Changing IBM Spectrum Protect Plus credentials

To change IBM Spectrum Protect Plus credentials and maintain IBM Storage Fusion and IBM Storage Fusion HCI System functionality, changes must be made in IBM Spectrum Protect Plus itself and in two OpenShift® secrets, namely spp-connection and baas-secret.

1. Update the password in IBM Spectrum Protect Plus:
   1. Log in to IBM Spectrum Protect Plus using the URL and IBM Spectrum Protect Plus credentials that are found in the spp-connection secret.
   2. Go to Accounts > User.
   3. Click the account that you want to change.
      Note: The user must have the SUPERUSER role.
   4. Click ellipsis menu and select Change Password.
   5. Enter the new password and repeat it. Be sure to note down the new password.
   6. Click Update User to apply changes.
      The following message gets displayed:

      your session has expired and you will be logged out of IBM Spectrum Protect Plus

   Note: Now, you must change the IBM Spectrum Protect Plus credentials that are stored in OpenShift.
2. Update the password in OpenShift CLI:
   1. Create a base64 encoded version of the new password:
      1. Run the following command:

         echo -n 'new-password' | base64

         Replace new-password with the new IBM Spectrum Protect Plus password that you created.

      2. You must note down and secure the output. It is a base64 encoded version of your new IBM Spectrum Protect Plus password.
   2. Update the password in spp-connection:
      1. Log in to the cluster by using the OpenShift CLI.
      2. Run the following command to find out in which namespace IBM Storage Fusion is installed:

         fusionns=$(oc get spectrumfusion -A -o=custom-columns=CR_NS:.metadata.namespace --no-headers)

      3. Run the following command to edit the spp-connection secret:

         oc edit secret spp-connection -n $fusionns

      4. Remove the password value that follows the password field and replace it with the new, base64-encoded one.
      5. Be sure to save your changes. Ensure that you see the following message:

         secret/spp-connection edited

   3. Update the password in baas-secret:
      1. Log in to the cluster by using the OpenShift CLI.
      2. Run the command to copy baas-secret to a local location:

         oc edit secret baas-secret -n baas

      3. Remove the password value that follows the baaspassword field and replace it with the same base64-encoded password that is added to spp-connection.
      4. Be sure to save your changes.

         secret/baas-secret edited

   OpenShift now has the latest references to the IBM Spectrum Protect Plus credentials, allowing IBM Storage Fusion and IBM Storage Fusion HCI System to communicate with the IBM Spectrum Protect Plus server.