Database Access

This section covers the configuration of the Oracle and Microsoft SQL Server databases, as well as the re-encryption of the database passwords.

To configure the Oracle database, edit the common.xml file.

  1. From the installation directory, locate the common.xml file in the conf folder.

    Copy 
        <cmsDatabase>
            <dataSource>oracle.jdbc.pool.OracleDataSource</dataSource>
            <url>jdbc:oracle:thin:@cms411w2k3sp2:1521:CMS</url>
            <userName>AIMSEE</userName>
            <password isSecret="true" isEncrypted="false">password</password>
        </cmsDatabase>

  2. Locate the XML element cmsDatabase.

  3. Modify the URL element to match your specific environment. Copy the URL from the “url” property in the database.properties file located in the ActivID CMS Shared Files folder, available at %PROGRAMDATA%\HID Global\Credential Management System\Shared Files.

    Warning! Do not change the user name (XML element = userName).

  4. Set the AIMSEE password in the configuration files. You can enter this password in clear text because it is encrypted the first time that the renewal tool is started.

  5. Save and close the file to save your configuration changes.

To configure the SQL server database, edit the common.xml file.

  1. From the installation directory, locate the common.xml file in the conf folder.

    Copy 
      <cmsDatabase>
        <dataSource>com.microsoft.sqlserver.jdbc.SQLServerDataSource</dataSource>
    <url>jdbc:sqlserver://cmsserver.domain.com/AIMSEE;serverName=cmsserver.domain.com;
        databaseName=AIMSEE;socketTimeout=600</url>
    <userName>AIMSEE</userName>
        <password isSecret="true" isEncrypted="false">password</password>
      </cmsDatabase>

  2. Locate the XML element cmsDatabase.

  3. Modify the URL element to match your specific environment. Copy the URL from the “sqlserver.AIMSEE.url” property in the database.properties file located in the ActivID CMS Shared Files folder (available at %PROGRAMDATA%\HID Global\Credential Management System\Shared Files.

  4. Set the AIMSEE password in the configuration files. You can enter this password in clear text because it is encrypted the first time that the renewal tool is started.

  5. If the database connection uses 'Windows Authentication", then use the following configuration. Accept the userName and password (not defined) as illustrated next.

    Copy 
    <cmsDatabase>
    <dataSource>com.microsoft.sqlserver.jdbc.SQLServerDataSource</dataSource>
    <url>jdbc:sqlserver://SQL2008/AIMSEE;serverName=SQL2008;databaseName=AIMSEE;socketTimeout=600;domain=XXXX;integratedSecurity=true</url>
    <userName></userName>
    <password isSecret="true" isEncrypted="false"></password>
    </cmsDatabase>

    1. Save and close the file to save your configuration changes.

      Warning! You must not change the user name (XML element = userName).

This section describes how to configure the common.xml file to re-encrypt the database password.

  1. In the <common> XML element, change 'action' to 'update' as illustrated below.

  2. In the <password > XML element, change 'isEncrypted' to 'false' as illustrated below.

    Copy 
    ?xml version="1.0" encoding="UTF-8"?>
    <common securityMode="unattended" action="update"/>
      <secret filename="./conf/secrets.jks" encryptedPassword="c0FJFQdMGVt3DD2/1vRCZw==" attended="false" />
      <cmsDatabase>
        <dataSource>com.microsoft.sqlserver.jdbc.SQLServerDataSource</dataSource>
        <url>jdbc:sqlserver://localhost/AIMSEE;serverName=localhost;failoverPartner=(local);databaseName=AIMSEE;socketTimeout=600</url>
        <userName>AIMSEE</userName>
        <password isSecret="true" isEncrypted="false">Password</password>
      </cmsDatabase>
      <cmsPortal>
        <url>https:///win-b1h8s2evoie.cms423.sayuri.com:32456</url>
        <clientCertificate storage="file">
          <filename>./conf/certificates/renewalOperator.pfx</filename>