update wem install instructions

Author: mpfuster

advocacy_docs/supported-open-source/warehousepg/wem/installing/wem.mdx

@@ -23,7 +23,7 @@ Install the WarehousePG Enterprise Manager (WEM) package on your designated host
     sudo dnf install -y whpg-enterprise-manager
     ```
 
-## Configuring WEM
+## Configuring WEM options
 
 Edit the configuration file `/etc/wem/wem.conf` and configure the following parameters:
 
@@ -45,18 +45,53 @@ Edit the configuration file `/etc/wem/wem.conf` and configure the following para
     LOKI_URL="http://loki.hostname:3100"
     ```
 
-1. Configure the WEM portal details. For example:
+
+1. To enable the AI Assistant for query writing and optimization, configure the `ANTHROPIC_API_KEY` parameter. Note that this requires an active Anthropic account. 
+
+1. To enable centralized alert handling and notifications with Alertmanager, configure the `ALERTMANAGER_URL` parameter to point to your Alertmanager endpoint.
+
+1. Optionally, set the parameters `WEM_EXPORTER_LOG_LEVEL`, `WEM_EXPORTER_REMOTE_WRITE_INTERVAL`, and `WEM_EXPORTER_REMOTE_WRITE_TIMEOUT` for advanced configuration settings.
+
+
+### Configuring WEM portal access
+
+Define how you access the WEM portal and establish the initial administrative credentials by configuring the following parameters in your environment file:
+
+```ini
+WEM_HOST=wem-hostname
+WEM_USER=admin
+WEM_PORT=8080
+```
+
+To configure the administrator password, choose one of the three following methods:
+
+1. **Option 1: Interactive setup** This is the simplest method for manual installations. You do not need to modify the configuration file manually; the system will prompt you for the password and handle the internal setup.
+
+    Run the setup command and follow the prompt to enter your desired password:
+
+    ```bash
+    wem setup --interactive
+    ```
+
+1. **Option 2: Static configuration** Use this method to define your administrative password directly within the configuration file.
 
     ```ini
-    WEM_HOST=wem-hostname
-    WEM_USER=admin
-    WEM_PASSWORD=admin123
-    WEM_PORT=8080
+    WEM_ADMIN_PASSWORD=admin123
     ```
 
-1. To enable the AI Assistant for query writing and optimization, configure the `ANTHROPIC_API_KEY` parameter. Note that this requires an active Anthropic account. 
+1. **Option 3: File-based configuration** For enhanced security, manage the password via an external file. This is ideal for automated deployments or keeping secrets out of main config files.
 
-1. Optionally, set the parameters `WEM_EXPORTER_LOG_LEVEL`, `WEM_EXPORTER_REMOTE_WRITE_INTERVAL`, and `WEM_EXPORTER_REMOTE_WRITE_TIMEOUT` for advanced configuration settings.
+    1. Provide a  password by creating a file containing your password. Then, set the following parameter in your configuration:
+
+        ```bash
+       echo "your-secure-password" > /etc/wem/admin.pw
+        ```
+
+        Point WEM to the file:
+        
+        ```bash
+        WEM_ADMIN_PASSWORD_FILE=/etc/wem/admin.pw
+        ```
 
 ## Starting the WEM service
 
@@ -67,10 +102,24 @@ Run the following commands to enable and start the WEM service on your dedicated
     systemctl start wem
  ```
 
-Verify that the service is running:
+Verify that the service is running and active:
 
 ```bash
 sudo systemctl status wem
 ```
 
+## Verifying the installation
+
+After starting the service, use these diagnostic tools to ensure all WEM components are communicating correctly and the environment is healthy:
+
+- Connectivity Check: Run the verification tool to test the portal's link to the backend:
+
+```bash
+wem setup --verify
+```
+
+- System Health Audit: Perform a comprehensive "doctor" check to identify potential configuration errors, missing dependencies, or connectivity issues:
 
+```bash
+wem doctor
+```