Following assisted installation results in API server credential failure

[skmagiik]

I followed assisted installation instructions https://documentation.wazuh.com/current/installation-guide/index.html and configured 3 hosts for my local testing setup:

1. Indexer @ .180
2. Server/manager @ .181
3. Dashboard @ .182

I had failure to access the API from the dashboard until I changed the following lines of the /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml:

  #password: "<REDACTED_GENERATED_PASSWORD>"
  password: "wazuh-wui"
  run_as: true

Once I made these changes everything is working as expected.

All 3 machines are running Ubuntu server 24.04:
Linux version 6.8.0-79-generic (buildd@lcy02-amd64-049) (x86_64-linux-gnu-gcc-13 (Ubuntu 13.3.0-6ubuntu2~24.04) 13.3.0, GNU ld (GNU Binutils for Ubuntu) 2.42) wazuh/wazuh-docker#79-Ubuntu SMP PREEMPT_DYNAMIC Tue Aug 12 14:42:46 UTC 2025

[vcerenu]

Hello @skmagiik

Could you tell me which version of Wazuh you installed and on which operating system? I'd also like to know what documentation you followed.

Regarding the password you entered in the code for the wazuh.yml file, is that the password you have configured on your system?

I recommend you check our documentation for the methods we have for changing user passwords used by the Wazuh stack for communication between its components:
https://documentation.wazuh.com/current/user-manual/user-administration/password-management.html#changing-the-passwords-in-a-distributed-environment

[skmagiik]

I installed the version that was available a couple days. I can get the exact version when I return home.

For the installation instructions, I use the assisted tool as shown in this documentation:
https://documentation.wazuh.com/current/installation-guide/wazuh-server/installation-assistant.html

[vcerenu]

Hello @skmagiik

Indeed, you should check the documentation I sent you previously, which includes all the steps for changing your Wazuh API password.
https://documentation.wazuh.com/current/user-manual/user-administration/password-management.html#changing-the-passwords-in-a-distributed-environment

You can also check if the password is correct by running the following commands. You must add the API IP, username, and password to generate the login token and then query the API:

$ TOKEN=$(curl -u <USERNAME>:<PASSWORD> -k -X POST "https://<MANAGER_IP>:55000/security/user/authenticate?raw=true")
$ curl -H "Authorization: Bearer $TOKEN" -ki https://<MANAGER_IP>:55000/manager/info