Changing the Password for the App Control Service Account and IIS identity

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Update the password associated with the Carbon Black Service Account in Windows Services and IIS.

Environment

• App Control Server: All Versions
• Microsoft Internet Information Services (IIS): All Supported Versions

Resolution

1. Change the Service Account's password (such as in Active Directory).
   • Verify the new password does not contain Unsupported Special Characters
2. Log in to the application server hosting the Console as the Carbon Black Service Account.
3. Update the App Control Services (services.msc)
   1. Stop the following services:
      • App Control Reporter Service
      • App Control Server Service
   2. For each: Right click > Properties > Log On
   3. Enter the updated credentials and click OK.
4. Open IIS Manager > expand the server name > select Application Pools:
   • Right click DefaultAppPool > Advanced Settings > Process Model > edit the Identity > update the password 

     If the Identity account is set to "ApplicationPoolIdentity" NO change is needed.

   • Server 8.10.2+: Right click AppCDownloads > Advanced Settings > Process Model > edit the Identity > update the password

     If the Identity account is set to "ApplicationPoolIdentity" NO change is needed.

5. Close IIS Manager and restart the webserver (run the "iisreset" command from an administrative command prompt)
6. Start the services from Step 3.

Additional Information

• In some instances the temporary files in "C:\Users\SERVICEACCOUNT\AppData\Local\Temp" will need to be deleted after the password update is complete, and while the services are stopped.
• If you have an App Control Agent installed on the server you will need to Start and Stop The Agent Via Local Command Line / Terminal.
• If you have an App Control Agent installed, but do not know the Global CLI Password you will need to make the changes to the Services & IIS Identity via Safe Mode.