All Products
Search
Document Center

Key Management Service:changePswd

Last Updated:Mar 31, 2026

Changes a user's password on a Hardware Security Module (HSM). Any user can change their own password. A Cryptographic Officer (CO) can change the password of another CO or a Cryptographic User (CU) without knowing the current password.

Prerequisites

Before you begin, ensure that you have:

  • Started hsm_mgmt_tool

  • Logged on to the HSM

  • A user type permitted to run this command (see User types)

User types

The following user types can run this command. For details, see HSM User Permissions Table.

  • Cryptographic Officer (CO)

  • Cryptographic User (CU)

  • Provisional Administrator (PRECO)

Syntax

changePswd <user-type> <user-name> <password |-hpswd>
Important

Enter parameters in the exact order shown in the syntax.

To hide the password input, use -hpswd instead of entering the password directly, then follow the prompts.

Parameters

ParameterRequiredDescription
<user-type>YesThe user type of the target user. Valid values: CO, CU, PRECO. See HSM User Permissions Table.
<user-name>YesThe username of the target user. Case-insensitive.
<password | -hpswd>YesThe new password. Must be 7–32 characters and is case-sensitive. Entering a plaintext password displays it in the terminal. Use -hpswd to hide the input.

Examples

Change your own password

Any user can change their own password. Run info first to confirm your current login status.

  1. Run info to get the current login state.

    cloudmgmt>info server 0
    Id     	Name   			Hostname       	 Port  	State  	        Partition      	 LoginState
    0      	172.16.0.2             	172.16.0.2       2225  	Connected      	192168123006   	 Logged in as 'admin(CO)'
  2. Change the password.

    cloudmgmt>changePswd CO admin newPassword

Change another user's password

A CO can change the password of another CO or a CU. The current password of the target user is not required.

  1. Run info to confirm that you are logged on as a CO.

    cloudmgmt>info server 0
    Id     	Name   			Hostname       	 Port  	State  	        Partition      	 LoginState
    0      	172.16.0.2             	172.16.0.2       2225  	Connected      	192168123006   	 Logged in as 'admin(CO)'
  2. Change the target user's password.

    cloudmgmt>changePswd CO admin newPassword