Note– Enclose the alias password in single quotes as shown in the example.
3. Restartthe Enterprise Server for the relevant domain.
Protecting Fileswith Encoded Passwords
Someles contain encoded passwords that need protecting using le system permissions. These
lesinclude the following:
■domain-dir/master-password
Thisle contains the encoded master password and should be protected with le system
permissions600.
■Anypassword le created to pass as an argument using the --passwordfile argument to
asadminshould be protected with le system permissions 600.
Changing the MasterPassword
Themaster password (MP) is an overall shared password. It is never used for authentication
andis never transmitted over the network. This password is the central point for overall
security;the user can choose to enter it manually when required, or obscure it in a le. It is the
mostsensitive piece of data in the system. The user can force prompting for the master
passwordby removing this le. When the master password is changed, it is re-saved in the
master-passwordkeystore, which is a Java JCEKS type keystore.
Tochange the master password, follow these steps:
1. Stopthe Enterprise Server for the domain. Use the asadmin change-master-password
command,which prompts for the old and new passwords, then re-encrypts all dependent
items.For example:
asadmin change-master-password>
Please enter the master password>
Please enter the new master password>
Please enter the the new master password again>
2. Restartthe Enterprise Server.
ManagingSecurity of Passwords
SunGlassFishEnterprise Ser ver2.1 Administration Guide • December 2008100