9.1

Edit

Password Upgrade Guide

Since 9.1.0.3

The guide explains how to change the passwords for services

  • MySQL admin user
  • PostgreSQL admin user
  • Java trust store master password
  • Nexus users password
  • Workspace and Workspace-sandbox
  • Workfusion (Control Tower)
note

Java trust store is located on every single host in your environment, you need to execute the password update procedure for this service at all your hosts.

To change the passwords you need to be sure that the <INSTALLDIR>/distr directory exists on the host

Perform the steps below on DB server.

  1. Log in to DB Server via SSH.

  2. Change a user to the default user wfuser.

    su - wfuser
cd /opt/workfusion/wf_installer/

  3. Copy the previously stored secrets.yml and config.yml files to the installation directory. If you don't have these files, you can decrypt previously encrypted files with the following commands:

    ansible-vault decrypt /opt/workfusion/distr/latest/secrets_overrides.yml --output /opt/workfusion/wf_installer/secrets.yml --ask-vault-pass
cp /opt/workfusion/distr/latest/config.yml /opt/workfusion/wf_installer/config.yml

    For decrypting the *_overrides.yml files, enter the Vault password that was generated with the last update or installation process.

  4. Edit secrets.yml and change the old passwords with any available editor ("vi" is used in the example below):

    vi secrets.yml

  5. Run the password update step.

    ./install.sh passwords_update db

This step will ask for the Vault password generated with the last update or installation process.

  1. Store the Vault password. In this step, you need to store the provided Ansible vault password in the trusted secure location for updating passwords in the future.
← PreviousNext →