Article summary

Summary

AEM Forms 6.x has a few different Super Administrator Accounts. This article suggests best practices for updating the default passwords for these accounts

A special thanks to J.P. Terry from SmartDoc Technologies for contributing this article.

Digital Marketing Solution(s) AEM Forms 6.x
Audience Administrators and Developers
Required Skills AEM Forms 6.x
Version Adobe Experience Manager Forms 6.2 and 6.3

How many accounts are there?

If you are using AEM Forms, there are a few administrator accounts you need to manage. This is partly due to the dual legacy of AEM Forms. As seen in this diagram, AEM Forms on OSGI is a direct descendent of Communiqué WCM (commonly called CQ). On the other hand, AEM Forms on JEE has a dual legacy and is a combination of CQ and Adobe’s LiveCycle product line of document-generation services.

AEM Forms

Therefore, you need to manage two different administrator accounts while also updating the Adobe LiveCycle Client SDK Configuration properties and the properties of any replication agents.

The default Super Administrator account credentials for AEM Forms on JEE is:    

  • Username: administrator     
  • Password: password

The default Super Administrator account credentials for AEM Forms on OSGI is:    

  • Username: admin
  • Password: admin

As mentioned, the Adobe LiveCycle Client SDK Configuration properties are very important. If you fail to update the administrator password on the Adobe LiveCycle Client SDK Configuration panel, you will become locked out of your system. This is because this OSGi service will always try to log in to the JEE services. After several attempts to log in without the correct password, AEM Forms will eventually reach the limit of Maximum Consecutive Authentication Failures and lock the Super Administrator account.

To view the Automatic Account Locking Settings in AEM Forms, follow these steps.

  1. Log in to Admin UI with the default administrator account.

    http://<servername>:<port>/adminui

    • Username: administrator
    • Password: password
  2. Select Settings > User Management > Domain Management. Scroll down and you will see these settings.

    Automatic Account Locking Aettings

Before you begin

These are three typical instances of AEM Forms and recommendations for each type. Some of these may not apply to your environment.

AEM Forms on JEE

This article covers this environment in depth. Make sure to update the Adobe LiveCycle Client SDK Configuration properties with your new password.

http://<servername>:<port>/adminui

AEM Forms on OSGI Author

Make sure to update the Adobe LiveCycle Client SDK Configuration properties with your new password.

http://<servername>:4502/system/console/configMgr

Make sure to update the Replication Agents with your new password.

4502/etc/replication/agents.author/publish.html

AEM Forms on OSGI Publish

Make sure to update the Adobe LiveCycle Client SDK Configuration properties with your new password.

http://<servername>:4503/system/console/configMgr

If you are running a Publish instance as a service, stop the service and launch the Publish instance by double-clicking the JAR file or by starting it from the command line.

Creating an Administrator Equivalent Account

As with most systems, creating an Administrator Equivalent Account is one of the first steps to take when configuring a new system. You can use this account if you get locked out of the default account and you can unlock the default account from the Administrator Equivalent Account. Follow these steps to create an Administrator Equivalent Account.

  1. Log in to Admin UI with the default administrator account.

    http://<servername>:<port>/adminui

    • Username: administrator
    • Password: password
  2. Select Settings > User Management > Users and Groups.

  3. Select New Group.

  4. Enter these values.

    • Group Name: SuperAdmins
    • Roles: In general, it's a best practice to assign roles to groups.
    • Domain: DefaultDom
  5. Click Next until you reach the Assign Roles to Group screen.

    3
  6. Select Find Roles and select the following roles.

    • Administration Console User
    • Application Administrator
    • Security Administrator
    • Services User
    • Super Administrator
  7. Click OK and then click Finish.

  8. Select New User and enter these values.

    • Canonical Name: SuperAdministratorEquivalent
    • First Name: Super Administrator
    • Last Name: Equivalent
    • Common Name: Super Administrator Equivalent
    • Domain: DefaultDom
    • User Id: superadmin
  9. Click Next. Click Find Groups and then click Find.

  10. Select the SuperAdmins group you created previously. Click OK > Next > Finish.

    Note:

    Store your SuperAdministratorEquivalent User ID and password in a place where you can find it later.

What if you get Locked-Out?

If you are locked out of your default Super Administrator Account, follow these steps to unlock the account.

  1. Log in to Admin UI with you Administrator Equivalent account.

    http://<servername>:<port>/adminui

    • Username: superadmin
    • Password: **********
  2. Select Settings > User Management > Users and Groups.

  3. Select Super Administrator. Note, you can also use the Find Users and Groups search tool.

  4. Scroll to Login Settings at the bottom of the Edit User panel.

    Login Settings
  5. If you see the Account Locked message, click the Unlock button.

    Your account is now unlocked.

Changing the Super Administrator Password

  1. Log in to Admin UI with the default administrator account.

    http://<servername>:<port>/adminui

    • Username: administrator
    • Password: password
  2. Select Settings > User Management > Users and Groups.

  3. Select Super Administrator. Note, you can also use the Find Users and Groups search tool.

  4. Scroll to Login Settings at the bottom of the Edit User panel.

  5. Click Change Password.

  6. Enter a new password in the two fields and click Save.

    Logout of the Admin UI.

Changing the LiveCycle Client SDK Configuration

Note:

You must also do this for every AEM Forms on OSGI system that is pointing to your AEM Forms on JEE
system. This needs to be done right away so your system does not lock up.

  1. Log in to the Web Console.

    http://<servername>:<port>/lc/system/console/configMgr

    • Username: admin
    • Password: admin
  2. Locate and expand the Adobe LiveCycle Client SDK Configuration panel.

  3. Enter the new administrator password for the AEM Forms administrator account.

    Adobe LiveCycle Client SDK Configuration
  4. Save

    Scroll to the bottom of the Adobe LiveCycle Client SDK Configuration panel.

  5. Click the Save button to save the new data.

  6. Restart your application server.

Changing the Admin Password on AEM OSGI

  1. Log in to CRXDE with the default administrator account.

    http://<servername>:<port>/lc/crx/de

    • Username: admin
    • Password: admin
  2. Go to AEM.

    http://<servername>:<port>/lc/projects.html

  3. Select Tools > Security > Users.

  4. Select Administrator.

  5. Select Change Password and enter the new password.

    Change Password
  6. Click Save. Restart your application server.

    Log in to your AEM system.

The Apache Felix OSGi Management Console password

There is another administrator password property that you should know about. However, you do NOT
need to take any action to update the credentials in this location.

  1. Log in to the Web Console.

    http://<servername>:<port>/lc/system/console/configMgr

  2. Search for Apache Felix OSGi Management Console.

    8

    There is a Password property that displays the password for the user allowed to access the OSGi Management Console. This property is ignored if a WebConsoleSecurityProvider is used for authentication. You should also ignore this property and not change it.

Updating the Replication Agents

If you updated the password on your Publish instance, you also need to update the password in the Transport properties of your Replication Agents. Follow these steps.

  1. Log in to the Tools section of your Author instance.

    http://<servername>:4502/miscadmin

  2. Expand the Replication node in the tree control on the left.

  3. Expand the Agents on author node.

  4. Double-click the Default Agent. Please note, your system may have a different name for your replication agent. It’s also possible that you have more than 1 author instance that needs updating.

  5. Click Edit.

    Default Agent Edit
  6. Select the Transport tab and enter the new password

    Agent Settings
  7. Click OK.

Join the AEM community at: Adobe Experience Manager Community

This work is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License  Twitter™ and Facebook posts are not covered under the terms of Creative Commons.

Legal Notices   |   Online Privacy Policy