Update Daml Index Database Password on an Existing Client Node for vSphere

You can change the Daml index database password on deployed Client nodes to secure the Daml Ledger and Daml index database connection.

Prerequisites

Identify the Client node IP addresses and the existing Daml index database password you want to change.

Procedure

1. SSH to the Client node using the VMware Blockchain password.
2. Connect to the Daml index database and change the password for the indexdb user.
3. Get the Daml index database container ID and note down the port number.

   sudo docker ps -a

4. Retrieve the Daml index database IP address.

   sudo docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' <daml_index_db container ID>

5. Log in to the Daml index database.

   sudo psql -h <the-db-ip> -p <port> -U indexdb

6. Enter the Daml index database's existing password.
7. Change the existing Daml index database password at the prompt.

   indexdb=# \password

8. Enter the new password.
9. Exit the Daml index database.

   indexdb=# \q

10. Update the Client node configuration files with the new password using a text editor.

    • Update the Daml Ledger API configuration file- /config/daml-ledger-api/environment-vars.

    • Update the Daml index database configuration file- /config/daml-index-db/environment-vars.

    • Update the Telegraf configuration file- /config/telegraf/telegraf.conf.

11. Restart the Docker containers with the new password.

    sudo docker restart <daml_ledger_api ID> <daml_index_db ID> <telegraf ID>

12. Update the VMware Blockchain Orchestrator output file with the new Client node password.
    1. Open the VMware Blockchain Orchestrator output file.
    2. Search for the Client node IP address you updated with a new password.
    3. Add the new password to the corresponding Client node in the suggested pattern to the output file.

       Node Id: <node id>, 
       name: <location, sddc>, 
       key: Daml_DB_PASSWORD, 
       value: <new password>