4/3/25, 12:24 PM Configure Basic Authentication for Upgraded Data Flow Probes (Separate Mode) Using Port 1741
ing Port 1741 or 1742
Back to Micro Focus > Documentation Home
Universal CMDB 11.0 Search This Help Center
Use > Hardening > Data Flow Probe Hardening > Configure Basic Authentication for Upgraded
Data Flow Probes (Separate Mode) Using Ports 1741 or 1742
Data Flow Probe Hardening
Modify the MySQL Database
Encrypted Password Configure Basic
Set the JMX Console Encrypted
Password
Set the UpLoadScanFile Password
Authentication for Upgraded
Remote Access to the PostgreSQL
Server Data Flow Probes (Separate
Enable Basic Authentication
between UCMDB Server and Data
Flow Probe
Mode) Using Port 1741 or
Upgraded Data Flow Probes
(Separate Mode) Using Ports 1741
1742
Configure Basic Authentication for
or 1742
Starting from version 10.22, after installing a new Data Flow Probe, basic
Enable SSL between UCMDB authentication is enabled automatically for the probe if the probe is installed in
Server and Data Flow Probe separate mode and that the probe can be accessed using port 1741 or 1742. This is
Encrypt the Probe Keystore and controlled by the following new settings available in the DataFlowProbe.properties file
Truststore Passwords for a newly installed probe:
Server and Data Flow Probe
Default Keystore and Truststore appilog.agent.Probe.rmi.BasicAuth.Enabled=true
Change the aioptionrc File appilog.agent.Probe.rmi.BasicAuth.User=sysadmin
Permission for Agents or Scanners
appilog.agent.Probe.rmi.BasicAuth.Pwd=-5,36,-81,-127,9,-13,119,
Create a Keystore for the Data
Flow Probe
Create a New Self-Signed These settings are not added to the DataFlowProbe.properties file for upgraded
Certificate for Two-Way SSL in probes during upgrade, but basic authentication is enabled automatically.
Agent Driven Inventory Discovery
Use an Existing Certificate for However, you can disable basic authentication for upgraded separate mode probes that
Two-Way SSL in Agent Driven can be accessed using port 1741 or 1742, or change the default basic authentication
Inventory Discovery password.
Set Master Key for Password
Encryption on Data Flow Probe To do so,
1. Open the following file on both of the probe manager and probe gateway instances
using a text editor:
<probe_installation_folder>\conf\DataFlowProbe.properties
2. Add the following settings to the file manually:
appilog.agent.Probe.rmi.BasicAuth.Enabled=false
appilog.agent.Probe.rmi.BasicAuth.User=sysadmin
appilog.agent.Probe.rmi.BasicAuth.Pwd=<encrypted password>
Setting the appilog.agent.Probe.rmi.BasicAuth.Enabled parameter to true enables basic authentication for the
probe in separate mode that uses port 1741 or 1742. To disable basic authentication for the probe, simply set the
parameter to false. The default value is true.
Note
https://docs.microfocus.com/UCMDB/11.0/ucmdb-docs/docs/eng/doc_lib/Content/hardening/enable_basic_auth_separate_probes.htm 1/2
4/3/25, 12:24 PM Configure Basic Authentication for Upgraded Data Flow Probes (Separate Mode) Using Port 1741 or 1742
Make sure you set the parameter to the same value on both instances of probe manager and probe gateway.
The default user name value for the appilog.agent.Probe.rmi.BasicAuth.User setting is sysadmin.
The password uses encrypted text in the DataFlowProbe.properties file. To change the default password, use the
getEncryptedKeyPassword() JMX method to get the encrypted text of the desired password.
For more information about how to use the getEncryptedKeyPassword() method, see the Universal CMDB JMX
Reference Guide.
3. Save the file.
4. Restart the probe.
https://docs.microfocus.com/UCMDB/11.0/ucmdb-docs/docs/eng/doc_lib/Content/hardening/enable_basic_auth_separate_probes.htm 2/2
