How to reset the Provisioning Directory shared secret for CA Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

This KB details how to reset the Provisioning Directory shared secret.
 

Environment

Release:
Component: IDMGR

Resolution

Execute the following steps:

1. Stop the Application Server  

2. Run pwdtools.bat

pwdtools.bat -JSAFE -p <Directory shared secret>
 
Sample:
C:\Program Files (x86)\CA\Identity Manager\IAM Suite\Identity Manager\tools\PasswordTool>pwdtools.bat -JSAFE -p  Password01
Plain Text: Password
Encrypted value: {PBES}:<encrypted_string>
 

3. Update IMeTASharedSecret parameter in the systemWideProperties.properties file

Change the value to the Directory shared secret created by pwdtools above
Example:
\..\iam_im.ear\custom\identitymanager\systemWideProperties.properties
IMeTASharedSecret={PBES}:<encrypted_string>
 

4. Start the Application Server