Delete passwords from configuration scripts

 

+
Search Tips   |   Advanced Search

 

The WebSphere Portal installation and configuration processes write security-sensitive information into multiple files. These files contain passwords in them, which are not removed after installation. When you no longer need this information, you should remove it and move the files to a safe place or set the file permissions so that only authorized users can read them.

After you have installed WebSphere Portal and configured its components, follow these steps to remove this sensitive information:

1. Access the WebSphere Portal configuration directory:

   Windows and UNIX:

   1. Open a command prompt.

   2. Change to the directory portal_server_root/config.

   i5/OS

   1. Start the Qshell Interpreter by entering the following on an OS/400 command line:

      STRQSH
      

   2. Change to the directory portal_server_root/config.

2. Remove the work directory that was created during the portal installation:
   1. Enter the appropriate command:

      • UNIX:

        ./WPSconfig.sh cleanup-work-dir

      • Windows:

        WPSconfig.bat cleanup-work-dir

      • i5/OS:

        WPSconfig.sh -profileName profile_root cleanup-work-dir

        ...where profile_root is the name of the WebSphere Application Server profile where WebSphere Portal is installed; for example, wp_profile.

      Check the output for any error messages before proceeding with any additional tasks. If any of the configuration tasks fail, verify the values in the wpconfig.properties and wpconfig_dbdomain.properties files.

3. Start WebSphere Application Server and WebSphere Portal:

   Windows and UNIX:

   1. Open a command prompt and change to the following directory:
      • UNIX:

        was_profile_root/bin

      • Windows:

        was_profile_root\bin

      • i5/OS:

        app_server_root/bin

   2. Enter the following command:

      • UNIX:

        ./startServer.sh server1

      • Windows:

        startServer.bat server1

      • i5/OS:

        startServer -profileName profile_root

        ...where profile_root is the name of the WebSphere Application Server profile where WebSphere Portal is installed; for example, wp_profile.

      ...where server1 is the name of the WebSphere Application Server administrative server.

   3. Enter the following command:

      • UNIX:

        ./startServer.sh WebSphere_Portal

      • Windows:

        startServer.bat WebSphere_Portal

      • i5/OS:

        startServer WebSphere_Portal -profileName profile_root

        ...where profile_root is the name of the WebSphere Application Server profile where WebSphere Portal is installed; for example, wp_profile.

4. Open a command prompt and change to the following directory:
   • UNIX:

     portal_server_root/config

   • Windows:

     portal_server_root\config

   • i5/OS:

     portal_server_root/config

5. Remove all passwords from the wpconfig.properties and wpconfig_dbdomain.properties files by entering the appropriate command:
   • UNIX:

     ./WPSconfig.sh delete-passwords

   • Windows:

     WPSconfig.bat delete-passwords

   • i5/OS WPSconfig.sh -profileName profile_root delete-passwords

     ...where profile_root is the name of the WebSphere Application Server profile where WebSphere Portal is installed; for example, wp_profile.

   Passwords must also be restored to any backup properties files you have created.

   Check the output for any error messages before proceeding with any additional tasks. If any of the configuration tasks fail, verify the values in the wpconfig.properties and wpconfig_dbdomain.properties files.

   To run additional configuration tasks, you might need to restore passwords to the wpconfig.properties and wpconfig_dbdomain.properties files or specify them on the command line using the -D flag. Refer to Configuration task reference for more information.

 

Related information

• Database user registry

 

Parent topic:

Keeping the environment secure

 

Parent topic:

Configuration program

 

---