VMware Telco Cloud Service Assurance: Changing existing user password in keycloak

Products

• VMware Smart Assurance

Issue/Introduction

Symptoms:
How to change the default / existing passwords for  users in keycloak.

Environment

VMware Smart Assurance - SMARTS

Resolution

By default VMware Telco Cloud Service Assurance creates  users like keycloak admin account and Operations UI users like admin, oper, maint in keycloak as native users. These users are pre-provisioned with known passwords during VMware Telco Cloud Service Assurance deployment. To change the default passwords the following steps need to be performed. Steps for changing keycloak admin user credentials: Login using default admin credentials to keycloak UI @ https://<ingress-service:port>/auth. In order to change the keycloak admin password click on the Master realm, as the admin (keycloak) user is present in master realm. Click Users, then view all users and then select ID of admin user. Click on the Credentials tab. The password can be changed for admin(keycloak) user in this screen. Enter the new Password and Disable the Temporary password option. Finally click on reset password. To validate, Logout and login into keycloak UI with admin user with the updated password. Steps for changing TCSA application UI user credentials: Login using default admin credentials to keycloak UI @ https://<ingress-service:port>/auth. In order to change the VMware Telco Cloud Service Assurance UI user password click on the NGINX realm, as these native users are present in NGINX realm. Click Users, then view all users and then select ID of relevant user. Click on the Credentials tab. there the password can be changed for the user. Enter the new password and Disable the Temporary password option. Finally click on reset password. To validate, logout and login with the user on VMware Telco Cloud Service Assurance Operations UI.