As far as I know, a lost or forgotten BMC password basically requires reflashing the BMC chip. But if you're already logged into the BMC, changing it should be as simple as running
passwd
and very carefully entering the new passphrase, three times. I have discovered (through my own painful experience

) that the separate password for the boot menu (Petitboot) can more easily be reset.