Updating an identity provider connection password

When an identity provider password changes, you need to synchronize the service account password in the identity provider connection. Instead of rerunning the wizard, you can use either in the Venafi Configuration Console, or with the TppConfiguration utility. The utility runs from the command line or from a script.

You can only update the service account password in Trust Protection Platform to match the password in AD or LDAP. To change or rotate the identity provider password:

  • Make the change on the appropriate system.
  • Use VCC to provide the service account with the updated password.
  1. Remote into the Trust Protection Platform server as a master administrator.

  2. From the Windows Start menu, click Venafi Configuration Console.

  3. In the left pane, click Connectors.

  4. In the Platform Connectors pane, click the Identity Connector that requires changes.

  5. In the Actions pane, click Properties.
  6. Log in with your Trust Protection Platform local, master administrator credentials.
  7. On the General tab, type the identity provider password in Password box.
  8. Click Apply, and then restart all Venafi services.
  1. Remote into the Trust Protection Platform server as a master administrator.
  2. From an administrative command line, navigate to [Venafi installation folder]\Platform.
  3. (Optional) For TppConfiguration help such as syntax or return codes, type TppConfiguration -help.

  4. Type TppConfiguration.exe -identitypwd and follow the prompts:

    Input value

    Description
    Local TPP master admin name The Trust Protection Platform local, master administrator account name.
    Password The Trust Protection Platform local, master administrator password.
    Identity driver prefix
    • For AD use this format: AD+friendly name.
    • For LDAP, use this format: LDAP+ODSEE.
    New password for the driver The new service account password.

    For example:

    >C:\Program Files\Venafi\Platform>TppConfiguration.exe -identitypwd
Please enter local TPP master admin name: admin
Please enter the password 'admin': ************
Please enter the identity driver prefix: ad+svcAct
Please enter the new password for the driver: *******
TppConfiguration: Venafi Account user Admin requested to change the service 
  account password for identity connector 'ad+srvAct'
TppConfiguration: Venafi Account user Admin successfully changed service  
   account password for identity connector 'ad+svcAct'
  1. (Optional) For TppConfiguration help such as syntax or return codes, type[Venafi installation folder]\Platform TppConfiguration -help.
  2. In your script, call the TppConfiguration.exe utility and use the following switches:

    Switch

    Description

    -identitypwd:

    The new service account password.

    -prefix:
    • For AD use this format: AD+friendly name.
    • For LDAP, use this format: LDAP+ODSEE.

    -username:

    The Trust Protection Platform local, master administrator account name.

    -password:The Trust Protection Platform local, master administrator password.

    For example:

    TppConfiguration.exe -identitypwd:newpassword 
-prefix:ad+svcAct -username:admin -password:letmein

    Response:

    
TppConfiguration: Venafi Account user Admin requested to change the 
   service account password for identity connector 'ad+srvAct'
TppConfiguration: Venafi Account user Admin successfully changed 
   service account password for identity connector 'ad+svcAct'