Problem

How to reset the Backup Exec Deduplication Storage user password.

Additional info:
Backup Exec uses an user account while configuring Backup Exec Deduplication Storage. This user account is used when Backup Exec and the services of the Deduplication storage interact with each other.


Backup Exec Deduplication Feature installs additional Deduplication storage related services. (listed below).

- Backup Exec Deduplication Engine
- Backup Exec Deduplication Manager
- Backup Exec PureDisk Filesystem Service
- Backup Exec Deduplication Multi-threaded Streaming Agent
- Backup Exec Open Cloud Storage Daemon

Without the Deduplication feature, below services are available when Backup Exec is installed.

- Backup Exec Agent Browser
- Backup Exec Device & Media Service
- Backup Exec Job Engine
- Backup Exec Remote Agent for Windows
- Backup Exec Server
- Backup Exec Error Recording Service
- Backup Exec Lockdown Server
- Backup Exec Management Service
- SQL Server (BKUPEXEC)

Solution

To update or reset the password, a tool called 'spauser.exe' is included with Backup Exec. This tool can be used to perform this task.

Note: The commands mentioned below are to be executed in elevated mode i.e. 
Right click on Command prompt from the start menu and select run as Administrator  and execute the commands from the path where Backup Exec is installed. C:\Program Files\Veritas\Backup Exec is the default path of the Backup Exec installation.

1. Locate the user configured to work with Deduplication Storage 

C:\Program Files\Veritas\Backup Exec>spauser.exe -l
    user 1 : dedupe, data selection: 2, role: admin

"dedupe" is the username in this case and spauser fetches the above info from inside the Deduplication Storage. Spauser does not fetch information from Backup Exec Logon accounts section.


2. Reset the password which is stored in Deduplication Storage folder when the password is known.

C:\Program Files\Veritas\Backup Exec>spauser.exe -c -u dedupe

Old password:
Reenter Old password:
New Password:
Reenter New Password:
Password changed for user dedupe.

3. Reset the password which is stored in Deduplication Storage folder when the password is not known.

C:\Program Files\Veritas\Backup Exec>spauser.exe -r -u dedupeusername -q password
(The above is the command syntax)

Replace dedupeusername in the above command with the output received when run the command under 1. (spauser.exe -l).
Replace the password in above command with the one that needs to be used.

Example: 
C:\Program Files\Veritas\Backup Exec>spauser.exe -r -u dedupe -q root
Password changed for user dedupe.

Ensure that the password set or reset using spauser.exe is the same as the one used in the Backup Exec -> Logon account section, else issues mentioned in following technical article 100048690 can be seen.

NOTE:
If lockdown settings are enabled, the below error may be seen while running commands in point 2 and 3.
Disable Lockdown setting from Backup Exec Configuration and Settings -> Backup Exec settings -> Network and Security -> Disable Lockdown Status.
Enable it once the action is completed.
 

C:\Program Files\Veritas\Backup Exec>spauser.exe -c -u dedupe

Old password:
Reenter Old password:
New Password:
Reenter New Password:Error: 8: SpaDB::CTable::safe_save: failed to create record file T:\BackupExecDeduplicationStorageF
older\databases\spa\database\authentication\1.tmp (Access is denied. )
Error: 20: Error occur when saving record!
Error: -1: update record to database failed