Dell Security Management Server Installation and Migration Guide v11.9

Upgrade/Migrate Back End Server(s)

1. In the Dell installation media, navigate to the Security Management Server directory. Unzip (NOT copy/paste or drag/drop) Security Management Server-x64 to the root directory of the server where you are installing Security Management Server. Copying/pasting or dragging/dropping produces errors and an unsuccessful installation.
2. Double-click setup.exe.
3. Select the language for installation, then click OK.

   

4. In the Welcome dialog, click Next.

   

5. Read the license agreement, accept the terms, then click Next.

   

6. To select a location for backup configuration files to be stored, click Change, navigate to the desired folder, and click Next.

   Dell recommends that you select a remote network location or external drive for backup.

   

   The folder structure created by the installer during installation (example shown below) must remain unchanged.

   
7. When the installer properly locates the existing database, the dialog is filled out for you.

   

   To connect to the existing database, specify the authentication method to use. After installation, the installed product does not use credentials specified here.

   1. Select the database authentication type:

      • Windows authentication credentials of current user

        If you choose Windows Authentication, the same credentials that were used to log in to Windows are used for authentication (User Name and Password are not editable).

        Ensure that the account has system administrator rights and the ability to manage the SQL Server. The user account must have the SQL Server permissions Default Schema: dbo and Database Role Membership: dbo_owner, public.

        OR

      • SQL server authentication using the credentials below

        If you use SQL authentication, the SQL account used must have system administrator rights on the SQL Server.

        The installer must authenticate to the SQL Server with these permissions: create database, add user, assign permissions.

   2. Click Next.
8. If the Service Runtime Account Information dialog is not pre-populated, specify the authentication method for the product to use after installation.
   1. Select the authentication type.
   2. Enter the user name and password of the domain service account that Dell services will use to access the SQL Server, and click Next.

      The user account must be in the format DOMAIN\Username and have the SQL Server permissions Default Schema: dbo and Database Role Membership: dbo_owner, public.

      

9. If the database is not backed up, you must back it up before continuing the installation. Database upgrade cannot be rolled back. Only after the database is backed up, select Yes, the database has been backed up, and click Next.

   

10. Click Install to begin the installation.

    

    A progress dialog displays status throughout the upgrade process.

    
11. When the installation is completed, click Finish.

    

    Dell Services are restarted at the end of migration. It is not necessary to reboot the Dell Server.

    The installer performs steps 12-13 for you. It is a Best Practice to check these values to ensure the changes have been made properly.

12. In your backed up installation, copy/paste: <Compatibility Server install dir>\conf\secretKeyStore to the new installation:

    <Compatibility Server install dir>\conf\secretKeyStore

13. In the new installation, open <Compatibility Server install dir>\conf\server_config.xml and replace the server.pass value with the value from the backed up <Compatibility Server install dir>\conf\server_config.xml, as follows:

    Instructions for server.pass:

    If you know the password, refer to the example server_config.xml file and make the following changes:

    • Edit the KeyName from CFG_KEY value to none.
    • Enter the plain text password and enclose it between <value>       </value>, which in this example is <value>changeit</value>
    • When the Security Management Server starts, the plain text password is hashed, and the hashed value replaces the plain text.

    Known Password

    

    If you do not know the password, cut and paste the section similar to the section shown in Figure 4-2 from the backed up <Compatibility Server install dir>\conf\server_config.xml file into the corresponding section in the new server_config.xml file.

    Unknown Password

    

    Save and close the file.

    NOTE:

    Do not attempt to change the Security Management Server password by editing the server.pass value in server_config.xml at any other time. If you change this value, you lose access to the database.

    Back end server migration tasks are complete.