User accounts are used in the CommCell to perform various operations, for example, backup, network security, and protecting media. By default, user accounts and passwords are established during the initial installation or configuration of the respective CommCell component.
Commvault software uses two types of user accounts:
-
CommCell User Accounts: The software uses one-way hash SHA-256 to encrypt the passwords for these accounts, and then stores the encrypted passwords. The software does not store the passwords of Active Directory users.
-
Application User Accounts: The software uses AES-256 to encrypt the passwords of these accounts. Optionally, you can use a key management server including passphrase key management server to protect the encryption key used for encrypting passwords. For instructions to configure a key management server, see Configuring a Key Management Server to Secure the Passwords of Application User Accounts.
These user accounts are easily managed from the CommCell Console. This is useful in the following scenarios:
-
If you have an aging policy for passwords, you can change the password for an existing user.
-
If you need to update the user accounts of a former user for a new user (for example, a new administrator using the accounts of a former administrator).