Changing the SQL DB connection from Windows Authentication to Local SQL Account Post Install

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Steps to change the SQL DB connection from using Windows Authentication to using local SQL Account (e.g. sa) post installation of App Control

Environment

• App Control Server: All Supported Versions

Resolution

1. If an App C agent is on the system please disable it temporary per this KB
2. Stop the App Control Server and Reporter services
3. Copy and backup the following files to another folder:

   C:\Program Files (x86)\Bit9\Parity Server\WSProxy.config

   C:\Program Files (x86)\Bit9\Parity Server\Reporter\WSProxy.config

   C:\Program Files (x86)\Bit9\Parity Server\Reporter\ParityReporter.exe.Config

   C:\Program Files (x86)\Bit9\Parity Console\API\Web.config

   C:\Program Files (x86)\Bit9\Parity Console\WebUI\html\Dashboard\Web.config

   C:\Program Files (x86)\Bit9\Parity Console\WebUI\include\DataObject.ini

   Optional: C:\Program Files (x86)\Bit9\Integrations\CheckPoint\bin\bit9.dsn

   Optional: C:\Program Files (x86)\Bit9\Integrations\FireEye\listener\Web.config

4. Start with editing the following 3 files:

   C:\Program Files (x86)\Bit9\Parity Server\WSProxy.config

   C:\Program Files (x86)\Bit9\Parity Server\Reporter\WSProxy.config

   C:\Program Files (x86)\Bit9\Parity Server\Reporter\ParityReporter.exe.config

   • Change the following line:

     <add key="ConnectionString" value="Integrated Security=SSPI; server=SQLSERVER\SQLINSTANCE; database=das" />

   • For SQL authentication the line will look like this:

     <add key="ConnectionString" value="Trusted_Connection=No; uid=userhere; pwd=passwordhere; server=SQLSERVER\SQLINSTANCE; database=das" />

   • For example:

     <add key="ConnectionString" value="Trusted_Connection=No; uid=sa; pwd=Password1234; server=CBSQL01\MSSQLSERVER; database=das" />

5. Edit these 2 files:

   C:\Program Files (x86)\Bit9\Parity Console\API\Web.config

   C:\Program Files (x86)\Bit9\Parity Console\WebUI\html\Dashboard\Web.config

   • Change the following line:

     <add name="ConnectionString" connectionString="Integrated Security=SSPI; server=SQLSERVER\SQLINSTANCE; database=das;" providerName="System.Data.SqlClient" />

   • To look like this:

     <add name="ConnectionString" connectionString="Trusted_Connection=No; uid=userhere; pwd=passwordhere; server=SQLSERVER\SQLINSTANCE; database=das;" providerName="System.Data.SqlClient"/>

6. Edit this 1 file:

   C:\Program Files (x86)\Bit9\Parity Console\WebUI\include\DataObject.ini

   • Change the following line:

     database_das     ="sqlsrv://SQLSERVER\SQLINSTANCE/das"

   • To look like this:

     database_das     ="sqlsrv://user:password@SQLSERVER\SQLINSTANCE/das"

   • For example:

     database_das     ="sqlsrv://sa:{Password1234}@CBSQL01\MSSQLSERVER/das"

7. Update the content of these 2 files:

   C:\Program Files (x86)\Bit9\Parity Server\shepherd.dsn C:\Program Files (x86)\Bit9\Parity Server\install.dsn

   • Content should look like this:

   [ODBC]
   DRIVER=SQL Server Native Client 11.0
   UID="loginhere"
   Trusted_Connection=No
   DATABASE=das
   SERVER=SQLSERVER\SQLINSTANCE
   pwd="passwordhere"

8. Start the App C Services