Hashicorp integration with Docuware

My client uses Hashicorp vault. Basically every database in the system has login credentials. What hashicorp does is peridically rotates or changes db login password for database server. DocuWare intakes that DB/ server login credentials at the very beginning during installation and as per my understanding it remains unchanged. 
As my client is required to continuously rotate password for all database including MSSQL for docuware for security concern and standards, we are to implement a third party software that requests latest login credentials to hasicorp vault through their API and update the DB login credential periodically. They also want it on zero downtime meaning the server can not remain down at all. So help me figure out how to approach this problem. My major inquiries-

1. Does Docuware have API (rest or other) through which I can update MSSQL DB login credentials for docuware?
2. Does Docuware have API (rest or other) through which I can stop and start all docuware services?
3. If Docuware does not have this I am open to writing script that changes config / data files but not sure which files need changing.
4. If Docuware does not have API to manually start stop docuware services I am open to writing script to restart docuware services from windows services too.

Any help is appreciated. 

Hi Joytu Khisha,

rotating passwords for service accounts is pretty unusual, and can usually not be done without downtime.

to answer your questions:
1. No, not possible.
2. No. You can use WinRM to restart the DocuWare Windows services though.

The process to change the password is pretty easy.
a. Take all DW Services offline, except IIS and Authentication Server.
b. Change the password in the administration, save and exit.
c. Stop IIS and authentication server.
d. Update password in dwmachine.config, using this KB: KBA-36264
e. Start IIS and all DocuWare Services.
f. System should be operational again.

I am unsure if you can automate this process, as you need to make the change from the administration tool, which then encrypts the password before storing it in the database.

Greetings from Germany,
Simon H. Hellmann
DocuWare System Consultant

Dear Simon,
Thanks a lot for the response. The docuware version we are using is 7.11. I also found a KBA that describes the DB password changing procedure.

• KBA-37419

It says the password has to be changed in docuware 1st then in DB which seems logical as the moment we change password in DB first we can't seem to login either in Docuware administration nor our docuware web portal. 
KBA-36264 does not seem to work for our 7.11 version. May be KBA-37419 this is more updated and latest version. 

But none of this seem to help our cause as we will not be manually changing the DB password it will be automatically changed by hashicorp vault. On top of that we have to automate it. Can you please confirm if  KBA-37419 is the only way to change our DB login credentials for Docuware. Is it not possible to automate it?

thanks in advance
 

As far as I know, it is not possible to automate it further.

Greetings from Germany, 
Simon H. Hellmann
DocuWare System Consultant