How Do I Change the Credentials for AgilePoint Administrator Accounts?

To change the AgilePoint Service Account credentials in Data Services, do the procedure in this topic.

Good to Know

• Like AgilePoint Server, Data Services uses 2 administrator accounts:
  • AgilePoint System Account - Data Services uses the same authentication credentials as the AgilePoint Server Configuration Utility. When you change the System Account credentials in the AgilePoint Server Configuration Utility, the account credentials are automatically changed for Data Services.
  • AgilePoint Service Account - Like the AgilePoint Windows Service, the Data Services Windows service uses the "headless" credentials for the AgilePoint Service Account. These credentials are not updated through the AgilePoint Server Configuration Utility, and they are not stored in any AgilePoint configruation files.

    To simplify maintenance and keep the AgilePoint Service Account credentials in sync, AgilePoint recommends you use the same Service Account credentials for the AgilePoint Windows Service and the Windows service for AgilePoint Data Services. However, this is not a technical requirement

How to Start

1. On the AgilePoint Server machine, click Start > Run.
2. On the Run screen, in the Open field, enter services.msc.
3. On the Services screen, right-click AgilePointDataServices.
4. Click Stop.
5. Open the configuration utility, (AgilePoint Data Services installation folder) C:\Program Files\AgilePoint\AgilePoint Data Services\DataServiceConfiguration.exe.

Procedure

1. On the AgilePoint Data Services Configuration screen, ​complete these fields:

   Field Name	Definition
   User Name (Impersonation)	Function: Specifies the user name of the AgilePoint Service Account. Accepted Values: A registered Windows user on the AgilePoint Server machine that has the correct permissions for the AgilePoint Service Account. For more information, refer to AgilePoint Service Account. Default Value: The user name that is specified for the AgilePoint Service Account during AgilePoint Server installation. Limitations: When you install AgilePoint Server, the AgilePoint Service Account and AgilePoint System Account are configured to use the same credentials. However, after installation, it is recommended to separate these accounts for security purposes. Changing the credentials for the AgilePoint Windows Service does not have an effect on the credentials for the AgilePoint System Account. To simplify maintenance and keep the AgilePoint Service Account credentials in sync, AgilePoint recommends you use the same Service Account credentials for the AgilePoint Windows Service and the Windows service for AgilePoint Data Services. However, this is not a technical requirement. If you change the user name in this field, this changes the user name for the AgilePoint Service Account in AgilePoint Data Services. Example: MYDOMAIN\APServiceUser
   Password (Impersonation)	Function: The password for the AgilePoint Service Account. Accepted Values: An alphanumeric string that represents a password. Default Value: The password that is specified for the AgilePoint Service Account during AgilePoint Server installation. Limitations: The password for this user must match the password for the Windows user account that is associated with the AgilePoint Service Account. If you change this password, you must change it in Windows, and then change the password here.

To change the credentials for the AgilePoint System Account in AgilePoint NX Portal, do the procedure in this topic.

Prerequisites

• Change the Credentials for the AgilePoint System Account in AgilePoint Server.

Good to Know

• The server-side NX Portal administrator credentials must be the same as the AgilePoint System Account.

  The server-side Portal administrator credentials are different from the security role that is technically referred to as Tenant Administrator, but is called simply administrator in the NX Portal Settings.

  The Tenant Administrator role can be assigned to any registered user in AgilePoint NX. The server-side Portal administrator credentials should be linked to the person who is the AgilePoint NX System Administrator, and is responsible for the AgilePoint System Account credentials.

  For more information, refer to:

  • Administrator Types and Permission Groups
  • How Do I Change the Tenant Administrator?
• When you complete this procedure, the encrypted password is saved in the AgilePoint NX Portal configuration file, (NX Portal installation folder) C:\Program Files\AgilePoint\AgilePointWebApplication\AgilePointPortal\Web.config.

How to Start

1. On the Portal installation machine, open the folder (NX Portal installation folder) C:\Program Files\AgilePoint\AgilePointWebApplication\AgilePointPortal\bin.
2. Right-click the file AgilePoint.Portal.EncryptionUtil.exe, and click Run as Administrator.

Procedure

1. On the Password Encryption Utility screen, in the Domain Name field, enter the domain name for the AgilePoint System Account.
2. In the User Name field, enter the user name for the AgilePoint System Account.
3. In the Password field, enter the password for the AgilePoint System Account.
4. Click Validate.

   If the user name and password are the same as the System Account credentials configured in the AgilePoint Server Configuration Utility, the Password Encryption Utility creates the encrypted password in the Encrypted Password box.

5. Click Copy to Clipboard.
6. On your AgilePoint Server machine, in the (NX Portal installation folder) C:\Program Files\AgilePoint\AgilePointWebApplication\AgilePointPortal\Web.config file, change the value of this key with the encrypted password you copied to clipboard:

   <add key="ADAdminPassword" value="CBFC47E4382B45129F98BEFC28A02823B6ACABDA55BF93B9040DF6B9F50735F402938FBFBE966C358AD1F6371E9904EF" />

To change the impersonator credentials in IIS, do the procedure in this topic.

Prerequisites

• AgilePoint SharePoint Integration is installed.
• If you change the impersonator credentials, you change them in both IIS and the AgilePoint Configuration List in SharePoint Integration .

How to Start

1. On the AgilePoint Server machine, open IIS Manager.

Procedure

1. Navigate to the AgilePoint application pool.
2. Right-click the AgilePoint application pool name, and click Properties.
3. On the Properties screen, click the Identity tab.
4. On the Identity tab, enter the impersonator credentials in the User name and Password fields.
5. Reset IIS.

To change the impersonator credentials in the AgilePoint Configuration List in SharePoint, do the procedure in this topic.

Prerequisites

• AgilePoint SharePoint Integration is installed.
• If you change the impersonator credentials, you change them in both IIS and the AgilePoint Configuration List in SharePoint Integration .

Good to Know

• For security puropses, after installation, AgilePoint recommends changing the credentials for the AgilePoint Service Account, the AgilePoint System Account, and the SharePoint impersonator account, so that each account type uses different credentials. However, each set of credentials must be changed in more than one place.

  Account	Where to Change	Procedures
  AgilePoint Service Account	AgilePoint Server Manager AgilePoint Data Services Configuration	Change AgilePoint Service Account Credentials in AgilePoint Server Change AgilePoint Service Account Credentials in Data Services
  AgilePoint System Account	AgilePoint Server Configuration Utility NX Portal Server	Change the Credentials for the AgilePoint System Account in AgilePoint Server Change the Credentials for the AgilePoint System Account in NX Portal
  SharePoint Impersonator Account	IIS SharePoint	Change the Impersonator Credentials in IIS Change the Impersonator Credentials in SharePoint

How to Start

1. Open a SharePoint site collection where the AgilePoint App Part or Web Part is installed.
2. Click Settings > Site Contents.
3. Click AgilePoint Configuration.

Procedure

1. On the AgilePoint Configuration list, click Edit Item.
2. In the ImpernatorUser and ImpersonatorPass fields, change the values as necessary.