Below are the answers to the common questions asked in the event that the Policy Server goes down:
- What happens to my Endpoint Encryption Environment when the Policy Server (PS) goes down?
- Unable to log into the Policy Server Microsoft Management Console (MMC)
- Unable to add Users, change policies, create groups, perform challenge responses, unable to unfreeze frozen accounts, manage groups, and manage devices
- Unable to install new devices
- Devices will not be able to sync with the Policy Server
- Devices will not be able to perform authentication with the Policy Server
- Only locally cached users will be able to authenticate on the device
- Device will be unable to perform password changes at the preboot for users
- No new User will be able to perform an initial Authentication on any device
- Unable to perform Remote Authentication for devices locked at Challenge/Response screen
- Will the server data be lost when I'm not able to access the Management Console or the host server gets corrupted?
- All Policy Server data is stored in a SQL Server database. If the database is intact from a backup or located remotely you can restore the Policy Server by indicating the database during reinstallation.
- What is the best way to maintain connectivity for my devices?
- Consider using a high-availability setup using a load balancer. These are connected to two or more Policy Servers all connected to a single database.
- What happens if one server in my fleet of Policy Server goes down?
- The other Policy Servers will continue to operate but may experience slow response time due to the increase communication per Policy Server.
- Reference: https://docs.trendmicro.com/en-us/enterprise/endpoint-encryption-60-patch-1-installation-guide/deployment-planning_001/sample-deployments/large-enterprise-dep.aspx
- What do I do if I suspect my database has become corrupted?
- You can find the recovery procedure here:
https://success.trendmicro.com/dcx/s/solution/1059580-recovering-policyserver-when-the-database-is-corrupted?language=en_US
- You can find the recovery procedure here:
- What do I do if I need to rebuild my Policy Server?
- Identify if the Database of the Policy Server is intact or accessible.
- If Yes, secure a backup copy of the SQL Database then proceed to uninstall the current Policy Server.
- If No, Verify if there had been a recent backup copy of the SQL Database of the policy server from another location.
- Re-run the PolicyServer Installer and re-connect to the same SQL Server.
- Make sure to input the correct Primary Database username.
- Identify if the Database of the Policy Server is intact or accessible.
- How do I move the database should I need to rebuild my original Policy Server installation or reconfigure my setup?
- It is recommended to use SQL Server Management Studio (SSMS), then import the database to a new server.
- You can also migrate the server by following the here: https://success.trendmicro.com/solution/KA-0002569
