Manage Passwords for a Database

This topic provides the details and procedure to manage SYS user and TDE Wallet passwords for a database.

You can change passwords:

Using the Console

Perform the following steps in the Console.

  1. On the Data Infrastructures list page, select the Data Infrastructure that you want to work with. If you need help finding the list page or the Data Infrastructure, see List Data Infrastructures.

  2. On the Data Infrastructure details page, select the VM Cluster tab to view the list of all VM Clusters.
  3. On the VM Clusters tab, select the VM Cluster that you want to work with.

  4. On the VM Cluster details page, select the Databases tab to view the list of all databases.

  5. On the Databases tab, select the Database that you want to work with.

  6. On the Database details page, from the Actions menu, Manage passwords.

  7. In the Manage passwords panel, provide the following details.

    • Select the password that you want to update.

    • Update administrator password: Updates the password for the SYS user only. Passwords for other administrative accounts, such as SYSTEM and PDBADMIN, and the TDE wallet password are not changed.

      Enter the new password in both the New administrator password and Confirm administrator password fields.

    • Update TDE wallet password: Updates the password for the TDE wallet only.

      Enter the current wallet password in the Existing TDE wallet password field, and then enter the new password in both the New TDE wallet password and Confirm TDE wallet password fields.

  8. Select Apply to update the selected password.

Using dbaascli Utility

Perform the following steps to change the SYS password, or to change the TDE wallet password using dbaascli.

The password that you specify in the Database Admin Password field when you create a new Oracle Base Database Cloud@Customer instance or database is set as the password for the SYS, SYSTEM, TDE wallet, and PDB administrator credentials. Use the following procedures if you need to change passwords for an existing database.

Note: If you are enabling Data Guard for a database, then the SYS password and the TDE wallet password of the primary and standby databases must all be the same.

Note: Using the dbaascli to change the SYS password will ensure the backup/restore automation can parallelize channels across all nodes in the cluster.

To change database passwords:

  1. To change the SYS password for a database:

    1. Log in to an Oracle Base Database Cloud@Customer virtual machine as the opc user.

    2. Run the following command:

      sudo dbaascli database changepassword --dbname <database_name> --user SYS

  2. To change the SYS password in a Data Guard environment:

    1. On the primary database, run:

      dbaascli database changePassword --dbName <dbname> --user SYS --prepareStandbyBlob true --blobLocation <location_to_create_blob_file>

    2. Copy the generated blob file to all standby databases and change the file ownership to the oracle user.

    3. On each standby database, run:

      dbaascli database changePassword --dbName <dbname> --user SYS --standbyBlobFromPrimary <location_of_copied_blob_file>

  3. To change the TDE wallet password for a database:

    1. Log in to an Oracle Base Database Cloud@Customer virtual machine as the opc user.

    2. Run the following command:

      sudo dbaascli tde changepassword --dbname <database_name>