Enabling Change Password Functionality

An optional functionality of LIQUENT InSight 6.2 provides users with the ability to change passwords on the login page.

To enable the change password functionality, the system must have SSL configured and the option change.password.enable=true must be set in the insight.var file.

To use secure connections,  LIQUENT InSight must be able to validate the certificate presented by an LDAP directory server. To do this you must import the root certificate (the Certificate Authority's certificate) into the keystore (the cacerts file) for the Java Runtime Environment (JRE) used by LIQUENT InSight. Run the following command: install_dir/bin/jre/bin/keytool -import \ -keystore install_dir/bin/jre/lib/security/cacerts \ -file root_certificate_path \ -alias alias

We recommend you use the -alias option to uniquely identify the certificate. The standard password for the cacerts file is changeit. You must import the root certificate for every LDAP directory server you are using with LIQUENT InSight. Creating client certificates for use with Microsoft Active Directory will only accept secure connections from  LIQUENT InSight if it has a valid client certificate that has been signed using the Certificate Services on a Windows 2008/2012 R2 Server. You must do this in addition to importing the root certificate, as described above. To do this, you must:
  • Generate the key pair for the client certificate
  • Generate a Certificate Signing Request (CSR) for the client certificate
  • Create the client certificate
  • Install the client certificate