Configuring file-based user authentication

Edit online

You can configure IBM® Guardium® Key Lifecycle Manager or modify the existing configuration for file-based user authentication. File-based authentication is configured by default when you install the product.

Procedure

  • Using the graphical user interface
    1. Log in to the graphical user interface.
    2. On the home page, click the menu icon (Menu icon) at the upper left of the page.
    3. Click User management > Authentication providers.
      The current user authentication properties are displayed.
    4. To configure or modify the existing user authentication settings, click the edit icon (Edit icon) next to File authentication.
    5. In the File tab, make sure that the Enable file-based authentication option is selected and specify the following parameter values.
      Configuration properties

      Configuration parameters
      Property name Description
      Username Specify the user name of the IBM Guardium Key Lifecycle Manager administrator user.
      Password Specify the password for the IBM Guardium Key Lifecycle Manager administrator user.
      Confirm new password Specify the password that you provided in the Password field.
    6. Click Save.
    7. On the confirmation window, click OK.
  • Using REST interface
    1. Access the Swagger UI. For more information, Using Swagger UI.
    2. Authenticate and authorize the IBM Guardium Key Lifecycle Manager REST API operations.
    3. To configure file-based authentication, see Update File-Based Authentication Configuration REST Service.
    4. To view the authentication configuration values, see Get Authentication Configuration Details REST Service.
  • After an inline migration to IBM Guardium Key Lifecycle Manager5.1 from any earlier version of IBM Guardium Key Lifecycle Manager and subsequent enabling of FIPS 140-3, file-based users are not able to log in. To resolve this issue, you can run a utility to rehash the password of the file-based users.Using utility to rehash the passwords of the users in the server.xml file in IBM Guardium Key Lifecycle Manager 5.1.
    1. Go to either of the utility script's file path:
      Linux
      /opt/IBM/GKLMV51/migration/updatePassword.sh
      Windows
      C:\\Program Files\\IBM\\GKLMV51\\migration\\updatePassword.bat
    2. Open the bash, power shell, or cmd shell.
    3. Run either of the following commands and provide the values of USER_ID and USER_PASSWORD mandatory. Providing the value of WAS_HOME is mandatory.
      Linux
      ./updatePassword.sh <USER_ID> <USER_PASSWORD> [WAS_HOME]
      Windows
      updatePassword.bat <USER_ID> <USER_PASSWORD> [WAS_HOME]
    4. Restart the IBM Guardium Key Lifecycle Manager server.