How to Change Vault Service Account Password

book

Article ID: 100061370

calendar_today

Updated On:

Description

Description

There can be instances where the Enterprise Vault Service Account (VSA) credentials need to be changed.  For the Enterprise Vault services, the instructions can be found in Article 100017600. For Compliance Accelerator (CA) / Veritas Advanced Surveillance (VAS on-premises) and Discovery Accelerator, additional steps are required.

The sequence for changing the VSA credentials for the Accelerators is as follows:

1. Update the Enterprise Vault Accelerator Manager Service (EVAMS) Log On tab credentials on the Accelerator server(s):

1.1. Log on to the Accelerator server as the VSA.
1.2. Right-click the Start button | Run | services.msc | OK.
1.3. Double-click the Enterprise Vault Accelerator Manager Service, or right-click the Enterprise Vault Accelerator Manager Service | Properties.
1.4. Update the credentials in the Log On tab.
1.5. Save the change and acknowledge any prompts advising the new credentials 'will not take effect until you stop and restart the service'.
1.6. Either Restart the Enterprise Vault Accelerator Manager Service, or Stop and Start the Enterprise Vault Accelerator Manager Service.

2. Upload the report templates using the updated credentials:

2.1. Log on to the Accelerator server as the VSA.
2.2. Open a web browser and navigate to the EVBAAdmin administration website, usually at http://localhost/evbbaadmin.
2.3. Click on the Reporting Server button.
2.4. Enter the information as follows:
2.4.1. Reporting Server Url: Specifies the URL of the virtual directory of the SQL Reporting Server (SSRS). This is also listed in the SSRS Configuration Manager in the WebService URL section. An example would be: http:///ReportServer.
2.4.2. User Name: Enter the VSA name in the form domain\user_name.  Note that some instances do not require the use of the domain prior to the user_name.
2.4.3. Password: Enter the VSA password.
2.5. Click on Upload Reports.

The report templates will be uploaded to the SSRS server using the VSA credentials as listed in the EVBAAdmin | Reporting Server page. Note the upload could take some time. The message Upload successful should appear when the upload completes successfully. If the Upload successful message does not appear or there are any error messages, please contact technical support for further assistance.

 

Additional Optional Steps 1

It is possible to manually edit the data source for each report template. A manual edit should not normally be needed, as uploading the report templates from EVBAAdmin | Reporting Server accomplishes this function. However, if the report templates are not completing the upload, here are the steps to manually edit the data sources for each report template:

1. Browse to the SSRS Web Portal, usually at http:///Reports.
2. Navigate to the applicable Discovery Accelerator Reports or Compliance Accelerator Reports folder, then to Report Templates.
3. There should be 4 folders in the Report Templates folder corresponding to the supported languages. Navigate to the applicable language folder.
4. Click on the ellipses (...) for each report template, then click on Manage.
5. The credentials are listed in the Data Sources tab. The default credentials option for the Accelerators is 'Use the following credentials'. This should NOT be changed.
6. Edit the VSA credentials as needed, then Save the change.
7. Repeat for the remaining templates.

 

Additional Optional Steps 2

If one or more reports exhibit the symptoms but other reports can be successfully run, the report templates for the affected reports may need to be replaced. Uploading the report templates does not accomplish this as this process does not overwrite a report template that exists. To do this first identify the affected report templates by running the reports to determine which reports can be successfully run and which reports exhibit the symptoms.

If a small number of reports are affected, replace the templates for those reports, as follows:

1. Browse to the SSRS Web Portal, usually at http:///Reports.
2. Navigate to the applicable Discovery Accelerator Reports or Compliance Accelerator Reports folder, then to Report Templates.
3. There should be 4 folders in the Report Templates folder corresponding to the supported languages. Navigate to the applicable language folder.
4. Click on the ellipses (...) for the first affected report template, click on Delete and acknowledge the prompt to delete the template. Repeat for all affected report templates.
5. Follow the steps above to upload the report templates.

If a large number of reports are affected, it may be be more efficient to delete the templates language folder and allow the process to recreate the entire folder, as follows:

1. Browse to the SSRS Web Portal, usually at http:///Reports.
2. Navigate to the applicable Discovery Accelerator Reports or Compliance Accelerator Reports folder, then to Report Templates.
3. There should be 4 folders in the Report Templates folder corresponding to the supported languages.
4. Click on the ellipses (...) for the affected report templates language folder, click on Delete and acknowledge the prompt to delete the folder.
5. Follow the steps above to upload the report templates.

A refresh of the applicable SSRS Web Portal page may be needed to view the updates.


Note

If SSRS has been configured to use the VSA as it's service account, it will be required to edit all occurrences of the service account in the SSRS Configuration and possibly in the SQL database engine that services SSRS. The SSRS service account may be listed under:

1. SSRS Configuration Manager in the Service Account and Database sections. Another section that lists an account is Execution Account (this can be left blank).
2. SQL Server Management Studio (SSMS) connected to the database engine that services the SSRS databases. Possible locations are:
2.1. Security | Logins.
2.2. Databases | ReportServer database | Security | Users.

Typically, SSRS is configured to use the built-in Windows service account Network Service or NT Authority\NetworkService in the SSRS Configuration sections that list a Service Account, other than the Execution Account field which can be left blank.

 

Issue/Introduction

How to Change Vault Service Account Password