Change User Store Passwords for dsaadmin and imadmin Users - Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article provides instructions for changing the passwords of the dsaadmin and imadmin users in the User Store, as required by site security policies.

Environment

Identity Manager 14.5

Cause

Regular password rotation for the dsaadmin and imadmin accounts is required to maintain system security compliance.

Resolution

Follow these steps to update the passwords:

Step 1: Change Password in UserStore

1. Launch JXplorer.
2. In the Open LDAP/DSML Connection window, enter the following connection details and click OK:
   • Host: Host name of the Identity Manager where the User Store resides.
   • Port: 19289.
   • Level: Select SSL + User + Password.
   • User DN: cn=dsaadmin,ou=im,ou=ca,o=com.
   • Password: Current master password of the User Store.
3. In the Server CA Certificate Missing window, select This Session Only.
4. In the left pane, expand im and select dsaadmin.
5. In the right pane, click the Table Editor tab.
6. Double-click the UserPassword attribute.
7. Enter the new password, select SHA as the encryption type, and click OK.
8. Click Submit.
9. Expand im, people, and select imadmin, then repeat steps 5–8 to update the imadmin password.

Step 2: Update the Password in UserStore Definition

1. Access the Identity Manager Management Console, navigate to Directories > UserStore, and click Export. Save the UserStore.xml.
2. Use the Password tool to encrypt your new password. On a Windows IM machine, run this command from the .../Identity Manager/tools/PasswordTool directory: pwdtools.bat -JSAFE -p <new_password>
3. Edit the UserStore.xml file. Locate the password entry (e.g., {PBES}:XXXXXXXX) and replace it with the new encrypted value.
4. Save the file.
5. In the Management Console, navigate to Directories > UserStore and click Update. Select your modified UserStore.xml and click Next.
6. Follow the prompts to click Finish, Continue, and Restart Environment.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.