-
Title
How to configure FMS to use SQLServer secure-connection-only, service account/windows authentication backend? -
Description
We have a SQLServer backend database to be used by the Foglight Management Server.
Since the Install Wizard does not provide the ability to configure this type of installation, what is the manual method?
-
Resolution
1) Create the 'foglight' database and schema manually per the described procedure. Option 1 - Run the Foglight database tool to configure the database
2) Edit the %FGLHOME%\server.config file.
NOTE: server.config values for DB host, port, name, user, password are ignored due to Windows authentication setting & hard-coded SQLServer JDBC connection in sqlsvr-ds.xml file.server.database.host = "xxxxxx";server.database.port = "99999";server.database.name = "xxxxxx";server.database.user = "xxxxxx";server.database.password = "xxxxxx";server.database.type = "sqlsvr";server.database.integratedauth = "true";server.database.secureconn = true;3) Edit the %FGLHOME%\server\jboss\conf\sqlsvr-ds.xml file.
Enter your JDBC connection string providing the DatabaseHost, Instance, & Port. Include the bold options also shown for integrated security, encryption & trusted certificate.SYNTAX: jdbc:sqlserver://DATABASEHOST\INSTANCE:{port};database=foglight;integratedSecurity=true;encrypt=true;trustServerCertificate=true
ie. jdbc:sqlserver://my_db_host\my_instance:1713;database=foglight;integratedSecurity=true;encrypt=true;trustServerCertificate=true
4) This concludes the Foglight DB repository configuration. Continue with your certificate installation per documentation for your appropriate certificate type (signed or unsigned) if you are also implementing HTTPS. Reference Importing a network security certificate