Disabling WebSphere administrative security

Free cyber security concept background

Sometimes the Admin Console is not accessible and this usually happens when:

  • You forget the credentials
  • Someone change the password
  • Misconfiguration SSL/Security or security.xml

To disable security, please perform the following steps via wsadmin command on Windows or Linux:

1. Open a terminal or command prompt

2. Change to the profile_root/<profileName>/bin directory of your WAS profile you need to disable Global Security for. (e.g. ctgDmgr)

cd /opt/IBM/WebSphere/AppServer/profiles/ctgDmgr/bin/

3. Execute the wsadmin[.bat|.sh] command to enter the wsadmin command/scripting interface

./wsadmin.sh -conntype NONE -lang jython

4. Execute the securityoff() command to disable Global Security for your WAS Profile

wsadmin> securityoff()

You should receive a similar output message:

LOCAL OS security is off now but you need to restart the connected server to make it affected.

5. Save your configuration changes

wsadmin> AdminConfig.save()

You should receive a similar output message:

u''

6. Exit the wsadmin command/scripting environment

wsadmin> quit

7. Restart the Deployment Manager server and Node agent

Congratulations! You have successfully manually disabled Global Security for your WAS Deployment Manager. You should now be able to access the WAS Admin Console without having to specify a password.


If you found my post interesting or useful and just want to say thanks, you can always buy me a coffee.

Leave a Reply