Changing Specific Accounts in Jamf Pro and the MySQL Database

Updated: 01 July 2021

Product: Jamf Pro

This article provides information on important accounts associated with a typical Jamf Pro environment and where you can change the usernames and passwords for these accounts in Jamf Pro. This article also explains how to change the password for the MySQL database on Jamf Pro.

Accounts That Can Be Changed in Jamf Pro

The following table lists important accounts that you can change in Jamf Pro, along with the following additional information:

The default username and password (if any), or information on how the initial username and password are generated
Location where you can change the account in Jamf Pro
Related section in the Jamf Pro Administrator's Guide


Password for	Default username	Default password	Location in Jamf Pro	Related section in the Jamf Pro Administrator's Guide
First Jamf Pro Administrator Account	N/A (Created using the Jamf Pro Setup Assistant the first time you connect to the Jamf Pro Server)	N/A (Created using the Jamf Pro Setup Assistant the first time you connect to the Jamf Pro Server)	Accounts and Groups in System Settings	Jamf Pro User Accounts and Groups
File Share Distribution Read/Write and Read-Only Accounts	N/A (Manually Specified)	N/A (Manually Specified)	File Share Distribution Points in Computer Management – Server Infrastructure settings	File Share Distribution Points
Management Account on Managed Computers	N/A (Manually Specified or randomly generated)	N/A (Manually Specified or randomly generated)	Management Account Payload in Policies	Management Accounts
Open Firmware/EFI Account on Managed Computers	N/A (Manually Specified)	N/A (Manually Specified)	EFI password payload in Policies	Setting or Removing an EFI Password

Changing the Password for the MySQL Account Used by Jamf Pro

Changing the password for the MySQL account used by Jamf Pro involves the following steps:

Stopping Jamf Pro Using the Jamf Pro Server Tools Command-line Interface
Changing the Jamf Pro MySQL Account Password
Updating the Connection Details with the New Password
Starting Jamf Pro Using the Jamf Pro Server Tools Command-line Interface

Step 1: Stopping Jamf Pro Using the Jamf Pro Server Tools Command-line Interface

Execute the following command:

jamf-pro server stop

For information about other methods to start and stop Jamf Pro, see Starting and Stopping Tomcat.

Step 2: Changing the Jamf Pro MySQL Account Password

Confirm the username for the MySQL account being used by Jamf Pro by doing one of the following:
- Execute the following command using the Jamf Pro Server Tools CLI:
```
jamf-pro config list
```
- Open the Database.xml file at one of the paths listed in the next step to verify the username that is in use.
Connect to the MySQL prompt using the MySQL root user credentials by executing the following command:
```
mysql -u root -p
```
When prompted, enter the root user password.
At the mysql> prompt, change the password for the account that is used by Jamf Pro by executing a command similar to the following:
```
ALTER USER 'username'@'localhost' IDENTIFIED BY 'new_password';
```
Substitute your information for username and new_password above.
For MySQL 5.7, you may need to execute a command similar to the following:
```
SET PASSWORD FOR 'username'@'localhost' = PASSWORD('new_password');
```
Verify the password was changed by doing the following:
1. Type exit to exit the MySQL prompt you are connected to with the root user.
2. Connect to the MySQL prompt with the Jamf Pro MySQL account credentials by executing a command similar to the following:
```
mysql -u username -p
```
  Substitute your information for username above.
3. When prompted, enter your new password.
4. Type exit to exit the MySQL command prompt.

Step 3: Updating the Connection Details with the New Password

You can update the connection details with the new password in the following ways:

Use the Jamf Pro Server Tools CLI
Manually edit the DataBase.xml file

To update the connection details using the Jamf Pro Server Tools CLI do the following:
1. Execute the following command:
```
jamf-pro server config set --database-password
```
2. Provide the Jamf Pro MySQL password that you set and verified earlier.
To manually edit the connection details, do the following:
1. Open the DataBase.xml file in a text editor. The DataBase.xml file is stored in the following locations:
  - Linux: /usr/local/jss/tomcat/webapps/ROOT/WEB-INF/xml/DataBase.xml
  - Windows: C:\Program Files\JSS\Tomcat\webapps\ROOT\WEB-INF\XML\DataBase.xml
  - Mac: /Library/JSS/Tomcat/webapps/ROOT/WEB-INF/xml/DataBase.xml
2. Update the DataBasePassword element with the new password:
```
<DataBasePassword>new_password</DataBasePassword>
```
  Substitute your information for new_password above.
3. Save the file.

Step 4: Starting Jamf Pro

Execute the following command:

jamf-pro server start

For information about other methods to start and stop Jamf Pro, see Starting and Stopping Tomcat.