Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-2727: How to migrate SQL databases associated with a Centrify_DirectManage Audit installation from one database server to another

Auditing and Monitoring Service ,  

7 December,21 at 11:03 PM

Question:
How does one migrate databases associated with a Centrify DirectManage Audit installation from one SQL database server to another?

Answer:
Please check the attached document which has the step by step process to migrate databases associated with a Centrify DirectManage Audit installation from one database server to another.


At a high level, the steps are:

  1. Stop all the collectors.
  2. Take backup of existing databases (optional but recommended)
  3. Exporting the SCP objects to a text file before you begin the migration by running this command:
    ldifde -f DASCPs.ldif -r "(cn=vegas-installation*)
  4. Detach the existing databases and attach them to the new database server.
  5. Ensure that CLR integration is enabled on the new database server.
  6. Restore the TRUSTWORTHY flag.
  7. Modify the newly attached Audit Server database.
  8. Restore connection between Management database and Audit Store database.
  9. Update the database entries in Active Directory.
  10. Start all the collectors.


Also, verify if 'sa' is the owner.  If 'sa' is not the owner of the database, you can run the following query command to set 'sa' account as the owner:

ALTER AUTHORIZATION ON DATABASE::[<DB_NAME>] TO [sa]


User-added image

Keywords: migrate SQL database changedbowner sa

Note:
Once the above steps are completed, do below steps on the SQL database server:

A. Start > All Programs > Microsoft SQL Server 20xx > Configuration Tools > SQL Server Configuration Manager. 

Expand SQL Server 20xx Network Configuration > double click Protocols for DIRECTAUDIT > Please make sure TCP/IP is Enabled 

B. Click Start > Administrative Tools > Service, right-click on SQL Server (DIRECTAUDIT) to start/restart the server. 

C. Check Trusted Collectors is correctly configured in Audit Store and any Allowed incoming Collectors in the database. 

D. The collector server and the database server should be part of the same AD forest. 

E. See if the AD domain name matches the issue described in: 

KB-2516: Centrify DirectAudit fails to resolve the Fully Qualified Domain Name for the SQL server

Attachments:
DirectAudit Migration instructions

Related Articles

 articleKB-10203 How to rename DirectAudit Database? articleKB-10524: Recommend not to install SQL Express on enterprise level environment articlehow to migrate databases associated with a Centrify DirectManage Audit 3.x installation articleHow to Migrate a Report Services database to a new SQL server articleKB-4434: Recomended process to migrate Audit DB to a new server in a new domain articleUsing a Service Account to Run the IIS App Pool & Access the Thycotic SQL Database – Best Practices (Advanced) articleMoving Secret Server to another machine articleKB-3390: DirectAudit SQL database setup rights and needed groups for installation. articleSQL Standard 2016 Installation (Advanced)