Changing the EAdmin Administrator Password in Identity Governance

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

This article provides the required procedure to update the default administrative password for the AD1\EAdmin user in Identity Governance. Securing this account is a critical best practice for all production deployments.

 

Environment

• Product: Identity Governance
• Versions: 14.5, 15.0

Cause

By default, the Identity Governance (IG) installation configures the administrative user (AD1\EAdmin) with a default password (eurekify) and sets the application security parameter to disabled. This default configuration is intended for initial setup only; failing to update the password and enable security in a production environment leaves the system vulnerable to unauthorized access.

Resolution

Follow the steps below to update the administrative password and enable security settings.

1. Change the EAdmin Password:

   1. Log in to the Identity Governance portal.
   2. Navigate to Administration > Settings > Property Settings.
   3. Filter by sage.admin.password.
   4. Click the edit icon, update the value to your new secure password, ensure the type is database property, and click Save.
   5. Navigate to Administration > Settings > Common Property Settings.
   6. Filter by buildingBlockService.password.
   7. Update this value to match the new password set in step 4, ensure the type is database property, and click Save.

2. Enable Security:

   1. Locate the configuration settings and set the following parameters:
      text

       

      sage.security.disabled=falsesage.security.disableIMAuthentication=false

   2. Restart the Identity Governance service for these changes to take effect.

3. Verification:

   1. Test access with an incorrect password; you should receive the GENPRT006 error.
   2. Test access with the new, correct password to confirm a successful login.

Additional Information

Important: If workflow processes were imported prior to this password change, you must re-import them, as they utilize the EAdmin user credentials.