iDRAC9 is the management controller built into Dell PowerEdge 14G, 15G and 16G servers. Before you can use the virtual console, alerts or remote firmware updates, iDRAC needs a reachable IP address, a password you control, named user accounts and the right licence. This guide follows the iDRAC9 7.xx User's Guide (Rev. A12, March 2026). Menu names can differ slightly on older firmware, so check the user's guide for your version.
Before you start
- Plan the iDRAC IP address, subnet mask, gateway and DNS, and decide which port carries iDRAC traffic: the dedicated iDRAC port or a shared LOM port.
- Find the system information tag (the pull-out tag on the front of the server). On most systems it shows the factory-unique iDRAC password.
- Have a monitor and keyboard on the server (or a crash cart) for the first boot into System Setup.
- If you prefer to configure iDRAC with racadm, see Configure Dell PowerEdge iDRAC with the racadm CLI. This guide uses the F2 utility and the web interface.
Default user name and password
The default user name is root. According to Dell, every supported system ships with a unique default password, printed on the system information tag, unless the customer chose the legacy password calvin when ordering. If the legacy password was chosen, it is not printed on the tag.
| Case | User name | Password |
|---|---|---|
| iDRAC9 systems shipped with the secure default | root | Unique password on the system information tag |
| Ordered with the legacy option | root | calvin (not printed on the tag) |
| PowerEdge C6420, M640 and FC640 | root | calvin (per the iDRAC9 user's guide) |
| Older generations (iDRAC8 era) | root | Dell's KB says the default may be calvin, depending on the generation |
If the factory enabled Force Change of Password, iDRAC makes you set a new password right after your first login, and you cannot skip that screen.
Step 1 — Set the iDRAC IP address from System Setup (F2)
You can also set the IP address from Lifecycle Controller, the server LCD panel (see your server's Installation and Service Manual) or Quick Sync 2 with the OpenManage Mobile app on servers that have the Quick Sync 2 module. The F2 utility works on every rack and tower server:
- Power on the server and press F2 during POST.
- On the System Setup Main Menu, click iDRAC Settings > Network.
- Under Enable NIC, select Enabled. In NIC Selection, choose Dedicated (the separate iDRAC port) or a LOM port that is shared with the host. With a shared LOM, you can pick a Failover Network port.
- Under Common Settings, optionally enable Register DRAC on DNS. The default DNS name is
idrac-followed by the Service Tag. - Under IPv4 Settings, either leave Enable DHCP on, or disable it and enter Static IP Address, Static Gateway and Static Subnet Mask.
- If your network uses them, set IPv6 Settings, IPMI Settings and VLAN Settings (VLAN ID 1–4094).
- Click Back, then Finish, then Yes. The settings are saved and the system reboots.
Note: The user's guide says DHCP is enabled by default on 14th-generation and later systems. Rack and tower servers can also be reached at the default address 192.168.0.120 for initial setup. On blade servers, the iDRAC network interface is disabled by default. Since iDRAC 6.00.00.00, DNS servers and the domain name are taken from DHCP by default.
Step 2 — Log in and replace the default password
- Browse to
https://<iDRAC-IP>and log in asrootwith the password from the tag. - If the Default Password Warning page appears, select Change Default Password, enter the new password twice and click Continue.
- Without the web interface, use F2 > iDRAC Settings > User Configuration, enter the new password in Change Password, then click Back, Finish and Yes.
For iDRAC9 7.00.00.00 and later, passwords can be 1–127 characters. The user's guide says a password must include an uppercase letter, a lowercase letter, a number and a special character.
Step 3 — Create named users with the right role
iDRAC supports up to 16 local users. Give each admin a personal account, and keep root for emergencies.
- Go to iDRAC Settings > User. The Local Users page opens.
- Select an unused User ID and click Edit. User 1 is reserved for the IPMI anonymous user and cannot be changed.
- Enable the account, then set the user name, password and role. Optionally set the IPMI LAN and serial privilege levels and SNMPv3 authentication.
- Click Save.
| Role (older name) | What it allows |
|---|---|
| Administrator (Administrator) | Everything: configure iDRAC, configure users, clear logs, control and configure the system, virtual console, virtual media, test alerts, debug commands |
| Operator (Power User) | Same as Administrator, except configuring users, clearing logs and test alerts |
| Read Only (Guest User) | Log in and view |
| None | No access |
For Active Directory, LDAP, smart card or two-factor login, see the "Configuring user accounts and privileges" chapter of the user's guide.
Step 4 — Check your licence tier
Which features you see depends on the licence. iDRAC9 Basic or Express is installed by default, depending on the model. Enterprise, Datacenter and Secure Enterprise Key Manager (SEKM) are upgrades. An upgrade can be a 30-day evaluation (cannot be extended) or perpetual (bound to the Service Tag).
| Feature | Basic | Express | Enterprise | Datacenter |
|---|---|---|---|---|
| Virtual Console and Virtual Media | No | No | Yes | Yes |
| Email alerting | No | Yes | Yes | Yes |
| SNMP traps and gets | Yes | Yes | Yes | Yes |
| Remote Syslog | No | No | Yes | Yes |
| Update from repository | Yes | Yes | Yes | Yes |
| Telemetry Streaming | No | No | No | Yes |
To view or import a licence, go to Configuration > Licenses. Importing needs the Login, Configure iDRAC and Server Control privileges. Get licence files from Dell Digital Locker or from the purchase email. A factory-installed licence can be exported but cannot be imported again. To see the installed licence from the CLI:
racadm license viewLocked out? Reset iDRAC to defaults
Warning: A reset to defaults erases the iDRAC configuration (network, users, alerts and so on). After the reset, the IP address may not be reachable until you set it again from the front panel or F2. Write down or export the settings first. Host data is not affected.
- Locally: Press F2, then go to iDRAC Settings > Reset iDRAC configurations to defaults all. Click Yes, Back and Finish. The server restarts.
- Web interface (if you can still log in): Maintenance > Diagnostics > Reset iDRAC to Default Settings.
- racadm:
racadm racresetcfg -allresets users to the shipping value.racadm racresetcfg -rcresets them to root/calvin.
A reset restores the password the server was shipped with, so the tag password works again. Other recovery options include local racadm from the host OS, the server management USB port and OpenManage Mobile. See "Secure default password" in the iDRAC9 User's Guide.
Frequently asked questions
Where is the iDRAC9 password?
On the system information tag, the pull-out tag on the front of the server. If the server was ordered with the legacy option, the password is calvin and it is not printed on the tag.
Why is there no Virtual Console in my iDRAC?
Virtual Console and Virtual Media need an Enterprise or Datacenter licence (or Express for Blades). Check Configuration > Licenses.
Checklist
- iDRAC port and IP address set from F2 and reachable over HTTPS
- Default root password changed and stored safely
- Named accounts created with Administrator, Operator or Read Only roles
- Licence tier confirmed under Configuration > Licenses
- Next: set up alerts and update firmware
Skyline can supply, configure and maintain Dell, HPE and Huawei servers under an annual maintenance contract (AMC). Contact us.
Comments
0 total · 0 threads