Previous Topic: Change the System User Password for Native Security

Next Topic: User Group Management

Administration Guide › Managing Users and User Groups › Password Management › Change the System User Password for Active Directory Security

Change the System User Password for Active Directory Security

If your CA Server Automation installation is configured to connect to Active Directory, the user who installs CA Server Automation is automatically registered with CA EEM. This registration allows CA Server Automation to authenticate users from the Active Directory domain. If the user password changes, users cannot log in to the CA Server Automation user interface because CA EEM can no longer authenticate them. Change the user password as follows:

To change the user password for Active Directory

  1. Navigate to Start, Programs, CA, Embedded Entitlements Manager, EEM UI and open the user interface.

    The login dialog appears.

  2. Log in with the current password.

    The user interface opens.

  3. Click Configure and EEM Server.

    The EEM Server pane appears.

  4. Click Global Users/Global Groups in the left pane and retain default option "Reference from an external directory" selected.
  5. Retain default Type as Microsoft Active Directory and enter a new password in the Password and Confirm Password fields and click Save.
  6. Close CA EEM
  7. Navigate to Start, Programs, CA, CA Server Automation, CA Server Automation Command Prompt.

    The command prompt appears.

  8. Enter the following command: 
    dpmutil -set -sysuser

    Sysuser is the same user who installs CA Server Automation. The dpmutil command prompts you for the required credentials specified in Step 5.

    Complete the command.

  9. Recycle the CAAIPApache  and CAIPTomcat services.

    The credentials are now consistent and CA Server Automation works as expected.

Note: In both cases the Apache log file, located at Install_path\Apache\logs\error.log, can confirm proper product startup. If the last entry is “Validating EEM is available,” then there is still a credential problem. Verify that the credentials used for ‘-set -eiam’ and ‘-set -sysuser’ can be used to log in to the CA EEM UI. Retry the dpmutil commands using valid credentials.