Page History

Now that the IDERA Cluster Configuration Console is installed, you need to add the SQLcompliance SQL Compliance Manager Agent to the clustered instance that is to be audited.

Use the following checklist to help you deploy and configure SQL Compliance Manager in a clustered environment.

Image Added	Follow these steps ...
Image Added	Install SQL Compliance Manager.
Image Added	Identify which virtual SQL Server instances you want to audit.
Image Added	Identify which cluster nodes host each virtual SQL Server instance. Make sure that you identify the currently active node as well as any passive nodes in the same cluster.
Image Added	On each cluster node, open port 5200 for SQL Compliance Manager Agent communication.
Image Added	For each cluster node, identify the folder you want to use for the SQL Compliance Manager Agent trace directory. If a cluster node hosts more than one virtual SQL Server instance, identify a trace directory for each additional instance you want to audit.
Image Added	For each cluster node, identify the account you want to use for the SQL Compliance Manager Agent Service. Verify that this account can access the computer where you installed the Collection Server. Also make sure that this account belongs to the Administrators group on each node. Review the SQL Compliance Manager Agent Service permission requirements.
Image Added	Deploy the SQL Compliance Manager Agent to each cluster node using the Cluster Configuration setup program.
Image Added	Add the SQL Compliance Manager Agent service on each cluster node using the Cluster Configuration Console.
Image Added	Register the SQL Compliance Manager Agent as a generic service using the Microsoft Cluster Administrator tool.
Image Added	Register each virtual SQL Server instance with SQL Compliance Manager using the Management Console. Note that you must choose manual deployment for the SQL Compliance Manager Agent.
Image Added	Specify the SQL Server events you want to audit on each registered virtual SQL Server instance using the Management Console.
Image Added	Run SQL Compliance Manager. Use report cards and the Audit Events tab to ensure you are auditing the correct SQL Server events.

1. 

Anchor
addagent addagent

Add the SQL Compliance Manager Agent

1. Once the Cluster Configuration Console launches, click Add Service.
2. On the General dialog window, specify the name of the clustered instance to be audited by IDERA SQL Compliance Manager Manager and click Next.
3. On the Collection Server dialog window, specify the name of the server hosting the SQLcompliance Collection Service and click Next.
   
4. On the SQLcompliance Agent Trace Directory dialog window, specify the path on which trace files will temporarily reside before being transferred to the SQLcompliance Collection Service. 
   The path specified should be on a drive that is a part of the same resource group as the SQL Server instance to be audited.
   

5. On the CLR Trigger Location dialog window, specify the path on which trigger assembly files will reside. The path specified should be on a drive that is a part of the same resource group as the SQL Server instance to be audited.
   Click Next.

   Note
   Ensure the Agent Agent Trace directory and the CLR Trigger location specified exist by creating the folder structure manually through Windows Explorer.

6. Review the configuration and click Finish.  
   
7. The The  IDERA Cluster Configuration ConsoleConsole  displays a confirmation message stating that you have successfully added the SQLcompliance SQL Compliance Manager Agent. 
   Click OK. 
   

Once the SQLcompliance Agent is added, you need to proceed to register the Collection Service and the Agent as clustered resources. 

2.

Anchor
registeragent registeragent

Register the SQL Compliance Manager Agent as a clustered service

Registering the SQL Compliance Manager Agent service with Microsoft Failover Cluster Manager allows the Microsoft Cluster Service to manage the SQL Compliance Manager Agent service in failover situations. This configuration ensures that auditing will continue during a failover and no audit data is lost. 

1. Log onto the active cluster node using an administrator account and launch the Microsoft Failover Cluster Manager. 
2. Right-click the role created for the clustered instance, point to Add a Resource, and select Generic Service.
   
   Image Added
   
   
3. On the Select Service dialog window, select the SQL Compliance Manager Agent service created previously, continue following the wizard, and click Finish.
   
   Image Added
   
   
4. The Failover Cluster Manager displays the new resource in the resources tab. Right-click the new resource and select Properties.
   
   Image Added
   
   
5. In the General tab, specify the Service name as the Agent Service name found in the SQLcompliance Agent details.
   
   Image Added
6. Clear the Startup parameters.
7. Go to the Dependencies tab and add the following dependencies:
   1. SQL Network Name: name of the cluster hosting the SQL instance to be audited.  
   2. Cluster Disk(s): the disk(s) on which the agent trace directory and the CLR trigger assemblies reside. 
   3. SQL Server: the SQL Server instance to be audited by SQL Compliance Manager.
      
      
   Image Added
8. Once the dependencies are configured, click Apply.
9. Return to the General tab, check the Use Network Name for computer name box and click Apply. 

10. Go to the Registry Replication tab. 

    Note
    The Registry Replication tab is not available in Windows Server 2012. If you are using Windows Server 2012, you must use the "Add-ClusterCheckpoint" PowerShell cmdlet to add the necessary setting. For more information, see Newtablink alias Add ClusterCheckPoint url https://docs.microsoft.com/es-es/previous-versions/windows/powershell-scripting/hh847255(v=wps.620) .

    Add a specific registry path. To obtain the correct path, go to the IDERA Cluster Configuration Console and copy the Replicated Registry Key from the SQLcompliance Agent details.    
    Click OK.

11. On the Properties window, click Apply to save the changes, and click OK to return to the Resources tab. 

12. Right-click the SQLcompliance Agent resource and click Bring Online. 
    
    Image Added
    

After successfully deploy the SQL Compliance Manager Agent, you can start auditing your virtual SQL Server instances.