uCMDB Support Tip : How to change the Server Keystore Password

After installing the Server, the HTTPS port is open and the store is secured with a weak password (the default hppass). If you intend to work with SSL only, you must change the password.

The following procedure explains how to change the server.keystore password only. However, you should perform the same procedure for changing the server.truststore password.

 

Note: You must perform every step in this procedure.

 

1. Start the UCMDB Server.

 

2. Execute the password change in the JMX console:

    

     a. Launch the Web browser and enter the Server address, as follows: http://<UCMDB Server Host Name or IP>:8080/jmx-console.

          You may have to log in with a user name and password.

 

     b. Under UCMDB, click UCMDB:service=Security Services to open the Operations page.

 

     c. Locate and execute the changeKeystorePassword operation.

          This field must not be empty and must be at least six characters long. The password is changed in the database only.

 

3. Stop the UCMDB Server.

 

4. Run commands.

     From C:\hp\UCMDB\UCMBServer\bin\jre\bin, run the following commands:

 

     a. Change the store password:

          keytool -storepasswd -new <new_keystore_pass> -keystore

          C:\hp\UCMDB\UCMDBServer\conf\security\server.keystore -storepass <current_keystore_pass>

 

     b. The following command displays the inner key of the keystore. The first parameter is the alias. Save this parameter for the next command:

 

         keytool -list -keystore C:\hp\UCMDB\UCMDBServer\conf\security\server.keystore

 

     c. Change the key password (if the store is not empty):

         keytool -keypasswd -alias <alias> -keypass <currentPass> -new <newPass> -

          keystore C:\hp\UCMDB\UCMDBServer\conf\security\server.keystore

 

     d. Enter the new password.

 

5. Start the UCMDB Server.

 

6. Repeat the procedure for the Server truststore.

 

 

Reference : Hardening Guide ( http://support.openview.hp.com/selfsolve/document/KM00642992 )

 

 

Tags: