Splat password reset
From cpwiki.net

secure platform password reset / recovery procedure (tested)
1. boot to system recovery CD or other linux live CD / usb
2. mount root partition
mkdir /mnt/sda6 mount /dev/sda6 /mnt/sda6
3. change root
chroot /mnt/sda6 /bin/bash
4. reset admin account password (assuming it is active)
/usr/bin/passwd admin
5. reset expert password
/bin/expert_password