Change the Token for Encrypting the Credentials¶

If you keep the standard installation, MongoDB is used as credential store. For security reasons, change the pre-configured token used for encrypting the credentials. The token may be any string.

Hint - how to change the configuration

In the instructions below, SEAL Operator CLI is used for changing the configuration. You can also use the Consul Web interface.

If SEAL Operator is already in use, back up MongoDB. Otherwise, you lose all data in the next steps. For how to do this, refer to the SEAL-specific MongoDB documentation.
Export the complete configuration of SEAL Operator from Consul to a YAML file. This ensures that you edit the current configuration.
```
operator config export <filename>.yml --insecure
```
Edit the exported file <filename>.yml.

In the env section, specify the new token in the key MONGO_TOKEN:

env:
  service:
    ...
    operator-server:
      tag:
        any:
          MONGO_TOKEN: 'new_secure_token'
    ...

Save the <filename>.yml file.

Re-import the file to Consul.

operator config import <filename>.yml --insecure

Stop all SEAL Operator services.
```
operator service stop
```
Delete the complete data directory of MongoDB.
```
rm -r /opt/seal/data/seal-mongodb
```
Restart the service seal-mongodb.
```
operator service start seal-mongodb
```
If you backed up MongoDB, restore the data. For how to do this, refer to the SEAL-specific MongoDB documentation.
Restart the complete SEAL Operator system.
```
operator service start
```
Check the status of the SEAL Operator services.
```
operator service status
```