Encrypt HP Codar passwords again

This section describes how to generate and replace the passwords used by HP Codar. You will be generating new passwords using FIPS 140-2 compliant utilities.

Note In the following instructions, CSA_HOME is the directory in which Codar is installed (for example, C:\Program Files\Hewlett-Packard\Codar/usr/local/hp/csa) and a JRE has been installed for HP Codar in CSA_JRE_HOME.

Generate and replace the passwords for the following HP Codar properties (default passwords appear in parentheses):

  • csaTruststorePassword
  • securityAdminPassword (cloud)
  • securityCsaReportingUserPassword (cloud)
  • securityTransportPassword (csaTransportUser)
  • securityOoInboundUserPassword (ooInboundUser)
  • securityCdaInboundUserPassword (CDA2CSAIntegration!)
  • securityIdmTransportUserPassword (idmTransportUser)
  • securityCatalogAggregationTransportUserPassword (cloud)
  • securityEncryptedSigningKey (cloud)

Generate and replace the passwords for the following tools:

  • Content archive tool
  • Purge tool
  • Process definition tool
  • Provider tool
  • Schema installation tool

To generate and replace existing passwords used by HP Codar, do the following:

  1. Open a command prompt and change to the CSA_HOME\Tools\PasswordUtil directory. For example:

    Windows:

    C:\Program Files\Hewlett-Packard\Codar\Tools\PasswordUtil

    Linux:

    /usr/local/hp/codar/Tools/PasswordUtil

  2. Generate a password by running the following command (this example uses the same example names from Create HP Codar encryption keystore):

    "CSA_JRE_HOME\bin\java" -jar passwordUtil-standalone.jar encrypt <password> JsafeJCE ../../jboss-as/standalone/configuration/codar_encryption_keystore.p12 < Codar encryption keystore password> codar_encryption_key
    ../../jboss-as/standalone/configuration/key.dat


    Note The path separators used in the passwordUtil-standalone.jar script options are forward slashes (/). You can also use double backward slashes (\\) as your path separators.

    The encrypted value of the password is displayed.

    If you used different names for the keystore, alias, or encrypted symmetric key file, here is an example of the command without using the example names:

    "CSA_JRE_HOME\bin\java" -jar "CSA_HOME\Tools\PasswordUtil\passwordUtil-standalone.jar" encrypt <password> JsafeJCE < Codar encryption keystore>
    < Codar encryption keystore password>
    < Codar encryption keystore alias>
    <location and name of the encrypted symmetric key>



    Note If you use path separators in the passwordUtil-standalone.jar script options, use either a single forward slash (/) or double backward slashes (\\) as your path separator.

  3. To update HP Codar properties used by the Codar Console, edit the CSA_HOME\jboss-as\standalone\deployments\
    csa.war\WEB-INF\classes\csa.properties    CSA_HOME/jboss-as/standalone/deployments
    /csa.war/WEB-INF/classes/csa.properties     file. Update the password for the following properties:

    • csaTruststorePassword
    • securityAdminPassword
    • securityCsaReportingUserPassword
    • securityTransportPassword (use the same password for the Identity Management component)
    • securityOoInboundUserPassword
    • securityCdaInboundUserPassword
    • securityIdmTransportUserPassword (use the same password for the Identity Management component and Marketplace Portal)
    • securityCatalogAggregationTransportUserPassword
    • securityEncryptedSigningKey (use the same password for the Identity Management component)

    See Configure Identity Management component for more information about configuring password for the Identity Management component.

    Note In the properties file, the encrypted password value must be preceded by ENC without any separating spaces and is enclosed in parentheses.

    For more information about these properties, see the Codar Configuration Guide.

  4. Update the password property value defined in the database property file for the following tools:

    • Content archive tool
    • Purge tool
    • Process definition tool
    • Provider tool
    • Schema installation tool

Send Help Center feedback