Update Passwords in your Aternity on-premise Deployment

You may want to change the passwords on the servers in your Aternity installation, for security reasons and to comply with corporate policy. You can change passwords on all or some of the servers at the same time.

The process for changing passwords on all of the servers may take several hours, during which time Aternity servers and dashboards will not be available, and Aternity will not collect data from monitored devices.

Aternity on-premise topology

Before you begin

Ensure that you have administrator credentials for the Aternity Aggregation Server, Management Server, Data Warehouse Server, Dashboard Server, and Vertica Database Server.

Your DBA should be available to make changes to the Oracle Database Server.

Note

You will have to reinstall the Dashboard Gateway, ETL Server, Aternity Data Source for Portal, and Aternity REST API Server as part of this procedure. If you are deploying Aternity in an air-gapped network, download the files and packages you need to install these components, before beginning the setup procedures. Learn more.

Procedure

  1. Step 1 Sign in to the Aternity Aggregation Server, Management Server, Data Warehouse Server, and Dashboard Server as an administrator.
    Important

    If you have more than one of any of these servers, you must sign in and change the password on each host computer.

  2. Step 2 Stop the AternityPlatform service on these servers, in this order:

    1. Management Server

    2. Aggregation Server

    3. Data Warehouse Server

    To stop the services, you must sign in to each computer as an administrator, and access the Windows Services screen.

  3. Step 3 On the main Dashboard Server, stop the Tableau service by opening a command prompt as administrator and entering tabadmin stop.

    Navigate to <setup_dir>\Tableau\Tableau Server\<version>\bin then enter tabadmin stop

    Stop the server on the main Dashboard Server
  4. Step 4 On the Dashboard Server, stop the Aternity Tableau Gateway service.
  5. Step 5 On the ETL Server, stop the cron service, which is used by the OS to schedule commands or scripts.

    Sign in to the ETL Server as a root user or sudo root user and run the command: systemctl stop crond

  6. Step 6 On the computer that hosts the Aternity Data Source for Portal and Aternity REST API Server, stop the services for the Aternity Data Source for Portal and Aternity REST API Server.

    Run these commands:

    • docker stop AOData

    • docker stop AternityDataSource

    Stop the AOData and AternityDataSource services

    You can verify the service names by running docker ps.

  7. Step 7 (DBA task) Sign in to the Oracle Database Server and change the ATERNITY and GR schema passwords by running alter user <name> identified by <new_password>.
    Change the schema passwords
    Important

    The ATERNITY schema password on the Oracle Database Server and the Vertica Database Server must be identical, so if you change one, you must change the other to match.

  8. Step 8 On the Vertica Database Server, change the database admin password.
    1. a Sign in to the Vertica Database Server host computer, and switch to the database admin user, such as dbadmin, using su <user name>.
    2. b Run the Vertica administration tool by entering admintools.
      Vertica's database administrator tools
    3. c Select Connect to Database.
    4. d Change the database administrator's password by running alter user <name> identified by <new_password>.
      Change the administrator's password
  9. Step 9 Configure Aternity to recognize the revised database credentials.
    1. a On the Management Server, launch the Configuration Tool from the Start menu, by right-clicking it and selecting Run as administrator to start.
      Open the Configuration Tool
    2. b In Database Configuration > Database Connection > Configure Database Credentials, change the password to the revised Oracle Database Server and Vertica Database Server password.
      Provide the new credentials for the Vertica Database Server
  10. Step 10 Reinstall the ETL Server using the new Vertica Database Server password (learn more).
  11. Step 11 On the Dashboard Server, start the Tableau service by opening a command prompt as administrator and entering tabadmin start.

    Navigate to <setup_dir>\Tableau\Tableau Server\<version>\bin then enter tabadmin start

    Start the Dashboard Server
  12. Step 12 In Windows services, start the Aternity Tableau Gateway service.
  13. Step 13 Update the Tableau administrator password.

    Open a browser, navigate to the Tableau console login page at http(s)://<server ip address>, and sign in as a Tableau user with administrator privileges. Select the Users tab > <server administrator> > Settings > Change Password.

    Change the password for all administrators, but not for any other users.

    Change each administrator's password
  14. Step 14 Sign in to the Dashboard Server, start the Tableau service and the Aternity Tableau Gateway service, and password.
  15. Step 15 Reinstall the Dashboard Gateway and provide the new Tableau server admin user password.
    Provide the new Tableau admin password to the Dashboard Gateway

    You can also change the Dashboard Gateway user password (learn more).

  16. Step 16 Access the Aternity Management Server computer.
  17. Step 17 Log in to the computer as a local administrator.

    To verify you are a local administrator on this computer, not a domain administrator, open the System control panel, select Advanced system settings > Computer Name, and confirm the Change button is active.

  18. Step 18 On that computer, launch the Configuration Tool from the Start menu, by right-clicking it and selecting Run as administrator to start.

    When you create any Aternity server it adds the Configuration Tool.

  19. Step 19 Select Tableau Dashboard Loader.
    Select to add dashboard layouts
  20. Step 20 Confirm the details to connect to the Dashboard Gateway on the Aternity Dashboard Server.
    Confirm the connection details to the Dashboard Gateway on the Dashboard Server
    Field Description
    Hostname / IP Address

    Enter the hostname or IP address of the Dashboard Gateway (which is the same as the Aternity Dashboard Server).
    Port

    Enter the port of the Dashboard Gateway, which you entered when creating the Dashboard Gateway.

    This is NOT the port for direct user access to the dashboards. This is the Dashboard Gateway port.
    Username / Password

    Enter the username and password of the Dashboard Gateway, which you entered when creating the Dashboard Gateway.

    Select Next to test the connection details to the Dashboard Gateway, which may take longer than expected.

  21. Step 21 Select Use an Existing Site and select the site name you used in your existing setup.
    Use the Tableau site as the target to save the dashboard layouts
  22. Step 22 Specify the dashboard layouts either built-in to the setup, or if you downloaded a file of dashboard updates, browse to the file.
    Add the layouts built-in to the setup or a separate patch update
    Field Description
    Dashboards Shipped with Setup

    Select to add the dashboard layouts which are built-in to this Configuration Tool, if you did not download a separate dashboard layout package.
    Custom Dashboard Content

    Select to browse to a separate downloaded dashboards package.
  23. Step 23 Start the AternityPlatform service on these servers, in this order:

    1. Management Server

    2. Data Warehouse Server

    3. Aggregation Server

    Start the service in the Windows Services screen.

    Important

    If you have more than one of any of these servers, you must start the service on each one.

  24. Step 24 Reinstall the Aternity Data Source for Portal and Aternity REST API Servers, so that you can provide the new database passwords.

    Learn more about reinstalling the Aternity Data Source for Portal.

    Learn more about reinstalling the Aternity REST API Server.

  25. Step 25 Open a browser and sign in to Aternity.

    Sign in as the administrator for the next steps.

  26. Step 26 Open a browser and sign in to Aternity.
  27. Step 27 (Optional) If your custom attributes use a connection to the Aternity Oracle Database Server, enter the updated password inside Aternity's settings.

    If you defined custom attributes using a query in the database, select the Gear Icon > Settings > Advanced Settings > Aternity > Dataserver > Handlers > StaticsMessageHandler > DerivedAttrGeneratorManager > generatorsData, and enter the new password in the xml file.

    Change the database password if your attribute mapping is database dependent
  28. Step 28 Select User Icon > Change Password.