SQL 2005 Express Server Install for Symantec Endpoint Encryption

Products

• Endpoint Encryption

Issue/Introduction

**PLEASE NOTE** This document is a simplified version of the Installation instructions contained in Chapters 6 and 2 of the SEE-FD Installation Guide (provided with the software) along with a few tips. This information is provided outlines only one way of performing the installation in order to simplify the process as much as possible. This is not the definitive guide. Please consult the SEE Installation guide for more the complete and official installation process.**

Resolution

 

Symantec Endpoint Encryption Management Server should be installed on a dedicated server running Windows 2003.

If you are upgrading from 6.x to 7.x can please consult the following document:
http://www.symantec.com/business/support/index?page=content&id=TECH131434&locale=en_US

Minimum Pre-requisites:
Active Directory User Accounts:

1. A Standard User account for clients to connect to IIS - e.g. "seeiis"
2. A Domain Administrator** account for Active Directory synchronization - e.g."seeadsync" (only required if Active Directory synchronization is enabled).
3. An Account with local administrator privileges for the installation.

**This account must have domain administrator privileges in the same site and/or domain that the SEE Management Server has been joined to. Note that if your corporate security policy prohibits the use of an administrator account, a non-administrator account can be used, provided that it has been granted read permissions to the Active Directory deleted objects container. See “Extending Domain User Rights with DSACLS” on page 80 of the SEE Installation manual.

MS-SQL Accounts:

1.    Mixed-mode superadmin "sa" account (or can specify local Windows Admin account).

2.    SEE db access account -e.g. "seedbadmin", created in the database during installation.

SEEMS server pre-installation requirements:

1. Install IIS
2. Enable ASP.NET
3. Install .net 2.0 or greater.

 

Install Procedure:

Install MS SQL 2005 Express.

1. Accept the license agreement.
2. Click "Install" to install the Prerequisites.
   1. Installs the SQL Native Client and SQL Server Support files for SQL server 2005.
3.  Click "Next".
4.  You will see the "Welcome to the Microsoft SQL Server Installation Wizard".
5. Click "Next" to run the System Configuration Check.  You should see a green check mark and Success.  Otherwise, correct what ever is wrong and restart the install.
6. Click "Next".
7. The install begins.
8. Enter the your info into the Name and Company fields and click "Next".
9. Click the drop down for Client Componets and select "Entire feature will be installed to local hard drive".
10. If you need to changed the location of the install click "Browse" button and select install location.  Click "OK" when done.
11. Click "Next" to continue install.
12. Select "Mixed Mode (Windows Authentication and SQL Server Authentication)" This is required for SEE.
13. Enter the password you will use for the sa user.  (This is the SQL server administrator use account.)
14. Click "Next".
15. Uncheck "Enable User Instances".
16. Error and Usage Report Settings:  Configure this any way you would like.  Click "Next" to continue install.
17. Click "Install" to begin installation.
18. Click "Next" if everything returns with a green check mark next to it.
19. Click "Finish"

 

Install SQL Server 2005 Management Studio Express:

1. Welcome to the Install Wizard for Microsoft SQL Server Management Studio Express.  Click "Next".
2. Accept the license agreement and click "Next".
3. Enter the your info into the Name and Company fields and click "Next".
4. On Feature Selection screen click "Next" as you cannot change the default installation location.
5. Click "Install" to begin installation.
6. Click "Finish" to complete the install.

 

Configuration of SQL 2005 Express Server:

1. Click "Start -> All Programs -> Microsoft SQL Server 2005 -> Configuration Tool -> SQL Server Configuration Manager".
2. Expand SQL Swerver 2005 Network Configuration and click Protocals for SQLEXPRESS.
3. Enable Named Pipes and TCP/IP.
   1. Right click each and select "Enable".
4. Click "Start -> All Programs -> Microsoft SQL Server 2005 -> Configuration Tool -> SQL Server Surface Area Configuration".
5. Click "Surface Area Configuration for Services and Connections" to access remote connection configurations.
6. Click "Remote Connections".
7. If "Using both TCP/IP and named pipes" isn't selected click it and click "Apply".
8. Click "OK".

 

Install Symantec Encryption Management Server:

1. Locate the "Symantec Endpoint Encryption Management Server.msi" and double click it to start the install.
2. Click "Next" at the "Welcome to the Install Wizard for Symantec Endpoint Encryption Management Server" screen.
3. Accept the license agreement and click "Next".
4. On the Database Location and Credentials screen click "Browse..." and select (local)/SQLEXPRESS and click "OK".
5. If your operating on a customer port click the check box for "My database server operates on a custom port number" and enter the port number.
6. For "Connect Using" leave this as windows authentication.
7. Click "Next".
8. If you entered everything correctly you will see the Database Communications screen.
9. Select "Create a new database".
10. Enter a database name.  You can use the default name if you would like.
11. Enter a user name such as "seedbadmin" or something of your choosing.  Just make sure to record it and its password.
12. Click "Next".
13. Click "Next" unless you need to customize your SEEMS database location.  Unsure?  Leave alone.
14. Click "Next" to accept the default install location or "Change" to modify this.
15. Click "Install".

Install Group Policy Management Console snap-in ("gpmc.msi" available from Microsoft) to allow policy administration from the SEEMS console.