Video Screencast Help

Changing VSA account password

Created: 31 Aug 2013 • Updated: 01 Nov 2013 | 9 comments
This issue has been solved. See solution.

Dear,

Can you help me to provide the steps to reset VSA password in 2 node windows clustered environment.

Regards,

Operating Systems:

Comments 9 CommentsJump to latest comment

shaikh mehtab's picture

Dear Rob,

above links are for VCS cluster and the other while MS Cluster Resource fail over issue, I don't find how to do it step by step.

Regards,

Rob.Wilcox's picture

I don't have a cluster in front of me, but you should be able to do it using the steps in the second of those articles at least?

Pradeep_Papnai's picture

The tech arctical Rob provided have step by steps guidelines.
Enterprise Vault services will not start due a logon failure http://www.symantec.com/docs/TECH66004

Solution:

1. Reset the Enterprise Vault Service Account password in Active Directory.
2. Change each of the Enterprise Vault services to use the new password.
3. Start the Enterprise Vault services.
4. Open the Vault Admin Console.
5. Perform an update of the VSA account details:
   a. Right-click "Directory on <servername> => Properties
   b. Select the "Service Account" Tab
   c. Reset the Password and select Apply to update the configuration.

You just need to take 'EV resource group' offline & online  or fail over to another node, I think that should be sufficient, if any issue comes then need to take following steps.  

6. Take 'EV Resource group' Offline from Cluster console.
7. Open services console and Reset the password for each of the Enterprise Vault Services on the Log On tab from active /passive node (don't start / stop services).
8. Take 'EV resource group' online from cluster console.

I have not tested above steps as EV clustered is not in front of me, but above are most logical steps those should be carried out.

Please let us know if that helps.

Regards
EV-C

shaikh mehtab's picture

Dear,

1. Reset the Enterprise Vault Service Account password in Active Directory.
2. Change each of the Enterprise Vault services to use the new password.
3. Start the Enterprise Vault services.

Does this means we should take all EV services offline from cluster before we reset password in AD ?

Regards,

Pradeep_Papnai's picture

Resetting the password for standalone EV server is mentioned in TN http://www.symantec.com/docs/TECH48035 When it say to restart EV services then you need to restart ‘EV resource group’ as EV is clustered environment.

You don’t need to stop EV service in advance. If encounter any issue such as mentioned in TN http://www.symantec.com/docs/TECH66004 then you need to reset EV service a/c password manually from services console from each node.

Take 'EV Resource group' Offline from Cluster console.
Open services console and Reset the password for each of the Enterprise Vault Services on the Log On tab from active /passive node (don't start / stop services).
Take 'EV resource group' online from cluster console.

I hope this clear your doubt.

Pradeep_Papnai's picture

Hi Shaikh,

Are you able to reset password for EV service a/c, Please let us know if you need any more assistance from our side. If that problem solved then you may wish to mark comment as solution whichever best suggestion help to resolve the problem.

Dnaik79's picture

The Enterprise Vault Service Account (VSA) password on Cluster needs to be changed : 

1. Offline all EV resources in Cluster Administrator.
2. Temporarily Freeze the service group for EV in Cluster Administrator
3. Change the password for the Vault Service Account in Active Directory
4. Change the password on all EV Services on every EV Node via the services.msc console
5. Unfreeze the service group for EV in Cluster Administrator 
6. Bring ONLY Directory and Admin back online again
7. Change the password for the VSA in the VAC under 'Directory Properties - Service Account' and click OK
8. Stop Directory and Admin resources via Cluster Administrator and then start ALL EV Resources
9. Check Event logs for any errors and finally test failover

Regards

Dnaik