Changing the `tw_admin` and IBM BPM admin passwords in an ND cluster environment

To change the tw_admin and IBM® BPM admin passwords that you specified when you installed IBM Business Process Manager in an ND cluster environment, use the administrative console.

Before you begin

If you do not have BPMAdmin_Auth_Alias defined in your environment, your profiles were most likely created before you upgraded to IBM Business Process Manager version 8.0. In this case, follow the process for changing the password in the IBM Business Process Manager version 7.5.1 information center.

Important: If you are using the internal security provider, use the Process Admin Console to maintain user accounts. If you configured a different type of user registry, you must maintain user accounts in the user interface for that user registry.

For example, if you used federated repositories with the file-based repository, which is the default repository in a WebSphere Application Server Network Deployment environment, use the administrative console to make changes to user accounts.

For example, if you use federated repositories with one or more LDAP repositories, use the LDAP user interface to make changes to user accounts. If tw_admin is a user from NDCluster LDAP for example, then the password must be changed in the NDCluster LDAP.

Procedure

Change the tw_admin password by completing the following steps.
1. Log in to the administrative console.
2. Navigate to Users and Groups > Manage Users and locate the tw_admin user account.
3. Change the password for the tw_admin user account.
4. Change the BPMAdmin_Auth_Alias password.
  1. In the administrative console, click Security > Global security.
  2. Under Authentication, click JAASConfiguration > J2C Authentication data.
  3. Navigate to BPMAdmin_Auth_Alias.
  4. Change the password for all aliases containing tw_admin as user.
5. Modify the tw_admin password for the roles associated with the tw_admin administrative user name using one of the following methods:
  - Go to Enterprise Applications > IBM_BPM_Teamworks_<node and server location> > User RunAs roles, for example: Enterprise Applications > IBM_BPM_Teamworks_Node01_Server01 > User RunAs roles. Change the password for the roles with which the tw_admin administrative user name is associated and apply the change. For example, if the twem and twuser roles are associated with the tw_admin user name, change the password for those roles.
  - Run the util\Security\bpmModifyMapRunAsRole.py utility to update the password for the administrative user for the system applications. See Defining RunAs roles user assignments for system applications for more information.
```
wsadmin.bat -port port number -lang jython -user username -password admin -f C:\WAS_INSTALL_LOCATION\util\Security\bpmModifyMapRunAsRole.py -usr  username -pwd admin -clusterName BPM.AppTarget -applicationName Teamworks
```
6. In a network deployment environment, you must synchronize the nodes that contain Process Center, Process Server, or Performance Data Warehouse cluster members.
  1. In the administrative console, click System administration > Nodes.
  2. Select all of the nodes and click Full Resynchronize.
  3. Stop and restart all of the clusters and servers.
7. Restart the cluster members.
Change the IBM BPM primary admin password by completing the following steps.
1. Log in to the administrative console.
2. Navigate to Users and Groups > Manage Users and locate the IBM BPM primary admin user account, for example admin.
3. Change the password for the IBM BPM admin user account.
4. Navigate to Security > Global Security, expand Java Authentication and Authorization Service, and click J2C Authentication Data.
5. Update each of the authentication aliases that have the IBM BPM admin user name listed in the User ID column.
6. Navigate to Servers > Deployment Environments and click the IBM BPM deployment environment.
7. Click Authentication Aliases.
8. Update the password.
9. In a network deployment environment, you must synchronize the nodes that contain Process Center, Process Server, or Performance Data Warehouse cluster members.
  1. In the administrative console, click System administration > Nodes.
  2. Select all of the nodes and click Full Resynchronize.
  3. Stop and restart all of the clusters and servers.

Changing the tw_admin and IBM BPM admin passwords in an ND cluster environment

Before you begin

Procedure

Changing the `tw_admin` and IBM BPM admin passwords in an ND cluster environment