How to change passwords and unlock accounts on the NextSeq 1000/2000

The Linux operating system on the NextSeq 1000/2000 has three accounts:

• root (super administrator)

• ilmnadmin (administrator)

• ilmnuser (user)

The administrator account is intended only for applying system updates, like updating the NextSeq 1000/2000 Control Software, or for use by IT staff to mount a persistent network drive. Perform all other functions, including sequencing, from the user account.

There are credentials specific to each account. If too many attempts are made to login with the incorrect password, the account will lock. The timeout time for a locked user account is 10 minutes\*. If the password for ilmnuser is manually changed via ilmnadmin or root, the lock-out timer will not be removed.

Use the following steps to change the password.

To reset the ilmnuser password from the ilmnadmin account:

1. Log into ilmnadmin.

2. Open terminal.

3. Enter sudo passwd ilmnuser

4. Enter the ilmnadmin password at the prompt.

5. Enter a new ilmnuser password at the prompt.

6. Retype the new ilmnuser password at the prompt to confirm the new password.

To reset ilmnuser/ilmnadmin password from the root user account:

1. Log into root.

2. Open terminal.

3. Enter passwd ilmnadmin to change the ilmnadmin password or passwd ilmnuser to change the ilmnuser password.

4. Enter the new password at the prompt.

5. Retype the new password at the prompt to confirm the new password.

To change the root user account password from ilmnadmin account:

1. Log into the ilmnadmin account.

2. Open terminal.

3. Enter sudo su

4. Enter the ilmnadmin password.

• ilmnadmin privileges are elevated to root level without entering the root credentials.

1. Enter passwd root

2. Enter a new password for root user at the prompt.

3. Retype the new root password at the prompt to confirm the new password.

If all passwords have been lost/misplaced, contact Illumina Technical Support for further guidance.

**\***If a password is recovered, use the following steps to remove the lockout.

• A user lock-out can be removed using the following command under the root user: passwd -u {username}

• Example: ilmnadmin can unlock the ilmnuser account with the command: sudo passwd -u ilmnuser

**\***If the account still does not unlock, reset the count for failed attempts to unlock account.

• To see failed login attempts run this command from the root user: pam_tally2 --user {username}

  • Example: pam_tally2 --user ilmnadmin

• To reset failed login attempts run this command under root user: pam_tally2 --user {username} --reset

  • Example: pam_tally2 --user ilmnadmin --reset

This requires access to the higher-level account. For example, ilmnadmin can unlock the lockout timer for ilmnuser; root is required for unlocking a timeout for ilmnadmin or ilmnuser.

For any feedback or questions regarding this article (Illumina Knowledge Article #3297), contact Illumina Technical Support [e-mail].