diff --git a/ui/scripts/system.js b/ui/scripts/system.js
index 6d9c6c99466..c4f4260f501 100644
--- a/ui/scripts/system.js
+++ b/ui/scripts/system.js
@@ -16286,6 +16286,7 @@
                                 action: function (args) {
                                     var data = args.data;
                                     data.hostid = args.context.hosts[0].id;
+                                    data.password = $("<span>").html(data.password).text();
 
                                     $.ajax({
                                         url: createURL('configureOutOfBandManagement'),
diff --git a/ui/scripts/ui/core.js b/ui/scripts/ui/core.js
index e64f386b2c0..58bf8782065 100644
--- a/ui/scripts/ui/core.js
+++ b/ui/scripts/ui/core.js
@@ -361,6 +361,7 @@
         $.validator.addMethod(
             "disallowSpecialCharacters",
             function(value, element) {
+                if (element.id == "label_outofbandmanagement_password") return true;
                 return (value.indexOf("<") == -1 && value.indexOf(">") == -1);
             },
             jQuery.format('message.disallowed.characters')