How to change default user & password login for WebTomcat admin page

Products

• CA Spectrum

Issue/Introduction

We can access WebTomcat administration page at http://<OC_IP_Address>:<webtomcat_port>/spectrum

The default login is documented as spectrum | spectrum

Can this be changed for better security? 

Cause

Default WebTomcat admin login is insecure

Environment

Release : 21.2

Component : Spectrum OneClick

Resolution

The default username and login for WebTomcat Admin page is located in webswing.config file. Once you make the change and save the file, you must then restart WebTomcat: 

<SPECROOT>/webtomcat/webswing/webswing.config

"path" : "/",
    "security" : {
      "module" : "EMBEDED",
      "config" : {
        "users" : [ {
          "username" : "spectrum",
          "password" : "spectrum",
          "roles" : [ "admin" ]
        } ]
 

<SPECROOT>/webtomcat/bin/stopWebTomcat
<SPECROOT>/webtomcat/bin/startWebTomcat

 

IMPORTANT NOTE: 

If you do make change to the WebTomcat admin login credentials, be sure to make a note of this change. Broadcom Support will not know this change is made and if access to WebTomcat admin is needed tor a support issue, the new username and password will need to be known.