Now that vCenter 5.1 Update 1 supports SQL Server 2012 I decided to go ahead and use it over SQL Server 2008 R2.
Your DB server must be set not to force SQL SSL encryption or the SSO installation will likely fail. http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2035831
The DB instance will also need to be set to run in mixed mode, allowing both integrated windows authentication and SQL Server authentication to your database instance.
I like to pre-create my databases rather than allowing the application installer to do it – that way I can ensure that they are configured just how I need. I have included my scripts below to allow you to do the same, just replace the passwords & service accounts (as well as changing paths and/or db names to suit you conventions and environment needs).
I chose to name my database “vCenter1_SSO” and used the following script to create the database and configure the SQL server user accounts to access it. Modify this script however you like to configure your environment, but you cannot alter the DB file logical names from RSA_DATA or RSA_INDEX as the SSO application is hardcoded to look for them and it will fail is they do not exist. It’s also noted in the documentation that the RSA_DBA and RSA_USER accounts require at least one lowercase character, one uppercase character, one number, and one special character to be included and the following non-AsCII characters are not supported for use; semicolon (;), double quotation mark (“), single quotation mark (‘), circumflex (^), and backslash ().
CREATE DATABASE [vCenter1_SSO]
CONTAINMENT = NONE
( NAME = N’RSA_DATA’, FILENAME = N’Y:MSSQLDatavCenter1_SSO_Data.mdf’ , SIZE = 10240KB , MAXSIZE = UNLIMITED, FILEGROWTH = 10%),
( NAME = N’RSA_INDEX’, FILENAME = N’Y:MSSQLDatavCenter1_SSO_Index.mdf’ , SIZE = 10240KB , MAXSIZE = UNLIMITED, FILEGROWTH = 10%)
( NAME = N’translog’, FILENAME = N’Z:MSSQLLogvCenter1_SSO_Log.ldf’ , SIZE = 10240KB , MAXSIZE = 2048GB , FILEGROWTH = 10%)
ALTER DATABASE [vCenter1_SSO] SET COMPATIBILITY_LEVEL = 110
ALTER DATABASE [vCenter1_SSO] SET RECOVERY SIMPLE
CREATE LOGIN RSA_DBA WITH PASSWORD = ‘Your Password’, DEFAULT_DATABASE = vCenter1_SSO
CREATE LOGIN RSA_USER WITH PASSWORD = ‘Your Password’, DEFAULT_DATABASE = vCenter1_SSO
ALTER AUTHORIZATION ON DATABASE::vCenter1_SSO TO RSA_DBA
CREATE USER RSA_USER FOR LOGIN RSA_USER
vCenter & VUM Databases
EXEC(‘CREATE LOGIN [Your DomainYour Service Account] FROM WINDOWS’)
<span style="font-family: Georgia, ‘Times New Roman’, ‘Bitstream Charter’, Times, serif; font-size: 13px; line-height: 19px;">EXEC sp_grantdbaccess ‘[Your DomainYour Service Account] ‘</span></pre>
EXEC sp_addrolemember db_owner, ‘[Your DomainYour Service Account] ‘
create database "vCenter1"
( name = ‘vCenter1’,
filename = ‘Y:MSSQLDatavCenter1.mdf’,
size = 2000MB,
filegrowth = 500MB )
( name = ‘vCenter1 log’,
filename = ‘Z:MSSQLLogvCenter1.ldf’,
size = 200MB,
filegrowth = 20MB )
create database "vCenter1_VUM"
( name = ‘vCenter1_VUM’,
filename = ‘Y:MSSQLDatavCenter1_VUM.mdf’,
size = 250MB,
filegrowth = 25MB )
( name = ‘vCenter1_VUM log’,
filename = ‘Z:MSSQLLogvCenter1_VUM.ldf’,
size = 25MB,
filegrowth = 2MB )
EXEC(‘ALTER AUTHORIZATION ON DATABASE::"vCenter1" TO [Your DomainYour Service Account]’)
EXEC(‘ALTER AUTHORIZATION ON DATABASE::"vCenter1_VUM" TO [Your DomainYour Service Account]’)
Trackback from your site.