cancel
Showing results for 
Search instead for 
Did you mean: 

Need to Change Vault Service Account Password....

Dnaik79
Level 4
Partner Accredited

Hi...,

As we are using Enterprise Vault of version 10.0.3 and we added two Evservers in Single Evsite With Microsoft clustering with both EV & SQL for local failover in N+1 configuration.Now beacuse of password expiry policy VSA password will be expire after few days.

So we want to know where we need to update the entery of new password in Ev application and cluster end??

Regards

Dnaik

1 ACCEPTED SOLUTION

Accepted Solutions

EV_Ajay
Level 6
Employee Accredited

The Enterprise Vault Service Account (VSA) password on Cluster needs to be changed : 

1. Offline all EV resources in Cluster Administrator.
2. Temporarily Freeze the service group for EV in Cluster Administrator
3. Change the password for the Vault Service Account in Active Directory
4. Change the password on all EV Services on every EV Node via the services.msc console
5. Unfreeze the service group for EV in Cluster Administrator 
6. Bring ONLY Directory and Admin back online again
7. Change the password for the VSA in the VAC under 'Directory Properties - Service Account' and click OK
8. Stop Directory and Admin resources via Cluster Administrator and then start ALL EV Resources
9. Check Event logs for any errors and finally test failover

View solution in original post

14 REPLIES 14

EV_Ajay
Level 6
Employee Accredited
When you change the Vault Service account password it is important that the change is updated on all Enterprise Vault servers. The best method is to change the password while you are logged in as the Vault Service account.
 
To change the Vault Service account password
 
1.As the Vault Service account, start the Administration Console.
 
2.In the left pane, expand Enterprise Vault
 
3.Right-click Directory and click Properties.
 
4.In Directory Properties, click the Service Account tab.
 
5.Press Ctrl+Alt+Del and choose the option to change the password.
 
6.Change the account password and then return to the Directory Properties tab.
 
7.Change the password on the Directory Properties tab and click OK.
 
 
 
How to change the Vault Service Account (VSA) or reset its password when using Enterprise Vault (EV) for Microsoft Exchange
http://www.symantec.com/docs/TECH48035.

 

EV_Ajay
Level 6
Employee Accredited

The Enterprise Vault Service Account (VSA) password on Cluster needs to be changed : 

1. Offline all EV resources in Cluster Administrator.
2. Temporarily Freeze the service group for EV in Cluster Administrator
3. Change the password for the Vault Service Account in Active Directory
4. Change the password on all EV Services on every EV Node via the services.msc console
5. Unfreeze the service group for EV in Cluster Administrator 
6. Bring ONLY Directory and Admin back online again
7. Change the password for the VSA in the VAC under 'Directory Properties - Service Account' and click OK
8. Stop Directory and Admin resources via Cluster Administrator and then start ALL EV Resources
9. Check Event logs for any errors and finally test failover

EV_Ajay
Level 6
Employee Accredited

Hi,

You need to change password in the EV Services Logon Tab and in the Vault Admin Console "Directory" peoperties.

There is no need to made any change on SQL side.

 

Dnaik79
Level 4
Partner Accredited

HI Ajay,

Change the password on all EV Services on every EV Node via the services.msc console
 

In above steps we need to change password on all nodes?

Denis_Kattith1
Level 3
Partner Accredited Certified

You may want to also check any other locations where the VSA is being used, eg. DA etc. It is important that the password is updated manually for such services where not updated via console..

EV_Ajay
Level 6
Employee Accredited

Hi,

Sorry to say but you need to change the password on all the nodes in Services.

 

Dnaik79
Level 4
Partner Accredited

Is there any documented note or recommendation from Symantec that Vault service account password change policy on regular basis is not a good exercise???

EV_Ajay
Level 6
Employee Accredited

Hi,

Please refer following TechNote :

http://www.symantec.com/docs/TECH125211 

 

As per mentioned in the articles "The account Password never expires." It means should not change the password.

Dnaik79
Level 4
Partner Accredited

Also what will be the impact if we not change the password before expiry and password gets expired. It’s possible to change password after its gets expired or we need to change before expired

EV_Ajay
Level 6
Employee Accredited

Hi,

If your password is expired and you haven't change then all EV Services will we down. Because when it try to do the authentication with Active Directory that time AD will not be able to authenticate. As a result the EV Server down. User is unable to archive / restore / retrieve archived item.

 

Dnaik79
Level 4
Partner Accredited

Ok...But i have to follow same steps which you mentioned in earlaier post if my password get expired before it changed.

EV_Ajay
Level 6
Employee Accredited

Right.

We normally recommend to do not change password / password never expire. But if you company policy want to change the password make sure it should be change before it expire . so it will not impact EV / users.

 

Dnaik79
Level 4
Partner Accredited

Thanks for the help.......

EV_Ajay
Level 6
Employee Accredited

Hi ,

Thanks for marking solution.