Micro Focus Expert
Micro Focus Expert
238 views

uCMDB Support Tip : How to change the Server Keystore Password

After installing the Server, the HTTPS port is open and the store is secured with a weak password (the default hppass). If you intend to work with SSL only, you must change the password.

The following procedure explains how to change the server.keystore password only. However, you should perform the same procedure for changing the server.truststore password.

 

Note: You must perform every step in this procedure.

 

1. Start the UCMDB Server.

 

2. Execute the password change in the JMX console:

    

     a. Launch the Web browser and enter the Server address, as follows: http://<UCMDB Server Host Name or IP>:8080/jmx-console.

          You may have to log in with a user name and password.

 

     b. Under UCMDB, click UCMDB:service=Security Services to open the Operations page.

 

     c. Locate and execute the changeKeystorePassword operation.

          This field must not be empty and must be at least six characters long. The password is changed in the database only.

 

3. Stop the UCMDB Server.

 

4. Run commands.

     From C:\hp\UCMDB\UCMBServer\bin\jre\bin, run the following commands:

 

     a. Change the store password:

          keytool -storepasswd -new <new_keystore_pass> -keystore

          C:\hp\UCMDB\UCMDBServer\conf\security\server.keystore -storepass <current_keystore_pass>

 

     b. The following command displays the inner key of the keystore. The first parameter is the alias. Save this parameter for the next command:

 

         keytool -list -keystore C:\hp\UCMDB\UCMDBServer\conf\security\server.keystore

 

     c. Change the key password (if the store is not empty):

         keytool -keypasswd -alias <alias> -keypass <currentPass> -new <newPass> -

          keystore C:\hp\UCMDB\UCMDBServer\conf\security\server.keystore

 

     d. Enter the new password.

 

5. Start the UCMDB Server.

 

6. Repeat the procedure for the Server truststore.

 

 

Reference : Hardening Guide ( http://support.openview.hp.com/selfsolve/document/KM00642992 )

 

 

“Micro Focus Support
If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.”

Click the KUDOS star to say 'Thanks'
Labels (1)
0 Likes
0 Replies
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.