What You Need
- The Data Governance Server installation MSI
- Local Administrator rights on the system where the DGE server will be installed
- Installation of Q1IM client applications (including Data Governance PowerShell snap-in)
- Ability to change Q1IM configuration options in the Designer application
- Connection information to the Q1IM database
- Database creation permissions (if intending to create the activity database)
Required Steps
1. Log onto the system with the Identity Manager client installation.
2. Open Designer and log on as a system user with administrative privileges (e.g. viadmin).
3. From the "Base Data" tab select "Configuration parameters" and select “Edit Configuration Parameters" under Tasks. Expand TargetSystem\ADS\QAM\QAMServer.
4. Change the “ServerName” configuration option (value) to the fully qualified DNS name of the DGE server system.
5. Log on to the DGE server system as an account with administrative access.
6. Run the Data Governance Server installation MSI. Simply double-clicking on the MSI file will install the DGE service running as Local System (this is preferable to use if you're planning to use SQL authentication for Q1IM and Activity databases).
To install the service running as a different account, run MSIEXEC.exe from the command line with the SERVICEACCOUNT and SERVICEACCOUNTPASSWORD options (this is needed when you're planning to use Windows authentication to connect to Q1IM and Activity databases).
Please refer to the Microsoft documentation for the command line syntax of MSIEXEC.EXE.
- INSTALLDIR: The folder on the local system into which the data governance server will be installed.
- SERVICEACCOUNT: The DOMAIN\Username style name of the service account if using Windows authentication to access the database.
- SERVICEACCOUNTPASSWORD: The password for the service account if using Windows authentication to access the database.
7. Open PowerShell (x86) console on the machine with the Q1IM client installation.
8. Run “Add-PSSnapin Quest.DataGovernance”
9. Run “Set-QServiceConnection -ServerName <DGE Server Machine Name> -Port 8722”
Note: After this step it may be required to close and re-open the PowerShell console.
10. Run “Initialize-QDataGovernanceServer -DatabaseConnectionString <Connection String for Q1IM DB> [-IdentityManagerIsOracle]”
Note: Specify the “IdentityManagerIsOracle” flag if and only if your Q1IM database is hosted by an Oracle database management system.
If Windows authentication is used to connect to the database, the DGE server must be configured to run as an identity other than Local System (see step 7).
An example of connection string for SQL authentication looks like this:
'Data Source=DatabaseServer\Instance;Initial Catalog=Q1IMDatabase;User ID=sa;Password=password'.
Windows authentication:
'Data Source=ksql;Initial Catalog=QIM;Integrated Security=True;Pooling=False'
For more information about connection strings refer to: The Connection Strings Reference.
11. Using your preferred database management tool, browse on the Data Governance Server to the “C:\Program Files\Quest Software\Data Governance\Server\Activity Database Scripts” folder and look for a file called 'DGAuditDatabaseCreationScript.sql' for SQL Server and 'DGAuditDatabaseCreationScriptOracle.sql' for Oracle.
12. Run the appropriate script for your database management system to create Activity Database.
13. Run in PowerShell “Initialize-QDataGovernanceActivity -ConnectionString <Connection String for Activity DB> [-ActivityDatabaseIsOracle]”
Note: Specify the “ActivityDatabaseIsOracle” flag if and only if your Q1IM database is hosted by an Oracle database management system.
If all of the above steps completed without error, then your Data Governance Server should be ready to go.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center