Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Retrieve Passwords for Infrastructure Components


CSO uses an algorithm to automatically generate a dynamic password for the following infrastructure components:

  • Cassandra

  • Keystone

  • MariaDB

  • RabbitMQ

  • Icinga

  • Prometheus

  • ArangoDB

  • Elasticsearch

  • ZooKeeper

The automatically generated passwords for each infrastructure component and the cspadmin user password for the administration portal are displayed on the console after you finish answering the questions in the Setup Assistance.

You can access the administration portal by navigating to NAT IP address using a Web browser. The default username is cspadmin. The default password is shown after running ./ script while provisioning the VMs as mentioned in Provision VMs on Contrail Service Orchestration Servers.

To enhance password security, the length and pattern of each password are different and the password is encrypted. The passwords in the log file are masked.

To retrieve passwords for all infrastructure component, perform the following steps:

  1. Log in to the startupserver_1 VM as root user.
  2. Navigate to the CSO directory in the startupserver_1 VM.

    For example:

    root@host:~/# cd Contrail_Service_Orchestration_5.1.2
  3. Run the following command to retrieve the dynamic passwords that were generated during installation.
    root@startupserver_1:/opt/Contrail_Service_Orchestration_5.1.2# ./ deploy_manager/utils/

You can’t retrieve the cspadmin user password. You can reset the password from the CSO Installer webpage or from the CLI.

To reset the cspadmin user password from the CSO Installer webpage:

  1. Click Forget Password? on the login page of the CSO Installer webpage.

    A verification code is sent to the registered e-mail ID.

  2. Type the verification code in the password field on the CSO Installer webpage, and then follow the instructions to reset the password.