Changing Passwords or PINs

It is a good practice to change your trust database/key-pair file password or PIN periodically. If your Administration Server is SSL-enabled, this password is required when starting the server. Changing your password periodically adds an extra level of server protection.

You should only change this password on your local computer. For a list of guidelines to consider when changing a password, see Creating Hard-to-Crack Passwords.

To change the trust database/key-pair file password

Steps

1. Access either the Administration Server or the Server Manager and click the Security tab.

2. Click the Change Key Pair File Password link.

3. From the Cryptographic Module drop-down list, select the security token on which you want to change the password.

   By default, this is Internal for the internal key database. If PKCS #11 modules are installed, all of the security tokens will be listed.

4. Enter your current password.

5. Enter your new password.

6. Enter it again and click OK.

   Make sure your key-pair file is protected. The Administration Server stores key-pair files in the directory server_root/alias.

   It is also important to know if the file is stored on backup tapes or otherwise available for someone to intercept. If so, you must protect your backups as completely as your server.