You can change the Manager Database admin password by using
dbadmin.bat in the
<Manager installation directory>\App\bin folder.
To make this change, you must know the current admin password. If you've forgotten the current password, perform the following steps to reset the
MariaDB admin password.
NOTE: For upgrades, the default location is the previous database installation directory.
IMPORTANT: You must perform this procedure after the Manager service is stopped. Failure to do so can result in database corruption and subsequent database-related issues.
- Right-click the notification area icon and select Stop Manager.
- Click Start, Run, type cmd, and press Enter.
- Change the directory to the <database>\bin directory:
- For versions 9.1.7.75 and earlier:
Type cd <Manager installation directory>\McAfee\Network Security Manager\MySQL\bin\ and press Enter.
- For versions 9.1.7.77 and later, and 10.1.9 and earlier:
Type cd <Manager installation directory>\McAfee\Network Security Manager\MariaDB\bin and press Enter.
- For versions 10.1.10 and later, including 11.x:
Type cd <Manager installation directory>\Program Files\Trellix\IPS Manager\MariaDB\bin and press Enter.
- Log on to the MariaDB root account. Type the following command and use the username root and the root password:
NOTE: Substitute the username and password in the command below, with root and root123.
mariadb.exe -u<user name> -p<password>
For example: MariaDB\bin\mariadb.exe -uroot -proot123
If you don't know the root account password, follow the steps listed in KB66303 - How to reset the root password for the MariaDB database component of Trellix Intrusion Prevention System.
-
Type
show processlist; and press Enter.
- Confirm that the output of show processlist; doesn't show any processes running other than the show processlist command itself.
NOTE: If there are Manager-related processes present, the Java process tied in with the Manager is still running.
The steps below are performed to completely stop all Manager-related processes before you change the admin password. The process starts again after you restart the Manager service:
- Open Task Manager and select the Processes tab.
- Check the running processes for java.exe.
- Select java.exe and click End Process.
- Confirm the username of the Manager database user:
- Open the <Manager installation directory>\App\config folder.
- Open the <database name>_ext_assembly.xml file.
- For version 9.1.7.75:
Open mysql_ext_assembly.xml in a text editor of your choice.
- For version 9.1.7.77 and later, including 10.x and 11.x:
Open mariadb_ext_assembly.xml in a text editor of your choice.
NOTE: For upgrades, the default file name is mysql_ext_assembly.xml.
- Find the line of text with <property name="username" value="#USERNAME#"/>.
- The value of #USERNAME# is the name of the Manager database user. This database username is typically 'admin' or 'intrushield,' and is referenced as 'admin' in this example.
- Update the MariaDB admin password from the MariaDB prompt. Type the following command and press Enter:
set password for admin@localhost = password('admin456');
flush privileges;
- Return to the <database name>_ext_assembly.xml file.
- Navigate to the section indicated below:
<extension-assembly>
<properties name="MariaDBJDBCManager">
<property name="port" value="3306"/>
<property name="username" value="admin"/>
<property name="host" value="localhost"/>
<property name="dbname" value="lf"/>
<property name="encodedpasswd" value="1b4f164b4273681f"/>
</properties>
</extension-assembly>
- Change the entry encodedpasswd to passwd as shown below:
From: <property name="encodedpasswd" value="1b4f164b4273681f"/>
To: <property name="passwd" value="admin456"/>
Instead of the encoded value, type the password in clear text. For example, admin456.
- Save the file, making sure that you retain the file name.
- Right-click the Manager notification area icon and select Stop Manager.
- Run <Manager installation directory>\App\bin\dbadmin.bat as administrator.
- Type the current password admin456 and new password admin123.
- When prompted for the root password, type your root password. For example, root123.
- Open the <database name>_ext_assembly.xml file that you previously edited.
- There are two entries for the password, one encoded and the other plain text.
<extension-assembly>
<properties name="MariaDBJDBCManager">
<property name="port" value="3306"/>
<property name="username" value="admin"/>
<property name="host" value="localhost"/>
<property name="passwd" value="admin123"/>
<property name="dbname" value="lf"/>
<property name="encodedpasswd" value="1b4f164b4273681f"/>
</properties>
</extension-assembly>
- Delete the line with the clear text password and save the changes:
<property name="passwd" value="admin123"/>
- Right-click the Manager notification area icon and click Start Manager.
