Environment
Situation
How do I change the service account password used by the Security Manager log archive service?
How do I change the service account password on the Reporting server?
How do I update the service account password used by Security Manager?
How do I update the Data Access Server (DAS) credentials used by Security Manager?
How do I update the DCOM credentials used by Security Manager?
How do I use the DCOM Config (DCOMCNFG.EXE) utility to update DCOM credentials for Security Manager?
Resolution
Updating Service Credentials:
Follow the steps in this section to update the credentials used by the Security Manager service on the central computer and Log Archival Server.
To update the service credentials:
1. Start the Services administrative tool in the Administrative Tools folder of the Control Panel.
2. In the left pane, click the service name as follows:
- For Security Manager version 6.5x click NetIQ Security Manager service.
- For Security Manager version 6.5x click NetIQ Security Manager core service.
- For Security Manager version 6.5x LAS server, click NetIQ Security Manager Log Archive.
3. On the Action menu, click Stop.
4. On the Action menu, click Properties.
5. On the Log On tab, change the service account credentials. If modifying the service account name, ensure you use the Domain\Account format.
6. Click OK.
Updating Data Access Server Credentials:
Follow the steps in this section to update the credentials used by the Data Access Server on the central computer.
1. Start the Component Services administrative tool in the Administrative Tools folder of the Control Panel.
2. In the left pane, expand Component Services > Computers, and then click My Computer.
3. Expand COM+ Applications, and then click OnePointActiveOpsDAS.
4. On the Action menu, click Properties.
5. On the Identity tab, change the service credentials. If modifying the service account name, ensure you use the Domain\Account format.
6. Click OK.
7. On the Action menu, click Shut down.
Updating DCOM Credentials on Security Manager version 6.5x
Security Manager versions 6.0x and 6.5x include the smconfiguredcom command, which you can use to update the service account credentials used by multiple DCOM applications. The smconfiguredcom command pulls the updated service account name you specified for the OnePointActiveOpsDAS COM application, and then applies the name and a password you specify to the DCOM credentials.
To update the DCOM credentials, in the \NetIQ Security Manager\OnePoint folder, enter the following command at the command prompt:
smconfiguredcom newpassword
Where password is the new service account password.
To create a new login for Security Manager 6.0x and 6.5x:
If you created a new service account, follow these steps to update the database server computer with the proper permissions.
1. Log on to a central computer with an account that is a member of the local Administrators group and a member of the Microsoft SQL Server sysadmin role on the database server.
2. Start Access Configuration in the NetIQ Security Manager program folder.
3. Under Security Manager Roles, select the OnePointOps System group.
4. Select the service account, and then click Repair.
if you changed the service account or the password, follow these steps to update the reporting server SM 6.0x and SM 6.5x.
1. Log on to SQL server management studio | database engine
2. Go to the service account under Security | credentials, right click and choose properties.
3. Update the account and click okay.
4. If any of the SQL services are using the service account for logons, make sure to update those services by using the SQL server configuration manager and not through service.msc.