Windows Authentication for Commvault SQL Server Connections

Article ID: DOC0551 You can change the default authentication mode from "mixed mode" to Windows authentication mode.

Symptom

Your business needs require you to use Windows authentication mode, and you installed packages that included Commvault databases. The following are Commvault packages that include databases: CommServe, Metrics Reporting Server, Web Server, and Workflow Engine.

If you installed an agent or only a MediaAgent, those packages do not install SQL Server, so they are not affected.

Resolution

  1. Install Commvault Version 11 Service Pack 9.
  2. From the Commvault Process Manager, stop all Commvault services.
  3. Change all Commvault Services to use a domain system administrative account instead of a local system administrative account. For instructions, see "To configure how a service is started using the Windows interface" in the Microsoft TechNet article Configure How a Service Is Started. For step 5, follow the To specify another account substep.
  4. On all computers that have Commvault database packages, create the following registry key:

    • Location: HKEY_LOCAL_MACHINE\SOFTWARE\CommVault Systems\Galaxy\Instance001\Database

    • Name: nSQLAuthType

    • Type: DWORD

    • Values: 1

      Note: 0 is SQL authentication (the default value), and 1 is Windows authentication.

  5. On all computers that have Commvault database packages, complete the following steps to configure the CommServe, CVCloud, DM2, HistoryDB, and WFEngine system data source names to use Windows authentication:

    1. Open the ODBC Data Sources Administrator (64-bit) program.

    2. On the System DSN tab, complete the following steps to update each system data source:

      1. To open the configuration dialog box, double-click the data source.

      2. Click Next to access the How should SQL Server verify the authenticity of the login ID page.

      3. Click With Integrated Windows authentication.

      4. Click Next until the Finish button is available, and then click Finish.

      5. In the ODBC Microsoft SQL Server Setup dialog box, click Test Data Source.

      6. After the test is successful, return to the list of system data sources and configure the remaining data sources.

    3. After you configure all the data sources, click OK to close the ODBC Data Source Administrative (64-bit) program.

  6. On all computers that have Commvault database packages, complete the following steps to update the application pools:

    1. Open the Internet Information Services (IIS) Manager.

    2. In the Connections pane, expand the Commvault client, and then click Application Pools.

    3. In the Application Pools pane, right-click ConsolesAppPool > Advanced Settings.

    4. Under Process Model, click Identity, and then click the ellipsis (...).

    5. In the Application Pool Identity dialog box, click Custom Account, and then click Set.

    6. In the Set Credential dialog box, enter the domain system administrative account credentials, and then click OK.

    7. Click OK twice to return to the Application Pools pane.

    8. Repeat the preceding steps for WebSearchProxyApplicationPool.

    9. From the command line, run the iisreset command.

  7. Update the SQL Server to Windows authentication mode. For instructions see the Microsoft article Change Server Authentication Mode.

  8. Open services.msc, and then restart all SQL Server services.

  9. From the Commvault Process Manager, restart all Commvault services.