Question:  

Is it possible to change the Centrify Collector Service Account to use a SQL Server Authentication instead of the default Windows Authentication (NT Authority\System)?


Answer:  Yes, it is possible.  Below are the steps on how to change the service account of the Collector to be a SQL Server Account.

1. Go to Centrify Audit Manager, expand the Installation, Audit Stores, <Name of the Audit Store>, Databases.




2. In the right pane, right click on the the active database, choose properties and go to the advanced tab.




3. In the top section "Allowed incoming Collectors", click Add.




4. Select the SQL server authentication radio box.




5. Either manually add the SQL server account, browse to a SQL Server Account, or create a new SQL account by providing a login name and password. Once that is done click OK and then OK to get back to the advanced tab.




6. The newly added SQL Authentication account now shows in the "Allowed Incoming Collectors" section. And then click OK to close the properties window.




7. Then go the machine where the Collector is installed and open up the Centrify DirectAudit Collector Control Panel and click on the configure button.




8. When it gets to the Authentication Type page, choose the SQL Server Authentication radio button and put in the credential for the SQL Server login account created/set in step 5.




9. If you hit test connection, it should verify if everything has been set correctly.



10. And go through the rest of the prompts to finish the configuration.  The collector now is using the SQL Server Authentication.