Skip to main content Skip to complementary content

Changing the default Remote Engine password

Last updated: 9/9/2026
Change the default Talend Remote Engine credential to enable secure interactive access to the Karaf console and other tools.

About this task

Ensure to change the default credential in the following situations:

  • You do not have the password that was generated during installation or during first startup. The default credential behavior depends on the installation method and version:
    Installation method Default credential behavior
    Installer-based, v2.13.13 and later Random password generated during installation, printed to the console.

    To ensure this generation, select the Set strong password for default SSH user checkbox to automatically create a strong password for SSH communication with Talend Remote Engine

    . Otherwise, tadmin is used. For more information, see Installing the Remote Engine automatically.
    Installer-based, before v2.13.13 Static default tadmin. Must be changed.
    Archive-based, v2.14.1 and later Random password generated on first startup, printed to the console in the following format:
    default engine password 'tadmin' has been replaced with <generated-password>
    Archive-based, before v2.14.1 Static default tadmin. Must be changed.
  • You are using tadmin as the default credential in an installer-based installation before v2.13.13 or an archive-based installation before v2.14.1. For security reasons, change the default credential before using the engine in production.

Procedure

  1. Open the <RemoteEngineInstallationDirectory>/etc/users.properties file in a text editor.
  2. Locate the line for the default user.
    Password state Line format
    Not yet encrypted tadmin = tadmin,_g_:admingroup
    Already encrypted tadmin = {CRYPT}212E67DAB3D7355B2BC74F76B59213EAA9F021955B26F2158E6D6F1A653089ECDDF6A12AEE229CF1{CRYPT},_g_:admingroup

    On Windows, this default user is the user of the machine on which Talend Remote Engine is installed as a system service.

  3. Replace the password value with a new strong password.

    In both cases, replace the password field, whether plain text or the {CRYPT}...{CRYPT} block, with your new plain text password.

  4. Save the file.

    If the engine is running when you make this change, the password is automatically encrypted after saving. Otherwise, the encryption occurs when the engine starts. For example:

    tadmin = {CRYPT}6BA00DCABFDDDE0F9A96B4CA68C13DBEE23597E5925656680C501889C4A554604201B37069754392{CRYPT},_g_:admingroup

Results

The default credential is updated. Use it for tasks such as connecting to the Karaf console or extracting Karaf dumps.

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – please let us know!