How to reset the console password for a local account in Twistlock

If you forgot your Twistlock Console password for a local account in Twistlock, you can reset it. Follow this procedure with caution because unintended changes to the database can break the Console.

Prerequisites

You have root access to the host where Twistlock Console is installed.

Procedure

1. Create a hash for the desired password that you wish to reset your Twistlock account to.

$ echo -n <DESIRED_PASSWORD> | openssl dgst -binary -sha256 | openssl base64

2. Exec into Console container.

$ docker exec -it twistlock_console /bin/sh

3. Run mongo.

$ mongosh

4. Set a password for user 'admin' by running the following commands.

> use twistlock
> db.users.insert({ username: "<DESIRED_USERNAME>", password: "<HASH_CREATED_IN_STEP_1>", role: "admin", authType:"basic" })

{
  acknowledged: true,
  insertedIds: { '0': ObjectId("<OBJECT_ID>") }
}

5. Exit out of the database and container.

> exit
$ exit

6. Verify the changes by logging into the Console with your new password.