¶ Venio Service Accounts
¶ Security Configuration:
- A Windows User Account will be necessary to act as a VenioOne Service Account (Application Account) which will be used for authentication to project folder shares and VenioOne Services.
- The Service account (application account) requires read and write access to VenioOne folder shares.
- The Service Account (application account) user requires “Local Admin” privileges on all Processing server(s) and Desktop Console server(s).
- Add Service Account (application account) user to the “Logon As Service” in Local Security Policy on all servers.
¶ Changing Venio Service Account Credentials
If the account is managed by ActiveDirectory and the credentials are updated, please update all of the credentials running as Venio search service, Venio Distributed Service, Venio Export Service, etc... on each server where such service is installed.
¶ Updating stored credential in windows Service
- Open Services:
- Press Win + R, type services.msc, and press Enter.
- Alternatively, search for “Services” in the Start menu.
- Find the Service:
- In the Services window, scroll through the list to find the Venio service you need to update.
- You can also use the search function to find the service quickly.
- Open Service Properties:
- Right-click on the service and select “Properties.”
- Update Log On Information:
- Go to the “Log On” tab in the service properties window.
- Select “This account.”
- Enter the account name and password. The account name should be in the format DOMAIN\Username or .\Username for local accounts.
- Confirm the password by entering it again in the “Confirm password” field.
- Apply and OK:
- Click “Apply,” then “OK” to save the changes.
- Restart the Service:
- Right-click on the service again.
- Select “Restart” to apply the new credentials. If the service is not running, select “Start.”
You will also need to update the password for the file repository authentication. A faster way to do this is to change the authentication for one repository, then lookup the encrypted value of the new password in the VenioPCD database.
During your next upgrade, authentication will fail until you replace the cached
password with the new one. This can be done in the install/upgrade wizard during that time.
¶ Updating Repository Folder Credentials
If all of your projects use the same repositories, simply update the passwords in Venio Console --> Administration --> Server --> Configure Server --> Repository Setup --> Double-Click Repository --> Replace 'Password : ' Field with new password --> click 'update' --> click 'Test Connection'
¶ ADVANCED: Updating Repository Folder Credentials in SQL
If you need to bulk update a whole lot of repositories to use the new credentials for network access, simply update one of the passwords as follows:
- Venio Console --> Administration --> Server --> Configure Server -->
- Click on the 'Repository Setup' tab
- Double-Click a Repository to edit the details. Keep note of the 'Display Name'.
- Replace 'Password : ' Field with new password
- click 'update'
- click 'Test Connection'.
On the SQL Server, modify the following script, be sure to modify the line:
DECLARE @RepoName NVARCHAR(255) = '<repo>';
Replace
<repo>with the actual repository name (Display Name in Step 3.) that has previously been updated to the correct password through Venio Console Administration.For Example:
DECLARE @RepoName NVARCHAR(255) = 'Exports'
-- BEGIN USER INPUTS
DECLARE @RepoName NVARCHAR(255) = '<repo>'; -- Replace <repo> with the actual repository name (Display Name in Step 3.) that has previously been updated to the correct password through Venio Console Administration.
-- For Example:
-- DECLARE @RepoName NVARCHAR(255) = 'ABC123_REPO'
-- END USER INPUTS
/*
-- DO NOT MODIFY THE BELOW QUERY!
*/
DECLARE @TempTable TABLE (FSUserName NVARCHAR(255), FSPassword NVARCHAR(255));
INSERT INTO @TempTable (FSUserName, FSPassword)
SELECT FSUserName, FSPassword
FROM tbl_pj_fileserverinfo
WHERE FSDisplayName = @RepoName;
UPDATE tbl_pj_fileserverinfo
SET FSPassword = (SELECT TOP 1 FSPassword FROM @TempTable)
WHERE FSUserName = (SELECT TOP 1 FSUserName FROM @TempTable);
Run your modified query in your Venio environments PCD database (For example: VenioPCD) to bulk update all of the encrypted passwords in SQL server to the new encrypted password.
Please note, the password you entered in the "Configure Server" utility in Venio Console will not match what is in the SQL tbl_pj_fileserverinfo field FSPassword, as the FSPassword field is an encrypted hash of the password. The password is not stored as plain text. Placing plain text passwords in this field will result in the service being unable to access the documents in the repository.
¶ Validating credentials
Please refer to the venio-health-checkups wiki article regarding performing health checkups to run utilities intended to test, validate, and troubleshoot various issues including account authentication.