Updating Db2 password for a stand-alone IBM Security Guardium Key Lifecycle Manager server

After you change or reset the Db2® password on the computer that hosts the IBM® Security Guardium® Key Lifecycle Manager server, you must update the password in IBM Security Guardium Key Lifecycle Manager so that IBM Security Guardium Key Lifecycle Manager can continue to connect to the Db2 database.

About this task

The password of the Db2 Administrator user must be the same as that of the Db2 data source password in WebSphere® Application Server Liberty.

You need to change the Db2 password at the operating system level in accordance with the password expiration policy as defined by your organization. If the password expires, the IBM Security Guardium Key Lifecycle Manager graphical user interface displays a data-loading error. You must then reset the Db2 password and update it in IBM Security Guardium Key Lifecycle Manager. To update the password on the operating system, you must be the database instance owner on an AIX® or Linux® system, or the Local Administrator on a Windows system.

Procedure

  1. Update the Db2 password on the operating system.
  2. Change the Db2 data source password that is configured in WebSphere Liberty:
    • Using graphical user interface
      1. Log in to the graphical user interface.
      2. On the header bar, click SKLM User and select Change Database Password.

        SKLM User is the user with which you have logged into the graphical user interface.

      3. In the Change Database Password window, type the new password.
      4. Click Submit.
    • Using REST interface
      1. Open a REST client.
      2. Obtain a unique user authentication identifier to access IBM Security Guardium Key Lifecycle Manager REST services. For more information about the authentication process, see Authentication process for REST services.
      3. Run Update Db2 Password on Standalone Server REST Service.

Results

The Db2 password is updated and Guardium Key Lifecycle Manager server agent can connect to the Db2 database.