What is the SPAService account created in SQL and how do I change the password? (NETIQKB47930)

  • Document ID:7747930
  • Creation Date:02-Feb-2007
  • Modified Date:06-Oct-2011
    • Micro Focus Products:
      Secure Password Administrator

Environment

Secure Password Administrator 1.0

Situation

What is the SPAService account created in SQL and how do I change the password?
The SPAService account password changed and now SPA is not processing requests.

I need to change the password for the account SPA uses to access SQL.

Resolution

The SPAService account that is created in SQL is the account Secure Password Administrator (SPA) uses to access the SPA SQL database. SPA uses this account for all actions within SQL. If you must change the password of the SQL Server Login used by Secure Password Administrator, you must also make SPA aware of the changed password. Ensure your database administrator (DBA) knows the ramifications of changing the password of this login ID.

The SQL Server Login ID (SPAService) and the NetIQ Secure Password Administrator service account are not the same account. The service account uses the SQL Server Login ID to read and write SPA profile data. Although it should not be necessary to change the SPAService Login ID, Secure Password Administrator provides a utility to ensure the Secure Password Administrator component remains aware of the update.

When you change the SQL server password for the SPAService account, you must complete the following steps:

  1. Use SQL Server Enterprise Manager to change the password for the SPAService account in SQL.
  2. Run the DatabaseCredentials.bat utility to inform SPA of the new password.

Running the DatabaseCredentials.bat utility restarts the NetIQ Secure Password Administrator service, ensuring the Secure Password Administrator uses the new SQL Server access credentials.

To change the SPAService account password in SPA after you have changed the password for the account using SQL Server Enterprise Manager:

  1. Log on with an administrator account to the Secure Password Administrator Web server computer.
  2. In Windows Explorer, go to c:\Program Files\NetIQ\SPA\bin.
  3. Run DatabaseCredentials.bat and specify the new password for the SPAService Login ID.
  4. Click OK, and then click OK on the confirmation window.

Additional Information

Formerly known as NETIQKB47930

The DatabaseCredentials.bat utility updates the Secure Password Administrator components that access the database using the SPAService Login ID, but it does not update the password of the login ID on the SQL server.

Running DatabaseCredentials.bat updates the encrypted password in the user.properties file located in c:\Program Files\NetIQ\SPA\config.