Implementation Guide › Changing CA Access Control Service Account Settings › Service Account Passwords › Change the +policyfetcher Password

Change the +policyfetcher Password

The +policyfetcher account executes the policyfetcher daemon or service, which looks for deployment tasks on the DH, applies policy updates to the local CA Access Control database (seosdb), and sends a heartbeat to the DH at regular intervals. CA Access Control uses a SPECIALPGM rule to define +policyfetcher as a system user. +policyfetcher runs as the NT Authority\System user in Windows.

You may need to regularly change the +policyfetcher password to comply with your organization's security and password policies.

Before you change the +policyfetcher password, note the following:

• There is no default password for this account. CA Access Control does not set a password for +policyfetcher during installation.
• The password has the following limitations:
  • Must be 1–240 characters long
  • Must not contain high ASCII characters
  • Must not contain double quotes ( " )
• The password is stored in seosdb, the local CA Access Control database.

Important! To prevent this user from logging in to the CA Access Control database, we recommend that you do not set a password for this user.

To change the +policyfetcher password, use selang to change the password.

Example: Change the +policyfetcher Password

This command changes the password for the +policyfetcher user. The password is "secret", and must be in clear text and enclosed in double quotes:

AC> cu +policyfetcher password("secret") grace- nonative
(localhost)
Successfully updated USER +policyfetcher