ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

How to run the Software Delivery agent plug-in using other credentials than the ones CAF is running with?

book

Article ID: 53711

calendar_today

Updated On:

Products

CA Automation Suite for Data Centers - Configuration Automation CA Client Automation - Asset Management CA Client Automation - IT Client Manager CA Client Automation CA Client Automation - Remote Control CA Client Automation - Asset Intelligence CA Client Automation - Desktop Migration Manager CA Client Automation - Patch Manager CA Server Automation

Issue/Introduction

Description:

Sometimes the SD Agent plug-in needs to be run with more privileges than the default Local System Account. (CAF is configured to run with the Local System Account by default).

This can be configured using the "CAF SaveCreds" and "CAF LoadCreds" commands.

Solution:

Follow the procedure below if you want to change the credentials the Software Delivery agent plug-in is running with:

  1. Run the following command to create a valid credentials file:

    caf savecreds sdagent user <Domain\ServiceUser> password <TextPasswd>

    where  <Domain\ServiceUser> is the Domain and the user you want the SD agent plugin to run as
    and      <TextPasswd> is the password.

  2. This will create a file named cafcreds.txt in the "bin" folder under the DSM base installation folder.

    (Default location:C:\Program Files\CA\DSM\bin\cafcreds.txt)

    The file contains the following lines:
    "<ComputerName>" "sdagent" "<Domain\UserName>" "<EncryptedPassword>"

    where <ComputerName> is the computer name on which the credentials need to be applied.
               <Domain\UserName> is the Domain and the user you want the SD agent plugin to run as
    and     <EncryptedPassword> is the string corresponding to the encrypted password you initially provided.

  3. Create a .CMD file in the following way:
    ------------------------------------------[email protected]Echo Off                                                                    Rem ------- Creation of the cafcreds file for each computer -------          Echo "%COMPUTERNAME%" "sdagent" "UserName" "EncryptedPassword" > "C:\Program Files\CA\DSM\bin\cafcreds.txt"                                   Rem ------- Execution of the load creds command ------                       caf loadcreds                                                                ---------------------------------------------------------------------------------------------------------
  4. Create a SD package and deliver this CMD file to a computer and verify it works after recycling CAF or rebooting the computer.

  5. Deliver the package to the computers which need to be configured to run the SD Agent with the new credentials.

    Use the $#bg parameter to run it in the background and optionally the $rf parameter for the job output in the SD job parameters.

  6. The next time CAF is restarted, the SD agent plugin will run with the provided credentials.

Environment

Release: UASIT.99000-11.2-Asset Intelligence
Component: