Update the CSA Database User or Password

If you changed the user or password of the database used by HPE Cloud Service Automation, you must update the JBoss DataSource and other files that store this information.

1. On the system running CSA, open a command prompt and change to the directory CSA_HOME/jboss‑as where

   CSA_HOME is the directory in which CSA is installed.

   .

2. Run the following command to generate an encoded version of the new database password:

   Windows:

   "CSA_JRE_HOME\bin\java" -cp modules\system\layers\base\org\picketbox\main\picketbox-4.0.21.Final.jar org.picketbox.datasource.security.SecureIdentityLoginModule <password>

   Linux:

   CSA_JRE_HOME/bin/java -cp modules/system/layers/base/org/picketbox/main/picketbox-4.0.21.Final.jar org.picketbox.datasource.security.SecureIdentityLoginModule <password>

   where CSA_JRE_HOME is the directory in which the JRE that is used by CSA is installed..

   Copy the encoded password value that is returned (do not include spaces).

3. Stop the CSA service. See Stop CSA for instructions.

4. In a text editor, open the CSA_HOME/jboss‑as/standalone/configuration/standalone.xml file.

5. In the file, locate the following content:

   Microsoft SQL Server

   <security-domain name="csa-encryption-sec" cache-type="default">
   <authentication>
      <login-module code="org.picketbox.datasource.security.SecureIdentityLoginModule" flag="required">
         <module-option name="username" value="<old_user_name>"/>
         <module-option name="password" value="<old_encoded_password>"/>
         <module-option name="managedConnectionFactoryName" value="jboss.jca:service=LocalTxCM,name=mssqlDS"/>
      </login-module>
   </authentication>
</security-domain>

   Oracle

   <security-domain name="csa-encryption-sec" cache-type="default">
   <authentication>
      <login-module code="org.picketbox.datasource.security.SecureIdentityLoginModule" flag="required">
         <module-option name="username" value="<old_user_name>"/>
         <module-option name="password" value="<old_encoded_password>"/>
         <module-option name="managedConnectionFactoryName" value="jboss.jca:service=LocalTxCM,name=OracleDS"/>
      </login-module>
   </authentication>
</security-domain>

   
   
   PostgreSQL
   
   <security-domain name="csa-encryption-sec" cache-type="default">
   <authentication>
      <login-module code="org.picketbox.datasource.security.SecureIdentityLoginModule" flag="required">
         <module-option name="username" value="<old_user_name>"/>
         <module-option name="password" value="<old_encoded_password>"/>
         <module-option name="managedConnectionFactoryName" value="jboss.jca:service=LocalTxCM,name=PostgresDS"/>
      </login-module>
   </authentication>
</security-domain>

6. Replace <old_encoded_password> with the new encoded password you copied in step 2 and <old_user_name> with the new user name.
7. Save the standalone.xml file.

8. Restart CSA service. See Restart CSA for instructions.

9. If you are using a tool (such as the content archive tool, provider tool, purge tool, or schema installation tool) that uses a database or configuration properties file (for example, db.properties or config.properties), update the appropriate property or properties in the file. By default, the file is located in the CSA_HOME/Tools/<Tool_Name> directory.

   The password property value should be encrypted (see Encrypt a password for instructions). An encrypted password is preceded by ENC without any separating spaces and is enclosed in parentheses.