+

Search Tips   |   Advanced Search


Deleting passwords from configuration scripts

The installation and configuration processes write security-sensitive information into multiple files. These files contain passwords in them, which are not removed after installation. When you no longer need this information, you should remove it and move the files to a safe place or set the file permissions so that only authorized users can read them.

To delete passwords and other security-sensitive information from the configuration scripts:

After performing the tasks to clean up the work directory and delete the passwords, you may find that in order to successfully perform additional configuration tasks, you may need these passwords. Some tasks may require you to add the passwords back to the wkplc.properties and wkplc_comp.properties files while other tasks may allow you to specify the passwords on the command line using the –D flag. Refer to the configuration task documentation to determine which method is required.

  1. To access the WebSphere Portal configuration directory:

    Option Description
    Windows To access the configuration directory:

    1. Open a command prompt.

    2. Change to the profile_root/ConfigEngine directory.

    UNIX and Linux Access the configuration directory:

    1. Open a terminal session.

    2. Change to the profile_root/ConfigEngine directory.

    i5/OS To access the configuration directory:

    1. Type STRQSH on an OS/400 command line to start the Qshell Interpreter.

    2. Change to the profile_root/ConfigEngine directory.

  2. Remove the work directory that was created during the installation:

    Option Description
    Windows ConfigEngine.bat cleanup-work-dir -DWasPassword=password
    UNIX and Linux ./ConfigEngine.sh cleanup-work-dir -DWasPassword=password
    i5/OS ConfigEngine.sh cleanup-work-dir -DWasPassword=password

    Before running additional tasks, check the output for any error messages and, if instructed, correct any items before rerunning the task.

  3. Enter the following commands from the configuration directory to remove all passwords from the wkplc.properties and wkplc_comp.properties files:

    Option Description
    Windows ConfigEngine.bat delete-passwords -DWasPassword=password
    UNIX and Linux ./ConfigEngine.sh delete-passwords -DWasPassword=password
    i5/OS ConfigEngine.sh delete-passwords -DWasPassword=password

    Before running additional tasks, check the output for any error messages and, if instructed, correct any items before rerunning the task.


Parent topic:

Additional security features