Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. NetBackup web services account
  4. Changing the web service user account
NetBackup™ Security and Encryption Guide

Changing the web service user account

To support changing web service user accounts, use the utility script wmcUtils. This utility script does not validate if a web service user and group exist. Before you use this utility, you must ensure that the web service user and the group exist and the user is part of the group. Consider the following when changing the web service user account:

  • If your environment uses Windows domain users, use the DOMAIN\USER format.

  • If you use a clustered environment on a Windows platform, the NetBackup web services user account must be a DOMAIN user. (Example: AD user)

  • If you use non-clustered environments, the NetBackup web service user can be a local or a domain user.

  • If you use a clustered environment on Linux or UNIX platforms, the NetBackup web service user can be a local user. Additionally, the group can be a local group. The NetBackup web service user must have the same name and UID on all nodes of the cluster. Also, the group must have the same name and GID on all nodes of the cluster. It is recommended to use domain users (Example: NIS) for clustered environments.

Note:

Do not use the logged on user to run the wmcUtils utility script. If you are logged into an environment as my_domain\my_user, you cannot use this account to run the NetBackup Web Management Console service. NetBackup does not support this scenario.

To change the web service user account on Windows

  1. Open command prompt.
  2. Change the directory to: install_path\wmc\bin\install
  3. Run wmcUtils.bat -changeUser to change the web service user.

    Example: (nbwebsvc1 is the web service user and nbwebgrp1 is the user group that nbwebsvc1 is a member of)

    wmcUtils.bat -changeUser nbwebsvc1 nbwebgrp1

    For more information about the wmcUtils.bat utility script, use the wmcUtils.bat -help option.

  4. (Conditional) If using a clustered environment, run wmcUtils.bat -changeUser on the active and the inactive nodes.
  5. Enter the web service user password (example: nbwebsvc1) when prompted by the script.

    The NetBackup Web Management Console service is restarted when the correct password is entered. If you enter an incorrect password, a Logon failure error is displayed before the NetBackup Web Management Console service starts.

  6. To verify that the web service user is changed, ensure that install_path\bin\nbcertcmd.exe -ping works.

Note:

The output of wmcUtils.bat utility script is captured in the nbwmc_support.log. The log is located here: install_path\wmc\webserver\logs\nbwmc_support.log

To change the web service user account on Linux or UNIX

  1. Open a shell.
  2. Change the directory to: /usr/openv/wmc/bin/install
  3. Run wmcUtils -changeUser to change the web service user.

    Example: (nbwebsvc1 is the web service user and nbwebgrp1 is the user group that nbwebsvc1 is a member of)

    usr/openv/wmc/bin/install/wmcUtils -changeUser nbwebsvc1 nbwebgrp1

    For more information about the wmcUtils utility script, use the wmcUtils -help option.

  4. (Conditional) If using a clustered environment, run wmcUtils.bat -changeUser on the active and the inactive nodes.
  5. Enter the web service user password (example: nbwebsvc1) when prompted by the script.

    The NetBackup Web Management Console service is restarted when the correct password is entered. If you enter an incorrect password, a Logon failure error is displayed before the NetBackup Web Management Console service starts.

  6. To verify that the web service user is changed, ensure that /usr/openv/netbackup/bin/nbcertcmd -ping works.

Note:

The output of wmcUtils utility script is captured in the nbwmc_support.log. The log is located here: /usr/openv/wmc/webserver/logs/nbwmc_support.log

Feedback

Was this page helpful?
Previous

About the NetBackup web services account

Next

Running NetBackup services with non-privileged user (service user) account

Feedback

Was this page helpful?