Change default passwords in N4 and N4 Billing

Navis ships N4 and N4 Billing with a set of pre-configured users that are the same for all customers.You will need to do the following:

1. Change any of the default passwords.

2. Add the user roles for the n4api and variformUser users.

Change the default passwords

In some earlier versions of N4, you may have users that still have the default passwords. Make sure that you do not use any default passwords that was delivered with your previous N4 installation.

• If you installed this version of N4 4.0.13 without pre-existing data:

When you install N4 without pre-existing data, the passwords for these users will be randomly generated and stored in the navis-pass.log file (default location is C:\ProgramData\Navis\[node_name]\logs). For N4 Billing, the passwords are located in navis-billing-pass.log.

After you start N4 on the first node, the password file is generated like the following sample:

You can change the passwords or keep the randomly generated passwords. But move this file to a secure location, or delete it if you no longer need it.

• If you installed/upgraded N4 4.0.13 with existing data:

If you are upgrading from N4 2.5, the navis-pass.log will be generated for only the variformUser. The variformUser was added in N4 2.6 for third-party application integration with the Crane Team UI. Change the default password for this user to secure your environment.

If you are upgrading from N4 after 2.5, there is no change to your existing passwords. However if you have not done so already, change these default passwords in N4. Otherwise, your system is vulnerable to unauthorized access when it is exposed to the internet through applications such as N4 CAP. The default passwords were the following:

In order to log in to N4 as the admin user, open the navis-pass.log file to obtain the password. If you want to change the password, change it by selecting File Edit password.

Add the user roles for the n4api and variformUser users

The n4api and variformUser users are commonly used for integration such as the Universal Query API. Crane Team UI, or external variform. Starting in N4 4.0.5, the n4api and variformUser users require roles (on page 1) with specific privileges. If you are using services such as the Universal Query API or the Crane Team UI, you must create the roles for these users with the following privileges:

In earlier versions of N4, these users with their roles and passwords were maintained in the tomcat-users.xml file. You no longer need to update this file.