Show TOC

Changing Passwords of the SAP System UsersLocate this document in the navigation structure

This section provides information about the SAP system users and the passwords you need to change. The users are as follows:

SAP System Users

User Function
<SID>ADM
  • User under which the work processes on IBM i and Linux run
  • User for access to the ABAP database

SAP<SID>DB

User for access to Java database

SAPService<SID>

(Windows only)

User under which the work processes on Windows application servers run

Procedure

Note

The initial password of <SID>ADM and SAP<SID>DB is defined during the installation. You may want to consider changing these passwords occasionally to protect your system against unwanted access.

User <SID>ADM

To change the <SID>ADM user password, proceed as follows:

This password must be the same on all hosts.

  • To change the password at operating system level on the IBM i database server and each IBM i application server, enter command:

    CHGUSRPRF

  • To change the operating system level password  on each Windows application server, enter in a command prompt:

    C:\>lusrmgr.msc Right-click on <SID> ADM and choose Set Password.

  • To change the password at operating system level on each LinuxPPC application server, enter in the command line:

    passwd

  • When using either or both Windows and LinuxPPC application servers, you also need to change the encrypted database password in NTLOGON.INF with setdb4pwd. For more information, see SAP Note 705886 Information published on SAP site.

User SAP<SID>DB

To change the SAP<SID>DB user password, proceed as follows:

  • To change the operating system level password on the IBM i database server, enter command:

    CHGUSRPRF

  • To change the JDBC URL password in secure store, you need to use the Config Tool as follows:
    1. In the Windows Explorer, go to the following directory:

      \\<centralhost>\sapmnt\<SID>\<AnyInst>\j2ee\configtool

    2. To change the password, double-click configtool.bat.
    3. Navigate to secure store and change the entry of jdbc/pool/<SID>/Password.

User SAPService<SID> on Windows Application Servers

  • To change the password at operating system level on each Windows application server, enter in a command prompt:

    C:\>lusrmgr.msc Right-click on <SID>ADM and choose Set Password.

  • Using the services control manager modify the logon properties of the SAP<SID><INST> services to match the newly chosen password:

    C:\>services.msc

    Right-click on SAP<SID><INST> and choose Properties. Choose the Log On tab, and change the password.