Change J2EE Administrator Password EP6 SP2

[Former Member]

I'm running EP60 SP2 patch level 32 on J2EE 6.20 patch level 32 with WebAS 6.4 startup framework. We are about to go live with the portal, and I now need to secure the system.

If I change the J2EE Administrator password through the Visual Administrator, how will the effect EP? Do I have to change anything else?

I found posts refering to EP6 SP9, but nothing for SP2. Any and all help is appreciated.

[Former Member]

STEP-1: Enable "SAP"*

1.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat

Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat

2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service

3.Double-click on the property "ume.superadmin.activated = TRUE"

4.Double-click on the property "ume.superadmin.password=<Enter any password ex: abc123>"

5.Save.

6.Restart the engine

STEP-2: Login with "SAP*" into portal

1. http://<host>:<Port>/useradmin/index.jsp

2. Enter userid / password as" SAP* / <password ex: abc123>"

3. Search for "Administrator" user

4. Reset or change password for "Administrtor"

STEP-3: Disable "SAP*"

1.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat

Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat

2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service

3.Double-click on the property "ume.superadmin.activated = FALSE"

4.Save.

5. Restart the engine.

STEP-4: Login with "Administrator"

1. http://<host>:<Port>/useradmin/index.jsp

2. Enter userid / Password as "Administrator / <password>

3. it will ask change password just change it.

Note: Just increase the no.of invalid_attemps during the deployment then make it according to your standereds.

1.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat

Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat

2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service

ume.logon.security_policy.lock_after_invalid_attempts = <number ex: 4>

3. Save & restart.

Thanks and regards

Revanth

[Former Member]

My Config Tool does not have an option for Secure Store to click on. I have version 6.2 of J2EE.

In the Visual Administrator, Under both the Server and State Controller nodes, Services > Security, User Management tab, I do have a button to Change User Password for the Administrator.

I do have the SAP Cryto Lib installed, so I'm concerned that this is not the correct, or at least the only place I have to change the password.

Any ideas?

[Former Member]

1. start config tool

2. change to edit mode

3. Change to edit mode again

4. navigate to cluster_data u2013 server u2013 cfg u2013 Services u2013 property sheet com.sap.security.core.ume.service

5. double click on property sheet com.sap.security.core.ume.service

6. set value true to ume.superadmin.activated

7. set password in ume.superadmin.password [remember this password]

8. Restart the server

9. http://server:port/index.html

10. click on user management, login using the sap* and above provided password.

11. then you can change the administrator password, unlock and so on.

12. Once you are done then revert back the superadmin in config tool [set value false to ume.superadmin.activated]otherwise no one except sap* can login.

Hope this will help.

[former_member432219]

Hi, The steps for EP6 SP2 (Web AS 6.20) are as follows

If you still know the old password logon to the J2EE engine from the host on which it is running using

> telnet localhost <telnet port>

to gain a console prompt.

However if you set a password at SAP install or after and forgot it (by default it is empty), then you need to start the J2EE engine via go.bat (Windows) or the go script (Unix). If J2EE is normally started via WebAS/R3 or R3 Startup Framework you will need to apply note 604080 first!

Start the J2EE engine with the go.bat/go script and in that console enter the command

> telnet localhost <telnet port>

> # 1. check the available command groups:

> man -g

> # 2. if you can see a "users" command group goto 5. else do:

> jump

> # 3. this displays the node ids of all nodes, now jump to the node:

> jump <serverid>

> # 4. check the command groups again and you should now see the "users" group:

> man -g

> # 5. if the "users" group is among the "Activated groups" goto 6. else do:

> add users

> # 6. change the password:

> password Administrator "<password>"

[Former Member]

Hi,

You have to update the password in the secure storage in the following way.

1.Go to the Config Tool.

2.Select secure store.

3.Select the admin/password

4.Enter the administrator's new password in the value field and choose Add

5. Choose Apply to save the data.

hope this helps,

Regards,

Umadevi Thirumurthi.