How to use Symantec.CSM.ConfigureServiceAccount.exe to update Application Service service account and or the Encryption Management service account and/or passwords.

Products

• Control Compliance Suite Windows

Issue/Introduction

Commonly it is the case in both all-in-one and distributed installations of CCS that both the Encryption Management service and Application Server services use the same account. However best practice in a distributed deployment is to use separate accounts for the two services so both systems are not compromised if an account and its password is leaked to an inappropriate party. This tool would also be used when the password for the account the Application Server or Encryption Management service has been changed.

N/A

Resolution

Commonly it is the case in both all-in-one and distributed installations of CCS that both the Encryption Management service and Application Servers services use the same account. However best practice in a distributed deployment is to use separate accounts for the two services so both systems are not compromised if an account and its password is leaked to an inappropriate party. This tool would also be used when the password for the account the Application Server or Encryption Management service has been changed.

Steps for updating the Management Service Account or Password

1. From "C:\Program Files (x86)\Symantec\CCS\Reporting and Analytics\Application Server"  launch Symantec.CSM.ConfigureServiceAccount.exe running as administrator.
2. Select the Management Service radial button
3. Enter the Pass Phrases used for the Directory Support Service during the Application Server installation (required, if forgotten, no changes can be made)
4. Enter the domain/username for the Management Service's service account
5. Enter the new password
6. Enter the Directory Server host name
7. Update the entry for the ADAM\ALDS Port Number if non-default
8. Click 'OK' and a message should be given 'Service configuration saved' with an important reminder to change the account information in the SCM, click 'OK'
9. Click 'Cancel' on the 3 SQL Server Configuration Dialogs, this information does not need entered unless SQL settings changed
10. Click 'Cancel' on the Configure CCS Services dialog to close (There currently is no close button or other successful operation indicator except the message in step 8)
11. In the Service control manager change the Account and/or password for the Directory Support Service and Management Server Service
12. Start/Restart the Directory Support Service first followed by the Management Service
13. Restart the Application Server Service to ensure successful communication between the Application Server and Management Service

 

Steps for updating the Application Server Account or Password

1. From "C:\Program Files (x86)\Symantec\CCS\Reporting and Analytics\Application Server" launch Symantec.CSM.ConfigureServiceAccount.exe (on Windows 2008, run as administrator)
2. Select the Application Server Service radial button (default)
3. Enter the Pass Phrases used for the Application Server during the Application Server installation (required, if forgotten, no changes can be made)
4. Enter the domain\username for the Application Server service account
5. Enter the new password
6. Enter the Directory Server host name
7. Update the entry for the ADAM/ALDS Port Number if non-default
8. Click 'OK' and a message should be given 'Service configuration saved' with an important reminder to change the account information in the SCM, click 'OK'
9. Click 'Cancel' on the 3 SQL Server Configuration Dialogs, this information does not need entered unless SQL settings changed
10. Click 'Cancel' on the Configure CCS Services dialog to close (There currently is no close button or other successful operation indicator except the message in step 8)
11. In the Service control manager change the account and/or password for the Application Server Service and start/restart the service
12. Launch the CCS Console
13. Click Settings / Secure Configuration / Application Server Credential
14. Update the Application Server Password (This setting is used to launch Scheduled System Jobs)