Security Compliance

Service account is repeatedly locked out by SEM

The service account used by your SEM is being repeatedly locked out - usually following a password change for that account. This article lists each location in SEM that might require the use of a service account so you can update the password as needed.

First published date

10/17/2018 3:16 PM

Last published date

10/17/2018 3:16 PM

Overview

The service account used by your Security Event Manager (formerly Log & Event Manager) is repeatedly locked out - usually following a password change for that account.

This article lists each location in SEM that might require the use of a service account so you can update the password as needed.

Product section

Security Event Manager

Cause

The password for that account has changed.

Resolution

Check each of the following locations to see if they are configured to use the account in question, and then update the password there:

  • The Directory Service Query and Email Active Response connectors located under Manage > Appliance > left gear icon > Connectors.
  • The LDAP configuration page located at https://YOURSEMIP:8443/mvc/login.
  • The SEM backup tasks backupconfig, archiveconfig, and logbackupconfig. See Configure Backups on your SEM Appliance.