An upgrade account is included in the IoT Controller OVA that provides the vendor undocumented access via Secure Copy (SCP).