Change the EnterWorks System Password

There are two "system" users in EnterWorks:

The admin user for the EnterWorks UI.
The admin user for EPX.

Both default to the system password.

In the following steps, if any of the passwords you are replacing are encrypted, use the following script to encrypt the new passwords.

<drive>:\Enterworks\EnableServer\bin\getEncryptedString.bat

To change the EnterWorks UI system password:

Change the password using the UI. If you are unable to log into the UI, change the password directly in the database by updating the B_USER table using the following SQL:
```
UPDATE B_USER SET PSWD='<encryptedPassword>' WHERE LOGIN = 'system'
```
where <encryptedPassword> is the new password that has been encrypted with the script:
```
<drive>:\Enterworks\EnableServer\bin\getEncryptedString.bat
```
Change the password in the affected microservices:
Note:
To list a microservice's parameters, run the executable with the -h option as shown in the example below.
```
<install-drive>:\EnterWorks\enable2020\services\bin\<service-name>.exe -h
```
1. Move to:
```
<drive>:\Enterworks\enable2020\services\bin
```
2. The create-<service-name>-service.cmd scripts set the services' parameters. They should exist in the folder. If they do not, create the create-service scripts.
3. For each of the following create-<service-name>-service.cmd files:
  - create-enable-channel-readiness-service.cmd
  - create-enable-web-server-service.cmd
  - create-enable-dam-manager-service.cmd
  - create-enable-monitor-dam-drop-service.cmd
4. Edit the create-<service-name>-service.cmd file. Set the values of the following parameters to the new password. (If the parameters don't exist, add them.)
```
-crCronLogin=
-crCronPass=
```
Use each of the create-<service>-scripts:
- create-enable-channel-readiness-service.cmd
- create-enable-web-server-service.cmd
- create-enable-dam-manager-service.cmd
- create-enable-monitor-dam-drop-service.cmd
Configure the Utilities with the new passwords. For each of the files:
- <drive>:\Enterworks\Utilities\RegenerateDAMVariant\RegenerateDAMVariant.exe.config
- <drive>:\Enterworks\Utilities\MonitorDAMDrop\MonitorDAMDrop.exe.config
- <drive>:\Enterworks\Utilities\DAMReportUtility\DamReportUtility.exe.config
edit the file:
```
<drive>:\Enterworks\Utilities\<utility-name>\<utility-name>.exe.config
```
1. Replace the old credentials with the new credentials in the following settings: (If the settings don't exist, add them.)
```
<add key="systemLogin" value="<insert-new-username-here>" />
<add key="systemPassword" value="<insert-new-password-here>" />
```
2. Save and exit the file.
Changing the password for EPX. There should be no need to change the EPX system user password since no one has direct access to EPX. If a security audit is done, it may show an HTML login page for EPX that allows access as user system, but this particular page is typically not needed and can be removed or moved, (as it is for the EPX web interface). If the EPX web interface is needed for troubleshooting purposes, it can be moved back into place for the duration of that activity then re-removed. If the password for EPX does need to be changed:
1. Open the file:
```
<drive>:\Enterworks\EPX\bin\conf\Enterworks.properties
```
2. Assign the value of these settings to the new password:
```
epim.userName=
epx.server.systemPassword=
```
3. Open Design Console on the server hosting the EPX services.
4. For each workflow, edit any Purge Completed Workitems BIC activity by double-clicking it or right-clicking it and selecting Properties.
  1. Open the Settings tab.
  2. Enter the new password in the Purge user password field
  3. Click OK.
5. When you are done editing the workflow, click OK.
6. Repeat for each workflow.
Restart all services.