Upgrading from EMA v1.12.2.0 to Intel® EMA v1.13.1.0

[Hideo]

Hi.

What is the procedure for vergen up from Intel® EMA v1.12.2.0 to Intel® EMA v1.13.1.0?

The Intel® Endpoint Management Assistant (Intel® EMA) Cloud Start Tool for Azure* (Advanced Template) was used to install Intel® EMA.

The download URL is as follow

Intel® Endpoint Management Assistant (Intel® EMA) Cloud Start Tool for Azure*

The version of Intel® EMA in the template was v1.12.2.0.
Therefore, we attempted to upgrade the version.

The method implemented is as follows.

・Uninstalled Intel® EMA v1.12.2.0.
・Then reinstalled Intel® EMA v1.13.1.0.
　*AzureSQL was used for SQL at that time.

Intel® EMA could be installed, but I could not remote control the agent terminal from Intel® EMA.

Therefore,
What is the procedure for a regular upgrade from Intel® EMA v1.12.2.0 to Intel® EMA v1.13.1.0.

We are waiting for your reply.
Best regards.

Hideo.

[Hideo]

Hello.

arun_intel

How about after that?

We look forward to your reply.

Best regards.

Hideo.

[Hideo]

Hello.

arun_intel

How about after that?

We look forward to your reply.

Best regards.

Hideo.

[Arun_Intel1]

Hello Hideo,

Greetings!

Please ensure that (if using Windows Credentials) have you logged into the EMA server's OS with the same credentials necessary to access the Azure SQL. Otherwise, you'll just need to confirm the credentials are properly set in the SQL section of the EMA installer/update (using the Advanced section of the installer).

Best Regards

Arun_Intel

[Hideo]

Hello.

arun_intel

＞Please ensure that (if using Windows Credentials) have you logged into the EMA server's OS with the same credentials necessary to ＞access the Azure SQL. Otherwise, you'll just need to confirm the credentials are properly set in the SQL section of the EMA
＞installer/update (using the Advanced section of the installer).

I have received the above response, but how do I verify that the credentials are properly set in the SQL section of the EMA installer/update (using the Advanced section of the installer)?

Currently, I get a database connection error as shown in the image below.

How can I then verify that the credentials are properly set in the SQL section of the EMA installer/update (using the Advanced section of the installer)?

We look forward to your reply.

Best regards.

Hideo.

[Hideo]

Hello.

arun_intel

How about after that?

We look forward to your reply.

Best regards.

Hideo.

[Arun_Intel1]

Hi Hideo,

Greetings!

Please go to Microsoft SQL server management studio and click on Connect on the left top corner and select the database engine on the connect drop box and check if the user id and password is working, or is it the Microsoft authenticator that is taken by the database.

And you may check if the user id and the password that you are entering is correct or is the system taking the Microsoft default authenticator password.

Best Regards

Arun_Intel

[Hideo]

Hello.

arun_intel

＞Please go to Microsoft SQL server management studio and click on Connect on the left top corner and select the database engine on ＞the connect drop box and check if the user id and password is working, or is it the Microsoft authenticator that is taken by the database.

We have done the above and the ID and password worked. The authentication method is SQL Server authentication.

We look forward to your reply.

Best regards.

Hideo.

[Hideo]

Hello.

arun_intel

How about after that?

We look forward to your reply.

Best regards.

Hideo.

[Arun_Intel1]

Hello Hideo,

Greetings!

Before installing Intel® EMA, we should ensure that the SQL account used in the Intel® EMA SQL connection string to create the database has sysadmin rights (to create new account for IIS default application pool identity) and has at least dbcreator permission, which allows it to create, modify, and delete any database.

 Also, this account must have the database level roles db_owner, db_datawriter, and db_datareader. The “sysadmin” right is needed in order to create the new user “IIS APPPOOL\\DefaultAppPool\” for the SQL server (if it does not exist). If it exists already or you do not use that account for the IIS application pool of the Intel® EMA website, then the role needed during installation is “dbcreator”, to create the Intel® EMA database. Keep in mind that the “sysadmin” or “dbcreator” rights are only needed during Intel® EMA installation. Lastly you must grant permission for "SUBSCRIBE QUERY NOTIFICATIONS" to the user of Intel® EMA database. 

If you do not grant "sysadmin" rights to the SQL connection account, the installation will still complete successfully, but with errors related to not being able to create the IIS APPPOOL user mentioned above. If you did not grant "sysadmin" rights to the SQL connection account, you MUST manually create this user on the SQL server after the installation completes in order for Intel® EMA to work. 

Kindly refer to the same on the session 1.3.3 on the EMA installation guide given below:

https://www.intel.com/content/dam/support/us/en/documents/software/manageability-products/intel-ema-server-installation-and-maintenance-guide.pdf

We wanted check, as a work around if you can recover EMA from the backup. Go to the Microsoft SQL management Studio, and check for the database roles of your account and confirm the same.

Best Regards

Arun_Intel

[Arun_Intel1]

Hi Hideo,

Greetings!

This is the first follow up, please confirm if you were able to execute the given plan of action, if yes, please share your observation.

Best Regards

Arun_Intel

[Hideo]

Hello.

arun_intel

We have verified that we can access AzureSQL using Microsoft SQL Management Studio.

We have also confirmed that we can access AzureSQL using your company's
Intel Endpoint Management Assistant (Intel EMA) Cloud Start Tool for Azure's Advanced Template
(see URL below and red box in image), when built, the AzureSQL database level roles,db_owner, db_datawriter, and db_datareader, were also created when building using the Advanced Template for Azure Start Tool for Azure (see URL below and red box in the image).

https://www.intel.com/content/www/us/en/download/19738/intel-endpoint-management-assistant-intel-ema-cloud-start-tool-for-azure. html

However, the presence of the sysadmin and dbcreator permissions could not be verified in Microsoft SQL Management Studio.

Your company provides Intel Endpoint Management Assistant (Intel EMA) Cloud Start Tool for Azure Advanced Template,
but when I built the IntelEMA server, the sysadmin and Is there a place to set sysadmin and dbcreator privileges when building the server?

If so, can you please tell us how to set up sysadmin and dbcreator privileges using the Advanced Template in the Intel Endpoint Management Assistant (Intel EMA) Cloud Start Tool for Azure, or provide the URL and page number of the official documentation?

We look forward to your reply.

Best regards.

Hideo.

[Arun_Intel1]

Hi Hideo,

Greetings!

Thank you for waiting for our answer.

We are actively reviewing and trying to resolve the issue.

If we are not wrong the EMA configuration is working on EMA version v1.12.2.0. Please perform the troubleshooting below:

Open the EMA installer as Administrator

Click on File and select Advanced Mode

Open the Database tab and select Update Database

Try accessing the current EMA database.

 

SQL account, password, EMA Database name, and SQL Server name were configured previously according to the Intel® Endpoint Management Assistant (Intel® EMA) Cloud-Start Tool for Establishing Intel® EMA in Microsoft Azure Cloud guide on page 12.

https://downloadmirror.intel.com/30201/IntelEMA%20Cloud%20Start%20Tool%20for%20Azure%203.0%20-%20%20Quick-Start%20Guide.pdf

We look forward to hearing back from you.

Best Regards

Arun_Intel

[Arun_Intel1]

Hello Hideo,

Greetings!

This is a first follow up, please confirm if you were able to execute the given plan of action, if yes, kindly share your observation.

Best Regards

Arun_Intel

[Hideo]

Hello.

arun_intel

＞Open the EMA installer as Administrator

＞Click on File and select Advanced Mode

＞Open the Database tab and select Update Database

＞Try accessing the current EMA database.

The above was implemented.

When I did so, an error was output as shown in the image below.
Please let me know the procedure to solve this error or a reference document that shows the solution procedure.

For reference, we have confirmed that SSMS can be accessed when an error is output, so we have attached an image.

We look forward to your reply.

Best regards.

Hideo.

[vij1]

Hello Hideo,

Greetings!

Could you please add the user to the EMA database with SYSADMIN rights? This will ensure they have the necessary permissions to proceed with their tasks.

For your reference, I have attached images that should assist with the process.

Best regards,

Vijay N

[Hideo]

Hello.

arun_intel

The attached image is not displayed.
Can you please make it viewable?

We look forward to your reply.

Best regards.

Hideo.

[Arun_Intel1]

Hello Hideo,

Greetings!

Could you please add the user to the EMA database with SYSADMIN rights? This will ensure they have the necessary permissions to proceed with their tasks.

For your reference, I have attached images that should assist with the process.

Best Regards

Arun_Intel

[tHideo]

Hello.

arun_intel

I have reviewed the attached image you provided and also reviewed your request, but I would like to add a user with sysadmin privileges to the EMA database, but I do not know how to do this.

I have checked the image you provided, but where can I find the reference? Also, I viewed the image, but which roles have sysadmin privileges?
I browsed the attached image, which rolls (db_accessadmin,db_backupoperator,db_datareader) have sysadmin privileges?

I ask again, can you please tell us the procedure to add a user with sysadmin privileges to the EMA database?If possible, it would be helpful if an image is attached.

I have attached an image of the same location as the image you pasted.

We look forward to your reply.

Best regards.

Hideo.

[Arun_Intel1]

Hi Hideo,

Greetings!

Where can I find the reference to add a SQL user?

You may have to get in touch with Microsft SQL support.

SYSAdmin refers to DB owner, The person who installed SQL software and created the EMA database needs to create the second account.

Or the person who has rights, has to right click on the users and create a User.

Best Regards

Arun_Intel

[Arun_Intel1]

Hi Hideo,

Greetings!

Please confirm if you were able to contact the Microsoft for the SQL issue, kindly share your observation.

Best_Intel

Arun_Intel

[Hideo]

Hello.

arun_intel

We are using the template in the following image provided by your company, and this template uses AzureSQL.

I believe AzureSQL and MicrosoftSQL are different, should I contact MicrosoftSQL support about AzureSQL?

We look forward to your reply.

Best regards.

Hideo.