Change NCM passwords

This section describes how to change the passwords for the Network Configuration Manager database, lockbox, and PKCS certificate to a minimum of 15 characters.

Before upgrading in silent mode, follow the steps to change these passwords to 15 characters.

Procedure

1. Steps to update database password:
   1. Execute below commands in NCM Application server:
      1. Run the $VOYENCE_HOME/tools/password-change.pl script to update the database password.

         # type the letter 'C' to change a password  ([C]hange Single Password)    
         # type the number '7' to change the database password (7. database) 
         # enter the old (9 char long) password when prompted for 'Current Password'
         # enter the new  password when prompted for 'New Password'

      2. The encrypted password was generated using the NCM java utility. It takes the plain text password as an argument and outputs the encrypted password.

         source /etc/voyence.conf
         $JAVA_HOME/bin/java -cp "$VOYENCE_HOME/tools" NCM -e PLAIN_TEXT_PASSWORD

      3. Restart vcmaster service.
   2. Update Encrypted password in NCM Database server.

      The database password is saved in /opt/smarts-ncm/conf/setup/install.properties in an encrypted form in the NCM database server. This file is used by the NCM installer during the NCM database upgrade.

      After changing the password on the Application server, copy the encrypted database password (as mentioned in step 1 > a > 2) from Application server to the database server.

      1. Open $VOYENCE_HOME/conf/setup/install.properties file.
      2. Search for the word DBPW.
      3. Replace the old encrypted password with the new encrypted password generated:

         DBPW=<ENC>-395cce2abe818dbee0f4fadaae6c7657</ENC>

2. Steps to update lockbox password.
   1. Execute the below commands in NCM Application server:
      1. Run $VOYENCE_HOME/tools/passphrase/changePassphrase.pl, and change the new lockbox passphrase to 15 characters.
      2. To unlock the lockbox with new passphrases, run the following command:

         cd $VOYENCE_HOME/bin
         ./cstdriver -lockbox ../data/lockb.clb -passphrase NEW_LOCKBOX_PASSPHRASE

      3. Restart vcmaster service.
   2. Execute the below commands in NCM Device server:
      1. Run the following commands:

         source /etc/voyence.conf
         cd $VOYENCE_HOME/bin
         ./cstdriver -lockbox ../data/lockb.clb -passphrase OLD_LOCKBOX_PASSPHRASE -change-passphrase NEW_LOCKBOX_PASSPHRASE

      2. Copy the updated lockb.clb file from Application server to the Device server and update LOCKBOX FILE location in the silent-install.properties accordingly.
      3. Restart vcmaster service.
3. Steps to update PKCS password:
   1. Execute the below commands in NCM Application server:

      source /etc/voyence.conf
      cd $VOYENCE_HOME/bin
      perl exportcertsintopkcs.pl NEW_PKCS_PASSWORD

   2. Change the ownership privilege, by running the command:

      chown ncm:voyence $VOYENCE_HOME/conf/bundle.p12

   3. Copy the updated bundle.p12 file from Application server to the device server and update CERT_FILE location in the silent-install.properties.
   4. Restart vcmaster service.