topic Re: How to change the WFA database user password in Active IQ Unified Manager Discussions

How to change the WFA database user password

stephen2 — Thu, 05 Jun 2025 05:39:30 GMT

IHAC with a security policy that requires strong passwords, even for internal read-only accounts. Their security group wants a strong password for the WFA user account. How do we change that given we dont have root credentials for the DB?

Also, the WFA application is run as a service account. Is there a way to use this service account for our AD queries within the workflow without having to store credentials at all? We are using the activedirectory get-adgroupmember calls withing the workflow.

Thanks

Re: How to change the WFA database user password

sinhaa — Wed, 26 Mar 2014 15:38:49 GMT

You don't need to know the root password to change a user password. Any mysql user including the default default user 'wfa' is allowed to change his/her own login password.

If you have some mysql client, login to WFA database using the Credaentials wfa/Wfa123 and then execute the below query.

SET PASSWORD = PASSWORD('New password in clear text');

You are done.

If you don't have a Mysql client, do the following:

1. Go to folder location <WFA_installation_dir>\WFA\mysql\bin

C:\NetApp\WFA\mysql\bin>mysql.exe -u wfa -p

Enter password: ********

Welcome to the MySQL monitor. Commands end with ; or \g.

Your MySQL connection id is 583

Server version: 5.5.29-enterprise-commercial-advanced MySQL Enterprise Server -

Advanced Edition (Commercial)

Oracle is a registered trademark of Oracle Corporation and/or its

affiliates. Other names may be trademarks of their respective

owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> SET PASSWORD = PASSWORD('new Password in clear text');

Query OK, 0 rows affected (0.00 sec)

mysql> exit

Bye

warm regards,

Abhishek Sinha

Re: How to change the WFA database user password

sinhaa — Wed, 26 Mar 2014 15:49:11 GMT

@ Also, the WFA application is run as a service account. Is there a way to use this service account for our AD queries within the workflow without having to store credentials at all? We are using the activedirectory get-adgroupmember calls withing the workflow.

---------

Not sure if I got your point exactly, but are you trying to run the WFA Services as an Active Dirctory Domain User account? If yes, you can do it only when your WFA server is also in the same domain.