Recommended procedure to migrate or move an ePolicy Orchestrator database to a new SQL Server
Last Modified: 2023-07-11 09:18:41 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
After December 1, 2024, please log in to the Thrive Portal for support, knowledge articles, tools, and downloads. For information about using the Thrive Portal, view the Trellix Thrive Portal User Guide.
Recommended procedure to migrate or move an ePolicy Orchestrator database to a new SQL Server
Technical Articles ID:
KB68427
Last Modified: 2023-07-11 09:18:41 Etc/GMT Environment
ePolicy Orchestrator (ePO) 5.x Microsoft SQL Servers - all supported versions For details of ePO- and SQL-supported environments, see KB51569 - Supported platforms for ePolicy Orchestrator. Summary
This article describes the recommended procedure to move the ePO database from one SQL Server to another. IMPORTANT: Before you begin the process explained in this article, you must back up your ePO server. See the following KB articles for more information: NOTES: The account used by ePO to access SQL must have the minimum needed permissions on the new server for ePO to function correctly. See KB75766 - SQL permissions needed to install and use ePolicy Orchestrator for details. IMPORTANT: In ePO 5.10 and later, threat event information is split into its own database. Carry out the actions on both the main database (default name Overview To move the ePO database, follow the steps below in the order that they're listed:
1 – Stop ePO services: Before you make any changes, you must stop ePO services to prevent anything from accessing the database:
McAfee ePolicy Orchestrator Event Parser McAfee ePolicy Orchestrator Server If you have any additional Agent Handlers, stop the following services on all Agent Handlers: McAfee ePolicy Orchestrator Server 2 – Move the database:
3 – Configure ePO and verify connectivity:
4 – Start ePO services:
5 – Extra steps for extra Agent Handlers: If you have more Agent Handlers, you must provide each one with the new SQL Server details by rerunning the initial setup wizard. Perform the following steps on each Agent Handler:
You can safely delete the database copy from the old server in the following scenarios:
6 – Optional: Remove service dependencies: IMPORTANT: You need to perform this step only if the ePO database was previously hosted on the ePO server itself. That is, the SQL Server was installed on the ePO server computer alongside ePO. If you moved the database from one remote SQL Server to another, you can safely ignore this step. If the ePO database was hosted on the ePO server, ePO services have dependencies on the SQL Server services. These dependencies mean that you're unable to stop the SQL services or uninstall SQL without affecting ePO. You must remove the dependencies from the services by editing the registry: CAUTION: This article contains information about opening or modifying the registry.
Affected ProductsLanguages:This article is available in the following languages: |
|