Update Passwords in your Aternity on-premise Deployment

You may want to change the passwords on the servers in your Aternity installation, for security reasons and to comply with corporate policy.

Tip

You can change passwords on all or some of the servers at the same time. For example, you can only change password to the database.

The process for changing passwords on all of the servers may take several hours, during which time Aternity servers and dashboards will not be available, and Aternity will not collect data from monitored devices.

Aternity on-premise topology

Before you begin

Ensure that you have administrator credentials for the Aternity Aggregation Server, Management Server, Data Warehouse Server, Dashboard Server, and Vertica Database Server.

Your DBA should be available to make changes to the Oracle Database Server.

Note

You will have to reinstall the Dashboard Gateway and Aternity Docker Components Server as part of this procedure. If you are deploying Aternity in an air-gapped network, download the files and packages you need to install these components, before beginning the setup procedures. Learn more.

Procedure

  1. Step 1 Sign in to the Aternity Aggregation Server, Management Server, Data Warehouse Server, and Dashboard Server as an administrator.
    Important

    If you have more than one of any of these servers, you must sign in and change the password on each host computer.

  2. Step 2 Stop the AternityPlatform service on these servers, in this order:
    1. Management Server

    2. Aggregation Server

    3. Data Warehouse Server

    To stop the services, you must sign in to each computer as an administrator, and access the Windows Services screen.

  3. Step 3 Stop the Aternity Docker Components Server.

    Log in to the Aternity Docker Components Server as a user with root privileges on the computer or as a user configured to run aternity-docker-admin commands.

    In the aternity-docker-admin home directory, run the command ./aternity-docker-admin stop. This stops all the Aternity Docker components.

  4. Step 4 On the main Dashboard Server, stop the Tableau service by opening a command prompt as administrator and entering tabadmin stop.

    Navigate to <setup_dir>\Tableau\Tableau Server\<version>\bin then enter tabadmin stop

    Stop the server on the main Dashboard Server
  5. Step 5 On the Dashboard Server, stop the Aternity Tableau Gateway service.
  6. Step 6 (DBA task) Sign in to the Oracle Database Server and change the ATERNITY and GR schema passwords by running alter user <name> identified by '<new_password>'.
    Change the schema passwords
    Important

    The ATERNITY schema password on the Oracle Database Server and the Vertica Database Server must be identical, so if you change one, you must change the other to match.

    Note

    You can change passwords on all or some of the servers at the same time. If you change password only on the Oracle Database Server and the Vertica Database Server, it is not required to reinstall the Aternity Dashboard Gateway Server.

  7. Step 7 On the Vertica Database Server, change the database admin password.
    1. a Sign in to the Vertica Database Server host computer, and switch to the database admin user, such as dbadmin, using su <user name>.
    2. b Run the Vertica administration tool by entering admintools.
      Vertica's database administrator tools
    3. c Select Connect to Database.
    4. d Change the database administrator's password by running alter user <name> identified by '<new_password>'.
      Change the administrator's password
  8. Step 8 Configure Aternity to recognize the revised database credentials.
    1. a On the Management Server, launch the Configuration Tool from the Start menu, by right-clicking it and selecting Run as administrator to start.
      Open the Configuration Tool
    2. b In Database Configuration > Database Connection > Configure Database Credentials, change the password to the revised Oracle Database Server and Vertica Database Server password.
      Provide the new credentials for the Vertica Database Server
  9. Step 9 On the Dashboard Server, start the Tableau service by opening a command prompt as administrator and entering tabadmin start.

    Navigate to <setup_dir>\Tableau\Tableau Server\<version>\bin then enter tabadmin start

    Start the Dashboard Server
  10. Step 10 In Windows services, start the Aternity Tableau Gateway service.
  11. Step 11 Update the Tableau administrator password.

    Open a browser, navigate to the Tableau console login page at http(s)://<server ip address>, and sign in as a Tableau user with administrator privileges. Select the Users tab > <server administrator> > Settings > Change Password.

    Change the password for all administrators, but not for any other users.

    Change each administrator's password
  12. Step 12 Sign in to the Dashboard Server, start the Tableau service and the Aternity Tableau Gateway service, and password.
  13. Step 13 Reinstall the Dashboard Gateway and provide the new Tableau server admin user password.
    Provide the new Tableau admin password to the Dashboard Gateway

    You can also change the Dashboard Gateway user password (learn more).

  14. Step 14 Access the Aternity Management Server computer.
  15. Step 15 Log in to the computer as a local administrator.

    To verify you are a local administrator on this computer, not a domain administrator, open the System control panel, select Advanced system settings > Computer Name, and confirm the Change button is active.

  16. Step 16 On that computer, launch the Configuration Tool from the Start menu, by right-clicking it and selecting Run as administrator to start.

    When you create any Aternity server it adds the Configuration Tool.

  17. Step 17 Select Tableau Dashboard Loader.
    Select to add dashboard layouts
  18. Step 18 Confirm the details to connect to the Dashboard Gateway on the Aternity Dashboard Server.
    Confirm the connection details to the Dashboard Gateway on the Dashboard Server
    Field Description
    Hostname / IP Address

    Enter the hostname or IP address of the Dashboard Gateway (which is the same as the Aternity Dashboard Server).

    Port

    Enter the port of the Dashboard Gateway, which you entered when creating the Dashboard Gateway.

    This is NOT the port for direct user access to the dashboards. This is the Dashboard Gateway port.

    Username / Password

    Enter the username and password of the Dashboard Gateway, which you entered when creating the Dashboard Gateway.

    Select Next to test the connection details to the Dashboard Gateway, which may take longer than expected.

  19. Step 19 Select Use an Existing Site and select the site name you used in your existing setup.
    Use the Tableau site as the target to save the dashboard layouts
  20. Step 20 Specify the dashboard layouts either built-in to the setup, or if you downloaded a file of dashboard updates, browse to the file.
    Add the layouts built-in to the setup or a separate patch update
    Field Description
    Dashboards Shipped with Setup

    Select to add the dashboard layouts which are built-in to this Configuration Tool, if you did not download a separate dashboard layout package.

    Custom Dashboard Content

    Select to browse to a separate downloaded dashboards package.

  21. Step 21 Start the AternityPlatform service on these servers, in this order:
    1. Management Server

    2. Data Warehouse Server

    3. Aggregation Server

    Start the service in the Windows Services screen.

    Important

    If you have more than one of any of these servers, you must start the service on each one.

  22. Step 22 Reinstall the Docker Components, so that you can provide the new database passwords.
  23. Step 23 Open a browser and sign in to Aternity.

    Sign in as the administrator for the next steps.

  24. Step 24 Open a browser and sign in to Aternity.
  25. Step 25 (Optional) If your custom attributes use a connection to the Aternity Oracle Database Server, enter the updated password inside Aternity's settings.

    If you defined custom attributes using a query in the database, select the Gear Icon > Settings > Advanced Settings > Aternity > Dataserver > Handlers > StaticsMessageHandler > DerivedAttrGeneratorManager > generatorsData, and enter the new password in the xml file.

    Change the database password if your attribute mapping is database dependent
  26. Step 26 Select User Icon > Change Password.
  27. Step 27 (Optional) Set password for Aternity Raw Data Docker Component (Cassandra) using the Docker administration tool.

    (Aternity on-premise 11.0.0 and 11.0.1 only): Run sudo ./aternity-docker-admin cassandra set-password

    (Aternity on-premise 11.0.2 only): Run aternity-docker-admin cassandra set-password

    The tool allows more operations for the Raw Data Component as described in the below table.
    Important

    (Aternity on-premise 11.0.2 only): If you deploy Aternity with a non-root user, do NOT preface the docker commands with sudo.

    Command Usage Description

    disable-ssl

    sudo ./aternity-docker-admin cassandra disable-ssl

    Disables SSL encryption for the Raw Data Component.

    enable-ssl

    sudo ./aternity-docker-admin cassandra enable-ssl

    Enables SSL encryption for the Raw Data Component.

    fix

    sudo ./aternity-docker-admin cassandra fix

    Fixes and restarts a malfunctioning Raw Data Component.

    fix-and-clear-data

    sudo ./aternity-docker-admin cassandra fix-and-clear-data

    Clears data in the Raw Data Component.