[KB7813] Enable encrypted connection between ESET PROTECT On-Prem Server and MS SQL database

Issue

• You are running ESET PROTECT On-Prem Server and MS SQL database on separate computers
• Resolve "SQL Server Error: 18" when connecting database during ESET PROTECT On-Prem

Solution

1. Prerequisites
2. Install ODBC Driver
3. Troubleshooting

I. Prerequisites

• ESET PROTECT On-Prem Server and MS SQL Server installed on separate Windows computers.

• TLS 1.2 enabled on a supported MS SQL Server

II. Install ODBC Driver

1. Download and install Microsoft ODBC Driver for SQL Server version 17 and later.

2. Click Start → Services, right-click ESET PROTECT Server service and select Stop.

3. Navigate to the following directory:

4. C:\ProgramData\ESET\RemoteAdministrator\Server\EraServerApplicationData\Configuration\

5. Edit the startupconfiguration.ini file:

   Create a backup

   Create a backup of the startupconfiguration.ini file before you edit it.

   1. Replace SQL Server with the name of the MS ODBC Driver, listed in Start → ODBC Data Sources → Drivers tab.
       
   2. Add the following code to the end of the file:
      
      Encrypt=yes;TrustServerCertificate=yes;

Below is an example of startupconfiguration.ini (replace the parts highlighted in yellow with your values):

DatabaseType=MSSQLOdbc

DatabaseConnectionString=Driver={ODBC Driver 17 for SQL Server};Server=10.20.30.40,1433;Uid=era_user;Pwd={SecretPassword};CharSet=utf8;Database=era_db;Encrypt=yes;TrustServerCertificate=yes;

5. Save the startupconfiguration.ini file.

6. Click Start → Services, right-click ESET PROTECT Server service → select Start.

7. If you are able to log in to the ESET PROTECT Web Console, the encrypted connection to the database works properly. If you are not able to log in to the ESET PROTECT On-Prem Web Console, follow the troubleshooting steps below to revert the configuration changes.

III. Troubleshooting

1. Click Start → Services, right-click ESET PROTECT Server service and select Stop.

2. Navigate to the following directory:

   C:\ProgramData\ESET\RemoteAdministrator\Server\EraServerApplicationData\Configuration\

3. Replace the startupconfiguration.ini file with the backup file (created in step 4 above).

4. Click Start → Services, right-click ESET PROTECT Server service and select Start.