HPE 3PAR: Collect Recovery-Account Information for HPE Support

1. Record system identity and current method

From an authorized array CLI session, the source uses:

showsys
controlrecoveryauth status

Record the relevant model/serial number for the support case. The status distinguishes ciphertext from time-based one-time password authentication (totp).

2. Source ciphertext workflow

The source changes from TOTP to ciphertext when needed, then exports the root recovery-account ciphertext:

controlrecoveryauth setmethod ciphertext
controlrecoveryauth ciphertext root

Changing the authentication method affects service-account policy. Perform that change/export only under the matching HPE service procedure with the required privileges; it is not a routine prerequisite for collecting ordinary logs.

The exported blob is encrypted recovery-account information for HPE Support, not a plaintext root password or a generated private key. Preserve the complete output exactly, including its beginning/end delimiter lines and all hyphens. The source identifies these delimiters:

---Begin tpd blob ---
[REDACTED RECOVERY BLOB]
--- End tpd blob ---

Supply the required model/serial information and blob through the authorized HPE support channel. Do not publish the blob or include it in general logs/AI prompts. HPE documentation describes TOTP as the default and ciphertext as requiring HPE Support decryption; this command manages service console recovery accounts, not ordinary application users.

HPE’s English controlrecoveryauth reference. Confirm the OS/model-specific edition; no recovery credentials have been generated for this article.