How to Change the Authentication Method

 This topic applies to on-premises installations.

Going from CAM Authentication to CSM Authentication

To change from CAM authentication to CSM authentication:

  1. If you haven't already done so, set up Cherwell Service Management for use with Cherwell Asset Management by completing the tasks described in Checklist for Using CSM Authentication.
  2. Exit CSM Administrator.
  3. Bring up a command prompt as administrator and navigate to C:\Program Files (x86)\Cherwell Asset Management\CAM Web\Encrypt Web Configs
  4. Execute the following command:

    EncryptWebConfigs.exe webauth --csmauth=CSM/REST --dbserver=<CAM-database-server> --dbname=<CAM-database-name> --dbuser=<CAM-database-username> --dbpassword=<CAM-database-password> --apihost=<dns-of-CSM-host-including-protocol> --apikey=<csm-rest-api-key> --apiuser=CSDAdmin --apipassword=<CSDAdmin-password> --dryrun

    This will simulate changing the authentication type to CSM without actually making the changes.

  5. Issue the above command again, this time without --dryrun to actually make the configuration change to use CSM authentication.
    If you want to configure CAM to use CSM authentication with SAML, you can use the same command as above and change the --csmauth value to CAM/SAML. See Using SAML Authentication for more information.
  6. Proceed to After making authentication changes later in this topic.

Going from CSM Authentication to CAM Authentication

To change from CSM authentication to CAM authentication:

  1. Exit CAM Administrator.
  2. Bring up a command prompt as administrator and navigate to C:\Program Files (x86)\Cherwell Asset Management\CAM Web\Encrypt Web Configs
  3. Execute the following command:

    EncryptWebConfigs.exe webauth --esmauth --dbserver=<CAM-database-server> --dbname=<CAM-database-name> --dbuser=<CAM-database-username> --dbpassword=<CAM-database-password> --dryrun

    This will simulate changing the authentication type to CSM without actually making the changes.

  4. Issue the above command again, this time without --dryrun to actually make the configuration change to use CAM authentication.
  5. Proceed to the next section, After making authentication changes.  

After Making Authentication Changes

After making any changes, select OK. If your credentials are validated, you are prompted to restart CAM Administrator for your changes to take effect. Select OK in that dialog box to shut down CAM Administrator, and then do the following:

  • Restart CAM Administrator.

  • If you changed to CSM authentication, select Tools > Synchronize with CSM, then select Synchronize in the dialog box that opens. The synchronization process may take a few moments to complete.

  • Direct any other users to log out of all Cherwell Asset Management applications, then log back in. Their sessions then use the new authentication settings.