Implementation Guide › Changing CA ControlMinder Service Account Settings › Service Account Passwords › Change the +devcalc Password

Change the +devcalc Password

The +devcalc account executes the policy deviation calculation, which calculates the difference between the expected access rules that will be deployed on an endpoint (as a result of policy deployment) and the actual rules that have been successfully deployed on the same endpoint. CA ControlMinder uses a SPECIALPGM rule to define +devcalc as a system user. +devcalc runs as the NT Authority\System user in Windows.

You may need to regularly change the +devcalc password to comply with your organization's security and password policies.

Before you change the +devcalc password, note the following:

• There is no default password for this account. CA ControlMinder does not set a password for +devcalc during installation.
• The password has the following limitations:
  • Must be 1–240 characters long
  • Must not contain high ASCII characters
  • Must not contain double quotes ( " )
• The password is stored in seosdb, the local CA ControlMinder database.

Important! To prevent this user from logging in to the CA ControlMinder database, we recommend that you do not set a password for this user.

To change the +devcalc password, use selang to change the password.

Example: Change the +devcalc Password

This command changes the password for the +devcalc user. The password is "secret", and must be in clear text and enclosed in double quotes:

AC> cu +devcalc password("secret") grace- nonative
(localhost)
Successfully updated USER +devcalc