changing SAP BI service account password/or/account.

server administration XI Server Discussion
1

Hello,

  1. My SIA is running under service account. We are about to change the domain service account password.
    Will this require me shutting down SIA down/updating the password? or will AD pass the credentials automatically?

  2. If I were to change SIA service account, will I need to make changes to any other areas (i.e Tomcat) etc.

sapaa (BOB member since 2014-02-21)

2

  1. You will need to stop the SIA and update the password. It will not update automatically.

  2. Changing the account can break a number of things. If you are using Active Directory authentication it will break that. It may also make it so you can’t schedule to certain network destinations until you give the new account rights to that destination. It might also make it so certain reports can’t run against certain SQL Server databases if you are using Windows Authentication and the new account doesn’t have rights to the database.

There may be more things that can break but those are what I can think of right now.

clarence (BOB member since 2005-11-18)

3

A couple additional things I can think of off the bat.
If you have AD SSO configured in BI Launchpad, you’ll have to involve your domain team to update the SPN’s in Active Directory, also modifying the configurations within each tomcat host for that.
Also, the service account will require some special settings on each application node in order to operate correctly. Most of that is in the Admin guide though.

Garrick

Attention is too expensive, and my mental credit line is overextended…

jlgh :us: (BOB member since 2009-06-11)

4

@Sapaa: Did you performed changing password of BI service account?

Can you provide guidelines on same? Like what all changes you required to do after changing password.

I have the same query, Windows AD SSO is implemented our side… Please let us know the step by step guideline.

Thanks in advance. :slight_smile:

kushal.pardeshi (BOB member since 2017-02-15)

5

I don’t have SSO, the only places where I needed to change this was the

  1. SIA settings under CCM.
  2. AD Authentication Tab under CMC.

sapaa (BOB member since 2014-02-21)

6

Hi,

Can this be done programatically ?

Regards,
Bhawyya

bhawyyamittal (BOB member since 2018-02-06)