Change Guardian now provides the chg_keystore_pass.sh script that allows you to change the keystore passwords. As a security best practice, you must change the keystore passwords immediately after upgrading Change Guardian.
NOTE:You need not perform this procedure if Change Guardian server is in FIPS mode.
To change the keystore passwords:
Log in to the Change Guardian server as the novell user.
Go to the /opt/novell/sentinel/bin directory.
Run the chg_keystore_pass.sh script and follow the on-screen prompts to change the keystore passwords.