Enhanced support for gMSA users with clustering and replication configurations
A group Managed Service Account (gMSA) is a special type of domain account in Windows Server Active Directory designed to simplify credential management for services running across multiple servers.
With this InfoScale release, the existing support of gMSA users has been enhanced as follows to provide improved security for clustering and replication configurations:
-
gMSA integration with the Cluster Configuration Wizard (VCW)
-
VCW now discovers and lists gMSA users on the User Selection page.
-
When selecting a gMSA user for HADHelper, no password entry is required.
-
Cluster Server (VCS) provides the ability to switch between a normal user and a gMSA user for HADHelper using VCW or the HadHelper utility.
-
For details, refer to the InfoScale 9.1 Cluster Administrator's Guide.
-
Support for Support for the Volume Replicator (VVR) Security Service (VxSAS) - available from InfoScale 8.0.2 onwards
-
VxSAS can be configured to use gMSA via commands or via the VVR Security Configuration Wizard.
-
gMSA users can be added to the local administrators group and used as service logon accounts.
-
For details, refer to the InfoScale 9.1 Volume Replicator Administrator's Guide.
Related information