Tech Tip: Reset Missing or Forgotten EiamAdmin Password in EEM 12.x

Document created by rusgr02 Employee on Sep 23, 2015Last modified by Lenn Thompson on Apr 20, 2016
Version 3Show Document
  • View in full screen mode

The below document describes how to reset the EiamAdmin password if it is missing or forgotten, on Windows and non-Windows platforms.

Access to the itechpoz DSA is required, so the current security for this DSA needs to be modified and then have the itechpoz DSA restarted.

  • Open the file /opt/CA/SharedComponents/CADirectory/dxserver/config/access/itechpoz.dxc (C:\Program Files (x86)\CA\Directory\dxserver\config\access\itechpoz.dxc on Windows)
    • Change "set access-controls = false;"
  • Save this file
  • Open the file /opt/CA/SharedComponents/CADirectory/dxserver/config/settings/itechpoz.dxc (C:\Program Files (x86)\CA\Directory\dxserver\config\settings\itechpoz.dxc on Windows)
    • Change "set min-auth = none;"
  • Save this file
  • Open the file /opt/CA/SharedComponents/CADirectory/dxserver/config/knowledge/itechpoz.dxc (C:\Program Files (x86)\CA\Directory\dxserver\config\access\itechpoz.dxc on Windows)
    item 2, highlighted below in green, is required on non-Windows EEM servers}
    • Change "set auth-levels = anonymous"
    • Change "address = ipv4 "<IP address>" port 509, ipv4 "<hostname>" port 509"
  • Save this file
  • Reinitialize itechpoz DSA from command line using su - dsa -c "dxserver init all" (restart DXserver_itechpoz service on Windows)
  • Install and run any ldap browser on your EEM server. We normally recommend JXplorer 3.2.2 or higher (available at
    • Connect to the itechpoz DSA using your EEM server information.
    • Save this template for future use if you like.
    • Once connected follow the tree down to the EiamAdmin ID noted in the screenshot below:
    • Double-click on the userPassword value and enter in the new password and then re-enter to confirm.
    • Click OK then click Submit

You can now check that the password in the EEM UI for the EiamAdmin account is working.