How to reset Threat Connect admin user account which has been locked out

[#1]

Article Number

000039729

Applies To

RSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: RSA Orchestrator – ThreatConnect
RSA Version/Condition: 6.1
Platform: CentOS
O/S Version: 7
 

Issue

Threat Connect UI unable to log in with below error.

Resolution

Please follow the below steps to reset the admin account.

1. Login to DB server as root.
2. Login to Postgres database using su - postgres
3. Connect to 'threatconnect' database using psql -U tcuser -d threatconnect
4. Execute this command UPDATE usertable SET password = 'JiNeQHkKWKmFtqcCT9GTLyWDO+ViMaA4kJHa6/7CBbo=', salt = '7173744076097521289', locked = 0, resetRequired = 1, failedAttempts = 0, lastFailedAttempt = NULL, disabled = 0, authenticatorSecretKey = NULL WHERE userName = 'admin';
   The output should be like this: "UPDATE 1"
5. To verify if changes has taken effect, run this command select * from usertable where userName like '%admin%' \G
   The output of the above command should be like:    
   locked: 0
   resetRequired: 0
   failedAttempts: 0    
6. Quit from threatconnect db "\q"
7. Exit from psql "exit"
8. Restart postgresql service.
9. Login to Application server and restart ThreatConnect service.
10. Connect to UI & login with default password 'password1'.    
11. It will ask to reset the password.