Password Reset with GWCMD


Locked yourself out of your Gateway? No worries! In this lesson we'll take a look at how to use GWCMD application to gain access back into the Gateway.

Video recorded using: Ignition 8.1


(open in window)

[00:00] In this lesson, we're going to take a look at how to reset our password when we're locked out of our ignition gateway. So for starters, I have an ignition gateway here and I'm unable to remember what 80 character pseudo random string my colleagues set the password to. So I'm going to go about resetting it. There are two key prerequisites to resetting your password. The first is that you'll need to be on the actual machine that ignition is installed on. So you should verify that you're on the right system before you proceed. The second thing is you'll need administrator access on this machine in order to reset the password. Since I have both of those things, I'll get started. The first thing I need to do is open up a command prompt. So I'll click my little start icon here and type in CMD to find the command prompt application. Then I'll right click on that application and select run as administrator. That step is very important. If you forget to run your command prompt as an administrator, you'll get access denied errors. Next we'll type CD, which is short for change directory and then I'll need to type in the path to my ignition install folder.

[01:05] So C: \ Program Files\Inductive Automation\Ignition and then I'll hit enter. Now, one other note, before I proceed, I'm doing this on windows but if you're on a different operating system and the procedure is going to be pretty similar you'll open up a terminal application like Bash and navigate into your ignition install directory just like I've done here. Now that we found our install directory we're going to run the gateway command utility which is GWCMD.bat. In windows this is a batch file in other operating systems it'll be a shell script that you can treat as an executable. Now I need to pass my little utility here, a command line argument to tell it what to do. If I want to find out what the options are, I can do -h and hit Enter and it'll show me the available options. So with that done, it looks like the right argument is -p. So I'll hit the Up arrow on my keyboard to pull up the previous command and change the argument to -p then hit Enter.

[02:06] Now the interface is telling me that the password has been reset and I need to restart. It still happens that we can restart our gateway right from here by pulling up the previous command and doing -r. And with that, we'll navigate back over to our browser and wait, just a moment for our gateway to come back up. Once the gateway is back up, we're going to be prompted for new temporary credentials for the gateway. So how about I put admin and then password and then confirm password and then proceed and start my gateway. So now that I'm back in, I can go to my config tab here and then log in using my new credentials. So admin and then password. Now what this reset is actually done is created a new user source called temp as well as a new identity provider called temp.

[03:08] The identity provider which is an ignition identity provider is pointing at that temp user source. And the user source just has my one user in it. So if I pull up my gateway security settings under security and then general, we'll see that our system identity provider has been changed to that temp provider. Now, this is built in such a way that the new provider and user source won't collide with any others on the system. We'll just generate a unique name for the temp provider if we find any collisions. On a final note we also give that one temporary user the administrator role which we use to gate the config section of the gateway web page as well as the designer by default. When you're ready to replace your temporary user with your permanent IDP and user source, you can do it all right from here.

You are editing this transcript.

Make any corrections to improve this transcript. We'll review any changes before posting them.