Password Sync Agent 3DES encryption

Products

• CA Identity Suite

Issue/Introduction

I am trying to modify the password sync agent account (etapwsad) on the e-trust password sync agent installed on the AD.

I have changed the password on Provisioning Manager but did not find any instruction how to change on the password sync agent.

I have found the file that has the password (eta_pwdsync.conf) and this password is 3DES encrypted in the file and Password tool supplied with the IDM doesn't have option to encrypted plain text password in 3DES.

 

 

 

 

Resolution

Use the Password Synchronization Agent Configuration wizard to change the 3DES hash.

Run PwdSyncConfig.exe located in password_sync_folder\bin.