====== Passwords ======
Change language: | Česky |
{{ :files:img_warning-line_b.png?nolink |}} {{ :en:hw:09_safety-instructions_pseudo-ISO-7010-attention.png?nolink |(!)}} **Attention:** \\ This article is valid only for units running Debian 13 (Trixie) and newer. Product lines differ a bit in how to work with passwords. List of corresponding password setup methods to each product line: * [[#device_with_factory_password|Unipi Edge]] * Unipi Patron - Depends on serial number format * [[#device_with_factory_password|Serial number has 10 digits]] * [[#device_without_factory_password|Serial number has less than 10 digits]] * Unipi Gate - Depends on serial number format * [[#device_with_factory_password|Serial number has 10 digits]] * [[#device_without_factory_password|Serial number has less than 10 digits]] * [[#enable_ssh_on_unipi_neuron_and_unipi_11|Unipi Neuron]] * [[#enable_ssh_on_unipi_neuron_and_unipi_11|Unipi 1.1/Lite]] * Unipi Extension - Does not use passwords (Modbus RTU only) ===== Device with factory password ===== Valid for devices with long format of serial number (10 digits). Example: //SN: 1262512345//. If the device has serial number with short format (less than 10 digits, like //SN: 2037//), then it is an older device and [[#device_without_factory_password|Device without factory password]] paragraph should be followed instead. ---- Devices with factory password have their factory password printed on the information label as **PASS**. Information label is located on the side of the device. Factory password is used in service mode and during the first login to the SSH. {{ :cs:sw:04-unipi-firmware:02-passwords:passwords_03-password-label.png?350 |}} ==== SSH ==== The login credentials are: username: **unipi** and password **is written on the information label as PASS**. During the first login to the SSH, the password change is enforced. This happens only if the unit is in factory settings (newly flashed clean OS). Process of changing user password is described in [[#changing_user_password_over_command_line|Changing user password over command line]] paragraph below. For the next login the new user password must be used. {{ :files:img_warning-line_b.png?nolink |}} {{ :en:hw:08_safety-instructions_pseudo-ISO-7010-info.png?nolink |(!)}} **Note:** \\ To call a command as super user (//sudo//) /* or login as root*/ the user password is required. The password is same as for the one used for login to the SSH (user password). ==== Service web interface ==== After entering the address of the device in [[en:hw:007-patron:service-mode|service mode]] into the web browser the built-in console with instructions will appear. For the connection secure version of //HTTP// protocol (//HTTPS//) is used. For this reason, after the opening the web the browser can show warning or errors about potential safety issues. If you are sure you are connecting to the correct address, then you can ignore this warning and continue by "Advanced" or "More options" and "continue to the page". Welcome to Unipi service mode. Your device is protected, for more information see the password documentation. Defaults are username unipi and password from the device information label. To exit service mode without logging in, power cycle the device. If you did not hold service button, your main system is likely corrupted. E410-sn1253445123-service-mode login: ---- Continue by entering username: **unipi** \\ and factory password **written on the information label**. E410-sn1253445123-service-mode login: unipi Password: ---- After successful login, few links to service web page are shown. The links contain a randomly generated temporary password, which is changed after each start in service mode. This means the links are valid only to the next restart of the device and for the next starts in service mode the login is required again. There should be a link for each network interface present on the device. In the example below there are two of them. First is address obtained by DHCP server and the second is link-local address used for direct connection of the device with PC. BusyBox v1.38.0.git (2026-06-26 12:30:28 UTC) built-in shell (ash) Enter 'help' for a list of built-in commands. You can use this terminal to manage your device or follow these link for graphical interface: Open SWUPDATE page on 192.168.1.8 Open SWUPDATE page on 192.168.200.200 ---- After following one of the links, service web interface is opened. [[en:hw:007-patron:service-mode#popis_servisniho_weboveho_rozhrani|Description of service web interface]] can be found in the section for each product which has this mechanism. During opening of the SWUPDATE page similar warning about security problems as in first steps can appear. You can ignore these and continue. ==== ==== {{ en:hw:patron_service_mode.png?450 |}} ===== Device without factory password ===== Valid for devices with serial number with short format (less than 10 digits, like //SN: 2037//) and also for product lines Unipi Neuron and Unipi 1.1. ==== SSH ==== For older units (Unipi Patron and Unipi Gate) which have serial number with short format (less than 10 digits) the username is always **unipi** and user password is set to **unipi.technology**. In this case we strongly recommend to change the user password. See [[#changing_user_password_over_command_line|Changing user password over command line]]. === Enable SSH on Unipi Neuron and Unipi 1.1 === Regardless of serial number or serial number format for all Unipi Neuron and Unipi 1.1 running OS image with Debian 13 and newer will require the user to set the user password for SSH. The username is also **unipi**. ---- The user password must be set manually by inserting a file onto the SD card. Otherwise the SSH will be enabled, but login would not be possible. {{page>en:sw:04-unipi-firmware:02-passwords:insert-password-sd-card-hidden}} ==== Service web interface ==== If the device does not have factory password, then the process to access service web interface is same as the one for the device [[#service_web_interface|with factory password]], but the login steps in the beginning are skipped. /* ===== Enable SSH using Mervis IDE ===== Pokud používáte platformu Mervis, tak lze v Mervis IDE ve všech produktových řadách zapnout/vypnout SSH a také zároveň změnit heslo. {{ :files:img_warning-line_b.png?nolink |}} {{ :en:hw:08_safety-instructions_pseudo-ISO-7010-info.png?nolink |(!)}} **Poznámka:** \\ SSH je pro Mervis OS ve výchozím stavu vypnuto. Nastavení SSH naleznete pod záložkou Unipi parametry. {{ :cs:sw:04-unipi-firmware:02-passwords:passwords_01-mervis-ssh-settings.png?650 |}} Pro zapnutí SSH nastavte Povolit SSH na True. **Výrazně doporučujeme změnu SSH hesla na jiné než unipi.technology**. Je to nezbytný krok pro zajištění bezpečnosti i když není jednotka přístupná z internetu. V produkčním prostředí po dokončení práce přes SSH doporučujeme SSH vypnout. {{ :cs:sw:04-unipi-firmware:02-passwords:passwords_02-mervis-enable-ssh.png?650 |}} ---- Celý postup lze provést také přes příkazovou řádku pomocí nástroje [[cs:sw:01-mervis:065-plctool|PlcTool]]. Kroky jsou v tomto případě následující: - [[cs:sw:01-mervis:065-plctool#konfigurace|Stažení konfigurace]] - Úprava staženého souboru konfigurace - Nahrání konfigurace zpět */ ===== Changing user password over command line ===== User password can be changed by //passwd// command. Current user password must be entered first followed by a new user password and repeat of the new user password. unipi@S167-sn371:~$ passwd Changing password for unipi. Current password: New password: Retype new password: passwd: password updated successfully