP iLO Local Account** credentials are now available for use via the mapped secrets.
### Reconcile HP iLO Local Account
If you suspect the credentials are out of sync (for example, after a manual password change on the iLO), you can regain access by using **Reconcile**. This will use the configured SSH App Connection's admin account to reset the target user's password and sync it with Infisical.
</Tab>
<Tab title="API">
To create an HP iLO Local Account Rotation, make an API request to the [Create HP iLO
Local Account Rotation](/api-reference/endpoints/secret-rotations/hp-ilo-local-account/create) API endpoint.
### Sample request
```bash Request
curl --request POST \
--url https://us.infisical.com/api/v2/secret-rotations/hp-ilo-local-account \
--header 'Content-Type: application/json' \
--data '{
"name": "my-hp-ilo-rotation",
"projectId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"description": "my HP iLO local account rotation",
"connectionId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"environment": "dev",
"secretPath": "/",
"isAutoRotationEnabled": false,
"rotationInterval": 30,
"rotateAtUtc": {
"hours": 0,
"minutes": 0
},
"parameters": {
"rotationMethod": "login-as-root",
"username": "ilouser",
"passwordRequirements": {
"length": 39,
"required": {
"digits": 2,
"lowercase": 2,
"uppercase": 2,
"symbols": 2
},
"allowedSymbols": "-_.~!*"
}
},
"secretsMapping": {
"username": "ILO_USERNAME",
"password": "ILO_PASSWORD"
}
}'
```
<Note>
Due to HP iLO Local Account Rotations rotating a single credential set, auto-rotation may result in service interruptions. If you need to ensure service continuity, we recommend disabling this option.
</Note>
### Sample response
```bash Response
{
"secretRotation": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"name": "my-hp-ilo-rotation",
"description": "my HP iLO local account rotation",
"secretsMapping": {
"username": "ILO_USERNAME",
"password": "ILO_PASSWORD"
},
"isAutoRotationEnabled": false,
"activeIndex": 0,
"folderId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"connectionId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"createdAt": "2023-11-07T05:31:56Z",
"updatedAt": "2023-11-07T05:31:56Z",
"rotationInterval": 30,
"rotationStatus": "success",
"lastRotationAttemptedAt": "2023-11-07T05:31:56Z",
"lastRotatedAt": "2023-11-07T05:31:56Z",
"lastRotationJobId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"nextRotationAt": "2023-11-07T05:31:56Z",
"connection": {
"app": "ssh",
"name": "my-ssh-connection",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"environment": {
"slug": "dev",
"name": "Development",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"projectId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"folder": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"path": "/"
},
"rotateAtUtc": {
"hours": 0,
"minutes": 0
},
"lastRotationMessage": null,
"type": "hp-ilo-local-account",
"parameters": {
"rotationMethod": "login-as-root",
"username": "ilouser",
"passwordRequirements": {
"length": 39,
"required": {
"digits": 2,
"lowercase": 2,
"uppercase": 2,
"symbols": 2
},
"allowedSymbols": "-_.~!*"
}
}
}
}
```
</Tab>