Request password generation form the tool at https://remotesupporttool.cisco.com/ using the Account and the Passphase generated by the CLI command.
Login to the tool using CEC credentials and then go to "Application" -> "Generate Password".
Enter the account name and passphrase from the output of the CLI command 'utils remote_account create'. Then enter the defect id, the TAC case id and notes.
Click "Generate Password" and the password will be generated.
Login to the customer box using the username and the password generated by the tool.
To enable root login, run the Root login enable command as given in CET TAC TOI presentation/VOD.
Use this root login to run CET.
After using CET, disable root login using Root login disable command as given in CET TAC TOI presentation/VOD.