Currently when the installer creates a vault.keystore, there's no way to update that keystore since the vault keystore password is unknown to the person performing the installation. Based on https://issues.jboss.org/browse/RHPAM-1960, plaintext passwords were removed from the installation details. Perhaps we can show the user all passwords that were created (vault, admin, controllerUser, etc) in a screen in the installer. This way we won't have to put the plaintext password in the installer details.