-
Title
How to Change the Foglight Agent Account Password Without Locking Out SQL Server Agents Using the Agent Status and Credentials Dashboards -
Description
This article outlines the correct procedure to change the service account password used by SQL Server agents in Foglight without causing agent lockouts or disruptions in monitoring.
-
SQL Server agents enter an error or failed state after a password change.
-
Login failures or account lockouts are observed on the monitored SQL Server host.
-
Agent credentials no longer authenticate successfully after the service account password is updated.
-
-
Cause
Foglight SQL Server agents authenticate to monitored database instances using stored credentials. If the service account password is changed without updating the credentials in both the credential object and the agent configuration, the agents continue to use the outdated password and may cause account lockouts.
-
Resolution
To change the password safely and avoid downtime or lockouts, follow these steps:
Step 1: Disable the Affected SQL Server Agents
-
Go to Administration > Agents > Agent Status.
-
Identify all SQL Server agents that use the service account being updated.
-
Select each agent and click Deactivate.
-
This prevents the agents from attempting to authenticate with the outdated password.
-
Step 2: Update the Stored Credential
-
Navigate to Administration > Credentials > Manage Credentials.
-
Find the credential object associated with the SQL Server agents.
-
Click Edit, enter the new Password, and click Save.
Step 3: Update the Agent Password in Each SQL Server Agent Configuration
-
Go to Administration > Agents > Agent Status.
-
Click the Edit Properties icon (gear icon) for each affected SQL Server agent.
-
In the Connection Details section, locate the Username and Password fields.
-
Enter the new password manually.
-
Click Save Changes.
Note: This step ensures the agent configuration reflects the updated credentials even if a credential object is not used or linked dynamically.
Step 4: (If Applicable) Update the FglAM Service Logon Account
If the same service account is used to run the Foglight Agent Manager (FglAM) service:
-
On the FglAM host, open Services.
-
Find Foglight Agent Manager, right-click, and choose Properties.
-
Go to the Log On tab and update the password for the account.
-
Restart the Foglight Agent Manager service.
Step 5: Update the SQL PI Repository password
Refer to knowledgebase article 4228874
Step 6: Re-enable the SQL Server Agents
-
Return to Administration > Agents > Agent Status.
-
Re-enable each agent you previously deactivated.
-
Confirm that agents return to Running status and are collecting data.
Using the Connection Details panel
KB 4228645 provides steps how to change the Foglight service account password using the SQL Server and Oracle verify connection utilities in the Connection Details panel.
-