Changing Security password for Cluster

[Bryan Geoghan]

We have lost the security password and need it for a Cisco Unified Presence install. We are running CM v5.1. I believe this is the password for the cluster to synch up or something along those lines.

1) Do I just need to change the security password on the Publisher (through CLI)

or on both the Pub and the Subscribers?

2) Is changing the Security password service affecting?

Would appreciate any help. Thanks!

[Rob Huffman]

Hi Bryan,

This should not be service affecting;

Recovering the Administrator Password

If you lose the Administrator password and cannot access the system, use the following procedure to reset the Administrator password.

--------------------------------------------------------------------------------

Note During this procedure, you will be required to remove and then insert a valid CD or DVD in the disk drive to prove that you have physical access to the system.

--------------------------------------------------------------------------------

Procedure

--------------------------------------------------------------------------------

Step 1 Log in to the system with the following username and password:

Username: pwrecovery

Password: pwreset

The Welcome to admin password reset window displays.

Step 2 Press any key to continue.

Step 3 If you have a CD or DVD in the disk drive, remove it now.

Step 4 Press any key to continue.

The system tests to ensure that you have removed the CD or DVD from the disk drive.

Step 5 Insert a valid CD or DVD into the disk drive.

The system tests to ensure that you have inserted the disk.

Step 6 After the system verifies that you have inserted the disk, you get prompted to enter a new Administrator or Security password.

--------------------------------------------------------------------------------

Note The system resets the Administrator username to admin. If you want to set up a different Administrator username and password, use the CLI command set password. For more information, see Appendix A, "Command Line Interface."

--------------------------------------------------------------------------------

Step 7 Reenter the new password.

The system checks the new password for strength. If the password does not contain enough different characters, you get prompted to enter a new password.

Step 8 After the system verifies the strength of the new password, the password gets reset, and you get prompted to press any key to exit the password reset utility.

http://www.cisco.com/univercd/cc/td/doc/product/voice/c_callmg/5_0/iptp_adm/504/iptpch2.htm#wp1040303

Hope this helps!

Rob

[Bryan Geoghan]

So will this reset the Security password? And is this Security password the Database Access Security Password?

In the Installation guide for CM v5.1, it shows:

----

Database Access Security Password:

The system uses this password to authorize communications between nodes, and you must ensure that this password is identical on all nodes in the cluster. The Database Access Security password must start with an alphanumeric character, be at least six characters long, and can contain alphanumeric characters, hyphens, and underscores.

----

Does this mean I have to reset the Security password on each CallManager within the cluster?

Lastly, do I do this via the CLI or GUI?

Appreciate any help I can get. Thanks!

[Bryan Geoghan]

And according to the CM v5.1 Installation guide, it says:

Servers in the cluster use the security password to communicate with one another.

Save this password. You will be asked to enter the same security password for each subsequent node in the cluster.

Yes, you can change the entry after installation by using the following CLI command:

CLI > set password security

Now again, we aren't adding another node to the cluster, we are installing a CUPresence Server which is going to ask for the Security password. So should I follow the instructions I just posted above to change the security password?

Thanks

[Bryan Geoghan]

Sorry to keep adding on, but one more question.

What other possible applications could be using the current Security password used within the CM cluster? Does Unity or Unified Messaging use it in any way?

Also, how about the CCMAdministrator password. I have to change that one as well. Does Unity or Unified Messaging use it in any way?

[Rob Huffman]

Hi Bryan,

No worries. I don't think that you can recover a password using the method you noted (as you need to know the "old" password;

set password

{admin | security}

The systems prompts you for the old and new passwords.

Note The password must contain at least six characters, and the system checks it for strength.

This command allows you to change the administrator and security passwords.

Command privilege level: 1

Allowed during upgrade: No

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/cucos/5_1_1/iptpappa.html#wp1011080

If I were you I would open a TAC Case to ensure this is done perfectly and to make sure we don't make things worse here.

Rob