Fixing Passwords that have Encountered a PaddBlock Error

When the authen.dat, .ssotruststore and .ssokeystore files are modified, the existing passwords can no longer be decrypted. The password decryption process throws what is called a "paddblock" error. This section describes how to list and fix passwords in this situation.

Administrators fix passwords with paddblock errors by running the secadm commands described below for each affected service. The commands prompt the security administrator to provide a new password which overrides the existing (locked) password.

Note: 

If you use the XREF system for authentication, services cannot be overriden. You will receive an error message and not be allowed to continue with the override in this case.