Changing a password

You can run a script to change the password for the following users: apmadmin, smadmin, itmuser, db2apm, db2fenc1, and dausr1.

About this task

The Cloud APM server creates an smadmin user ID with a default password of apmpass for communication between the Performance Management components. You might need to change the password, for example, to comply with your organization's security requirements, or if you changed the password but forgot it when IBM® Support requested that you to run the data collection tool.

In Cloud APM, the default user is apmadmin. The apmadmin user is by default a member of the Role Administrator role.

If you change the default password for the apmadmin user during the Cloud APM server installation, the password for the smadmin user is also changed to use the same password. Use this procedure if you want the smadmin user to use a different password from the apmadmin user password or if you want to change its password after the server installation.

If the Cloud APM server databases are using a remote Db2® server on an external system, you can change the password for the associated user ID on that system. See Changing passwords on a remote Db2 server.

Procedure

Complete the procedure on the system where the Cloud APM server is installed to change the password for one of the default user IDs.

  1. Open the directory where the script is located and run the script for the password you want to change:
    Table 1. Scripts for default user passwords
    Default user ID Default password Directory and script for password you want to change
    apmadmin apmpass /opt/ibm/ccm/apmpasswd.sh
    smadmin apmpass /opt/ibm/ccm/tools/smapasswd.sh
    itmuser
    db2apm
    db2fenc1
    dasusr1
    db2Usrpasswd@08 /opt/ibm/ccm/db2_users_passwd.sh user_name

    Where user_name is itmuser, db2apm, db2fenc1, or dasusr1.

    admin user mongoUsrpasswd@08 /opt/ibm/ccm/mongopasswd.sh to change the password for both users simultaneously. You are prompted for the old password and new password.

    If you use the db2_users_passwd.sh script when the Db2 server is on the same system as the Cloud APM server, the script uses the passwd command to change the password of the specified Db2 user and updates the Cloud APM server configuration with the modified password.

    When you use the db2_users_passwd.sh script when Cloud APM is configured to use a remote Db2 server, you use the script in the following ways:

    • Change the password of the itmuser on the Cloud APM server to match the itmuser password that has been set on the remote Db2 server.
    • Change the password of the db2apm user on the system where the Cloud APM server is installed.

    The Cloud APM server configuration is also updated with the modified passwords.

    You do not use the db2_users_passwd.sh script to modify the Db2 instance user's password or other database user passwords for the remote Db2 server.

    To change the password of the itmuser and Db2 instance user when your configuration uses a remote Db2 server, see Changing passwords on a remote Db2 server.

    The Cloud APM server is restarted if you change the password for itmuser but not if you change the password for the other database users.

  2. After you are prompted to provide a new password, type the password, press Enter, and retype the new password as prompted.
  3. If you are changing the smadmin user's password, you are also prompted for the Performance Management UI administrator account user name and password:
    • If the Cloud APM server is not configured to use an LDAP server, enter the apmadmin user and its password.
    • If the Cloud APM server is configured to use an LDAP server, specify the LDAP user that is configured as the systemUser value in the install_dir/wlp/usr/servers/apmui/server-oauth2-tai.xml file and the LDAP user's password. When you specify the LDAP user name, follow the same format that you use for logging into the Cloud APM console.
    The Performance Management UI administrator account user name and password are required for updating the server connection with the new smadmin password.

Results

The Cloud APM server is recycled and the new password for the user is recorded.