Configuring credentials
This tutorial explains how to configure credentials for a deployment. The credentials are of the following kind:
Target | Scope | Remarks |
---|---|---|
OSUser | Operating System | The operating system user that executes all deployment's processes |
ServiceUser | Content Manager (ISH) | A Content Manager user that is used from the deployment for certain batch operations |
Actor | Security Token Service (STS) | A user that is used to drive authentication with identity delegation |
Note: the module will assume that the given credentials are valid for their scope, and will only configure the deployment to use them. The module will not validate the credential validity.
To update the password per target type, use the following cmdlet while keeping the username the same.
Set the deploymentName variable
First set deploymentName variable:
$deploymentName="InfoShare"
Setting the OSUser
Set-ISHOSUser
sets the credential for all deployment's processes.
Note: the credential's username should use one of the following formats:
DOMAIN\domainusername
for domain users.COMPUTERNAME\localusername
for local users.
In the following example, we use the localuser
that is already present in the operating system's registry:
$username="$($env:COMPUTERNAME)\localuser"
$password="password"
$securePassword = ConvertTo-SecureString -String $password -AsPlainText -Force
$credential=New-Object System.Management.Automation.PSCredential($username, $securePassword)
Set-ISHOSUser -ISHDeployment $deploymentName -Credential $credential
In the following example, we use the domainuser
already present in the DOMAIN
active directory:
$username="DOMAIN\domainuser"
$password="password"
$securePassword = ConvertTo-SecureString -String $password -AsPlainText -Force
$credential=New-Object System.Management.Automation.PSCredential($username, $securePassword)
Set-ISHOSUser -ISHDeployment $deploymentName -Credential $credential
Setting the ServiceUser
Set-ISHServiceUser
sets the credential of the deployment's ServiceUser. The referenced user must be valid in Content Manager's user repository.
$username="ServiceUser"
$password="password"
$securePassword = ConvertTo-SecureString -String $password -AsPlainText -Force
$credential=New-Object System.Management.Automation.PSCredential($username, $securePassword)
Set-ISHServiceUser -ISHDeployment $deploymentName -Credential $credential
Setting the Actor
Set-ISHActor
sets the credential of the deployment's Actor. The referenced user must be valid on the configured Security Token Service (STS). In case the STS is ISHSTS, then the referenced user must be valid in Content Manager's user repository.
$username="ServiceUser"
$password="password"
$securePassword = ConvertTo-SecureString -String $password -AsPlainText -Force
$credential=New-Object System.Management.Automation.PSCredential($username, $securePassword)
Set-ISHActor -ISHDeployment $deploymentName -Credential $credential
Note: in the Vanilla deployment, the actor's credential are the same as with the credential of the ServiceUser, but it could be different if desired.