docs/8.0/ayanova/docs/ops-config-set-superuser-pw.md

@@ -2,7 +2,22 @@
 
 In the event that the SuperUser password is lost it can be reset using this setting.
 Upon booting up the server will reset the current SuperUser User account password to this value.
-It should only be used to temporarily reset the password and never left in place.
+
+It should only be used to temporarily reset the password and never left in place as a setting or any user with rights to see the server boot configuration will have the superuser password.
+
+## Process
+
+Because several roles are able to view the boot configuration in AyaNova, the most secure way to change the superuser password is by following these steps:
+
+0. Choose a temporary password just used for this process
+1. Insert the AYANOVA_SET_SUPERUSER_PW value with the temporary password as shown below
+2. Boot up the AyaNova server with this setting in place
+3. Login from the AyaNova web app as the superuser with the temporary password
+4. [Change the superuser password](home-password.md) to a different non-temporary password
+5. Log out and back in as the superuser to confirm the new password is working
+6. Remove the super user password override configuration setting so that the server won't change it again on next reboot
+7. Restart the AyaNova server
+8. Login as the superuser again to confirm the new password is still working
 
 ## Default
 
@@ -15,27 +30,27 @@ AyaNova expects the override password to be provided by a config.json property,
 `AYANOVA_SET_SUPERUSER_PW`
 
 The value specified should be a string used to temporarily override the super user password e.g.:
-`Th3RainInSpainFallsMainlyOnTh3Pla1n`
+`tempsuperuserpassword`
 
 Example config.json entry
 
 ```json
 {
   ...other properties...
-  "AYANOVA_SET_SUPERUSER_PW": "Th3RainInSpainFallsMainlyOnTh3Pla1n"
+  "AYANOVA_SET_SUPERUSER_PW": "tempsuperuserpassword"
 }
 ```
 
 Example command line parameter
 
-`ayanova.exe --AYANOVA_SET_SUPERUSER_PW="Th3RainInSpainFallsMainlyOnTh3Pla1n"`
+`ayanova.exe --AYANOVA_SET_SUPERUSER_PW="tempsuperuserpassword"`
 
 Example environment variable
 
 Windows
 
-`set "AYANOVA_SET_SUPERUSER_PW=Th3RainInSpainFallsMainlyOnTh3Pla1n"`
+`set "AYANOVA_SET_SUPERUSER_PW=tempsuperuserpassword"`
 
-Linux / MAC
+Linux
 
-`export AYANOVA_SET_SUPERUSER_PW="Th3RainInSpainFallsMainlyOnTh3Pla1n"`
+`export AYANOVA_SET_SUPERUSER_PW="tempsuperuserpassword"`