AEM Documentation

SmartDoc Articles

Managing the AEM Forms Administrator Passwords

How many accounts are there?

If you are using AEM Forms, there are a few administrator accounts you need to manage. This is partly due to the dual legacy of AEM Forms. As seen in this diagram, AEM Forms on OSGI is a direct descendent of Communiqué WCM (commonly called CQ). On the other hand, AEM Forms on JEE has a dual legacy and is a combination of CQ and Adobe LiveCycle document-generation services.

AEM Forms Technology Stack

Therefore, you need to manage two different administrator accounts while also updating the Adobe LiveCycle Client SDK Configuration properties and the properties of any replication agents.

The default Super Administrator account credentials for AEM Forms on JEE is:

  • Username: administrator
  • Password: password

The default Super Administrator account credentials for AEM Forms on OSGI is:

  • Username: admin
  • Password: admin

As mentioned, the Adobe LiveCycle Client SDK Configuration properties are very important. If you fail to update the administrator password on the Adobe LiveCycle Client SDK Configuration panel, you will become locked out of your system. This is because this OSGi service will always try to logon to the JEE services. After several attempts to logon without the correct password, AEM Forms will eventually reach the limit of Maximum Consecutive Authentication Failures and lock the Super Administrator account.

To view the Automatic Account Locking Settings in AEM Forms, follow these steps.

  1. Login to AdminUI with the default administrator account.
    http://servername:8080/adminui
    Username: administrator
    Password: password

  2. Select the following:
    Settings - User Management - Domain Management
    Scroll down and you will see these settings.
    AEM Forms Automatic Account Locking Settings

Before you begin

These are three typical instances of AEM Forms and recommendations for each type. Some of these may not apply to your environment.

AEM Forms on JEE

This article covers this environment in depth. Make sure to update the Adobe LiveCycle Client SDK Configuration properties with your new password.

http://servername:8080/adminui
http://servername:8080/lc/system/console/configMgr

AEM Forms on OSGI Author

Make sure to update the Adobe LiveCycle Client SDK Configuration properties with your new password.

http://servername:4502/system/console/configMgr

Make sure to update the Replication Agents with your new password.

http://servername:4502/etc/replication/agents.author/publish.html

AEM Forms on OSGI Publish

Make sure to update the Adobe LiveCycle Client SDK Configuration properties with your new password.

http://servername:4503/system/console/configMgr

If you are running a Publish instance as a service, stop the service and launch the Publish instance by double-clicking the JAR file or by starting it from the command line.

Creating an Administrator Equivalent Account

As with most systems, creating an Administrator Equivalent Account is one of the first steps to take when configuring a new AEM Formssystem. You can use this account if you get locked out of the default account and you can unlock the default account from the Administrator Equivalent Account. Follow these steps to create an Administrator Equivalent Account.

  1. Login to AdminUI with the default administrator account.
    http://servername:8080/adminui
    Username: administrator
    Password: password

  2. Select the following:
    Settings - User Management - Users and Groups
  3. Select New Group
  4. Enter these values.
    http://servername:8080/adminui
    Group Name: SuperAdmins
    Description: In general, it's a best practice to assign roles to groups.
    Domain: DefaultDom

  5. Click Next.
  6. Click Next.
  7. Click Next. You want to stop on the Assign Roles to Group screen.
    AEM Forms Assign Roles
  8. Select Find Roles.
  9. Select these roles.
    • Administration Console User
    • Application Administrator
    • Security Administrator
    • Services User
    • Super Administrator
  10. Click OK.
  11. Click Finish.
  12. Select New User.
  13. Enter these values.
    • Canonical Name: SuperAdministratorEquivalent
    • First Name: Super Administrator
    • Last Name: Equivalent
    • Common Name: Super Administrator Equivalent
    • Domain: DefaultDom
    • User Id: superadmin
  14. Click Next.
  15. Select Find Groups.
  16. Click Find.
  17. Select the SuperAdmins group you created previously.
  18. Click OK.
  19. Click Next.
  20. Click Finish.
  21. Store your SuperAdministratorEquivalent User ID and password in a place where you can find it later.

What if you get Locked-Out?

If you you are locked-out of your default Super Administrator Account, follow these steps to unlock the account

  1. Login to AdminUI with the default administrator account.
    http://servername:8080/adminui
    Username: superadmin
    Password: **********

  2. Select the following:
    Settings - User Management - Users and Groups
  3. Select Super Administrator. Note, you can also use the Find Users and Groups search tool.
  4. Scroll to Login Settings at the bottom of the Edit User panel.
    AEM Forms Account Locked screen
  5. If you see the Account Locked message, click the Unlock button.

Your account is now unlocked.

Changing the Super Administrator Password

  1. Login to AdminUI with the default administrator account.
    http://servername:8080/adminui
    Username: administrator
    Password: password

  2. Select the following:
    Settings - User Management - Users and Groups
  3. Select Super Administrator. Note, you can also use the Find Users and Groups search tool.
  4. Scroll to Login Settings at the bottom of the Edit User panel.
  5. Click Change Password.
  6. Enter a new password in the two fields.
  7. Click Save.
  8. Logout of AdminUI.

Changing the LiveCycle Client SDK Configuration

Please Note: You must also do this for every AEM Forms on OSGI system that is pointing to your AEM Forms on JEE system. This needs to be done right away so your system does not lock up.

  1. Login to the Web Console.
    http://servername:8080/lc/system/console/configMgr
    Username: admin
    Password: admin

  2. Locate and expand the Adobe LiveCycle Client SDK Configuration panel.
  3. Enter the new administrator password for the AEM Forms Administrator account.
    Adobe LiveCycle Client SDK Configuration screen
  4. Scroll to the bottom of the Adobe LiveCycle Client SDK Configuration panel.
  5. Click the Save button to save the new data.
    Image of a save button
  6. Restart your JBoss for Adobe Experience Manager Forms service.

Changing the Admin Password on AEM OSGI

  1. Login to CRXDE with the default administrator account.
    http://servername:8080/lc/crx/de
    Username: admin
    Password: admin

  2. Go to AEM.
    http://servername:8080/lc/projects.html
  3. Select Tools – Security – Users.
  4. Select Administrator.
  5. Select Change Password.
  6. Enter the new password.
    AEM Forms Change Password screen
  7. Click Save.
  8. Restart your JBoss for Adobe Experience Manager Forms service.
  9. Login to your AEM system.

The Apache Felix OSGi Management Console password

There is another administrator password property that you should know about. However, you do NOT need to take any action to update the credentials in this location.

  1. Login to the Web Console.
    http://servername:8080/lc/system/console/configMgr
  2. Search for Apache Felix OSGi Management Console.
    apache felix osgi management console

There is a Password property that displays the password for the user allowed to access the OSGi Management Console. This property is ignored if a WebConsoleSecurityProvider is used for authentication. You should also ignore this property and not change it.

Updating the Replication Agents

If you updated the password on your Publish instance, you also need to update the password in the Transport properties of your Replication Agents. Follow these steps.

  1. Login to the Tools section of your Author instance.
    http://servername:4502/miscadmin
  2. Expand the Replication node in the tree control on the left.
  3. Expand the Agents on author node.
  4. Double-click the Default Agent. Please note, your system may have a different name for your replication agent. It’s also possible that you have more than 1 author instance that needs updating.
  5. Click Edit.
    AEM Forms Default Agent
  6. Select the Transport tab.
  7. Enter the new password.
    The Transport screen
  8. Click OK.

This article was taken from the AEM Forms Administration Student Manual by J.P. Terry.