What are the commands for reinstalling the CA Spectrum processd service due to a user password change on Windows?

Products

• CA Spectrum

Issue/Introduction

On Windows when the CA Spectrum processd (process daemon) install user's password changes, the processd service needs to be reconfigured/reinstalled with the updated password.  If not, the next time the processd is stopped, it will not start.   This document provides guidance and tips when reinstalling the processd service.

Environment

Release: 20.2.x

Component: SPCCSS - SpectroSERVER Core

OS: Windows

Resolution

If the SpectroSERVER and/or processd are running, you will need to stop them (you can stop the "Spectrum Process Daemon" service from the Windows Services and this will gracefully stop both the SpectroSERVER and the processd).

Open a command shell by going to Start-->Run and type:  cmd

NOTE:  Do not open a bash -login shell as this will not work.  The commands need to be run from the Windows cmd shell

Navigate to the $SPECROOT/lib/SDPM directory and run the following command:

processd --install --username <username> --password <password>

For example:

processd --install --username spectrum --password 'spectrum'

If the user is not local but is part of a domain, use the following command:

processd --install --username <domain>\<account> --password <password>

Some instances may require a double backslash:

processd --install --username <domain>\\<account> --password <password>

If the password has special characters in it, you need to enclose the password in quotes.

For example:

processd --install --username spectrum --password '$$pectrum'

Additional Notes:

• Make sure that User Access Control (UAC) and Data Execution Prevention (DEP) are disabled or set to minimum or you will not be able to reinstall the processd service.  An error similar to this may show

"Requesting installation of service: "SPECTRUM Process Daemon 

"Error: Failure opening security policy -1073741790 CreateService error: 
installation failed: this service isn't currently installed"

• If you are changing the install owner, make sure that user is in the Window's "Spectrum Users" group.
• You may need to remove the Spectrum Process Daemon service first (processd --remove) then reboot the computer before you can reinstall the Spectrum processd service
• After disabling UAC from Windows Control Panel, you may still need to disable UAC features individually. This can be done from Local Security Policy: 
  
  • Start > Administrative Tools > Local Security Policy > Security Options > User Access Control 
  • Disable all UAC features
• DEP Settings can be located in System Properties > Advanced > Performance > Data Execution Prevention

Additional Information

Please reference the "Broadcom TechDocs : CA Spectrum 10.4.1 - Change the Windows Password in Processd" section of the documentation for more information.

How to completely disable UAC (User Access Control) on Windows?

1. Simply type in "UAC" in the search field on Windows, the UAC setting window will pop up. Slide the slider bar to the lowest value with description Never Notify.
Click OK to make the change effective.

2.  Launch the Local Security Policy (from the Administrative Tools)
Expand Security Setting
Expand Local Policies
Expand Security Options
Disable the following:
User Account Control: Admin Approval Mode for the Built-in Disabled
User Account Control: Allow UIAccess applications to prompt Disabled
User Account Control: Behavior of the elevation prompt for Elevate with
User Account Control: Behavior or the elevation prompt for Prompt for c
User Account Control: Detect application installations and Disabled
User Account Control: Only elevate executables that are sign Disabled
User Account Control: Only elevate UIAccess applications th Disabled
User Account Control: Run all administrators in Admin Appr Disabled
User Account Control: Switch to the secure desktop when pr Disabled
User Account Control: Virtualize file and registry write fai Disabled

3. Reboot Windows to make the change effective

How to set Data Execution Prevention (DEP) to minimum in order to run the command to install processd?

Open Windows Explorer. Right click This PC or Computer and choose, ‘Properties’. Then, select the ‘Advanced System settings’ option. Next, from the ‘System Properties’ window, select ‘Advanced’ tab. Choose the ‘Performance’ section now and from the new Performance Options window that appears on your computer screen, select ‘Data Execution Prevention tab’.

Please select the option Turn on DEP for essential Windows programs and services only, then click on OK to save the change.