Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

How to Configure the Dell Security Management Server / Dell Data Protection Enterprise Edition Server

Summary: The Dell Security Management Server can be configured after installation by following these instructions.

This article may have been automatically translated. If you have any feedback regarding its quality, please let us know using the form at the bottom of this page.

Article Content


Symptoms

The Dell Security Management Server (formerly Dell Data Protection | Enterprise Edition Server) must be configured before deploying Dell Data Security (formerly Dell Data Protection) endpoint clients.


Affected Products:

Dell Security Management Server
Dell Data Protection | Enterprise Edition Server

Affected Versions:

v8.0.0 and Later

Affected Operating Systems:

Windows


Cause

Not applicable.

Resolution

Click the Dell Security Management Server version for configuration steps. For versioning information, reference How to Identify the Dell Data Security / Dell Data Protection Server Version.

Note:
  • This article requires the server be installed first. For more information, reference How to Install Dell Security Management Server.
  • This article only covers the basic deployment of Dell Security Management Server. Client Services is required for more complex or custom deployments of Dell Security Management Server.
  • Client Service engagements can be purchased through your sales representative.

Versions of Dell Security Management Server and Dell Data Protection | Enterprise Edition Server beginning with version 9.0.0 do not require additional server configuration.

Note: Upon completion, the Administration Console must be configured. For more information, reference How to Configure the Dell Data Security / Dell Data Protection Server Administration Console.

Steps must be taken to configure Windows Authentication, Connect to the SQL Database, and then Start Services. Select the appropriate step for more information.

To configure Windows Authentication:

Note:
  1. Right-click the Windows start menu and then click Run.

Run

  1. In the Run UI, type services.msc and then press OK. This opens the services.

Run UI

  1. Double-click Dell Compatibility Server.

Dell Compatibility Server

  1. Click the Log On tab.

Log On

  1. In the Log On tab:
    1. Select This Account.
    2. Browse or populate the Windows service account that is configured for dbo rights.
    3. Populate the Windows service account Password.
    4. Click OK.

Log on tab

  1. Repeat Steps 4 and 5 with each of the following services:
    • Dell Compliance Reporter
    • Dell Core Server
    • Dell Key Server
    • Dell Message Broker
    • Dell Security Server

To connect the SQL database:

  1. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.

Credant Configuration

Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch the Server Configuration Tool.
  1. Accept any prompts about configuration conflicts by pressing OK.

Configuration conflict prompt

  1. Click the Database tab.

Database

  1. From the Database tab:
    1. Populate the Server Name.
    2. Optionally, populate an Instance Name starting with \ following the Server Name.
    3. Confirm the Server Port.
    4. Populate the Database.
    5. Select a method of Authentication.
    6. If SQL Authentication is chosen:
      1. Populate the User Name.
      2. Populate the User Name Password.
      3. Go to Step 5.

If Windows Authentication is chosen, go to Step 5.

Database tab

Note:
  • Server Name may be populated with either a fully qualified domain name (FQDN) or IP address.
  • If Windows authentication is selected, the active Windows account is used to connect to the Dell Data Protection database.
  • The credentials that are populated must be assigned from following Create the SQL Database in How to Configure SQL for Dell Security Management Server / Dell Data Protection Enterprise Edition Server.
  • The examples used for Server Name, Server Port, Database, Authentication, User Name, and Password may differ in your environment.
  1. Select the Configuration menu and then click Save.

Save

  1. Click Yes.

Save prompt

  1. Select the Actions menu and then click Test Database Configuration.

Test Database Configuration

  1. Click Next.

Next

  1. If using Windows Authentication, optionally:
    1. Check Use different Windows account credentials.
    2. Populate User Name.
    3. Populate Password.
    4. Populate Domain.
    5. Click Next.

If using SQL Authentication, click Next and then go to Step 10.

Windows Authentication menu

  1. Test Connection Settings must show Passed to proceed. If it does not, return to Step 4 or use different Windows account credentials (Step 9). Click Finish.

Test Configuration

Note: Database Initialized test is expected to give a result of Action Required at this time.
  1. Select the Actions menu, and then click Initialize Database.

Initialize Database

  1. Click Next.

Initialize Enterprise Database

Warning: Initializing the database is an irreversible process to erase and format the database. Initializing the database erases all data, including key material, user states, and administrators. It is recommended to confirm that the database pointed to in Step 6 is a new database.
  1. If using Windows Authentication, optionally:
    1. Check Use different Windows account credentials.
    2. Populate User Name.
    3. Populate Password.
    4. Populate Domain.
    5. Click Next.

If using SQL Authentication, click Next and then go to Step 14.

Windows Authentication menu

  1. Once initialized, click Finish.

Initializing Database

To start server services:

Services must be started to begin using the server. Reference How to Stop and Start Services in Dell Security Management Server / Dell Data Protection Enterprise Edition Server for the best order to start services.

Note: Upon completion, the Administration Console must be configured. For more information, reference How to Configure the Dell Data Security / Dell Data Protection Server Administration Console.

Steps must be taken to configure Windows Authentication, Connect to the SQL Database, Configure the DM Certificate, and then Start Services. Select the appropriate step for more information.

To configure Windows Authentication:

Note:
  1. Right-click the Windows start menu and then click Run.

Run

  1. In the Run UI, type services.msc and then press OK. This opens the services.

Run UI

  1. Double-click Dell Compatibility Server.

Dell Compatibility Server

  1. Click the Log On tab.

Log On

  1. In the Log On tab:
    1. Select This Account.
    2. Browse or populate the Windows service account that is configured for dbo rights.
    3. Populate the Windows service account Password.
    4. Click OK.

Log On tab

  1. Repeat Steps 4 and 5 with each of the following services:
    • Dell Compliance Reporter
    • Dell Core Server
    • Dell Key Server
    • Dell Message Broker
    • Dell Security Server

To connect the SQL database:

  1. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.

Credant Configuration

Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch Server Configuration Tool.
  1. Accept any prompts about configuration conflicts by pressing OK.

Configuration conflict prompt

  1. Click the Database tab.

Database

  1. From the Database tab:
    1. Populate the Server Name.
    2. Optionally, populate an Instance Name starting with \ following the Server Name.
    3. Confirm the Server Port.
    4. Populate the Database.
    5. Select a method of Authentication.
    6. If SQL Authentication is chosen:
      1. Populate the User Name.
      2. Populate the User Name Password.
      3. Go to Step 5.

If Windows Authentication is chosen, go to Step 5.

Database tab

Note:
  • Server Name may be populated with either a fully qualified domain name (FQDN) or IP address.
  • If Windows authentication is selected, the active Windows account is used to connect to the Dell Data Protection database.
  • The credentials that are populated must be assigned from following Create the SQL Database in How to Configure SQL for Dell Security Management Server / Dell Data Protection Enterprise Edition Server.
  • The examples used for Server Name, Server Port, Database, Authentication, User Name, and Password may differ in your environment.
  1. Select the Configuration menu and then click Save.

Save

  1. Click Yes.

Save prompt

  1. Select the Actions menu and then click Test Database Configuration.

Test Database Configuration

  1. Click Next.

Configuration Test

  1. If using Windows Authentication, optionally:
    1. Check Use different Windows account credentials.
    2. Populate User Name.
    3. Populate Password.
    4. Populate Domain.
    5. Click Next.

If using SQL Authentication, click Next and then go to Step 10.

Windows Authentication menu

  1. Test Connection Settings must show Passed to proceed. If it does not, return to Step 4 or use different Windows account credentials (Step 9). Click Finish.

Test Configuration

Note: Database Initialized test is expected to give a result of Action Required at this time.
  1. Select the Actions menu, and then click Initialize Database.

Initialize Database

  1. Click Next.

Initialize Enterprise Database

Warning: Initializing the database is an irreversible process to erase and format the database. Initializing the database erases all data, including key material, user states, and administrators. It is recommended to confirm that the database pointed to in Step 6 is a new database.
  1. If using Windows Authentication, optionally:
    1. Check Use different Windows account credentials.
    2. Populate User Name.
    3. Populate Password.
    4. Populate Domain.
    5. Click Next.

If using SQL Authentication, click Next and then go to Step 14.

Windows Authentication menu

  1. Once initialized, click Finish.

Initializing Database

To configure the DM certificate:

  1. Right-click the Windows Start menu and then click Run.

Run

  1. In the Run UI, type mmc.exe, and then click OK.

Run UI

  1. Click the File menu, and then click Add/Remove Snap-in.

Add/Remove Snap-in

  1. Click Certificates in the list of Available snap-ins and then click Add.

Certificates

  1. Click Computer account and then click Next.

Computer account

  1. With Local computer selected, click Finish.

Local computer

  1. Click OK.

Adding Certificates

  1. Expand Certificates (Local Computer).

Expanding Certificates (Local Computer)

  1. Expand Personal.

Expanding Personal

  1. Click Certificates which is contained within Personal.

Selecting Certificates

  1. In the center pane, locate the certificate to be used as a DM Cert, right-click it, select All Tasks, and then click Export.

Export

Note: Dell recommends using a third-party certificate in production environments.
  1. Click Next.

Welcome to the Certificate Export Wizard

  1. Click Yes, export the private key and then click Next.

Exporting the private key

  1. In the Certificate Export Wizard:
    1. Select Personal Information Exchange - PKCS #12 (.PFX).
    2. Check Include all certificates in the certification path if possible.
    3. Check Export all extended properties.
    4. Click Next.

Certificate Export Wizard

  1. Populate and confirm a password, and then click Next.

Password

  1. Click Browse.

Browsing to the file

  1. Browse to a location to save the file, populate a name to save the certificate as, and then click Save.

Selecting the file location

  1. Click Next.

Certificate path populated

  1. Click Finish.

Completing the Certificate Export Wizard

  1. Click OK.

Successful export

  1. Exit MMC.

Exiting MMC

  1. If prompted to save console settings, click No.

Console settings prompt

  1. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.

Credant Configuration

Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch Server Configuration Tool. For more information, reference How to Stop and Start Services in Dell Security Management Server / Dell Data Protection Enterprise Edition Server.
  1. Select the Actions menu and then click Import DM Certificate.

Import DM Certificate

  1. Go to the path selected in Step 16 for the certificate, select it, and then click Open.

Selecting the certificate

  1. Populate the password that is chosen in Step 14 and then click OK.

Password

  1. If Windows Authentication is in use, optionally select Use different Windows account credentials, populating the User Name, Password, and Domain. Once satisfied with the credentials to be used, click Next.

Windows account

  1. Click the X to Close Server Configuration Tool.

Closing the Server Configuration Tool

To start server services:

Services must be started to begin using the server. Reference How to Stop and Start Services in Dell Security Management Server / Dell Data Protection Enterprise Edition Server for the best order to start services.

Note: Upon completion, the Administration Console must be configured. For more information, reference How to Configure the Dell Data Security / Dell Data Protection Server Administration Console.

Steps must be taken to configure Windows Authentication, Connect to the SQL Database, Configure the DM Certificate, and then Start Services. Select the appropriate step for more information.

To configure Windows Authentication:

Note:
  1. Right-click the Windows start menu and then click Run.

Run

  1. In the Run UI, type services.msc and then press OK. This opens the services.

Run UI

  1. Double-click Dell Compatibility Server.

Dell Compatibility Server

  1. Click the Log On tab.

Log On

  1. In the Log On tab:
    1. Select This Account.
    2. Browse or populate the Windows service account that is configured for dbo rights.
    3. Populate the Windows service account Password.
    4. Click OK.

Select This account, populate the Windows service account and password that are created in Step 1, and then click OK.

Log On tab

  1. Repeat Steps 4 and 5 with each of the following services:
    • Dell Compliance Reporter
    • Dell Core Server
    • Dell Key Server
    • Dell Message Broker
    • Dell Security Server

To connect the SQL database:

  1. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.

Credant Console

Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch Server Configuration Tool.
  1. Accept any prompts about configuration conflicts by pressing OK.

Configuration conflict prompt

  1. Click the Database tab.

Database

  1. From the Database tab:
    1. Populate the Server Name.
    2. Optionally, populate an Instance Name starting with \ following the Server Name.
    3. Confirm the Server Port.
    4. Populate the Database.
    5. Select a method of Authentication.
    6. If SQL Authentication is chosen:
      1. Populate the User Name.
      2. Populate the User Name Password.
      3. Go to Step 5.

If Windows Authentication is chosen, go to Step 5.

Database tab

Note:
  • Server Name may be populated with either a fully qualified domain name (FQDN) or IP address.
  • If Windows authentication is selected, the active Windows account is used to connect to the Dell Data Protection database.
  • The credentials that are populated must be assigned from following Create the SQL Database in How to Configure SQL for Dell Security Management Server / Dell Data Protection Enterprise Edition Server.
  • The examples used for Server Name, Server Port, Database, Authentication, User Name, and Password may differ in your environment.
  1. Select the Configuration menu and then click Save.

Save

  1. Click Yes.

Save prompt

  1. Select the Actions menu and then click Test Database Configuration.

Test Database Configuration

  1. Click Next.

Configuration Test

  1. If using Windows Authentication, optionally:
    1. Check Use different Windows account credentials.
    2. Populate User Name.
    3. Populate Password.
    4. Populate Domain.
    5. Click Next.

If using SQL Authentication, click Next and then go to Step 10.

Windows Authentication menu

  1. Test Connection Settings must show Passed to proceed. If it does not, return to Step 4 or use different Windows account credentials (Step 9). Click Finish.

Test Configuration

Note: Database Initialized test is expected to give a result of Action Required at this time.
  1. Select the Actions menu, and then click Initialize Database.

Initialize Database

  1. Click Next.

Initialize Enterprise Database

Warning: Initializing the database is an irreversible process to erase and format the database. Initializing the database erases all data, including key material, user states, and administrators. It is recommended to confirm that the database pointed to in Step 6 is a new database.
  1. If using Windows Authentication, optionally:
    1. Check Use different Windows account credentials.
    2. Populate User Name.
    3. Populate Password.
    4. Populate Domain.
    5. Click Next.

If using SQL Authentication, click Next and then go to Step 14.

Windows Authentication menu

  1. Once initialized, click Finish.

Initializing Database

To configure the DM certificate:

  1. Right-click the Windows start menu and then click Run.

Run

  1. In the Run UI, type mmc.exe, and then click OK.

Run UI

  1. Click the File menu, and then click Add/Remove Snap-in.

Add/Remove Snap-in

  1. Click Certificates in the list of Available snap-ins and then click Add.

Certificates

  1. Click Computer account and then click Next.

Computer account

  1. With Local computer selected, click Finish.

Local computer

  1. Click OK.

Adding Certificates

  1. Expand Certificates (Local Computer).

Expanding Certificates (Local Computer)

  1. Expand Personal.

Expanding Personal

  1. Click Certificates which is contained within Personal.

Selecting Certificates

  1. In the center pane, locate the certificate to be used as a DM Cert, right-click it, select All Tasks, and then click Export.

Export

Note: Dell recommends using a third-party certificate in production environments.
  1. Click Next.

Welcome to the Certificate Export Wizard

  1. Click Yes, export the private key and then click Next.

Exporting the private key

  1. In the Certificate Export Wizard:
    1. Select Personal Information Exchange - PKCS #12 (.PFX).
    2. Check Include all certificates in the certification path if possible.
    3. Check Export all extended properties.
    4. Click Next.

Certificate Export Wizard

  1. Populate and confirm a password, and then click Next.

Password

  1. Click Browse.

Browsing to the file

  1. Browse to a location to save the file, populate a name to save the certificate as, and then click Save.

Selecting the file location

  1. Click Next.

Certificate path populated

  1. Click Finish.

Completing the Certificate Export Wizard

  1. Click OK.

Successful export

  1. Exit MMC.

Exit

  1. If prompted to save console settings, click No.

Console settings prompt

  1. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.

Credant Configuration

Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch Server Configuration Tool. For more information, reference How to Stop and Start Services in Dell Security Management Server / Dell Data Protection Enterprise Edition Server.
  1. Select the Actions menu and then click Import DM Certificate.

Import DM Certificate

  1. Go to the path selected in Step 16 for the certificate, select it, and then click Open.

Selecting the certificate

  1. Populate the password that is chosen in Step 14 and then click OK.

Password

  1. If Windows Authentication is in use, optionally select Use different Windows account credentials, populating the User Name, Password, and Domain. Once satisfied with the credentials to be used, click Next.

Windows Account

  1. Click the X to Close Server Configuration Tool.

Closing the Server Configuration Tool

To start server services:

Services must be started to begin using the server. Reference How to Stop and Start Services in Dell Security Management Server / Dell Data Protection Enterprise Edition Server for the best order to start services.

Note: Upon completion, the Administration Console must be configured. For more information, reference How to Configure the Dell Data Security / Dell Data Protection Server Administration Console.

Steps must be taken to configure Windows Authentication, Connect to the SQL Database, Configure the DM Certificate, and then Start Services. Select the appropriate step for more information.

To configure Windows Authentication:

Note:
  1. Right-click the Windows start menu and then click Run.

Run

  1. In the Run UI, type services.msc and then press OK. This opens the services.

Run UI

  1. Double-click Dell Compatibility Server.

Dell Compatibility Server

  1. Click the Log On tab.

Log On

  1. In the Log On tab:
    1. Select This Account.
    2. Browse or populate the Windows service account that is configured for dbo rights.
    3. Populate the Windows service account Password.
    4. Click OK.

Select This account, populate the Windows service account and password that are created in Step 1, and then click OK.

Log On tab

  1. Repeat Steps 4 and 5 with each of the following services:
    • Dell Compliance Reporter
    • Dell Core Server
    • Dell Key Server
    • Dell Message Broker
    • Dell Security Server
  1. Go to C:\Program Files\Dell\Enterprise Edition\Compliance Reporter\lib\mssql-microsoft.

Compliance Reporter directory

Note: If the installation path was changed from the default path, this path may differ.
  1. Open db.properties with a text editor.

Opening db.properties with a text editor

  1. At DatabaseName=${dbname}; type integratedSecurity=true;.

Modification to db.properties

  1. Save the file.

Save

  1. Exit the file.

Exit

To connect the SQL database:

  1. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.

Credant Configuration

Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch Server Configuration Tool.
  1. Accept any prompts about configuration conflicts by pressing OK.

Configuration conflict prompt

  1. Click the Database tab.

Database

  1. From the Database tab:
    1. Populate the Server Name.
    2. Optionally, populate an Instance Name starting with \ following the Server Name.
    3. Confirm the Server Port.
    4. Populate the Database.
    5. Select a method of Authentication.
    6. If SQL Authentication is chosen:
      1. Populate the User Name.
      2. Populate the User Name Password.
      3. Go to Step 5.

If Windows Authentication is chosen, go to Step 5.

Windows Authentication

Note:
  • Server Name may be populated with either a fully qualified domain name (FQDN) or IP address.
  • If Windows authentication is selected, the active Windows account is used to connect to the Dell Data Protection database.
  • The credentials that are populated must be assigned from following Create the SQL Database in How to Configure SQL for Dell Security Management Server / Dell Data Protection Enterprise Edition Server.
  • The examples used for Server Name, Server Port, Database, Authentication, User Name, and Password may differ in your environment.
  1. Select the Configuration menu and then click Save.

Save

  1. Click Yes.

Save prompt

  1. Select the Actions menu and then click Test Database Configuration.

Test Database Configuration

  1. Click Next.

Configuration Test

  1. If using Windows Authentication, optionally:
    1. Check Use different Windows account credentials.
    2. Populate User Name.
    3. Populate Password.
    4. Populate Domain.
    5. Click Next.

If using SQL Authentication, click Next and then go to Step 10.

Windows Authentication menu

  1. Test Connection Settings must show Passed to proceed. If it does not, return to Step 4 or use different Windows account credentials (Step 9). Click Finish.

Test configuration

Note: Database Initialized test is expected to give a result of Action Required at this time.
  1. Select the Actions menu, and then click Initialize Database.

Initialize Database

  1. Click Next.

Initialize Enterprise Database

Warning: Initializing the database is an irreversible process to erase and format the database. Initializing the database erases all data, including key material, user states, and administrators. It is recommended to confirm that the database pointed to in Step 6 is a new database.
  1. If using Windows Authentication, optionally:
    1. Check Use different Windows account credentials.
    2. Populate User Name.
    3. Populate Password.
    4. Populate Domain.
    5. Click Next.

If using SQL Authentication, click Next and then go to Step 14.

Windows Authentication

  1. Once initialized, click Finish.

Initializing Database

To configure the DM certificate:

  1. Right-click the Windows start menu and then click Run.

Run

  1. In the Run UI, type mmc.exe, and then click OK.

Run UI

  1. Click the File menu, and then click Add/Remove Snap-in.

Add/Remove Snap-in

  1. Click Certificates in the list of Available snap-ins and then click Add.

Certificates

  1. Click Computer account and then click Next.

Computer account

  1. With Local computer selected, click Finish.

Local computer

  1. Click OK.

Adding Certificates

  1. Expand Certificates (Local Computer).

Expanding Certificates (Local Computer)

  1. Expand Personal.

Expanding Personal

  1. Click Certificates which is contained within Personal.

Selecting Certificates

  1. In the center pane, locate the certificate to be used as a DM Cert, right-click it, select All Tasks, and then click Export.

Export

Note: Dell recommends using a third-party certificate in production environments.
  1. Click Next.

Welcome to the Certificate Export Wizard

  1. Click Yes, export the private key and then click Next.

Exporting the private key

  1. In the Certificate Export Wizard:
    1. Select Personal Information Exchange - PKCS #12 (.PFX).
    2. Check Include all certificates in the certification path if possible.
    3. Check Export all extended properties.
    4. Click Next.

Certificate Export Wizard

  1. Populate and confirm a password, and then click Next.

Password

  1. Click Browse.

Browsing to the file

  1. Browse to a location to save the file, populate a name to save the certificate as, and then click Save.

Selecting the file location

  1. Click Next.

Certificate path populated

  1. Click Finish.

Completing the Certificate Export Wizard

  1. Click OK.

Successful Export

  1. Exit MMC.

Exit

  1. If prompted to save console settings, click No.

Console settings prompt

  1. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.

Credant Configuration

Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch Server Configuration Tool. For more information, reference How to Stop and Start Services in Dell Security Management Server / Dell Data Protection Enterprise Edition Server.
  1. Select the Actions menu and then click Import DM Certificate.

Import DM Certificate

  1. Go to the path selected in Step 16 for the certificate, select it, and then click Open.

Selecting the certificate

  1. Populate the password that is chosen in Step 14 and then click OK.

Password

  1. Click the X to Close Server Configuration Tool.

Closing the Server Configuration Tool

To start server services:

Services must be started to begin using the server. Reference How to Stop and Start Services in Dell Security Management Server / Dell Data Protection Enterprise Edition Server for the best order to start services.

Note: Upon completion, the Administration Console must be configured. For more information, reference How to Configure the Dell Data Security / Dell Data Protection Server Administration Console.

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.

 

Additional Information

 

Videos

 

Article Properties


Affected Product

Dell Encryption

Last Published Date

20 Dec 2022

Version

13

Article Type

Solution