How to update eiamadmin password for EEM, AutoSys and WCC

Products

• Autosys Workload Automation

Issue/Introduction

When corporate security policies mandate periodic password updates or during environment reconfigurations, the eiamadmin password must be updated across CA Embedded Entitlements Manager (EEM), AutoSys Workload Automation AE, and CA Workload Control Center (WCC). Failure to synchronize this password across all components will result in component communication errors, validation exceptions, or authentication failures.

Environment

AutoSys Workload Automation 24.x (and relevant 12.x versions)

Resolution

To update the eiamadmin password completely, perform the following steps across the respective product components in this specific sequence:

Step 1: Update the eiamadmin user's password within EEM itself

1. Log into the EEM UI as the eiamadmin user.

2. On the right side of the screen, select Change Password.

3. Enter the User Name, Old password, New password, and Confirm password.

4. Click OK to save the updated credentials.

Step 2: Update the password AutoSys has for eiamadmin

1. Log into the AutoSys management server and open a command prompt/terminal.

2. Execute the autosys_secure utility.

3. Select the following menu options:

   • [2] Manage CA EEM security settings.

   • [1] Manage CA EEM server settings.

4. (Optional) You may select [1] Show current CA EEM server settings. to review your active configuration before making updates.

5. Select [2] Set CA EEM server location and regenerate certificate.

6. Provide the EEM host details along with the eiamadmin user ID and its newly updated password.

NOTE: This procedure only needs to be completed once per AUTOSERV instance since the eiamadmin details are securely stored within the AutoSys database.

Step 3: Update EEM details for each WCC host

1. Navigate to the WCC install location safex directory on your host:

   cd $CA_WCC_INSTALL_LOCATION/safex
   

2. Execute the safex command to generate a new certificate referencing the updated password:

   ./safex -h target_EEM_servername -u EiamAdmin -p EiamAdmin_Password -f IssueCertificate.xml
   

3. Relocate the newly generated wcc.pem and wcc.key files to the WCC configuration folder:

   mv wcc.pem wcc.key $CA_WCC_INSTALL_LOCATION/data/config/
   

   NOTE: Ensure that file ownership and permissions on wcc.pem and wcc.key strictly match the existing files within that directory. Repeat this process for each additional WCC host if you have a multi-host deployment.

4. Change your working directory to the bin path:

   cd $CA_WCC_INSTALL_LOCATION/bin
   

5. Execute the wcc_config.sh utility to link the updated credentials and certificates:

   ./wcc_config.sh -u <username> -p <password> --eemhostname <eemhostname> --eemadmin EiamAdmin --eempassword <eiamadmin_password> --eemcertname wcc.pem --eemcertkey wcc.key
   

   • Replace <username> and <password> with a valid account capable of logging into WCC with administrator or commander-type permissions.

   • Replace <eemhostname> with your actual EEM host name.

   • Replace <eiamadmin_password> with the new eiamadmin password.

6. To verify the updated configuration details, you can execute:

   Bash

    

   ./wcc_config.sh -u <username> -p <password> --displayeem
   

    NOTE: This procedure needs to be completed on EACH WCC host individually.  And the services need to be restarted for the changes to be in effect.