etaadmin password reset broke IDM and Provisioning communication

Products

• CA Identity Manager
• CA Identity Portal
• CA Identity Governance
• CA Identity Suite

Issue/Introduction

We had a working system with Identity Manager and Provisioning integrated. We used Reset User Password and reset the etaadmin (Provisioning Administrator) password. Now, etaadmin can log into Identity Manager and also can log into Provisioning Manager but the integration of the products is destroyed and we can't provision any user. Is there anywhere else I am supposed to change the etaadmin's password to re-enable this integration?

Environment

All Identity Manager versions

Resolution

 

You should update the new password to the Provisioning directory object definition in the policy store as follows:

• Export the directory.xml via the /immanage management console.

• Use the Password Tool to encrypt your new password (see instructions below).

• Paste the newly encrypted password into the directory.xml file.

• Import the directory.xml file back into the environment via /idmmanage.

 

To use the Password Tool you should:

• Edit the file:

  CA Identity Manager\Password Tool\pwdtools.bat

  and uncomment the line:

  ::SET JAVA_HOME=....

  Set the correct JDK path to this variable and save the file.

• Then run the utility from the command line:

   

  pwdtools.bat MyNewPassword

  Depending on whether FIPS is in use, you might have to use a different switch.

• The utility will encrypt the password for you so you can copy and paste it into the XML file.