000030262 - How to reset the Netwitness Informer admin password

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 4Show Document
  • View in full screen mode

Article Content

Article Number000030262
Applies ToRSA Product Set: Netwitness

RSA Product/Service Type:  Informer

RSA Version/Condition: All Versions

Platform: Windows

O/S Version: 2003/2008
IssueThe following article details a procedure to rest the  Netwitness admin user's password ("informer" or "iadmin") on Windows 2003 & 2008 platforms when it has been lost and needs to be recovered.  Only an account with administrative rights can perform this function.
Resolution In order to reset the Informer password, please follow the instruction in below  : 
 1.  Stop the Netwitness service in windows services, then insure it has terminated: 
 User-added image
2. Restart the IIS process:
To restart the IIS Service, open the IIS console, then right click the computer name, then open the "All Tasks" menu, and select restart : 
 User-added image
3. Now select "stop internet service on %computername%" from the menu. and then select OK: 
 User-added image
4. Open "SQL Server management studio", right click on the database named  c:\Inetpub\wwwroot\NwReporterWeb\App_Data\ASPNETDB.MDF"  and select "New Query".
NOTE : In some appliances the database names starts with D when installed to the "d" drive
User-added image
5. Paste the query shown below in the "new query" window , then execute the query.
To reset user iadmin's password , replace 'informer' with 'iadmin' : 
  [Password]= 'ZoHg/+LE/TtPi3sgFaVJRl8UBlY=' , [PasswordSalt] = 'wmJfoKcg9UsQZVFq/xuDUA=='
    [UserName] = 'informer' )

 User-added image
6. Restart the MSSQL server by right clicking on the %computername%, opening "All Taks" and select "restart" . 
 User-added image

7. Start the "Netwitness Informer Service" from windows Services.
8. start the IIS service 
9. Browse the Informer web portal and try to login with Informer default password, nothing that the default password for users Informer and Iadmin is : !nformer  

NotesDuring the query execution , MSSQL may return the following error message :
 sg 233, Level 20, State 0, Line 0
A transport-level error has occurred when sending the request to the server. (provider: Shared Memory Provider, error: 0 - No process is on the other end of the pipe.)

1- Confirm IIS and Netwitness Informer Service has been stopped 
2- Take the DB offline per following screenshot : 
 User-added image
3- Confirm the Database has been taken offline , if not , restart the MSSQL Server and try again : 
 User-added image
4- Bring the database back Online: 
User-added image
5- Restart the MSSQL Server and try to run the query again.