Skip to content

AEM Common Post-Refresh Procedures

Change Passwords

Method 1 - User Admin Tool

The TARGET instance will have the same passwords as the SOURCE instance. We need to change these to the values appropriate for the TARGET

Go To User Admin (${TARGET}/useradmin), search for the following users, and click the Set password link just below the Properties tab.

The passwords live in Vault under the path secrets/es.dbaa.app-delivery/CMS/aem_{tier}_admin.

Method 2 - CRX Explorer

Alternately, use the CRX Explorer (${TARGET}/crx/explorer/index.jsp). Log in with the "Log In" link -> "User Administration" -> "Find". Each user will have a "change password" link.

Passwords to Change See Vault for the values.

User Vault key Role
admin cmsa-<tier>.admin Administrative user
cmsadmin cmsadmin_-_<tier> Used by Jenkins to deploy components, templates and overlays
replication-receiver replication-receiver_-_<tier> (Publisher Only) Receives published content from author

Change the /system/console password (See note below)

  • This password is used to secure the /system/console interface. It is the only pasword in use during the startup phase. Later in the startup phase and for the remainder of program execution, the admin password from the TarMk database will be used.
  • The initial credential (e.g. from a fresh install) will be admin/admin.
  • ${TARGET}/system/console/configMgr - then search for Apache Felix OSGi Management Console
  • Use the same value as admin above.

Note: If you are getting a 403 Unauthorized when authenticating to ${TARGET}/system/console/configMgr, follow these steps:

  • Open an Incognito Browser session and visit ${TARGET}/crx/packmgr/index.jsp
  • In the top right, click on "Unauthorized - Login"
  • Authenticate as admin user
  • Browse to ${TARGET}/system/console/configMgr