search cancel

Updating ITA service account credentials

book

Article ID: 240268

calendar_today

Updated On:

Products

IT Analytics

Issue/Introduction

What is the procedure for updating the saved service account passwords used by ITA (application, database, cubes, reports) after the service account password has been reset or updated?

Environment

Release : 2.9.1

Component : Security

Resolution

The nature of IT Analytics' (ITA) architecture requires multiple identities to be defined across Microsoft Internet Information Services (IIS), SQL Server, SQL Server Analysis Services (SSAS), and SQL Server Reporting Services (SSRS), though the same identity may be used in all cases. Additional credentials are used with content packs to connect to data sources. In some environments, the passwords of one or more identities may periodically change, necessitating an update of the passwords used for ITA and data source connections.

This article does not address changes to ITA portal user account credentials.


Standard Method

After resetting or updating the ITA service account's password in Active Directory, follow this procedure to update the credentials used by the ITA application:

  1. Follow the procedure for Microsoft Internet Information Services (IIS) provided below to update the ITAnalyticsServer_AppPool
  2. Login to the ITA portal using an account with administrative privileges
  3. In the IT Analytics header, click on the gear icon and navigate to Settings > Servers
  4. Click on each gear icon and select Edit for each of the following servers:
    1. Analysis Server Settings
    2. Report Server Settings
    3. SQL Server Agent Settings
  5. Follow the prompts in the Configuration Wizard for each server to update the service account password

Manual Method

If the standard procedure fails to update the credentials on one or more servers, refer to the following procedures.

Microsoft Internet Information Services (IIS)

To update the password of the application pool identity used by IIS for the ITA application, follow this procedure:

  1. On the ITA application server, open the Internet Information Services (IIS) Manager
  2. In the Connections pane, expand the server hosting the ITA application and select Application Pools
  3. In the Application Pools page, right-click the ITAnalyticsServer_AppPool and select Advanced Settings
  4. In the Advanced Settings window, locate the Process Model heading
  5. Under the Process Model heading, select Identity and click on the ellipsis next to the credential name
  6. In the Application Pool Identity window, click the Set... button next to Custom Account
  7. In the Set Credentials window, enter the user name and new password
  8. Click the OK button to close the Set Credentials window
  9. Click the OK button to close the Application Pool Identity window
  10. Click the OK button to close the Advanced Settings window
  11. In the Application Pools page, right-click the ITAnalyticsServer_AppPool and select Recycle...

Microsoft SQL Server

To update the password used by the IT Analytics Proxy to initiate cube processing on the Analysis Server, follow this procedure:

  1. Using SSMS, connect to the Database Engine hosting the ITAnalytics database
  2. In Object Explorer, navigate to Security > Credentials
  3. Right-click the IT Analytics Credential and select Properties
  4. In the Credential Properties window, update the Identity (if needed) and password
  5. Click the OK button to save the credentials and close the Credential Properties window

Microsoft SQL Server Analysis Services (SSAS)

To update the password used by SSAS to connect to the SQL Server, follow this procedure:

  1. Using SQL Server Management Studio (SSMS), connect to the Analysis Services server hosting the IT Analytics cubes
  2. In Object Explorer, navigate to Databases > ITAnalytics
  3. Right-click ITAnalytics and select Properties
  4. In the Database Properties window under the Security Settings heading, edit the Data Source Impersonation Info
  5. In the Impersonation Information window, update the Password
  6. Click the OK button to save the password
  7. Click the OK button to close the Database Properties window
  8. In Object Explorer, navigate to Databases > ITAnalytics > Data Sources
  9. Right-click ITAnalytics and select Properties
  10. In the Data Source Properties window under the Security Settings heading, edit the Impersonation Info
  11. In the Impersonation Information window, select the Inherit impersonation option
  12. Click the OK button to close the Impersonation Information window
  13. Restart the SQL Server Analysis Services service

Data Sources

To update the password used to connect to a data source, follow this procedure:

  1. Using SSMS, connect to the Database Engine hosting the ITAnalytics database
  2. In Object Explorer, navigate to Server Objects > Linked Servers
  3. Right-click the linked server for the data source to be updated and select Properties
  4. In the Linked Server Properties window, select the Security page
  5. In the Security page, enter the username and new password under Be made using this security context
  6. Click the OK button to close the Linked Server Properties window