{
  "schema_version": 2,
  "id": "operate/rs/security/access-control/manage-passwords/active-active-admin-credentials",
  "title": "Update admin credentials for Active-Active databases",
  "url": "https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials/",
  "summary": "Update admin credentials for Active-Active databases.",
  "tags": [
    "docs",
    "operate",
    "rs"
  ],
  "last_updated": "2026-09-24T09:16:28+01:00",
  "page_type": "content",
  "content_hash": "296a400c2615786b77953e695baa33fbb49eae8b238d16879a8cd4baca6e44f1",
  "sections": [
    {
      "id": "content",
      "title": "Content",
      "role": "content",
      "text": "Active-Active databases use administrator credentials to manage operations. When you change the administrator password on clusters with Active-Active databases, you must update the Active-Active database configuration to prevent authentication failures during Active-Active management operations.\n\n> [!WARNING]\n> Do not perform any management operations on the databases until these steps are complete.\n\nTo update the administrator password on a cluster with Active-Active databases:\n\n1. From the user management page, update the administrator user password on the clusters you want to update.\n\n1. Run [`crdb-cli crdb list`](https://redis.io/docs/latest/operate/rs/references/cli-utilities/crdb-cli/crdb/list) to find the `CRDB-GUID` that uniquely identifies each Active-Active database and the fully qualified domain names (`FQDN`) of each participating cluster:\n\n    [code example]\n\n    Example output:\n\n    [code example]\n\n1. Update the Active-Active database credentials using the [`crdb-cli crdb update`](https://redis.io/docs/latest/operate/rs/references/cli-utilities/crdb-cli/crdb/update) command:\n\n    [code example]\n\n    Replace the following values:\n\n    - `<CRDB-GUID>`: The `CRDB-GUID` from the `crdb-cli crdb list` output\n\n    - `<admin-username>`: The administrator username for the clusters\n\n    - `<REPL-ID-1>` and `<REPL-ID-2>`: The `REPL-ID` for the corresponding FQDNs\n\n    - `<FQDN-1-password>` and `<FQDN-2-password>`: The current administrator passwords for each cluster"
    }
  ],
  "examples": [
    {
      "id": "content-ex0",
      "language": "sh",
      "code": "crdb-cli crdb list",
      "section_id": "content"
    },
    {
      "id": "content-ex1",
      "language": "sh",
      "code": "CRDB-GUID                             NAME        REPL-ID  FQDN\n    4053a0dd-a4a5-4f38-b135-75b7a2dc7331  my-aa-db    1        fqdn1.example.com\n    4053a0dd-a4a5-4f38-b135-75b7a2dc7331  my-aa-db    2        fqdn2.example.com",
      "section_id": "content"
    },
    {
      "id": "content-ex2",
      "language": "sh",
      "code": "crdb-cli crdb update \\\n      --crdb-guid <CRDB-GUID> \\\n      --credentials id=<REPL-ID-1>,username=<admin-username>,password=<FQDN-1-password> \\\n      --credentials id=<REPL-ID-2>,username=<admin-username>,password=<FQDN-2-password> \\\n      --force",
      "section_id": "content"
    }
  ]
}