Enabling Change Password Functionality
An optional functionality of LIQUENT InSight 6.2 provides users with the ability to change passwords on the login page.
To enable the change password functionality, the system must have SSL configured and the option
change.password.enable=true must be set in the
insight.var file.
To use secure connections, LIQUENT InSight must be able to validate the certificate presented by an LDAP directory server. To do this you must import the root certificate (the Certificate Authority's certificate) into the keystore (the cacerts file) for the Java Runtime Environment (JRE) used by LIQUENT InSight. Run the following command: install_dir/bin/jre/bin/keytool -import \ -keystore install_dir/bin/jre/lib/security/cacerts \ -file root_certificate_path \ -alias alias
-alias
option to uniquely identify the certificate. The standard password for the
cacerts file is
changeit. You must import the root certificate for every LDAP directory server you are using with
LIQUENT InSight. Creating client certificates for use with Microsoft Active Directory will only accept secure connections from
LIQUENT InSight if it has a valid client certificate that has been signed using the Certificate Services on a Windows 2008/2012 R2 Server. You must do this in addition to importing the root certificate, as described above. To do this, you must:
- Generate the key pair for the client certificate
- Generate a Certificate Signing Request (CSR) for the client certificate
- Create the client certificate
- Install the client certificate