Itential Automation GatewayDeploy and manageConfigure

Update default password

Once Itential Automation Gateway (IAG) is installed and configured, use this guide to change the default password, get started with the API, and set your security keys.

  • Default user name: admin@itential
  • Default password: admin

Change default password

You must first log in to obtain the authorization token and then paste the token into the change password curl command.

$curl -X POST --header 'Content-Type: application/json' --header 'Accept: application/json' -d '{ "password": "admin", "username": "admin@itential" }' 'http://localhost:8083/api/v2.0/login'
${"token": "NTAuMjczOTA4MTYwNDM5OTY2"}
$curl -X POST --header 'Authorization: <COPY TOKEN VALUE FROM PREVIOUS CMD HERE>' --header 'Content-Type: application/json' --header 'Accept: application/json' -d '{
>   "new_password": "super-secure-password",
>   "old_password": "admin"
> }' 'http://localhost:8083/api/v2.0/account/admin%40itential/change_password'

Alternate method: editing the SQLite database

The default password can also be changed by directly editing the underlying SQLite database. This may be required if Itential Automation Gateway is down or otherwise not accepting API requests. The sqlite3 Python module is included in all Itential Automation Gateway installations; as such, the following examples assume its usage as your SQLite interface.

1

Load the data file into sqlite3

$sqlite3 automation-gateway.db
2

List all tables (optional)

List all the tables present in the data file. The account table contains the password to be changed.

$.table
3

Update the admin password

Update the admin@itential user password on the account table. Provide the new password as a SHA-512 hash. In this example, the hash equals “Admin1234!”. If you use the hash as-is, be sure to update the password to a unique and secure value once you have access to the system.

$UPDATE account SET password_hash = "pbkdf2:sha512:40000$7z3XJWhA$8fb0c3cc8098cc9d1ae566e7d1d622794bfe8c1808fa9c42a8cdd9b5d098231d6b46f71a74f4b692ed2d21043cb4417234e4efe01df3e928e86f5c96ac449fb8" WHERE name = "admin@itential" ;
4

Review your changes (optional)

List all account table values to confirm your changes.

$select * from account;
5

Exit sqlite3

$.exit

Log in to Itential Automation Gateway

Log in to the IAG UI running at https://servername:8083.

  • The username is admin@itential.
  • The password is the <super-secure-password> you selected in the previous step.

For IAG 2022.1, log in at https://servername:8443.

Password reset functionality

During initial (first time) login as admin, a Change Password feature is enabled that allows you to enter a new password.

  • You will be asked to set security questions and a strong password that meets security guidelines.
  • The default email for admin is set to admin@itential.com but can be changed to an email that complies with your organization’s standards. The email and security answers you set will be used as an identifier for the account in case of password or username recovery.
  • For creation of user accounts, the email ID is a mandatory field.

Refer to Initial configuration for more information.