Resetting Provider Connectivity Assurance and Zitadel Admin Passwords

This article explains how to reset the admin password for both the Provider Connectivity Assurance and Zitadel user accounts. The process is divided into the following steps:

1. Connect to the Provider Connectivity Assurance machine and reset the admin password

2. Log in to the admin console

3. Fetch the initial password

4. Reset the deployment password

5. Reset the Zitadel password

6. Optional: Prevent automatic reset of deployment password

Procedure Steps

Connect to the Provider Connectivity Assurance Machine and Reset the Admin Password

1. Use SSH to log in to the Provider Connectivity Assurance machine

2. Run the password reset script:

./provider-connectivity-assurance admin-console reset-password

3. When prompted, enter a new Admin Console password (minimum 6 characters)

4. Confirm the new Admin Console password.

After confirming, you will see a message indicating the password has been reset successfully.

Log in to the Admin Console

1. Open a web browser and navigate to the Admin Console URL:

https://<admin-console-IP>:30000

2. Enter your existing Provider Connectivity Assurance credentials.

3. Click Log in to proceed.
   

Fetch the Initial Password

After logging in to the admin console:

1. Navigate to configuration and scroll down to the Deployer Generated Secrets section.

2. Copy the initial deployment password displayed there.

3. Save this password securely in a local notepad or another safe location.

4. Ensure that the Forcibly Reset Deployment Password checkbox is selected.

Reset the Deployment Password

1. Save the configuration changes.

2. Click the Redeploy button to redeploy the PCA and refresh the deployment secret.

Reset the Zitadel Password

Note: Zitadel runs on port 3443.

1. Open the Zitadel UI by navigating to:

https://<deployment-IP>:3443 

2. Click the Login button to begin the password reset process.

3. When prompted, enter the old password, which is the password you copied from the Provider Connectivity Assurance admin console UI.

4. Enter your new password and confirm it.

5. Click Next to save the new password.

After completing these steps, you will see a confirmation message: "Your password was changed successfully."

Optional: Prevent Automatic Reset of Deployment Password

If you do not want the deployment password to be reset automatically in the future, follow these steps.

After successfully resetting the passwords for both the admin console and Zitadel:

1. Uncheck the Forcibly reset Deployment Password option.

2. Save the configuration again.

3. Redeploy Provider Connectivity Assurance from the Admin Console UI to apply the changes.
   This ensures that the password will not refresh automatically in the future unless it is necessary.
   

The password reset process for Provider Connectivity Assurance and Zitadel is now complete.