HPE (HP / Aruba)

HPE (HP / Aruba) Aruba 2920 Password Recovery

Step-by-step password recovery for the HPE (HP / Aruba) Aruba 2920 (ArubaOS-Switch 2530-5400R (ProVision)). Console access required.

Overview

This guide provides step-by-step instructions for resetting lost or forgotten administrative passwords on enterprise networking hardware. Follow the procedure below carefully to regain access while preserving your device configuration.

Prerequisites

Before proceeding with password recovery, ensure you have a console cable, terminal emulation software configured to 9600 baud, and physical access to the device.

Step 1: Establish Console Connection

Connect your terminal cable to the console port of the device and open your serial terminal session.

Step 2: Interrupt the Boot Sequence

Power cycle the hardware and issue a Break key sequence during initial system startup to enter ROMMON mode.

Step 3: Reset Password & Configuration

Bypass startup configuration loading, boot into system software, set your new credentials, and save changes back to non-volatile memory.

Overview

This procedure recovers administrator access to the HPE Aruba 2920 running the HPE ArubaOS-Switch (ProVision) operating system when the manager password is lost. ProVision switches (2530, 2540, 2920, 2930F/M, 3810M, 5400R, 5400zl, 5412zl, 3500yl, 2910al, 2810, 2610, 2510, 2520) support a Clear button recovery that boots the switch without the saved configuration.

Prerequisites

Console cable with a terminal session at 9600 baud, 8N1 (ProVision switches use 9600 — not 115200). Physical access to the switch front panel for the Clear button.

Recovery Procedure — Clear Button Method

Connect the console cable and open a terminal session (9600 8N1).
Power off the switch.
Press and HOLD the Clear button on the front panel (a recessed button, usually below the LEDs).
While holding the Clear button, power the switch on. Continue holding for approximately 10 seconds (or until the console displays the recovery prompt).
Release the Clear button. The switch boots into a recovery state and displays a console prompt similar to Press [Enter] for the recovery prompt or boots directly with the factory-default configuration (no manager password).
If prompted, press Enter at the recovery prompt. The switch loads with its default configuration — the manager password is cleared.
Log in via console as manager with no password (the default).
Set a new manager password: at the switch(config)# prompt, password manager and follow the prompts.
If the switch did not preserve your configuration, restore it from a TFTP backup: copy tftp flash <server> <filename>.
Save the configuration: write memory.

Recovery Procedure — Boot Menu Method (alternative)

Connect the console (9600 8N1) and reboot the switch while watching the console.
When the boot countdown appears (e.g. Press [Enter] to access boot menu or a "Press any key" prompt), press the key to enter the boot menu.
Select the option to boot with the default configuration (typically option 4 or "Skip startup config" depending on model — read the menu).
The switch boots with factory defaults; log in as manager with no password and set a new password as above.

Important Notes

The Clear button method may erase the saved configuration on some models (it boots with defaults). Always back up the config first if possible.
The 2930F/M has a USB console port option; the Clear button is on the front panel next to the Reset button.
On ProVision switches, the default manager login is manager with no password; the default operator login is operator with no password.
If a password was set on the operator level too, the same recovery clears it.
Baud rate is 9600 on all ProVision models — using 115200 will produce garbage characters on console.

Protecting Your Configuration

Before recovery, back up the config: copy startup-config tftp <server> <filename> or show running-config captured to a file. After recovery, verify show running-config and save with write memory.