Changing Oracle Identity Manager Database Password

Handling Lifecycle Management Changes 12-9 To change the values of the CSF keys: 1. Login to Enterprise Manager. 2. Right-click the domain.

3. Navigate to Security, and then Credential.

4. Expand oim. The list of all the key and value pairs for Oracle Identity Manager are

displayed. You can edit and change the values.

12.2.5 Changing OVD Password

To change the OVD password: 1. Login to Oracle Identity Manager Administration.

2. Click Advanced.

3. Under Configuration, click Manage IT Resource.

4. From the IT Resource Type list, select Directory Server.

5. Click Search.

6. Edit the Directory Server IT resource. To do so, in the Admin Password field, enter the new OVD password, and click Update.

12.3 Configuring SSL for Oracle Identity Manager

This section describes the procedure for generating keys, signing and exporting certificates, setting up SSL Configuration for Oracle Identity Manager and for the components with which Oracle Identity Manager interacts, and establish secure communication between them. It includes the following topics: Table 12–1 CSF Keys Key Description DataBaseKey The password for the key used to encrypt database. The password is the user input value in the installer for the Oracle Identity Manager keystore. .xldatabasekey The password for keystore that stores the database encryption key. The password is the user input value in the installer for the Oracle Identity Manager keystore. xell The password for key xell, which is used for securing communication between Oracle Identity Manager components. Default password generated by Oracle Identity Manager installer is xellerate. default_keystore.jks The password for the default_keystore.jks JKS keystore in the DOMAIN_HOMEconfigfmwconfig directory. The password is the user input value in the installer for the Oracle Identity Manager keystore. SOAAdminPassword The password is user input value in the installer for SOA Administrator Password field. OIMSchemaPassword The password for connecting to Oracle Identity Manager database schema. Password is user input value in the installer for OIM Database Schema Password field. JMSKey The password is the user input value in the installer for the Oracle Identity Manager keystore. 12-10 Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager ■ Generating Keys ■ Signing the Certificates ■ Exporting the Certificate ■ Importing the Certificate ■ Enabling SSL for Oracle Identity Manager and SOA Servers ■ Enabling SSL for Oracle Identity Manager DB ■ Enabling SSL for LDAP Synchronization

12.3.1 Generating Keys

You can generate private and public certificate pairs by using the keytool command. The following command creates an identity keystore support.jks: keytool -genkey -alias support -keyalg RSA -keysize 1024 -dname CN=localhost, OU=Identity, O=Oracle Corporation,C=US -keypass weblogic1 -keystore support.jks -storepass weblogic1

12.3.2 Signing the Certificates

Use the following keytool command to sign the certificates that you created: .keytool -selfcert -alias support -sigalg MD5withRSA -validity 2000 -keypass weblogic1 -keystore support.jks -storepass weblogic1

12.3.3 Exporting the Certificate

Use the following keytool command to export the certificate from the identity keystore to a file, for example, supportcert.pem: .keytool -export -alias support -file supportcert.pem -keypass weblogic1 -keystore support.jks -storepass weblogic1 Note: Change the parameter values passed to the keytool command according to your requirements. Ensure that there is no line break in the keytool argument. Note: Change the parameter values passed to the keytool command according to your requirements. Ensure that there is no line break in the keytool argument.