Step 5. Creating a database and configuring the application connection to the SQL server
August 7, 2024
ID 28955
To create a database on an SQL server and configure connections to it:
- In the Name of SQL server field, specify the name (or IP address) of the computer where the SQL server is installed, and the name of the SQL instance, for example, MYCOMPUTER\SQLEXPRESS.
Click the Browse button opposite the Name of SQL server field to select the SQL server in the network segment in which the computer is located.
If the connection is to a remote SQL server, make sure that the SQL server is enabled to support TCP/IP as a client protocol. The relevant SQL server may be missing from the list of SQL servers if the service of the SQL server browser is not running on the computer hosting the SQL server.
- In the Database name field, specify the name of the database where the application will store Backup data, statistics, and application configuration details.
Assign the user account used to start the Setup Wizard with the db_owner role at the application database level and the ALTER ANY LOGIN permission at the SQL server level. The ALTER ANY LOGIN permission is required by the Setup Wizard to create SQL server users, assign roles to those users, and grant them permissions to use the database. The db_owner role provides a set of permissions allowing the performance of all actions to configure and maintain the database, as well as to delete the database.
You can use any of the following databases for handling the application:
- Database created in advance by the SQL server administrator
- Database created automatically by the Setup Wizard
If you want to use a single Backup and statistics database for several Security Servers, the same SQL server and database names must be specified for all Security Servers. In this case, when installing the application on the second and subsequent Security Servers, specify the same values in the Name of SQL server, Database name and Additional connection parameters fields for connecting to the database created during application installation on the first Security Server. If you do not intend to use a common database, you can specify custom SQL database connection settings for each server.
You can use the database of the previous version of the application. The database of the previous version of the application is connected during the application upgrade. If you remove and then install a new version of the application using the Setup Wizard, you will not be able to use the database from the previous version.
- In the Additional connection parameters field, specify the additional settings for connecting the Backup and statistics database to the server.
For a description of the settings for connecting the database to a server, please refer to the Microsoft website via the following link: connection string settings.
Example:
Connection Timeout=30;Integrated Security=SSPI;MultiSubnetFailover=true
In the Additional connection parameters field, it is not recommended to specify the
Data Source
andDatabase
settings because they are defined in the Name of SQL server and Database name fields. - To finish the database configuration and proceed to the next step of the Setup Wizard, click the Next button.
Kaspersky Security does not provide channel encryption during data transmission between the server and the SQL database. The use of unencrypted communication channels during network interaction carries certain risks to the transferred data integrity; in particular, the falsification and interception of confidential or other data, as well as attackers gaining access to the database on behalf of KSE and with its rights. To minimize risks and protect data transmitted over the network, we strongly recommend using an encrypted connection to the database server. The encrypted connection must be configured on the SQL server side. A detailed description of this configuration is provided on the Microsoft SQL Server documentation page.
To use encrypted communication channels, configure the settings on the server where the application is installed in one of the following ways:
- Configure the system settings in the Server Configuration Manager -> SQL Native Client Configuration dialog box and install the certificate to a trusted storage;
- When installing the product, specify additional connection settings in the SQL connection window (Encrypt=
Yes
; Trust Server Certificate =Yes
).