FDM EE Tutorial: How to change the ODI SUPERVISOR password

Introduction

As part of installing and configuring FDM EE, securing EPM is typically forgotten. As you might know, FDM EE is built on top of ODI 11g. Sadly ODI is configured with the factory default credentials, which imposes a security risk. The more because ODI is not only accessible through the ODI Studio (which is per default not installed), but also through the web based ODI Console.

What will you learn?

During this tutorial you will learn how to enhance ODI security by changing the "SUPERVISOR" password without breaking FDM EE.

The Steps

Below the main steps in order of execution:

1. Change the password for the ODI agent through Enterprise Manager;
2. Change the password for ODI through ODI Studio;
3. Validate the ODI agent connection from ODI;
4. Configure the new password in FDM EE.

Tutorial

Step 1 - ODI Agent (EM)

1. Start Weblogic Admin Server (\Oracle\Middleware\user_projects\domains\EPMSystem\bin\startWebLogic.cmd) 
2. Login to Enterprise Manager (http://localhost:7001/em) and use the "epm_admin" account to login
3. In the left pane, select "EPMSystem" in Farm_EPMSystem -> Weblogic Domain



4. In the middle pane, select Credentials in Weblogic Domain -> Security



5.  Select "SUPERVISOR" and click "Edit"



6.  Change the password and click OK



7.  Logout from Enterprise Manager
8. Shutdown Weblogic Admin Server

Step 2 - ODI Studio (Security Navigator)

1.  Start ODI Studio (\oracle\product\11.1.1\Oracle_ODI_1\oracledi\client\odi64.exe) and login with "SUPERVISOR" and "SUNOPSIS"
2. Open "Security Navigator" from the View menu

3.  In the left pane, expand the "Users" section if not already so
4. Right click on "SUPERVISOR" and select "Open"

5.  In the right pane, make sure tab "Definition" has been selected
6.  Click "Change password" and change the password (to be identical to the previously created password)




7.  Make sure to save the changes

8. Important: Logout ODI Studio
9. Optional: Restart FDM EE Windows Services "Oracle Hyperion FDM Enterprise Edition - Java Web Application (epmsystemX)"

Step 3 - Validate ODI Agent connection (Topology Navigator)

1.  Login ODI Studio with the newly created password
2. Open "Topology Navigator" from the View menu

3.  In the left pane, right mouse click on OracleDIAgent in Agents and select "Open"

4.   In the right pane, just under tab "OracleDIAgent" click "Test"

5.  If not successful, you probably forgot to logout from Oracle Studio and re-login?

6. Close ODI Studio

Step 4 -  Configure the new password in FDM EE

1.  Login to Workspace and open FDM EE

2.  In the left pane, select tab "Setup" and click "System Settings"

3.  In the right pane, select ODI as profile type

4.  Change the "ODI Password" and click Save (upper most right)

5.  Click "Check ODI Connection" in order to validate the connection to the agent

6.  Congratulations,you have changed the password successfully

Final Notes

As you noticed changing the "SUPERVISOR" password can be a bit cumbersome.  However from a security perspective worth the effort. I would avoid using complex passwords that include special- and high ASCII characters. It could very well break FDMEE and/or ODI.