How to Configure the Dell Security Management Server

Versions of Dell Security Management Server and Dell Data Protection | Enterprise Edition Server beginning with version 9.0.0 do not require additional server configuration.

Steps must be taken to configure Windows Authentication, Connect to the SQL Database, and then Start Services. Select the appropriate step for more information.

Windows Authentication

1. Right-click the Windows start menu and then click Run.
   
2. In the Run UI, type services.msc and then press OK. This opens the services.
   
3. Double-click Dell Compatibility Server.
   
4. Click the Log On tab.
   
5. In the Log On tab:
   1. Select This Account.
   2. Browse or populate the Windows service account that is configured for dbo rights.
   3. Populate the Windows service account Password.
   4. Click OK.
   
6. Repeat Steps 4 and 5 with each of the following services:
   • Dell Compliance Reporter
   • Dell Core Server
   • Dell Key Server
   • Dell Message Broker
   • Dell Security Server

Connect to the SQL Database

1. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.
   
   Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch the Server Configuration Tool.
2. Accept any prompts about configuration conflicts by pressing OK.
   
3. Click the Database tab.
   
4. From the Database tab:
   1. Populate the Server Name.
   2. Optionally, populate an Instance Name starting with \ following the Server Name.
   3. Confirm the Server Port.
   4. Populate the Database.
   5. Select a method of Authentication.
   6. If SQL Authentication is chosen:
      1. Populate the User Name.
      2. Populate the User Name Password.
      3. Go to Step 5.
   7. If Windows Authentication is chosen, go to Step 5.
   
   Note:

   • The Server Name may be populated with either a fully qualified domain name (FQDN) or IP address.
   • If Windows authentication is selected, the active Windows account is used to connect to the Dell Data Protection database.
   • The credentials that are populated must be assigned from following Create the SQL Database in How to Configure SQL for Dell Security Management Server.
   • The examples used for Server Name, Server Port, Database, Authentication, User Name, and Password may differ in your environment.
5. Select the Configuration menu and then click Save.
   
6. Click Yes.
   
7. Select the Actions menu and then click Test Database Configuration.
   
8. Click Next.
   
9. If using SQL Authentication, click Next and then go to Step 10. If using Windows Authentication, optionally:
   1. Check Use different Windows account credentials.
   2. Populate User Name.
   3. Populate Password.
   4. Populate Domain.
   5. Click Next.
   
10. Test Connection Settings must show Passed to proceed. If it does not, return to Step 4 or use different Windows account credentials (Step 9). Click Finish.
    
    Note: The Database Initialized test is expected to give a result of Action Required during this time.
11. Select the Actions menu, and then click Initialize Database.
    
12. Click Next.
    
    Warning: Initializing the database is an irreversible process to erase and format the database. Initializing the database erases all data, including key material, user states, and administrators. It is recommended to confirm that the database pointed to in Step 6 is a new database.
13. If using SQL Authentication, click Next and then go to Step 14. If using Windows Authentication, optionally:
    1. Check Use different Windows account credentials.
    2. Populate User Name.
    3. Populate Password.
    4. Populate Domain.
    5. Click Next.
    
14. Once initialized, click Finish.
    

Start Services

Services must be started to begin using the server. Reference How to Stop and Start Services in Dell Security Management Server for the best order to start services.

Steps must be taken to configure Windows Authentication, Connect to the SQL Database, Configure the DM Certificate, and then Start Services. Select the appropriate step for more information.

Windows Authentication

1. Right-click the Windows start menu and then click Run.
   
2. In the Run UI, type services.msc and then press OK. This opens the services.
   
3. Double-click Dell Compatibility Server.
   
4. Click the Log On tab.
   
5. In the Log On tab:
   1. Select This Account.
   2. Browse or populate the Windows service account that is configured for dbo rights.
   3. Populate the Windows service account Password.
   4. Click OK.
   
6. Repeat Steps 4 and 5 with each of the following services:
   • Dell Compliance Reporter
   • Dell Core Server
   • Dell Key Server
   • Dell Message Broker
   • Dell Security Server

Connect to the SQL Database

1. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.
   
   Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch the Server Configuration Tool.
2. Accept any prompts about configuration conflicts by pressing OK.
   
3. Click the Database tab.
   
4. From the Database tab:
   1. Populate the Server Name.
   2. Optionally, populate an Instance Name starting with \ following the Server Name.
   3. Confirm the Server Port.
   4. Populate the Database.
   5. Select a method of Authentication.
   6. If SQL Authentication is chosen:
      1. Populate the User Name.
      2. Populate the User Name Password.
      3. Go to Step 5.
   7. If Windows Authentication is chosen, go to Step 5.
   
   Note:

   • The Server Name may be populated with either a fully qualified domain name (FQDN) or IP address.
   • If Windows authentication is selected, the active Windows account is used to connect to the Dell Data Protection database.
   • The credentials that are populated must be assigned from following Create the SQL Database in How to Configure SQL for Dell Security Management Server.
   • The examples used for Server Name, Server Port, Database, Authentication, User Name, and Password may differ in your environment.
5. Select the Configuration menu and then click Save.
   
6. Click Yes.
   
7. Select the Actions menu and then click Test Database Configuration.
   
8. Click Next.
   
9. If using SQL Authentication, click Next and then go to Step 10. If using Windows Authentication, optionally:
   1. Check Use different Windows account credentials.
   2. Populate User Name.
   3. Populate Password.
   4. Populate Domain.
   5. Click Next.
   
10. Test Connection Settings must show Passed to proceed. If it does not, return to Step 4 or use different Windows account credentials (Step 9). Click Finish.
    
    Note: The Database Initialized test is expected to give a result of Action Required during this time.
11. Select the Actions menu, and then click Initialize Database.
    
12. Click Next.
    
    Warning: Initializing the database is an irreversible process to erase and format the database. Initializing the database erases all data, including key material, user states, and administrators. It is recommended to confirm that the database pointed to in Step 6 is a new database.
13. If using SQL Authentication, click Next and then go to Step 14. If using Windows Authentication, optionally:
    1. Check Use different Windows account credentials.
    2. Populate User Name.
    3. Populate Password.
    4. Populate Domain.
    5. Click Next.
    
14. Once initialized, click Finish.
    

Configure the DM Certificate

1. Right-click the Windows Start menu and then click Run.
   
2. In the Run UI, type mmc.exe, and then click OK.
   
3. Click the File menu, and then click Add/Remove Snap-in.
   
4. Click Certificates in the list of Available snap-ins and then click Add.
   
5. Click Computer account and then click Next.
   
6. With the Local computer selected, click Finish.
   
7. Click OK.
   
8. Expand Certificates (Local Computer).
   
9. Expand Personal.
   
10. Click the folder for Certificates which is contained within Personal.
    
11. In the center pane, locate the certificate to be used as a DM Cert, right-click it, select All Tasks, and then click Export.
    
    Note: Dell Technologies recommends using a third-party certificate in production environments.
12. Click Next.
    
13. Click Yes, export the private key and then click Next.
    
14. In the Certificate Export Wizard:
    1. Select Personal Information Exchange - PKCS #12 (.PFX).
    2. Check Include all certificates in the certification path if possible.
    3. Check Export all extended properties.
    4. Click Next.
    
15. Populate and confirm a password, and then click Next.
    
16. Click Browse.
    
17. Browse to a location to save the file, populate a File name to save the certificate as, and then click Save.
    
18. Click Next.
    
19. Click Finish.
    
20. Click OK.
    
21. Exit MMC.
    
22. If prompted to save console settings, click No.
    
23. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.
    
    Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch the Server Configuration Tool. For more information, reference How to Stop and Start Services in Dell Security Management Server.
24. Select the Actions menu and then click Import DM Certificate.
    
25. Go to the path selected in Step 16 for the certificate, select it, and then click Open.
    
26. Populate the Certificate Password that is chosen in Step 14 and then click OK.
    
27. If Windows Authentication is in use, optionally select Use different Windows account credentials, populating the User Name, Password, and Domain. Once satisfied with the credentials to be used, click Next.
    
28. Click the X to Close Server Configuration Tool.
    

Start Services

Services must be started to begin using the server. Reference How to Stop and Start Services in Dell Security Management Server for the best order to start services.

Steps must be taken to configure Windows Authentication, Connect to the SQL Database, Configure the DM Certificate, and then Start Services. Select the appropriate step for more information.

Windows Authentication

1. Right-click the Windows start menu and then click Run.
   
2. In the Run UI, type services.msc and then press OK. This opens the services.
   
3. Double-click Dell Compatibility Server.
   
4. Click the Log On tab.
   
5. In the Log On tab:
   1. Select This Account.
   2. Browse or populate the Windows service account that is configured for dbo rights.
   3. Populate the Windows service account Password.
   4. Click OK.
   5. Select This account, populate the Windows service account and password that are created in Step 1, and then click OK.
   
6. Repeat Steps 4 and 5 with each of the following services:
   • Dell Compliance Reporter
   • Dell Core Server
   • Dell Key Server
   • Dell Message Broker
   • Dell Security Server

Connect to the SQL Database

1. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.
   
   Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch the Server Configuration Tool.
2. Accept any prompts about configuration conflicts by pressing OK.
   
3. Click the Database tab.
   
4. From the Database tab:
   1. Populate the Server Name.
   2. Optionally, populate an Instance Name starting with \ following the Server Name.
   3. Confirm the Server Port.
   4. Populate the Database.
   5. Select a method of Authentication.
   6. If SQL Authentication is chosen:
      1. Populate the User Name.
      2. Populate the User Name Password.
      3. Go to Step 5.
   7. If Windows Authentication is chosen, go to Step 5.
   
   Note:

   • The Server Name may be populated with either a fully qualified domain name (FQDN) or IP address.
   • If Windows authentication is selected, the active Windows account is used to connect to the Dell Data Protection database.
   • The credentials that are populated must be assigned from following Create the SQL Database in How to Configure SQL for Dell Security Management Server.
   • The examples used for Server Name, Server Port, Database, Authentication, User Name, and Password may differ in your environment.
5. Select the Configuration menu and then click Save.
   
6. Click Yes.
   
7. Select the Actions menu and then click Test Database Configuration.
   
8. Click Next.
   
9. If using SQL Authentication, click Next and then go to Step 10. If using Windows Authentication, optionally:
   1. Check Use different Windows account credentials.
   2. Populate User Name.
   3. Populate Password.
   4. Populate Domain.
   5. Click Next.
   
10. Test Connection Settings must show Passed to proceed. If it does not, return to Step 4 or use different Windows account credentials (Step 9). Click Finish.
    
    Note: The Database Initialized test is expected to give a result of Action Required during this time.
11. Select the Actions menu, and then click Initialize Database.
    
12. Click Next.
    
    Warning: Initializing the database is an irreversible process to erase and format the database. Initializing the database erases all data, including key material, user states, and administrators. It is recommended to confirm that the database pointed to in Step 6 is a new database.
13. If using SQL Authentication, click Next and then go to Step 14. If using Windows Authentication, optionally:
    1. Check Use different Windows account credentials.
    2. Populate User Name.
    3. Populate Password.
    4. Populate Domain.
    5. Click Next.
    
14. Once initialized, click Finish.
    

Configure the DM Certificate

1. Right-click the Windows start menu and then click Run.
   
2. In the Run UI, type mmc.exe, and then click OK.
   
3. Click the File menu, and then click Add/Remove Snap-in.
   
4. Click Certificates in the list of Available snap-ins and then click Add.
   
5. Click Computer account and then click Next.
   
6. With the Local computer selected, click Finish.
   
7. Click OK.
   
8. Expand Certificates (Local Computer).
   
9. Expand Personal.
   
10. Click the folder for Certificates which is contained within Personal.
    
11. In the center pane, locate the certificate to be used as a DM Cert, right-click it, select All Tasks, and then click Export.
    
    Note: Dell Technologies recommends using a third-party certificate in production environments.
12. Click Next.
    
13. Click Yes, export the private key and then click Next.
    
14. In the Certificate Export Wizard:
    1. Select Personal Information Exchange - PKCS #12 (.PFX).
    2. Check Include all certificates in the certification path if possible.
    3. Check Export all extended properties.
    4. Click Next.
    
15. Populate and confirm a password, and then click Next.
    
16. Click Browse.
    
17. Browse to a location to save the file, populate a File name to save the certificate as, and then click Save.
    
18. Click Next.
    
19. Click Finish.
    
20. Click OK.
    
21. Exit MMC.
    
22. If prompted to save console settings, click No.
    
23. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.
    
    Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch the Server Configuration Tool. For more information, reference How to Stop and Start Services in Dell Security Management Server.
24. Select the Actions menu and then click Import DM Certificate.
    
25. Go to the path selected in Step 16 for the certificate, select it, and then click Open.
    
26. Populate the Certificate Password that is chosen in Step 14 and then click OK.
    
27. If Windows Authentication is in use, optionally select Use different Windows account credentials, populating the User Name, Password, and Domain. Once satisfied with the credentials to be used, click Next.
    
28. Click the X to Close Server Configuration Tool.
    

Start Services

Services must be started to begin using the server. Reference How to Stop and Start Services in Dell Security Management Server for the best order to start services.

Steps must be taken to configure Windows Authentication, Connect to the SQL Database, Configure the DM Certificate, and then Start Services. Select the appropriate step for more information.

Windows Authentication

1. Right-click the Windows start menu and then click Run.
   
2. In the Run UI, type services.msc and then press OK. This opens the services.
   
3. Double-click Dell Compatibility Server.
   
4. Click the Log On tab.
   
5. In the Log On tab:
   1. Select This Account.
   2. Browse or populate the Windows service account that is configured for dbo rights.
   3. Populate the Windows service account Password.
   4. Click OK.
   5. Select This account, populate the Windows service account and password that are created in Step 1, and then click OK.
   
6. Repeat Steps 4 and 5 with each of the following services:
   • Dell Compliance Reporter
   • Dell Core Server
   • Dell Key Server
   • Dell Message Broker
   • Dell Security Server
7. Go to C:\Program Files\Dell\Enterprise Edition\Compliance Reporter\lib\mssql-microsoft.
   
   Note: If the installation path was changed from the default path, this path may differ.
8. Open db.properties with a text editor.
   
9. At DatabaseName=${dbname}; type integratedSecurity=true;.
   
10. Save the file.
    
11. Exit the file.
    

Connect to the SQL Database

1. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.
   
   Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch the Server Configuration Tool.
2. Accept any prompts about configuration conflicts by pressing OK.
   
3. Click the Database tab.
   
4. From the Database tab:
   1. Populate the Server Name.
   2. Optionally, populate an Instance Name starting with \ following the Server Name.
   3. Confirm the Server Port.
   4. Populate the Database.
   5. Select a method of Authentication.
   6. If Windows Authentication is chosen, go to Step 5. If SQL Authentication is chosen:
      1. Populate the User Name.
      2. Populate the User Name Password.
      3. Go to Step 5.
   
   Note:

   • The Server Name may be populated with either a fully qualified domain name (FQDN) or IP address.
   • If Windows authentication is selected, the active Windows account is used to connect to the Dell Data Protection database.
   • The credentials that are populated must be assigned from following Create the SQL Database in How to Configure SQL for Dell Security Management Server.
   • The examples used for Server Name, Server Port, Database, Authentication, User Name, and Password may differ in your environment.
5. Select the Configuration menu and then click Save.
   
6. Click Yes.
   
7. Select the Actions menu and then click Test Database Configuration.
   
8. Click Next.
   
9. If using SQL Authentication, click Next and then go to Step 10. If using Windows Authentication, optionally:
   1. Check Use different Windows account credentials.
   2. Populate User Name.
   3. Populate Password.
   4. Populate Domain.
   5. Click Next.
   
10. Test Connection Settings must show Passed to proceed. If it does not, return to Step 4 or use different Windows account credentials (Step 9). Click Finish.
    
    Note: The Database Initialized test is expected to give a result of Action Required during this time.
11. Select the Actions menu, and then click Initialize Database.
    
12. Click Next.
    
    Warning: Initializing the database is an irreversible process to erase and format the database. Initializing the database erases all data, including key material, user states, and administrators. It is recommended to confirm that the database pointed to in Step 6 is a new database.
13. If using SQL Authentication, click Next and then go to Step 14. If using Windows Authentication, optionally:
    1. Check Use different Windows account credentials.
    2. Populate User Name.
    3. Populate Password.
    4. Populate Domain.
    5. Click Next.
    
14. Once initialized, click Finish.
    

Configure the DM Certificate

1. Right-click the Windows start menu and then click Run.
   
2. In the Run UI, type mmc.exe, and then click OK.
   
3. Click the File menu, and then click Add/Remove Snap-in.
   
4. Click Certificates in the list of Available snap-ins and then click Add.
   
5. Click Computer account and then click Next.
   
6. With the Local computer selected, click Finish.
   
7. Click OK.
   
8. Expand Certificates (Local Computer).
   
9. Expand Personal.
   
10. Click the folder for Certificates which is contained within Personal.
    
11. In the center pane, locate the certificate to be used as a DM Cert, right-click it, select All Tasks, and then click Export.
    
    Note: Dell Technologies recommends using a third-party certificate in production environments.
12. Click Next.
    
13. Click Yes, export the private key and then click Next.
    
14. In the Certificate Export Wizard:
    1. Select Personal Information Exchange - PKCS #12 (.PFX).
    2. Check Include all certificates in the certification path if possible.
    3. Check Export all extended properties.
    4. Click Next.
    
15. Populate and confirm a password, and then click Next.
    
16. Click Browse.
    
17. Browse to a location to save the file, populate a File name to save the certificate as, and then click Save.
    
18. Click Next.
    
19. Click Finish.
    
20. Click OK.
    
21. Exit MMC.
    
22. If prompted to save console settings, click No.
    
23. In Windows Explorer, go to C:\Program Files\Dell\Enterprise Edition\Server Configuration Tool\ and double-click Credant.Configuration.exe.
    
    Note: The Dell Compatibility Server and Dell Core Server services must be shut down to launch the Server Configuration Tool. For more information, reference How to Stop and Start Services in Dell Security Management Server.
24. Select the Actions menu and then click Import DM Certificate.
    
25. Go to the path selected in Step 16 for the certificate, select it, and then click Open.
    
26. Populate the Certificate password that is chosen in Step 14 and then click OK.
    
27. Click the X to Close Server Configuration Tool.
    

Start Services

Services must be started to begin using the server. Reference How to Stop and Start Services in Dell Security Management Server for the best order to start services.