We don't know our JCS password! How can we reset it?

Document ID : KB000030765
Last Modified Date : 14/02/2018
Show Technical Document Details

We don't know our JCS password! How can we reset it?

The only apparent way of doing resetting an unknown JCS password, short of a complete re-install of the ENTM, is to reinstall the Java Connector Server (JCS). This is fairly straight forward, a lot more so than reinstalling the entire Enterprise Manager as you do not have to worry about data.

Please bear in mind that this is a suggested solution from our CA support who worked out due to near necessity. It is far better to remember passwords than rely on this.

This is based upon CA PIM 12.8 on windows. This method should work with other versions. You might not have to do step 1 though. There should be enough here to get the idea of what to do for other versions.

We assumedthat the ENTM is installed to the default location (C:\Program Files\CA\AccessControlServer). You may need to adjust this for your site.

 

1. Assemble the JCS installer

On the CA PIM 12.8 Enterprise Manager install media the JCS installer is split across two zip files so we need to assemble it before we do anything else. To do this we will be using, for example, the cat command from the open source GNUWin32 CoreUtils for Windows (http://gnuwin32.sourceforge.net/packages/coreutils.htm) and as such will assume that the cat command is installed and in the PATH. However, any binary file joiner should work.

We need a temporary directory. We will use c:\t in this example.

Go to the following folder in the 12.8 ENTM install media:

EnterpriseMgmt\Disk1\InstData\

 

From Resource1.zip extract the following file to c:\t

W_\webgui\Setup\Java Connector Server\JavaConnectorServer_Build_Output\Web_Installers\InstData\Windows\NoVM\install_JavaConnectorServer.exe

Rename it C:\t\install_JavaConnectorServer.exe.1

 

From Resource1-part2.zip extract the following file to c:\t

W_\webgui\Setup\Java Connector Server\JavaConnectorServer_Build_Output\Web_Installers\InstData\Windows\NoVM\install_JavaConnectorServer.exe

Rename it C:\t\install_JavaConnectorServer.exe.2

 

You should now have two files, install_JavaConnectorServer.exe.1 and install_JavaConnectorServer.exe.2

 

To join the two files using cat, open a command terminal, navigate to c:\t and run:

cat install_JavaConnectorServer.exe.1 install_JavaConnectorServer.exe.2 > install_JavaConnectorServer.exe

 

2. Stop ControlMinder

Stop the following services:

JBoss Application Server 4.2.3

CA ControlMinder Connector Server (Java)

CA ControlMinder Web Service

Stop the ControlMinder agent:

secons -s

 

3. Uninstall JCS

Double click on C:\Program Files\CA\AccessControlServer\Connector Server\_uninst\Uninstaller.exe,  and follow the prompts. The wizard is very straight forward. You may get the following error:

Errors occurred during the uninstallation.An error occurred and product uninstallation failed. Look at the log file C:\Users\ADMINI~1\AppData\Local\Temp\2/im_connector_server_uninstall.log for details.

This can (probably) be ignored. In our testing it was due just to being unable to immediately delete the Connector Server folder.

You may also be prompted to reboot. Do this if requested. If not requested to reboot, wait a few minutes and then reboot anyway.

The CA ControlMinder Connector Server (Java) service might not have been removed from Services. This is not a problem.

 

4. Install JCS

Stop ControlMinder again as part 2 above.

Just clicking on the installer does not allow the location to be changed (as far as we could see) and it does not install it to "C:\Program Files\CA\AccessControlServer\Connector Server" so we need to use silent install. To do this we will create a text file c:\t\JCS_installer.properties, like the below, replacing <jcs password> with the password you wish to use.

JCS_INSTALL_DIR=C:\\Program Files\\CA\\AccessControlServer\\Connector ServerLOGIN_PWD=<jcs password>JAVA_EXE_PATH=C:\\jdk1.7.0\\bin\\java.exePARENT_TEMP_DIR=C:\\t

The other parameters should be self-explanatory and may need to be modified for your system. Remember to use double backslashes (\\), not single backslashes.

To do the actual install, in a command prompt:

c:\t\install_JavaConnectorServer.exe -i silent -f C:\t\JCS_installer.properties

You can determine when the install has finished by opening Windows Task Manager, going to the Processes tab and waiting for install_JavaConnectorServer.exe to stop running.

Wait a few minutes and reboot.

 

5. Set the JCS password in the ENTM

In the ENTM, System -> Connection Management -> Connector Server -> Modify Connector Server, Search for and select the JCS, enter the password in the Password field and submit.

Now test that it is working by checking in and checking out, and creating privileged accounts etc. Note that the first time you check in an account after reinstalling JCS, it may take a long time and you might think it is going to time out. Be patient. This is not unexpected and if everything is working ok it will check in, it will just take a long time. This should only happen the first time after reinstalling. Please also note that you should test with an endpoint of a type other than Windows Agentless because Windows Agentless endpoints do not use JCS.