Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Generating and Encrypting Passwords for Infrastructure Components


From Contrail Service Orchestration (CSO) Release 3.3 onwards, CSO uses an algorithm to automatically generate a dynamic password for the following infrastructure components:

  • Cassandra

  • Keystone

  • MariaDB

  • RabbitMQ

  • Icinga

  • Prometheus

  • ArangoDB

The auto-generated passwords for each infrastructure component and the cspadmin password for Administration Portal are displayed on the console after you complete answering the Setup Assistance questions.


You must note the auto-generated password that is displayed on the console as they are not saved in the system.

To enhance the password security, the length and pattern for each password is different and the password is encrypted. The passwords in the log file are masked.