Lost supervisor password?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • genius_at_work
    Junior Member
    • Jul 2008
    • 7

    Lost supervisor password?

    If you've ever had a Ricoh/Savin/Gestetner/Lanier machine where the admin AND supervisor usernames/passwords have been lost, and you are locked out, this thread may be the answer you are looking for.

    DISCLAIMER: The following procedure has the potential to damage your machine, and thus should only be performed by a trained Ricoh technician. I take no responsibility for any damage to data or devices, or for any losses of any kind, that result from performing this procedure.

    WARNING: This procedure, if performed incorrectly, can cause your machine to become unusable. I strongly recommend that you copy a backup of the original NVRAM data to a safe place on your computer. Only make changes to the NVRAM file that is on the SD card. If your machine is unusable after installing the modified NVRAM data, you should be able to reinstall the original NVRAM data using the backup file.

    For the newer series' of machines that have administrator logins (instead of key operator), Ricoh's official fix is to replace the NVRAM chip, thereby returning the username/password combinations to their default values. Unfortunately, this procedure also resets all of the other NVRAM settings (engine, etc) to their factory defaults as well. Obviously, this means that you have to spend time recalibrating the entire machine.

    Luckily, if you have a small amount of computer expertise, there is another option that can take less than a minute once you are adept at the procedure.

    IMPORTANT: Be sure to disconnect the machine from all external connections (network, USB, fax, CopyTrak, etc) before beginning this procedure. Also, ensure that the customer does not attempt to use any functions on the machine before you are finished. If the customer uses the machine before you can install the modified NVRAM data, you will have to start the procedure over from the beginning.

    LostSupervisorPassword.pdf

    The attached PDF file describes the procedure for resetting the supervisor username and password to their default values, in order to grant you access to reset the administrator passwords from the Web Image Monitor, or the User Tools menu.

    You, or your supervisor, or the customer may ask if this procedure will expose secret passwords to you. The answer is that, NO, the passwords are encrypted in the NVRAM data file, so they cannot be read. The customer's passwords cannot be decrypted, so this procedure simply reverts those encrypted values back to a default value.

    Below are the same instructions as contained in the PDF file, in case your computer cannot read PDF files.
    Hex2.jpgThe green sections represent the passwords for each of the preceding usernames. These values are encrypted, so they cannot be read directly. A series of ‘r’ characters represents a blank password.

    If there are any problems or questions, post them in this thread (not PM).

    Also, I am not able to perform this procedure for you as I already have enough of my own work to do.

    -genius_at_work
    Last edited by genius_at_work; 02-02-2012, 03:32 AM.
  • Eric1968
    Service Manager

    1,000+ Posts
    • Jan 2009
    • 2459

    #2
    Re: Lost supervisor password?

    If you enter the Factory SP-mode (which I will not mention here) you can easily reset the admin/supervisor password without using hex-editors etc.

    BTW, you cracked the Ricoh source code?

    Comment

    • zed255
      How'd ya manage that?

      1,000+ Posts
      • Dec 2009
      • 1025

      #3
      Re: Lost supervisor password?

      Yes, for those in-the-know there is an SP that can be run on the newer GW based machines that will clear the passwords for admin and supervisor. This is still a useful work-around, thanks for sharing.

      As for 'cracking the source code', that's a little glamourized. The NVRAM data is partially encrypted but I'm not surprised that the use of a simple hex editor allows the modification of certain things. I think I might have to grab an NVRAM download off a machine to 'play' a little and see if there are any other secrets it may reveal <insert evil laughter here>.

      Comment

      • femaster
        Service Manager

        1,000+ Posts
        • May 2011
        • 1425

        #4
        Re: Lost supervisor password?

        Originally posted by Eric1968
        If you enter the Factory SP-mode (which I will not mention here) you can easily reset the admin/supervisor password without using hex-editors etc.
        Just a question of curiosity. Is this Factory SP-Mode documented anywhere (TSRC, RFG-esource, etc.,) or is this just something used, and known, "at the factory"? I assume that the information is on a "need to know" basis, and us "regular" Ricoh field techs fall into the catagory of NOT needing to know...

        I believe in my 5-years as a tech, I've only ever needed to reset an admin password once. Thankfully the supervisor password had not been touched.

        This other SP mode might be some useful information to know should one ever need it, but I'd assume that it opens up a whole new world of control that a regular tech should probably not be in.
        A Ricoh Service Tech for 7 year. A Konica Minolta Service Tech for 7 years. Now, KM service manager for 4 years.
        My Ricoh knowledge is slowly dwindling away at this point. Many things have been lost to time...

        Comment

        • nmfaxman
          Service Manager

          Site Contributor
          1,000+ Posts
          • Feb 2008
          • 1705

          #5
          Why do they call it common sense?

          If it were common, wouldn't everyone have it?

          Comment

          • zed255
            How'd ya manage that?

            1,000+ Posts
            • Dec 2009
            • 1025

            #6
            Re: Lost supervisor password?

            As far as I know it isn't documented anywhere and is supposed to be used by regional support personel to assist techs in the field. I first encountered it while having one of my area RTSMs out on a problem machine. He accessed Factory SP mode while I happen to be watching, so I took note. Saved my bacon a few times over the years. Basically it allows a number of 'hidden' SPs to appear. None of those are likely to be documented either, at least not the ones I have found useful.

            Comment

            • nmfaxman
              Service Manager

              Site Contributor
              1,000+ Posts
              • Feb 2008
              • 1705

              #7
              Re: Lost supervisor password?

              Originally posted by genius_at_work
              If you've ever had a Ricoh/Savin/Gestetner/Lanier machine where the admin AND supervisor usernames/passwords have been lost, and you are locked out, this thread may be the answer you are looking for.

              DISCLAIMER: The following procedure has the potential to damage your machine, and thus should only be performed by a trained Ricoh technician. I take no responsibility for any damage to data or devices, or for any losses of any kind, that result from performing this procedure.

              WARNING: This procedure, if performed incorrectly, can cause your machine to become unusable. I strongly recommend that you copy a backup of the original NVRAM data to a safe place on your computer. Only make changes to the NVRAM file that is on the SD card. If your machine is unusable after installing the modified NVRAM data, you should be able to reinstall the original NVRAM data using the backup file.


              For the newer series' of machines that have administrator logins (instead of key operator), Ricoh's official fix is to replace the NVRAM chip, thereby returning the username/password combinations to their default values. Unfortunately, this procedure also resets all of the other NVRAM settings (engine, etc) to their factory defaults as well. Obviously, this means that you have to spend time recalibrating the entire machine.

              Luckily, if you have a small amount of computer expertise, there is another option that can take less than a minute once you are adept at the procedure.

              IMPORTANT: Be sure to disconnect the machine from all external connections (network, USB, fax, CopyTrak, etc) before beginning this procedure. Also, ensure that the customer does not attempt to use any functions on the machine before you are finished. If the customer uses the machine before you can install the modified NVRAM data, you will have to start the procedure over from the beginning.

              [ATTACH]14173[/ATTACH]

              The attached PDF file describes the procedure for resetting the supervisor username and password to their default values, in order to grant you access to reset the administrator passwords from the Web Image Monitor, or the User Tools menu.

              You, or your supervisor, or the customer may ask if this procedure will expose secret passwords to you. The answer is that, NO, the passwords are encrypted in the NVRAM data file, so they cannot be read. The customer's passwords cannot be decrypted, so this procedure simply reverts those encrypted values back to a default value.



              Below are the same instructions as contained in the PDF file, in case your computer cannot read PDF files.

              [ATTACH=CONFIG]14174[/ATTACH]





              If there are any problems or questions, post them in this thread (not PM).

              Also, I am not able to perform this procedure for you as I already have enough of my own work to do.

              -genius_at_work
              Dude, no offence but I opened it with notepad and scrolled down to the area you described to read the same info.

              As always............................................ ...........
              Why do they call it common sense?

              If it were common, wouldn't everyone have it?

              Comment

              • zed255
                How'd ya manage that?

                1,000+ Posts
                • Dec 2009
                • 1025

                #8
                Re: Lost supervisor password?

                Originally posted by nmfaxman
                Ok. I thought I was the only one that figured this out. My ego tends to get huge.
                Here are the encryption codes.

                ...

                At least I was able to help fellow techs.
                I suggest charging the boss or customer for this knowledge.
                Have fun guys and girls.
                So its a simple substitution cipher? I would have thought it would be actual encryption using something like the current meter and or serial as the key. This intrigues me. I'm going to have to compare you results with my first opportunity to check this out.

                Comment

                • wfinn
                  Technician

                  50+ Posts
                  • Mar 2011
                  • 70

                  #9
                  Re: Lost supervisor password?

                  Originally posted by femaster
                  Just a question of curiosity. Is this Factory SP-Mode documented anywhere (TSRC, RFG-esource, etc.,) or is this just something used, and known, "at the factory"? I assume that the information is on a "need to know" basis, and us "regular" Ricoh field techs fall into the catagory of NOT needing to know...

                  I believe in my 5-years as a tech, I've only ever needed to reset an admin password once. Thankfully the supervisor password had not been touched.

                  This other SP mode might be some useful information to know should one ever need it, but I'd assume that it opens up a whole new world of control that a regular tech should probably not be in.
                  I found out from a senior tech of 15 years during a last ditch troubleshooting we did. I was also told it was buried in Goose's Guide once and I checked and verified that it actually is in Goose's Guide, It's just not labelled but if you know what you are looking for then you can easily find it. As far as just giving it out... well you aren't allowed to.

                  Comment

                  • Gift
                    Service Manager

                    1,000+ Posts
                    • Mar 2011
                    • 2439

                    #10
                    Re: Lost supervisor password?

                    Originally posted by Eric1968
                    If you enter the Factory SP-mode (which I will not mention here) you can easily reset the admin/supervisor password without using hex-editors etc.

                    BTW, you cracked the Ricoh source code?

                    Hi Eric,

                    I know how to enter to the factory mode (got this information during a training for the Aficio 5550C - very nice trainer, hehe). I just checked all SP5xxx programs within the factory mode twice (on a MPC2500) but there's nothing obviously named refering to reset the admin/supervisor codes - can you tell the sp programm (via PM if you prefer not to post this in public), no need to tell how to enter factory SP for me.

                    besides that: nice and interesting work@genius

                    Comment

                    • nmfaxman
                      Service Manager

                      Site Contributor
                      1,000+ Posts
                      • Feb 2008
                      • 1705

                      #11
                      Re: Lost supervisor password?

                      Put alphabet into supervisor password through WIM.
                      Download to SD card.
                      Open NVram with notepad or word pad.
                      Compare old to new and you can't miss the differences.
                      That is how I got the key.
                      Why do they call it common sense?

                      If it were common, wouldn't everyone have it?

                      Comment

                      • Jomama46
                        Field Supervisor

                        Site Contributor
                        2,500+ Posts
                        • Apr 2008
                        • 2900

                        #12
                        Re: Lost supervisor password?

                        Thanks for the post Genius
                        sigpic
                        You never realize how cheap a professional is until after you let an amateur do it.
                        A+; Network +; PDI+

                        Comment

                        • femaster
                          Service Manager

                          1,000+ Posts
                          • May 2011
                          • 1425

                          #13
                          Re: Lost supervisor password?

                          Originally posted by wfinn
                          I found out from a senior tech of 15 years during a last ditch troubleshooting we did. I was also told it was buried in Goose's Guide once and I checked and verified that it actually is in Goose's Guide, It's just not labelled but if you know what you are looking for then you can easily find it. As far as just giving it out... well you aren't allowed to.
                          Are you able to verify that it is still in there? It's a very large guide, and I'd hate to search the whole thing for nothing...

                          Update: I searched it, found something listed under an old model, a combination that I've not seen before, I doubt that's it. I did see one that I had not heard about before; it was listed multiple times in the guide. Might just have to try those two and see what happens...
                          Last edited by femaster; 02-03-2012, 03:19 AM.
                          A Ricoh Service Tech for 7 year. A Konica Minolta Service Tech for 7 years. Now, KM service manager for 4 years.
                          My Ricoh knowledge is slowly dwindling away at this point. Many things have been lost to time...

                          Comment

                          • Richariri
                            Trusted Tech

                            100+ Posts
                            • Dec 2013
                            • 163

                            #14
                            Re: Lost supervisor password?

                            Can this method be used to Reset the counter to 0?

                            We currently replace the NVram on our Ricoh Gold approved refurb's in order to reset the counter.

                            NVram's are costly also, so it would be a real treat for my boss if I can cut this cost out.

                            Before anyone says anything.
                            The counter is reset to allow our customers to have a refurbished machine and to accurately monitor their usage. We do not try and hide the original (physical) counter upon resale.

                            Thanks

                            Comment

                            • wfinn
                              Technician

                              50+ Posts
                              • Mar 2011
                              • 70

                              #15
                              Re: Lost supervisor password?

                              Originally posted by Richariri
                              Can this method be used to Reset the counter to 0?

                              We currently replace the NVram on our Ricoh Gold approved refurb's in order to reset the counter.

                              NVram's are costly also, so it would be a real treat for my boss if I can cut this cost out.

                              Before anyone says anything.
                              The counter is reset to allow our customers to have a refurbished machine and to accurately monitor their usage. We do not try and hide the original (physical) counter upon resale.

                              Thanks
                              I don't believe you can, never tried. You can control serial numbers and a few other things.

                              Comment

                              Working...