Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Generating and Encrypting Passwords for Infrastructure Components


CSO uses an algorithm to automatically generate a dynamic password for the following infrastructure components:

  • Cassandra

  • Keystone

  • MariaDB

  • RabbitMQ

  • Icinga

  • Prometheus

  • ArangoDB

  • Elasticsearch

  • ZooKeeper

The automatically generated passwords for each infrastructure component and the cspadmin password for Administration Portal are displayed on the console after you complete answering the Setup Assistance questions.

You can access the Administration portal by navigating to NAT IP address via internet browser. The initial user name is cspadmin and the initial password is shown after running ./ script under topic Provisioning VMs on Contrail Service Orchestration Servers.


You must note the automatically generated password that is displayed on the console as they are not saved in the system.

To enhance the password security, the length and pattern for each password is different and the password is encrypted. The passwords in the log file are masked.

Run the following script to retrieve passwords for all infrastructure components:

CSO>./ deploy_manager/utils/

You can’t retrieve the cspadmin user password. It can only be reset from the CSO Installer webpage or CLI.

Follow the steps to reset the cspadmin user password from the CSO Installer webpage:

  1. Click Forget Password? on the login page of the CSO Installer webpage.
  2. Receive a verification code to the registered e-mail ID.
  3. Type the received verification code as the password on the CSO Installer webpage.
  4. Follow the steps to reset the password.