change password

Answered Question
Sep 10th, 2008

Is it a better practice to change the Administrator password[initially created during installation] in the CUCM 6.0 BE application.


Does it affect any usage of CUCM?


regards

Kumar

Correct Answer by Aaron Harrison about 8 years 5 months ago

Hi


There are several passwords you need to be aware of with CallManager 5+


1) The 'Platform Administrator' username/password. This is defined during setup of the CCM server, and is used to log into the 'OS Administration' web gui, and on the server console/SSH sessions. This is changed using this command:


set password admin


It is safe to change this, and it can be set on each server in the cluster.(i.e. it doesn't replicate between servers).


2) The 'application administrator' password. When you set up the CCM server, you define this username and password. Some engineers will make this 'administrator', but it is still seperate from the 'Platform Administrator' account. We typically use 'ccmadministrator' in line with the convention set by earlier CCM versions.


If both the platform admin and application admin have the same username it can get confusing.


This can be set using this command:


utils reset_ui_administrator_password


You can change the username using:


utils reset_ui_administrator_name



3) Cluster security password


The final one is the cluster password - this MUST be the same on all servers in the cluster or they will not communicate.


It's possible to change this (on each server) at any time, and the changes take effect when the server is restarted. The command is:


set password security


In terms of best practice, the cluster phrase, platform admin, and application admin accounts should all be kept secret.


You can create admin accounts for your administrators in CCMAdmin - just add the user accounts you have created for them to the 'Super Users' group.


You can create accounts for SSH/console access to the server using the 'set account' command.


Hope this helps


Aaron


Please rate helpful posts....

Correct Answer by Michael Owuor about 8 years 5 months ago

Hi Kumar,


Which specific password are you referring to - The administrator password to log into the CUCM administration web page or the OS administrator password is used to log into the CLI?


For the former, you can change the password using the utils reset_ui_administrator_password command.


For the latter, you can use the CLI command 'set password admin' to change it.


There's no recommendation one way or the other regarding whether to change any of them after installation. As long as they haven't been compromised, you should be good either way.


Changing either password does not affect usage of CUCM.


Hope this help.


Regards,

Michael.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (3 ratings)
Loading.
Correct Answer
Michael Owuor Wed, 09/10/2008 - 03:35

Hi Kumar,


Which specific password are you referring to - The administrator password to log into the CUCM administration web page or the OS administrator password is used to log into the CLI?


For the former, you can change the password using the utils reset_ui_administrator_password command.


For the latter, you can use the CLI command 'set password admin' to change it.


There's no recommendation one way or the other regarding whether to change any of them after installation. As long as they haven't been compromised, you should be good either way.


Changing either password does not affect usage of CUCM.


Hope this help.


Regards,

Michael.

cbruce Thu, 10/02/2008 - 10:24

Hi Michael, my console says No valid command entered when attempting these. Would you elucidate on process? Am running 5.0.4

Thanks! - charlie

Correct Answer
Aaron Harrison Wed, 09/10/2008 - 03:42

Hi


There are several passwords you need to be aware of with CallManager 5+


1) The 'Platform Administrator' username/password. This is defined during setup of the CCM server, and is used to log into the 'OS Administration' web gui, and on the server console/SSH sessions. This is changed using this command:


set password admin


It is safe to change this, and it can be set on each server in the cluster.(i.e. it doesn't replicate between servers).


2) The 'application administrator' password. When you set up the CCM server, you define this username and password. Some engineers will make this 'administrator', but it is still seperate from the 'Platform Administrator' account. We typically use 'ccmadministrator' in line with the convention set by earlier CCM versions.


If both the platform admin and application admin have the same username it can get confusing.


This can be set using this command:


utils reset_ui_administrator_password


You can change the username using:


utils reset_ui_administrator_name



3) Cluster security password


The final one is the cluster password - this MUST be the same on all servers in the cluster or they will not communicate.


It's possible to change this (on each server) at any time, and the changes take effect when the server is restarted. The command is:


set password security


In terms of best practice, the cluster phrase, platform admin, and application admin accounts should all be kept secret.


You can create admin accounts for your administrators in CCMAdmin - just add the user accounts you have created for them to the 'Super Users' group.


You can create accounts for SSH/console access to the server using the 'set account' command.


Hope this helps


Aaron


Please rate helpful posts....

Actions

This Discussion