A credential management apparatus performs a change process, an acquisition process, and a locking process. The change process is processing that periodically changes credential information of components that constitute a network. The acquisition process is processing that acquires maintenance operation information related to a maintenance operation of the network. The locking process is processing that locks the credential information of, among the components, a target component for the maintenance operation not to be changed based on the maintenance operation information, at least during the period while the maintenance operation is being performed.