Manage Service accounts ~~~~~~~~~~~~~~~~~~~~~~~ :: ┌────────────────────────────────────────────────────────────────────────────┐ │ Service accounts │ └────────────────────────────────────────────────────────────────────────────┘ ┌─┬──────────────────────────────────────────────────────────────────────────┐ │1│Change password for the Console user "storedsafe" │ │2│Update password and set database permissions for the "gui" user │ │3│Update password and set database permissions for the "notify" user │ │4│Update password and set database permissions for the "healthcheck" user │ │5│Update password and set database permissions for the "ykval_verifier" user│ │6│Update password and set database permissions for the "konsol" user │ │7│Change password for the MySQL "root" user │ └─┴──────────────────────────────────────────────────────────────────────────┘ Move the cursor or enter a it's corresponding number (Q to Quit) Main> Provisioning> Service accounts> Change password for the Console user "storedsafe" ################################################# :: Service accounts Change password for the console ("storedsafe") user Default password for the "storedsafe" user is "changeme" Normally the password is set on 2 separate Yubikeys, each one programmed with a 32 character long static password, to support "Dual Control", however this is not enforced, but recommended. Password: Re-enter Password: WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING Ensure you have this password stored in a secure fashion, without it you will not be able to access the console of the StoredSafe appliance. Ok to change the password for the "storedsafe" user? (/n): y Activate the password change now? (/n): y Press any key to continue Update password and set database permissions for the "gui" user ############################################################### :: Service accounts The "gui" user is used by the frontend to communicate with the database Password for the "gui" user? (. to generate or Q to Quit) : . Password for the "gui" user? (. to generate or Q to Quit) : WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING Upon activating this change, the web server will stopped momentarily, while the password is changed. During this time, StoredSafe will be unavailable to web users. Commit the password change? (/n): y * Stopping web server lighttpd [ OK ] * Starting web server lighttpd [ OK ] Press any key to continue Update password and set database permissions for the "notify" user ################################################################## :: Service accounts The "notify" user is used by backend functions to communicate with the database Password for the "notify" user? (. to generate or Q to Quit) : . Password for the "notify" user? (. to generate or Q to Quit) : Press any key to continue Update password and set database permissions for the "healthcheck" user ####################################################################### :: Service accounts The "healthcheck" user is used by the healthcheck function, to verify database connectivity Password for the "healthcheck" user? (. to generate or Q to Quit) : . Password for the "healthcheck" user? (. to generate or Q to Quit) <1xLYNH0Z6t-R7-0S>: Press any key to continue Update password and set database permissions for the "ykval verifier" user ########################################################################## :: Service accounts The "ykval_verifier" user is used by the HSM validation function Password for the "ykval_verifier" user? (. to generate or Q to Quit) : . Password for the "ykval_verifier" user? (. to generate or Q to Quit) : * Restarting YubiHSM YubiKey KSM yhsm-yubikey-ksm * Unlocking YubiHSM key store yhsm-yubikey-ksm Press any key to continue Update password and set database permissions for the "konsol" user ################################################################## :: Service accounts The "konsol" user is used by the console application Password for the "konsol" user? (. to generate or Q to Quit) : . Password for the "konsol" user? (. to generate or Q to Quit) : Press any key to continue Change password for the MySQL "root" user ######################################### :: Service accounts The MySQL "root" user is the MySQL database superuser Password for the MySQL "root" user? (. to generate or Q to Quit) : . Password for the MySQL "root" user? (. to generate or Q to Quit) : Press any key to continue