diff --git a/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md b/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md index a65a5fd972..7977e1d023 100644 --- a/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md +++ b/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md @@ -10,14 +10,46 @@ linkTitle: Update Active-Active admin credentials weight: 90 --- -Active-Active databases use administrator credentials to manage operations. +Active-Active databases use administrator credentials to manage operations. When you change the administrator password on clusters with Active-Active databases, you must update the Active-Active database configuration to prevent authentication failures during Active-Active management operations. -To update the administrator user password on a cluster with Active-Active databases: +{{}} +Do not perform any management operations on the databases until these steps are complete. +{{}} + +To update the administrator password on a cluster with Active-Active databases: 1. From the user management page, update the administrator user password on the clusters you want to update. -1. For each participating cluster _and_ each Active-Active database, update the admin user credentials to match the changes in step 1. +1. Run [`crdb-cli crdb list`]({{}}) to find the `CRDB-GUID` that uniquely identifies each Active-Active database and the fully qualified domain names (`FQDN`) of each participating cluster: -{{}} -Do not perform any management operations on the databases until these steps are complete. -{{}} + ```sh + crdb-cli crdb list + ``` + + Example output: + + ```sh + CRDB-GUID NAME REPL-ID FQDN + 4053a0dd-a4a5-4f38-b135-75b7a2dc7331 my-aa-db 1 fqdn1.example.com + 4053a0dd-a4a5-4f38-b135-75b7a2dc7331 my-aa-db 2 fqdn2.example.com + ``` + +1. Update the Active-Active database credentials using the [`crdb-cli crdb update`]({{< relref "/operate/rs/references/cli-utilities/crdb-cli/crdb/update" >}}) command: + + ```sh + crdb-cli crdb update \ + --crdb-guid \ + --credentials id=,username=,password= \ + --credentials id=,username=,password= \ + --force + ``` + + Replace the following values: + + - ``: The `CRDB-GUID` from the `crdb-cli crdb list` output + + - ``: The administrator username for the clusters + + - `` and ``: The `REPL-ID` for the corresponding FQDNs + + - `` and ``: The current administrator passwords for each cluster