How to Change the Assessment Agent Adapter Password


This Help topic provides instructions for changing the password on the assessment agent adapter on your network assessment servers, including agent-less, Nessus, or a third-party assessment agent (an assessment agent that is not supplied or supported by NAC Manager). The assessment agent adapter enables communication between the NAC appliance and the assessment servers, and the password is used by the assessment agent adapter to authenticate NAC appliance assessment requests.

This password must match the password specified in the NAC Manager options as the Assessment Agent Adapter Credentials (Tools > Options > NAC Manager > Assessment Server > Assessment Agent Adapter Credentials). If you change the password on the assessment agent adapter, you will need to change assessment agent adapter credentials in the NAC Manager options as well, or connection between the appliance and assessment servers will be lost and assessments will not be performed.

To change the assessment agent adapter password:

  1. Go to the install directory for the assessment agent adapter on the assessment server. This can be a Nessus server or the NAC appliance if you are using on-board agent-less assessment. On a NAC appliance, the install directory is /opt/nac/saint.
  2. Run the sha1.sh script (on a NAC appliance, the script is located in located in /opt/nac/saint/util) using the new password as the argument. The script will produce a hash string that looks something like:
    9ba2db465ff11b0bdfd188f7ee87b10fc3a145dc
  3. Open the users.properties file (on a NAC appliance, the file is located in /opt/nac/saint/users.properties) and replace the existing hash string with the new one:
    admin=<new string>
  4. Restart the assessment agent adapter. On a NAC appliance, the command is aglsctl restart.

For information on related tasks:

For information on related windows:

Top