Updating Db2 password for a stand-alone IBM Guardium Key Lifecycle Manager server

After you change or reset the Db2 password on the computer that hosts the IBM Guardium Key Lifecycle Manager server, you must update the password in IBM Guardium Key Lifecycle Manager so that IBM Guardium Key Lifecycle Manager can continue to connect to the Db2 database.

About this task

The password of the Db2 Administrator user must be the same as that of the Db2 data source password in WebSphere Application Server Liberty.

You need to change the Db2 password at the operating system level in accordance with the password expiration policy as defined by your organization. If the password expires, the IBM Guardium Key Lifecycle Manager graphical user interface displays a data-loading error. You must then reset the Db2 password and update it in IBM Guardium Key Lifecycle Manager. To update the password on the operating system, you must be the database instance owner on an AIX® or Linux® system, or the Local Administrator on a Windows system.

Procedure

  1. Update the Db2 password on the operating system.
  2. Change the Db2 data source password that is configured in WebSphere Liberty:
    • Using the graphical user interface
      1. Log in to the graphical user interface.
      2. On the header bar, click the settings icon (Menu icon) and select Change database password.
      3. In the Change database password page, type the new password and confirm the new password in the respective fields.
      4. Click Save.
    • Using REST interface
      1. Open a REST client or Swagger UI. For more information, see Using Swagger UI.
      2. Obtain a unique user authentication identifier to access IBM Guardium Key Lifecycle Manager REST services. For more information about the authentication process, see Authentication process for REST services.
      3. Run Update Db2 Password on Standalone Server REST Service.

Results

The Db2 password is updated and IBM Guardium Key Lifecycle Manager server agent can connect to the Db2 database.