Delete passwords

 

The WebSphere Portal installation and configuration processes write security-sensitive information into multiple files. These files contain passwords in the clear. These files are not removed after the installation. When you no longer need this information, remove it and move the files to a safe place, or set the file permissions so that only authorized users can read them.

After you have installed WebSphere Portal and configured its components, follow these steps to remove this sensitive information:

  1. Start the Qshell Interpreter by entering the following on an OS/400 command line: 

        STRQSH

  2. Go to...

    /qibm/UserData/WebAS5/Base/WAS5Portal/PortalServer5/config

  3. Remove the work directory that was created during the portal installation by entering the following command: 

        WPSconfig.sh cleanup-work-dir

    Check the output for any error messages before proceeding with any additional tasks. If any of the configuration tasks fail, verify the values in...

    /qibm/UserData/WebAS5/Base/WAS5Portal/PortalServer5/config/wpconfig.properties

  4. Change to the directory /qibm/proddata/webas5/pme/bin.

  5. Enter the following command: 

        startServer -instance <instance> <app_server>

    where instance is the name of the WAS instance, and app_server is the name of the application server.

    The default name of the application server is the instance name.

  6. Change to the directory /qibm/userdata/webas5/base/<instance>/portalserver5/config.

  7. Remove all passwords from the wpconfig.properties file by entering the following command. You can skip this step if you configured WebSphere Portal using IBM Web Administration for iSeries, or the Install and Configure option of the installation program. 

        WPSconfig.sh delete-passwords

    Check the output for any error messages before proceeding with any additional tasks. If any of the configuration tasks fail, verify the values in...

    /qibm/UserData/WebAS5/Base/WAS5Portal/PortalServer5/config/wpconfig.properties

    To run additional configuration tasks, you might need to restore passwords to the wpconfig.properties file or specify them on the command line using the -D flag. Refer to Configuration task reference for more information.

 

See also