Traps database migration to another SQL server

[Douglas_Zan]

Is that possible to migrate an existing database from one SQL server to another SQL server?

What will be the process?

[efrancis]

Yes it is possible. Here is a step by step (assuming install was default options):

Database migration:

1. Stop all ESM services on CORE and CONSOLE:

• msc
  • Endpoint Security Manager
  • ESM Console Upload Service
  • ESM Core Upload Service
  • World Wide Web Publishing Services

1. Backup Database (Take note of Database owners, of Traps DB)
2. Export Database
3. Move Database
4. Import Database
5. Modify Hibernate file, for Core and Console:
   • Open Wordpad.exe as an Administrator
   • FileàOpen Hibernate.cfg.xml (You can choose to save a copy of this file to a secondary location for back, incase troubleshooting is needed)
     • Folderpath: (default locations)

Core: Program Files\Palo Alto Networks\Endpoint Security Manager\Server

Console:Program Files\Palo Alto Networks\Endpoint Security Manager\Web\bin

• Modify the entry “Data Source=” with the new server name and sql instance

• Save file in its original location

1. Validate that DB owners (identical to previous setup)
2. Start Services:
   • msc:
     • Endpoint Security Manager
     • ESM Console Upload Service
     • ESM Core Upload Service

***If no errors starting services, Start WWW Publishing services***

1. Validate that Endpoint can check into ESM server.

Things to consider:

Every CORE and CONSOLE has its own Hibernate file, and must be updated.

[Douglas_Zan]

Thanks efrancis for the reply.

What about the database backup and restore process? Just backup and restore it to the new server? Is the regular process enough, or there are some details to take into account?

[efrancis]

From my experience, a Full backup was done on old SQL instance, moved to new, and restored. 

[rjvanbatenburg]

I have an issue with hibernate.cfg. We use 2 Traps servers; one in server vlan, one in DMZ. I moved the databases, configured a new connection to inside Traps server. My Traps server in DMZ connects through SQL account (and TrapsDB is on instance SERVERNAME\INSTANCE_NAME, listening on port 1433

firewall between Traps in DMZ and SQL server only allows port 1433.

I can connect through odbcad32, I tried all kinds of writing down SQL  destination, but I cant start ESM service (in eventvwr: error in hibernate.cfg