Implementation Guide › Changing Communication Encryption Methods › SSL, Authentication, and Certificates › Modify the Microsoft SQL Server Database Connectivity Settings

Modify the Microsoft SQL Server Database Connectivity Settings

When you install the Enterprise Management Server on a Microsoft SQL server, the authentication mode is set to SQL Server Authentication. You can modify the database authentication mode after the installation is complete to work in Windows Authentication mode.

When the SQL Server is working in Windows Authentication mode, the Enterprise Management Server uses the JBoss service account to administer the central database on the SQL Server. If you want to use a different JBoss service account, you change the account on the SQL Server database instance.

Important! To set the SQL Server to work in Windows Authentication mode requires you to install the SQL Server JDBC 4.0 driver.

Important! Verify that you assign the user you specify in the Microsoft SQL Server the dbowner database role.

To modify the SQL server database connectivity settings, do the following:

1. If you have not already done so, download and extract the SQL Server JDBC 4.0 driver files into a temporary folder.
2. Stop JBoss if it is running. Do one of the following:
   • Interrupt the JBoss application server window (Ctrl+C).
   • Stop the JBoss service from the Services panel.
3. Navigate to the JBoss lib directory. The directory is located under:

   JBossInstallDir/server/default/lib
   

4. Copy the file sqljdbc4.jar from the temporary directory to the JBoss lib directory.

   A message appears informing you that a file by that name exists.

5. Select to overwrite the existing file with the new file.

   The new file is placed in the directory.

6. Navigate to the JBoss bin directory. By default, this directory is located at:

   JBossInstallDir/bin
   

7. Copy the file sqljdbc_auth.dll (version x64) from the temporary directory to the JBoss bin directory.

   The new file is placed in the directory.

8. Navigate to the JBoss deploy directory. By default, this directory is located at:

   JBoss-directory/server/default/deploy
   

9. Open the following files:
   • imquartzdb-ds.xml
   • imauditdb-ds.xml
   • imtaskpersistencedb-ds.xml
   • imworkflowdb-ds.xml
   • objectstore-ds.xml
   • reportsnapshot-ds.xml
10. In each file, locate the <connection-url> tag and add the following code after the DatabaseName= parameter:

    ;integratedSecurity=true
    

11. From each file, delete the <security-domain> tag.
12. Save the files and restart JBoss.

    CA ControlMinder Enterprise Management can now work with the SQL server in Windows Authentication mode.

Example: Modifying the JBoss Configuration Files to Enable Windows Authentication Mode

This example shows you how to modify one of the JBoss configuration files to switch from SQL Authentication mode to Windows Authentication mode. In this example, the administrator modifies the file objectstore-ds.xml and specifies that the connection mode is Windows Authentication (;integratedSecurity=true). Next, the administrator removes the <security-domain> tag from the file as it is applicable only to SQL Authentication mode.

The following extract displays the objectsstore-ds.xml file after the administrator modified the connection settings:

<connection-url>jdbc:sqlserver://example.comp.com:1433;
selectMethod=cursor;DatabaseName=ACDB;
integratedSecurity=true</connection-url>