How to change the database password
This procedure consists of two main parts:
Part 1
You need to change the password of the user account created to connect to the database. This is done in Microsoft SSMS as follows:
1- Connect to your server.
2- Go to Security > > Logins > > AccessPortalUser (this is the default name)
3- Right click and select Properties.
Part 2
You must change the password in the connection string of each service configuration file to connect to the database. There are two types of services as described below:
IIS services
1- SphereShield-AccessPortal (you might have named it something else)
a- Normally located in the path C:\inetpub\AccessPortal\Configuration\ConnectionStrings.config
b- Stop the service
c - This is the connection string that you can replace with the encrypted one after entering the new password value in place of USER-PASSWORD
<connectionStrings>
<add name="AccessPortalEntities" connectionString="data source=SERVER-NAME;initial catalog=AccessPortal;user id=AccessPortalUser;password=USER-PASSWORD;multipleactiveresultsets=True;application name=AccessPortal" providerName="System.Data.SqlClient" />
<add name="AccessPortalFilesEntities" connectionString="data source=SERVER-NAME;initial catalog=AccessPortalFiles;user id=AccessPortalUser;password=USER-PASSWORD;multipleactiveresultsets=True;application name=AccessPortal" providerName="System.Data.SqlClient" />
</connectionStrings>
d- Start the service
2- ISA (Internal Service API)
a- Normally located in the path C:\inetpub\InternalServicesAPI\configuration\connectionStrings.config
b- Stop the service
c-This is the connection string which you can replace with the encrypted one after you have filled in the new value of the password in place of USER-PASSWORD
<connectionStrings>
<add name="AccessPortalEntities" connectionString="data source=SERVER-NAME;initial catalog=AccessPortal;user id=AccessPortalUser;password=USER-PASSWORD;multipleactiveresultsets=True;application name=AccessPortal" providerName="System.Data.SqlClient" />
<add name="AccessPortalFilesEntities" connectionString="data source=SERVER-NAME;initial catalog=AccessPortalFiles;user id=AccessPortalUser;password=USER-PASSWORD;multipleactiveresultsets=True;application name=AccessPortal" providerName="System.Data.SqlClient" />
</connectionStrings>
d- Start the service
Other Sphereshield Services
1- Casb Adapter
a- Normally located in the path C:\Agat\CasbAdapter\Configuration\connectionStrings.config
b- Stop the service
c-This is the connection string which you can replace with the encrypted one after you have filled in the new value of the password in place of USER-PASSWORD
<connectionStrings>
<add name="AccessPortalEntities" connectionString="data source=SERVER-NAME;initial catalog=AccessPortal;user id=AccessPortalUser;password=USER-PASSWORD;multipleactiveresultsets=True;application name=CasbAdapter" providerName="System.Data.SqlClient" />
<add name="AccessPortalFilesEntities" connectionString="data source=SERVER-NAME;initial catalog=AccessPortalFiles;user id=AccessPortalUser;password=USER-PASSWORD;multipleactiveresultsets=True;application name=CasbAdapter" providerName="System.Data.SqlClient" />
</connectionStrings>
d- Start the service
2- ADSync Adapter
a- Normally located in the path C:\Agat\ADSyncAdapter\Configuration\connectionStrings.config
b- Stop the service
c-This is the connection string which you can replace with the encrypted one after you have filled in the new value of the password in place of USER-PASSWORD
d- Start the service
3-Maintenance Service
a- Normally located in the path C:\Agat\MaintenanceService\Configuration\connectionStrings.config
b- Stop the service
c-This is the connection string which you can replace with the encrypted one after you have filled in the new value of the password in place of USER-PASSWORD
d- Start the service
4- Bastion (Teams Protector)
a- Normally located in the path C:\Agat\Bastion\MSTeamsProxy\filters\fw_proxy\Teams_Protector.xml
b- Stop the service
c-This is the connection string which you can replace with the encrypted one after you have filled in the new value of the password in place of 1234
d- Start the service
5-Service Agent
You could have several of these services, and each of the above could have one of these services to monitor them.
a- Normally located in the path C:\Agat\Tools\ServiceAgent\(Service)\AgatSphereShieldServiceAgent.config
b- Stop the service
c-This is the connection string which you can replace with the encrypted one after you have filled in the new value of the password in place of password
d- Start the service
Tips
The "AccessPortalFilesEntities"
in the connection string above is used only if you have a second database whose name ends with “files”, If you don’t you just use "AccessPortalEntities"
.
There are four things to be entered in the connection string
1- Data source = (DB server)
2- Initial catalogue= (database name)
3- ID =(User account created to connect to the database)
4- Password=(The password of the above account you just changed)