8.10.4 Server upgrade error due to a critical database script "add_server_role"

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

The following popup error is displayed during the upgrade process:

A critical database script "add_server_role" needed to install the App Control Server failed with an error.

Once the "Ok" button is selected the upgrade completes. At this point the server was partially upgraded, the database was successfully upgraded, but the web console and some registry values were only partially updated.

Environment

• App Control Server 8.10.2-8.10.4

Cause

The error is displayed when the SQL Server doesn't have a login principal with name "SA" configured.
 

Resolution

To resolve this please uninstall and re-install the 8.10.4 server version:

1. Log in to the server with the App Control Service Account
   • Make sure the service account has the correct SQL permissions 
   • If an Agent is installed, please temporarily disable Tamper Protection
2. Open Control Panel > Programs > Uninstall Carbon Black App Control Server
3. Run the 8.10.4 App Control Server Installer again > Don't accept the conditions just yet
4. Navigate to the following folder: C:\Users\<AppCServiceAcct>\AppData\Local\Temp
5. Order by date modified and find the most recent folders
6. Search for the following file: 

   C:\Users\<AppCService>\AppData\Local\Temp\{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXX}\{ECD2D524-718A-4A49-8026-337428C013EB}\add_server_role.sql

7. Open the file "add_server_role.sql" in Notepad and find the following file:

   CREATE SERVER ROLE [AppCWebServer] AUTHORIZATION SA;

8. Update the line to: 

   CREATE SERVER ROLE [AppCWebServer];

9. Save the changes to "add_server_role.sql"
10. Continue with the server setup wizard and App Control will install successfully afterwards

Additional Information

There is a bug for this to have it resolved in the next release.