Follow

How to change Service Account / SQL Password in Vault

Due to security concerns sometimes customers need to change Service Account / SQL Password in Vault. This needs specific steps in a replicated environment, which we will discuss in the article below.

Solution:

Service Account

We distinguish here 2 things. SQL Replication and IIS Impersonation.

SQL Replication

You can quickly identify if the credentials no longer work if you do see following error when creating a snapshot:

Vault_Screenshot_1.jpg

So first change the credentials via ADMS Console.
Workgroup / RMB / Replication Properties

Vault_Screenshot_2.jpg

This change will trigger a new Snapshot to be generated.
After this snapshot has been generated the merge agent can connect again and will sync up and show “Waiting for 60 second(s) before polling further changes.”

Sometimes we do see that the credentials of the Publication is not correctly updated or were not correct.
In that case, go manually into the SQL Server Management Studio on the Publisher / Replication / Local Publications / RMB on the affected Publication and select Properties.

Here select agent Security and re-add the user credentials.
Usually this should not be necessary.

Vault_Screenshot_3.jpg

IIS Impersonation

This is pretty straightforward.
In ADMS Console / Tools / Administration / Advanced Settings / Settings.
Change the Password in Impersonation Account.

Vault_Screenshot_4.jpg

SQL SA Password

This is applicable for replicated and not replicated environments.
Close ADMS Console.
Go to SQL Server Management Studio / Security / Logins
RMB on the Service account used for Vault. (since Vault 2015 – you can install undera different SQL Account as well)

Vault_Screenshot_5.jpg

Afterwards, open the ADMS Console.
If you do not have a replicated Environment, RMB on Workgroups and enable.
This triggers ADMS Console to prompt you for SA Password.
Fill in the correct SA password and cancel the next dialogue and it is saved.

Vault_Screenshot_6.jpg

If you have a replicated environment, RMB on Workgroups and select Replication Properties.
It will open up the same dialogue as above.
Fill in correct SA password and cancel next dialogue.

Vault_Screenshot_7.jpg

VaultSys – ADMS – User Password

When Vault is installed, default passwords are provided for the VaultSys and ADMS_%SiteName% SQL Service accounts. The administrator can change these passwords to be more secure.

Important: The passwords for the SQL Service accounts must be changed through the ADMS Console. Changing the passwords with SQL Management Studio will cause ADMS Console to throw an error.

Change the Password for a SQL Service Account

  1. In the ADMS Console, select Tools > Administration.
  2. Select the Advanced Settings tab and click Change in the SQL User Account Passwords section next to the account for which you want to change the password.

     

  3. On the Change Password dialog, enter the existing password and new password.
  4. Click OK to save your changes.
Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

0 Comments

Please sign in to leave a comment.