Changing passwords for the encryption KeyStore
You can change passwords for the encryption KeyStore.
About this task
Procedure
- Stop the server.
- Open a command line window, and go to the app_data/conf directory.
-
To view the alias of the secret key, run the following command:
Make a note of the alias of secret key, it is required in step 6. The keytool application is included in the Java™ developer kit and is not part of HCL DevOps Deploy (Deploy).keytool -keystore encryption.keystore -list -storetype pkcs12 -storepass changeit
- Back up the encryption.keystore file.
-
Change the encryption KeyStore password by using the following command:
The default password is changeit. Replacekeytool -storepasswd -new newPassword -keystore encryption.keystore -storetype pkcs12 -storepass changeit
newPassword
with your password of choice. The keytool application is included in the Java™ developer kit and is not part of Deploy. -
Change the secret key password by using the following command:
wherekeytool -keypasswd -alias XXX -keypass changeit -new newpassword -keystore encryption.keystore -storetype pkcs12 -storepass newpassword
alias
is the one that you noted in step 3, and the encryption KeyStore password and the secret key password must be the same. - In a text editor, open the server-install\conf\server\secured-installed.properties file. Specify the new encryption.keystore password in the following line of code:
- Start the server.