10-31-2013 12:24 AM
Hi...,
As we are using Enterprise Vault of version 10.0.3 and we added two Evservers in Single Evsite With Microsoft clustering with both EV & SQL for local failover in N+1 configuration.Now beacuse of password expiry policy VSA password will be expire after few days.
So we want to know where we need to update the entery of new password in Ev application and cluster end??
Regards
Dnaik
Solved! Go to Solution.
10-31-2013 12:52 AM
The Enterprise Vault Service Account (VSA) password on Cluster needs to be changed :
1. Offline all EV resources in Cluster Administrator.
2. Temporarily Freeze the service group for EV in Cluster Administrator
3. Change the password for the Vault Service Account in Active Directory
4. Change the password on all EV Services on every EV Node via the services.msc console
5. Unfreeze the service group for EV in Cluster Administrator
6. Bring ONLY Directory and Admin back online again
7. Change the password for the VSA in the VAC under 'Directory Properties - Service Account' and click OK
8. Stop Directory and Admin resources via Cluster Administrator and then start ALL EV Resources
9. Check Event logs for any errors and finally test failover
10-31-2013 12:49 AM
10-31-2013 12:52 AM
The Enterprise Vault Service Account (VSA) password on Cluster needs to be changed :
1. Offline all EV resources in Cluster Administrator.
2. Temporarily Freeze the service group for EV in Cluster Administrator
3. Change the password for the Vault Service Account in Active Directory
4. Change the password on all EV Services on every EV Node via the services.msc console
5. Unfreeze the service group for EV in Cluster Administrator
6. Bring ONLY Directory and Admin back online again
7. Change the password for the VSA in the VAC under 'Directory Properties - Service Account' and click OK
8. Stop Directory and Admin resources via Cluster Administrator and then start ALL EV Resources
9. Check Event logs for any errors and finally test failover
10-31-2013 12:55 AM
Hi,
You need to change password in the EV Services Logon Tab and in the Vault Admin Console "Directory" peoperties.
There is no need to made any change on SQL side.
10-31-2013 01:38 AM
HI Ajay,
Change the password on all EV Services on every EV Node via the services.msc console
In above steps we need to change password on all nodes?
10-31-2013 02:30 AM
You may want to also check any other locations where the VSA is being used, eg. DA etc. It is important that the password is updated manually for such services where not updated via console..
10-31-2013 02:38 AM
Hi,
Sorry to say but you need to change the password on all the nodes in Services.
10-31-2013 04:20 AM
Is there any documented note or recommendation from Symantec that Vault service account password change policy on regular basis is not a good exercise???
10-31-2013 04:44 AM
Hi,
Please refer following TechNote :
As per mentioned in the articles "The account Password never expires." It means should not change the password.
10-31-2013 04:56 AM
Also what will be the impact if we not change the password before expiry and password gets expired. It’s possible to change password after its gets expired or we need to change before expired
10-31-2013 04:59 AM
Hi,
If your password is expired and you haven't change then all EV Services will we down. Because when it try to do the authentication with Active Directory that time AD will not be able to authenticate. As a result the EV Server down. User is unable to archive / restore / retrieve archived item.
10-31-2013 05:10 AM
Ok...But i have to follow same steps which you mentioned in earlaier post if my password get expired before it changed.
10-31-2013 05:25 AM
Right.
We normally recommend to do not change password / password never expire. But if you company policy want to change the password make sure it should be change before it expire . so it will not impact EV / users.
10-31-2013 08:56 PM
Thanks for the help.......
10-31-2013 09:11 PM
Hi ,
Thanks for marking solution.