[KB7831] Use Windows Authentication for connection to SQL Server database in ESET PROTECT On-Prem

Issue

  • Use Windows Authentication to log in to the Microsoft SQL Server ESET PROTECT On-Prem database
  • Set a Windows user account for the ESET PROTECT Server service to authenticate to Microsoft SQL Server
  • Change the authentication mode for the Microsoft SQL Server ESET PROTECT On-Prem database; selecting Mixed mode authentication (SQL Server authentication and Windows authentication) is required during the Microsoft SQL Server installation

Solution

Windows authentication can disable upgrades

If you use the Windows authentication mode to connect the database with the Windows user account, you cannot upgrade the ESET PROTECT Server using the Components Upgrade task.

We recommend that you use a dedicated database user to access the database. Ensure that access rights are set for the user to access the necessary directories.

  1. On the ESET PROTECT Server machine, navigate to:

    C:\ProgramData\ESET\RemoteAdministrator\Server\EraServerApplicationData\Configuration\
  2. Edit and save the StartupConfiguration.ini file so that it contains the following:

    DatabaseType=MSSQLOdbc
    
    DatabaseConnectionString=Driver={SQL Server Native Client 11.0};Server=.\ERASQL;Database=era_db;Trusted_Connection=yes;
    Verify the Microsoft SQL Server instance and database name

    The example above contains the default SQL Server instance name (ERASQL) and database name (era_db) created when Microsoft SQL Server Express is installed together with the ESET PROTECT Server through the ESET PROTECT On-Prem All-in-one installer.

    If your Microsoft SQL Server instance or database name differs from these values, replace them with the actual instance and database name.

  3. Run the Services application: in the search box on the taskbar, type services and click Services.

  4. In the list of services, right-click ESET PROTECT Server and select Properties.

  5. Click Log OnBrowse.

  6. Below Enter the object name to select, type the name of the Windows user account that the ESET PROTECT Service will run under (used for Windows Authentication to Microsoft SQL Server) and click OK.

  7. In the Password and Confirm password fields, type the password of the selected Windows user account and click OK.

  8. Return to the Services window and right-click ESET PROTECT Server. Select Restart.

  9. Optionally, change the Microsoft SQL Server authentication mode to Windows Authentication mode; this will disable Microsoft SQL Server authentication.