How to Change Provisioning Store and User Store Passwords in Directory XML

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

Depending on site or company policies there may be a need to change your Provisioning Store and user store passwords.  Follow the steps below.

Environment

Release: 14.x

 

Component: Virtual Appliance, Identity Manager

Resolution

To change the Provisioning Store and User Store passwords in the Directory XML of the Identity Manager

Management Console, perform these steps:

 

1. Log in to the Identity Manager Management Console.

Note: If using cluster, stop Identity Manager on the secondary nodes.

2. Click Directories.

 

3. Click on the Provisioning Store.

 

4. Scroll to the bottom of the page and click Export to export <Provisioning Store>.xml file.

 

5. Take a backup of the <Provisioning Store>.xml file.

 

6. Open the <Provisioning Store>.xml file and search for the following section.

 

FIPS Mode:

 

 

Non-FIPS Mode:

 

7. In the Credentials tag line, replace the encrypted credentials with the new encrypted master password. You

can use the Password Tool to generate an encrypted password.

 

Password Tool

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-5/configuring/fips-140-2-compliance/the-password-tool.html

 

8. Save the file.

 

9. In the Management Console, click Directories.

 

10. Click on the User Store.

 

11. Scroll to the bottom of the page and click Export to export <User Store>.xml file.

 

12. Take a backup of the <User Store>.xml file.

 

13. Open the <User Store>.xml file and search for the following section.

 

FIPS Mode

 

Non-FIPS mode

14. In the Credentials tag line, replace the encrypted credentials with the new encrypted master password. You

can use the Password Tool to generate an encrypted password.

 

15. Save the file.

 

16. In the Management console, update the Provisioning Store and User Store by importing the <Provisioning

Store>.xml and <User Store>.xml files. While updating, ignore the warnings and click Finish.

 

17. When the text box stops scrolling, ensure it says 0 errors then click Continue.

 

18. Click Restart Environments.

 

Note: If using cluster, after Identity Manager startup sequence is complete, start Identity Manager server on

the remaining nodes.

 

19. Log in to the Identity Manager User Console and validate the new imadmin password.