Update System User credentials

This procedure describes how to change the user name and password for the Content Platform Engine system user. Or you can use these steps when you want to rotate the System User password.

About this task

The cpe_system_user credentials are stored in the Global Configuration Database (GCD) and can be updated through the Administration Console for Content Platform Engine or using the Content Platform Engine Java API.

Updating these credentials should take the following into consideration:
  • Takes a maximum of only ten minutes to propagate the credentials update to all servers in a cluster.
  • No restart of the Content Platform Engine server is needed.
  • The connection to the IBM® FileNet® P8 domain must be made with a user account that is a GCD administrator gcd_admin.

Procedure

You can update the System User credentials manually or via the API:

  • Manual update
    1. In the LDAP directory that you use for authenticating Content Platform Engine users, create a new account for the cpe_system_user, or update the name or the password for the currently used account.
    2. Log in to the Administration Console for Content Platform Engine.
      If you are logging in as the System User to make this update, use the new user name and password that you updated in the LDAP directory server.
    3. Open the domain properties page for the FileNet® P8 domain.
    4. Update the user name or password as applicable.
  • API update
    1. In the LDAP directory that you use for authenticating Content Platform Engine users, create a new account for the cpe_system_user, or update the name or the password for the currently used account.
    2. Using a directory service administration tool or API, set the password for the System User to newPassword in the directory server.
      You can also use a password management tool.
    3. On a running Content Platform Engine server, execute the following code: 
      byte[] pw = newPassword.getBytes(“UTF-8”);
Domain.set_SystemUserPassword(pw);
Domain.save();

The Content Platform Engine server verifies that the new password is correct before it's saved.

To avoid potential issues in Process Engine, make sure there is a small amount of time between updating the directory and making the system user update.