Implementation Guide › Changing CA ControlMinder Service Account Settings › Service Account Passwords › Change the +reportagent Password

Change the +reportagent Password

The +reportagent account lets an endpoint log in to the Message Queue. On each endpoint, the UNAB Agent, SAM Agent, and Report Agent use this account to communicate with the Message Queue.

You may need to regularly change the +reportagent password to comply with your organization's security and password policies. Change the password on both the Message Queue and the endpoints.

Before you change the +reportagent password, note the following:

• The default password is the communication password that you specify when you install CA ControlMinder Enterprise Management.
• The password has the following limitations:
  • Must be 1–240 characters long
  • Must not contain high ASCII characters
  • Must not contain double quotes ( " )
• The password is stored in the Message Queue and the CA ControlMinder database on the endpoint (seosdb).

Important! If you have more than one Distribution Server in your enterprise, first change the password on the Distribution Server installed on the Enterprise Management Server, then change the password on the other Distribution Servers in your enterprise. The Message Queue is part of the Distribution Server.

To change the +reportagent password

1. On the Distribution Server, set the Message Queue password for the +reportagent user.

   The +reportagent password is changed on the Message Queue.

2. Use sechkey to change the password that ReportAgent uses to connect to the Message Queue on the endpoints.

   The changed +reportagent password is propagated to the endpoints.

   Note: You can also use selang to change the +reportagent password on the endpoints. However, you cannot use a policy to propagate the selang command, because you cannot use advanced policy management to set user passwords.

Example: Set the Message Queue Password For the +reportagent User

This Tibco EMS Administration Tool command sets the Message Queue password for the +reportagent user. The password is "secret", and must be in clear text and enclosed in double quotes:

ssl://localhost:7243> set password +reportagent "secret"
Password of user '+reportagent' has been modified
ssl://localhost:7243>

Example: Use sechkey to Change the Message Queue Password on the Endpoints

This command propagates the Message Queue password for the +reportagent user to the endpoints that are subscribed to the Distribution Server. The password is "secret", and must be in clear text and enclosed in double quotes:

sechkey -t -pwd "secret"