Changing the password of the Liberty keystore in IBM OpenPages for IBM Cloud Pak for Data

You can change the password of the IBM® WebSphere® Liberty keystore.

Procedure

  1. Log in to the Red Hat® OpenShift® web client as an administrator.
  2. Click Workload > Secrets, and then click openpages-<instance_name>-platform-secret.
  3. Find the value for keystore-pw.
    The value in keystore-pw is the current password of the keystore. You need this password in a later step.
  4. Click Workload > Pods, and then click openpages-<instance_name>-sts-0.
  5. Click Terminal.
  6. Run the following command: 
    keytool -storepasswd -keystore /opt/ibm/wlp/output/defaultServer/resources/security/key.p12 -storetype PKCS12 -storepass <current_password>

    Replace <current_password> with the current password of the keystore.

  7. Follow the prompts to set the new password.
    Make a note of the password. You need it in a later step.
  8. Back up the configuration by running the following command: 
    cd /opt/ibm/OpenPages/aurora/bin
./OPBackup.sh /opt/ibm/OpenPages/openpages-backup-restore app-cp4d nosrvrst

    The backup is created in the /opt/ibm/OpenPages/aurora/openpages-backup-restore directory.

  9. Return to the Red Hat OpenShift web client.
  10. Click Workload > Secrets, and then click openpages-<instance_name>-platform-secret.
  11. Click Actions > Edit Secret.
  12. Update keystore-pw with the new keystore password.
  13. Restart the application server pods.
    1. Click Workload > StatefulSets, and then click openpages-<instance_name>-sts.
    2. Decrease the number of pods to 0. Wait for all pods to be removed.
    3. Increase the number of pods to the value that you use in your environment.

Results

The keystore password is changed. To verify the change, do the following steps:
  1. Click Workload > Pods, and then click openpages-<instance_name>-sts-0.
  2. Click Terminal.
  3. Run the following command:
    keytool -list -keystore /opt/ibm/wlp/output/defaultServer/resources/security/key.p12 -storetype PKCS12 -storepass <new_password>

    Where <new_password> is the password that you set in step 7.