IBM Support

How to Change the Password to the *System Store in Digital Certificate Manager for i (DCM)

Troubleshooting


Problem

This document contains two ways to change the password to the *System store in Digital Certificate Manager for i (DCM)

Resolving The Problem

There are two ways to change the password to the *System store.

1.

Change Password:
A. Open a browser to DCM (http://systemname:2006/dcm or https://systemname:2007/dcm) and log into the GUI.
B. Click on 'Open Certificate Store' and sign into *SYSTEM.
C. Near the top click 'Change Password' and complete the password change.  Optional: Click 'Change Password' again and set it back to the previous password.
2.
Reset Password:
From the store sign-on screen, there is an option to 'RESET PASSWORD'. This can only be done if the store password is in sync with the password stash. You do not need to know the old password in order to reset the password.
However, if you do not know the password and the store password is not in sync with the password stash, you do not have access to the store. You are left with deleting the store and rebuilding it from scratch, or restoring it from a system save from when you knew the correct password to the store.

The *System store files are in /QIBM/UserData/ICSS/Cert/Server/.
The Local CA store files are in /QIBM/UserData/ICSS/Cert/CertAuth/ and /QIBM/UserData/ICSS/Cert/Download/CertAuth.
For instructions on restoring the DCM environment see the following documentation:

[{"Type":"MASTER","Line of Business":{"code":"LOB68","label":"Power HW"},"Business Unit":{"code":"BU070","label":"IBM Infrastructure"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000000CISAA2","label":"Digital Certificate Manager"}],"ARM Case Number":"","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.3.0;7.4.0;7.5.0;7.6.0"}]

Document Information

Modified date:
20 October 2025

UID

ibm16836905