Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

change password

Is it a better practice to change the Administrator password[initially created during installation] in the CUCM 6.0 BE application.

Does it affect any usage of CUCM?

regards

Kumar

2 ACCEPTED SOLUTIONS

Accepted Solutions
Cisco Employee

Re: change password

Hi Kumar,

Which specific password are you referring to - The administrator password to log into the CUCM administration web page or the OS administrator password is used to log into the CLI?

For the former, you can change the password using the utils reset_ui_administrator_password command.

For the latter, you can use the CLI command 'set password admin' to change it.

There's no recommendation one way or the other regarding whether to change any of them after installation. As long as they haven't been compromised, you should be good either way.

Changing either password does not affect usage of CUCM.

Hope this help.

Regards,

Michael.

Super Bronze

Re: change password

Hi

There are several passwords you need to be aware of with CallManager 5+

1) The 'Platform Administrator' username/password. This is defined during setup of the CCM server, and is used to log into the 'OS Administration' web gui, and on the server console/SSH sessions. This is changed using this command:

set password admin

It is safe to change this, and it can be set on each server in the cluster.(i.e. it doesn't replicate between servers).

2) The 'application administrator' password. When you set up the CCM server, you define this username and password. Some engineers will make this 'administrator', but it is still seperate from the 'Platform Administrator' account. We typically use 'ccmadministrator' in line with the convention set by earlier CCM versions.

If both the platform admin and application admin have the same username it can get confusing.

This can be set using this command:

utils reset_ui_administrator_password

You can change the username using:

utils reset_ui_administrator_name

3) Cluster security password

The final one is the cluster password - this MUST be the same on all servers in the cluster or they will not communicate.

It's possible to change this (on each server) at any time, and the changes take effect when the server is restarted. The command is:

set password security

In terms of best practice, the cluster phrase, platform admin, and application admin accounts should all be kept secret.

You can create admin accounts for your administrators in CCMAdmin - just add the user accounts you have created for them to the 'Super Users' group.

You can create accounts for SSH/console access to the server using the 'set account' command.

Hope this helps

Aaron

Please rate helpful posts....

Aaron Please remember to rate helpful posts to identify useful responses, and mark 'Answered' if appropriate!
3 REPLIES
Cisco Employee

Re: change password

Hi Kumar,

Which specific password are you referring to - The administrator password to log into the CUCM administration web page or the OS administrator password is used to log into the CLI?

For the former, you can change the password using the utils reset_ui_administrator_password command.

For the latter, you can use the CLI command 'set password admin' to change it.

There's no recommendation one way or the other regarding whether to change any of them after installation. As long as they haven't been compromised, you should be good either way.

Changing either password does not affect usage of CUCM.

Hope this help.

Regards,

Michael.

New Member

Re: change password

Hi Michael, my console says No valid command entered when attempting these. Would you elucidate on process? Am running 5.0.4

Thanks! - charlie

Super Bronze

Re: change password

Hi

There are several passwords you need to be aware of with CallManager 5+

1) The 'Platform Administrator' username/password. This is defined during setup of the CCM server, and is used to log into the 'OS Administration' web gui, and on the server console/SSH sessions. This is changed using this command:

set password admin

It is safe to change this, and it can be set on each server in the cluster.(i.e. it doesn't replicate between servers).

2) The 'application administrator' password. When you set up the CCM server, you define this username and password. Some engineers will make this 'administrator', but it is still seperate from the 'Platform Administrator' account. We typically use 'ccmadministrator' in line with the convention set by earlier CCM versions.

If both the platform admin and application admin have the same username it can get confusing.

This can be set using this command:

utils reset_ui_administrator_password

You can change the username using:

utils reset_ui_administrator_name

3) Cluster security password

The final one is the cluster password - this MUST be the same on all servers in the cluster or they will not communicate.

It's possible to change this (on each server) at any time, and the changes take effect when the server is restarted. The command is:

set password security

In terms of best practice, the cluster phrase, platform admin, and application admin accounts should all be kept secret.

You can create admin accounts for your administrators in CCMAdmin - just add the user accounts you have created for them to the 'Super Users' group.

You can create accounts for SSH/console access to the server using the 'set account' command.

Hope this helps

Aaron

Please rate helpful posts....

Aaron Please remember to rate helpful posts to identify useful responses, and mark 'Answered' if appropriate!
359
Views
5
Helpful
3
Replies
CreatePlease to create content