Update Encrypted Passwords

Pulse provides an encryption option for modifying stored passwords in application configuration files. Here are some use cases and steps to perform encryption with deployment.

Encrypt and Update Pulse UI password

1. Run the following command to encrypt the new password

[root@pulse:~ (ad-default)]$ accelo admin encrypt

Enter the string to encrypt: : **********█

✔ Enter the string to encrypt: : **********█

ENCRYPTED:  0NtnkNHV+TbRlwpJC4uokg==

2. Copy the encrypted password hash and replace the password in the file config/acceldata_clustername.conf under the following config block:

appusers =  [

  {

    name = "<username>"

    password = "<password>"

    role = "admin"

  }

]

Note The above code block is a representation. Your code block must have the allocated name and password.

3. Save and push config changes

[root@pulse:~ (ad-default)]$ accelo admin database push-config

✔ Is the 'Database Service' up and running? [y/n]: : y█

4. Log in to Pulse UI using the updated password.

Similar actions must be used to alter and encrypt passwords stored in the config/acceldata_clustername.conf, work/clustername/vars.yml, and work/clustername/override.yml file.

Encrypt and Update Passphrase for GraphQL SSL Configuration

You can encrypt and update a passphrase used for GraphQL SSL configuration.

1. Run the following command to encrypt a new passphrase.

accelo admin encrypt

​

Enter the string to encrypt: : **********

✔ Enter the string to encrypt: : **********

ENCRYPTED:  <encrypted-password-string>

2. Add the encrypted passphrase string to the ad-core.yml file in the ad-graphql section.

SSL_PASSPHRASE_ENCRYPTED:  true   # set this to true to enable the use of encrypted passphrase

SSL_PASSPHRASE = <encrypted-passphrase-string>

Replace <encrypted-password-string> with your actual encrypted password value.

Encrypt and Update LDAP Bind Password

You can encrypt and update the LDAP password in the ldap.conf file for secure connection.

1. Run the following command to encrypt a new password.

accelo admin encrypt

​

Enter the string to encrypt: : **********

✔ Enter the string to encrypt: : **********

ENCRYPTED:  <encrypted-password-string>

2. Add the encrypted password string and set encryptedPassword=true in the ldap.conf file to enable secure authentication.

encryptedPassword = true   # set this to true to enable the use of encrypted password

bindPW = <encrypted-password-string>

Replace <encrypted-password-string> with your actual encrypted password value.

3. Run the following command to push the changes to the database.

accelo admin database push-config