cancel
Showing results for 
Search instead for 
Did you mean: 

Need to Change Vault Service Account Password....

Hi...,

As we are using Enterprise Vault of version 10.0.3 and we added two Evservers in Single Evsite With Microsoft clustering with both EV & SQL for local failover in N+1 configuration.Now beacuse of password expiry policy VSA password will be expire after few days.

So we want to know where we need to update the entery of new password in Ev application and cluster end??

Regards

Dnaik

1 Solution

Accepted Solutions
Accepted Solution!

The Enterprise Vault Service

The Enterprise Vault Service Account (VSA) password on Cluster needs to be changed : 

1. Offline all EV resources in Cluster Administrator.
2. Temporarily Freeze the service group for EV in Cluster Administrator
3. Change the password for the Vault Service Account in Active Directory
4. Change the password on all EV Services on every EV Node via the services.msc console
5. Unfreeze the service group for EV in Cluster Administrator 
6. Bring ONLY Directory and Admin back online again
7. Change the password for the VSA in the VAC under 'Directory Properties - Service Account' and click OK
8. Stop Directory and Admin resources via Cluster Administrator and then start ALL EV Resources
9. Check Event logs for any errors and finally test failover

View solution in original post

14 Replies

When you change the Vault

When you change the Vault Service account password it is important that the change is updated on all Enterprise Vault servers. The best method is to change the password while you are logged in as the Vault Service account.
 
To change the Vault Service account password
 
1.As the Vault Service account, start the Administration Console.
 
2.In the left pane, expand Enterprise Vault
 
3.Right-click Directory and click Properties.
 
4.In Directory Properties, click the Service Account tab.
 
5.Press Ctrl+Alt+Del and choose the option to change the password.
 
6.Change the account password and then return to the Directory Properties tab.
 
7.Change the password on the Directory Properties tab and click OK.
 
 
 
How to change the Vault Service Account (VSA) or reset its password when using Enterprise Vault (EV) for Microsoft Exchange
http://www.symantec.com/docs/TECH48035.

 

Accepted Solution!

The Enterprise Vault Service

The Enterprise Vault Service Account (VSA) password on Cluster needs to be changed : 

1. Offline all EV resources in Cluster Administrator.
2. Temporarily Freeze the service group for EV in Cluster Administrator
3. Change the password for the Vault Service Account in Active Directory
4. Change the password on all EV Services on every EV Node via the services.msc console
5. Unfreeze the service group for EV in Cluster Administrator 
6. Bring ONLY Directory and Admin back online again
7. Change the password for the VSA in the VAC under 'Directory Properties - Service Account' and click OK
8. Stop Directory and Admin resources via Cluster Administrator and then start ALL EV Resources
9. Check Event logs for any errors and finally test failover

View solution in original post

Hi, You need to change

Hi,

You need to change password in the EV Services Logon Tab and in the Vault Admin Console "Directory" peoperties.

There is no need to made any change on SQL side.

 

HI Ajay, Change the

HI Ajay,

Change the password on all EV Services on every EV Node via the services.msc console
 

In above steps we need to change password on all nodes?

You may want to also check

You may want to also check any other locations where the VSA is being used, eg. DA etc. It is important that the password is updated manually for such services where not updated via console..

Hi, Sorry to say but you need

Hi,

Sorry to say but you need to change the password on all the nodes in Services.

 

Is there any documented note

Is there any documented note or recommendation from Symantec that Vault service account password change policy on regular basis is not a good exercise???

Hi, Please refer following

Hi,

Please refer following TechNote :

http://www.symantec.com/docs/TECH125211 

 

As per mentioned in the articles "The account Password never expires." It means should not change the password.

Also what will be the impact

Also what will be the impact if we not change the password before expiry and password gets expired. It’s possible to change password after its gets expired or we need to change before expired

Hi, If your password is

Hi,

If your password is expired and you haven't change then all EV Services will we down. Because when it try to do the authentication with Active Directory that time AD will not be able to authenticate. As a result the EV Server down. User is unable to archive / restore / retrieve archived item.

 

Ok...But i have to follow

Ok...But i have to follow same steps which you mentioned in earlaier post if my password get expired before it changed.

Right. We normally recommend

Right.

We normally recommend to do not change password / password never expire. But if you company policy want to change the password make sure it should be change before it expire . so it will not impact EV / users.

 

Thanks for the help.......

Thanks for the help.......

Hi , Thanks for marking

Hi ,

Thanks for marking solution.