To deploy Deep Security with SQL Express, do the following steps:
- Download the SQL Express 2014 and SQL Management Studio. Since it will be installed on the same server as Deep Security, download the 64-bit version of SQL Express installers.
- Execute the SQLEXPR_x64_ENU setup file.
- Choose a temp folder for the extracted files.
- Select the New SQL Server stand-alone installation option.
- Tick I accept the license terms check box and click Next.
- Check the Use Microsoft Update to check for updates (recommended) option to prevent security vulnerabilities in SQL Express.
- Tick the Database Engine Services as the only component to be installed, and then modify the installation path for the customer environment.
- Specify the instance for SQL Express. It is recommended to create a new one for Deep Security.
- Set the Startup Type of SQL Browser Service to Automatic.
- Choose the Mixed Mode radio button and set a password for the system administrator (SA) account. Make sure to select a windows account as the SQL Server Administrator.
- Click Close to complete the SQL Express 2014 installation, and then exit the installer.
- Execute the SQLManagagementStudio_x64_ENU setup.
- Specify a temp folder for the extracted files.
- Choose the New SQL Server stand-alone installation.
- Select the Perform a new installation of SQL Server 2014 radio button.
- Check the I accept the license terms and click Next.
- Tick only the Management Tools - Basic and click Next.
- Click Close to complete the installation, and then exit the SQL Express installer.
- Open the SQL Configuration Manager.
- Expand SQL Server Network Configuration and select protocols for your SQL Express Instance (e.g. Protocols for DEEPSECURITY).
- Right-click TCP/IP and choose Enable to activate the TCP/IP Connectivity.
- Click OK to acknowledge the requirement for the service restart.
- Go to SQL Server Service.
- Right-click the SQL Server Service for your installed instance and click Restart to enable the TCP/IP configuration.
- Close the SQL Configuration Manager.
If the TCP Dynamic Ports is configured, Deep Security Manager may fail to connect to the database, follow the steps below to resolve the issue.
- Open SQL Management Studio and log in to your instance using the system admin account you created during installation.
- Right-click Databases and select New Database.
- Enter the database name and click OK.
- (Optional) You may create an SQL Service Account for Deep Security.
- Expand Security and right-click Logins, then select New Login.
- Enter the Login Name.
- Select SQL Server authentication.
- Set a password and confirm the password for the service account.
- Untick the Enforce password expiration option. This should also disable the User must change password at next login checkbox.
- From the Default Database drop-down, select the database name you created in Step 3.
- Click User Mapping and select the database created from the previous steps.
- Tick the db_owner role for the database.
- Click OK and close the SQL Configuration Manager.
- Run the setup file and select a language.
- On the Welcome page of the Deep Security Manager Setup Wizard, click Next.
- Accept the license agreement and click Next.
- Specify the installation path and click Next.
- Configure the database server.
- Select Microsoft SQL Server.
- Type a host name for the SQL Express.
- Choose TCP as the transport.
- Specify a username and password for the database.
- Click Advanced and specify the Instance name if you are using a Named Instance of SQL Express.
- Click Start Readiness Check to assess the system where you are installing. The setup wizard will display a warning on using SQL Express database.
- Click Install Deep Security Manager.
- Enter the Activation Code and click Next.
- Verify the Manager address and port details, and then click Next.
- Provide the Username and Password for the web console, and then click Next.
- Make sure the Create Scheduled Task to regularly check for Security Updates checkbox is enabled.
- Confirm to install the relay-enabled agent and click Next.
- Make sure the option Enable Trend Micro Smart Feedback is ticked, and then click Next.
- Click Install to proceed with the Deep Security Manager installation.
After the installation, note that the DSM will show a notification stating that the SQL Express database is not supported for production deployments.