deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-13 13:57:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

replace old content with new

Browse Source
This commit is contained in:
Patti Short 2018-05-22 15:13:54 -07:00
parent 838fad7f0c
commit 6da43edf41
1 changed files with 419 additions and 332 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

751
mdop/mbam-v25/how-to-move-the-mbam-25-databases.md
View File

@ -7,20 +7,26 @@ ms.pagetype: mdop, security
ms.mktglfcycl: manage ms.mktglfcycl: manage
ms.sitesec: library ms.sitesec: library
ms.prod: w10 ms.prod: w10
ms.date: 06/16/2016 ms.date: 05/23/2018
--- ---
# How to Move the MBAM 2.5 Databases # How to Move the MBAM 2.5 Databases
Use these procedures to move the following databases from one computer to
Use these procedures to move the following databases from one computer to another, that is, to move the databases from Server A to Server B: another; from Server A to Server B, for example:
- Compliance and Audit Database - Compliance and Audit Database
- Recovery Database - Recovery Database
If you are moving multiple features, move them in the following order: >[!NOTE]
>It is important that the databases be restored to Machine B PRIOR to running the MBAM Configuration Wizard to update/configure them.
If the databases are NOT present, the Configuration Wizard creates NEW, empty, databases. When your existing databases are then restored, this process will break the MBAM configuration.
Restore the databases FIRST, then run the MBAM Configuration Wizard, choose the database option, and the Configuration Wizard will “connect” to the databases you restored; upgrading them if needed as part of the process.
**If you are moving multiple features, move them in the following order:**
1. Recovery Database 1. Recovery Database
@ -32,13 +38,10 @@ If you are moving multiple features, move them in the following order:
5. Self-Service Portal 5. Self-Service Portal
**Note**   >[!Note]
To run the example Windows PowerShell scripts provided in this topic, you must update the Windows PowerShell execution policy to enable scripts to be run. See [Running Windows PowerShell Scripts](http://technet.microsoft.com/library/ee176949.aspx) for instructions. >To run the example Windows PowerShell scripts provided in this topic, you must update the Windows PowerShell execution policy to enable scripts to be run. See [Running Windows PowerShell Scripts](http://technet.microsoft.com/library/ee176949.aspx) for instructions.
 
## Moving the Recovery Database
## Move the Recovery Database
The high-level steps for moving the Recovery Database are: The high-level steps for moving the Recovery Database are:
@ -46,473 +49,557 @@ The high-level steps for moving the Recovery Database are:
2. Back up the Recovery Database on Server A 2. Back up the Recovery Database on Server A
3. Install MBAM Server software and run the MBAM Server Configuration wizard on Server B 3. Move the Recovery Database from Server A to Server B
4. Move the Recovery Database from Server A to Server B 4. Restore the Recovery Database on Server B
5. Restore the Recovery Database on Server B 5. Configure access to the Database on Server B and update connection data
6. Configure access to the Database on Server B and update connection data 6. Install MBAM Server software and run the MBAM Server Configuration wizard on Server B
7. Resume the instance of the Administration and Monitoring Website 7. Resume the instance of the Administration and Monitoring Website
**How to move the Recovery Database** ### How to move the Recovery Database
1. **Stop all instances of the MBAM Administration and Monitoring Website** **Stop all instances of the MBAM Administration and Monitoring Website**
- On each server that is running the MBAM Administration and Monitoring Server Website, use the Internet Information Services (IIS) Manager console to stop the Administration and Monitoring Website. 1. On each server that is running the MBAM Administration and Monitoring Server Website, use the Internet Information Services (IIS) Manager console to stop the Administration and Monitoring Website.
To automate this procedure, you can use Windows PowerShell to enter a command that is similar to the following: 2. To automate this procedure, you can use Windows PowerShell to enter a command that is similar to the following:
``` syntax ```syntax
PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
```
**Note**   PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
To run this command, you must add the Internet Information Services (IIS) module for Windows PowerShell to the current instance of Windows PowerShell.
  ```
2. **Install MBAM Server software and run the MBAM Server Configuration wizard on Server B** >[!NOTE]
>To run this command, you must add the Internet Information Services (IIS) module for Windows PowerShell to the current instance of Windows PowerShell.
1. Install the MBAM 2.5 Server software on Server B. For instructions, see [Installing the MBAM 2.5 Server Software](installing-the-mbam-25-server-software.md). ### Back up the Recovery Database on Server A
2. On Server B, start the MBAM Server Configuration wizard, click **Add New Features**, and then select only the **Recovery Database** feature. 1. Use the **Back Up** task in SQL Server Management Studio to back up the Recovery Database on Server A.<p>By default, the database name is **MBAM Recovery Database**.
Alternatively, you can use the **Enable-MbamDatabase** Windows PowerShell cmdlet to configure the Recovery Database. 2. To automate this procedure, create a SQL file (.sql) that contains the following SQL script, and change the MBAM Recovery Database to use the full recovery mode:
For instructions on how to configure the databases, see [How to Configure the MBAM 2.5 Databases](how-to-configure-the-mbam-25-databases.md). ```syntax
3. **Back up the Recovery Database on Server A** USE master;
1. Use the **Back Up** task in SQL Server Management Studio to back up the Recovery Database on Server A. By default, the database name is **MBAM Recovery Database**. GO
To automate this procedure, create a SQL file (.sql) that contains the following SQL script, and change the MBAM Recovery Database to use the full recovery mode: ALTER DATABASE "MBAM Recovery and Hardware"
``` syntax SET RECOVERY FULL;
USE master;
GO
ALTER DATABASE "MBAM Recovery and Hardware"
SET RECOVERY FULL;
GO
-- Create MBAM Recovery Database Data and MBAM Recovery logical backup devices.
USE master
GO
EXEC sp_addumpdevice 'disk', 'MBAM Recovery and Hardware Database Data Device',
'Z:\MBAM Recovery Database Data.bak';
GO
-- Back up the full MBAM Recovery Database.
BACKUP DATABASE [MBAM Recovery and Hardware] TO [MBAM Recovery and Hardware Database Data Device];
GO
BACKUP CERTIFICATE [MBAM Recovery Encryption Certificate]
TO FILE = 'Z:\SQLServerInstanceCertificateFile'
WITH PRIVATE KEY
(
FILE = ' Z:\SQLServerInstanceCertificateFilePrivateKey',
ENCRYPTION BY PASSWORD = '$PASSWORD$'
);
GO
```
Use the following value to replace the values in the code example with values that match your environment. GO
**$PASSWORD$** - password that you will use to encrypt the Private Key file. -- Create MBAM Recovery Database Data and MBAM Recovery logical backup devices.
2. Run the script that is stored in the .sql file by using a Windows PowerShell command that is similar to the following: USE master
``` syntax GO
PS C:\> Invoke-Sqlcmd -InputFile 'Z:\BackupMBAMRecoveryandHardwarDatabaseScript.sql' -ServerInstance $SERVERNAME$\$SQLINSTANCENAME$
```
Use the following value to replace the values in the code example with values that match your environment: EXEC sp_addumpdevice 'disk', 'MBAM Recovery and Hardware Database Data Device',
**$SERVERNAME$\\$SQLINSTANCENAME$** - server name and instance from which the Recovery Database will be backed up. 'Z:\MBAM Recovery Database Data.bak';
4. **Move the Recovery Database from Server A to Server B** GO
- Use Windows Explorer to move the **MBAM Compliance Status Database Data.bak** file from Server A to Server B. -- Back up the full MBAM Recovery Database.
To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following: BACKUP DATABASE [MBAM Recovery and Hardware] TO [MBAM Recovery and Hardware Database Data Device];
``` syntax GO
PS C:\> Copy-Item “Z:\MBAM Recovery Database Data.bak” \\$SERVERNAME$\$DESTINATIONSHARE$
PS C:\> Copy-Item “Z:\SQLServerInstanceCertificateFile” \\$SERVERNAME$\$DESTINATIONSHARE$
PS C:\> Copy-Item “Z:\SQLServerInstanceCertificateFilePrivateKey” \\$SERVERNAME$\$DESTINATIONSHARE$
```
Use the information in the following table to replace the values in the code example with values that match your environment. BACKUP CERTIFICATE [MBAM Recovery Encryption Certificate]
<table> TO FILE = 'Z:\SQLServerInstanceCertificateFile'
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Parameter</th>
<th align="left">Description</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>$SERVERNAME$</p></td>
<td align="left"><p>Name of the server to which the files will be copied.</p></td>
</tr>
<tr class="even">
<td align="left"><p>$DESTINATIONSHARE$</p></td>
<td align="left"><p>Name of the share and path to which the files will be copied.</p></td>
</tr>
</tbody>
</table>
  WITH PRIVATE KEY
5. **Restore the Recovery Database on Server B** (
1. Restore the Recovery Database on Server B by using the **Restore Database** task in SQL Server Management Studio. FILE = ' Z:\SQLServerInstanceCertificateFilePrivateKey',
2. When the previous task finishes, select **From Device**, and then select the database backup file. ENCRYPTION BY PASSWORD = '$PASSWORD$'
3. Use the **Add** command to select the **MBAM Recovery Database Data.bak** file, and click **OK** to complete the restoration process. );
To automate this procedure, create a SQL file (.sql) that contains the following SQL script: GO
```
3. Use the following value to replace the values in the code example with values that match your environment:
``` syntax **$PASSWORD$** - password that you use to encrypt the Private Key file.
-- Restore MBAM Recovery Database.
USE master
GO
-- Drop certificate created by MBAM Setup.
DROP CERTIFICATE [MBAM Recovery Encryption Certificate]
GO
--Add certificate
CREATE CERTIFICATE [MBAM Recovery Encryption Certificate]
FROM FILE = 'Z: \SQLServerInstanceCertificateFile'
WITH PRIVATE KEY
(
FILE = ' Z:\SQLServerInstanceCertificateFilePrivateKey',
DECRYPTION BY PASSWORD = '$PASSWORD$'
);
GO
-- Restore the MBAM Recovery Database data and log files.
RESTORE DATABASE [MBAM Recovery and Hardware]
FROM DISK = 'Z:\MBAM Recovery Database Data.bak'
WITH REPLACE
```
Use the following value to replace the values in the code example with values that match your environment. 4. In Windows PowerShell, run the script that is stored in the file and similar to the following:
**$PASSWORD$** - password that you used to encrypt the Private Key file. ```syntax
4. Run the script that is stored in the .sql file by using a Windows PowerShell command that is similar to the following: PS C:\> Invoke-Sqlcmd -InputFile
'Z:\BackupMBAMRecoveryandHardwarDatabaseScript.sql' -ServerInstance $SERVERNAME$\$SQLINSTANCENAME$
```
5. Use the following value to replace the values in the code example with values that match your environment:
``` syntax **$SERVERNAME$\$SQLINSTANCENAME$** - server name and instance from which the Recovery Database will be backed up.
PS C:\> Invoke-Sqlcmd -InputFile 'Z:\RestoreMBAMRecoveryandHardwarDatabaseScript.sql' -ServerInstance $SERVERNAME$\$SQLINSTANCENAME$
```
Use the following value to replace the values in the code example with values that match your environment. ### Move the Recovery Database from Server A to Server B
**$SERVERNAME$\\$SQLINSTANCENAME$** - Server name and instance to which the Recovery Database will be restored. Use Windows Explorer to move the **MBAM Compliance Status Database Data.bak** file from Server A to Server B.
6. **Configure access to the Database on Server B and update connection data** To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following:
1. Verify that the Microsoft SQL Server user login that enables Recovery Database access on the restored database is mapped to the access account that you provided during the configuration process. ```syntax
If the login is not the same, create a login by using SQL Server Management Studio, and map it to the existing database user. PS C:\> Copy-Item “Z:\MBAM Recovery Database Data.bak”
\\$SERVERNAME$\$DESTINATIONSHARE$
2. On the server that is running the Administration and Monitoring Website, use the Internet Information Services (IIS) Manager console to update the connection string information for the MBAM websites. PS C:\> Copy-Item “Z:\SQLServerInstanceCertificateFile”
\\$SERVERNAME$\$DESTINATIONSHARE$
3. Edit the following registry key: **HKLM\\Software\\Microsoft\\MBAM Server\\Web\\RecoveryDBConnectionString** PS C:\> Copy-Item “Z:\SQLServerInstanceCertificateFilePrivateKey”
\\$SERVERNAME$\$DESTINATIONSHARE$
4. Update the **Data Source** value with the name of the server and instance (for example, $SERVERNAME$\\$SQLINSTANCENAME) to which the Recovery Database was moved. ```
Use the information in the following table to replace the values in the code example with values that match your environment.
5. Update the **Initial Catalog** value with the recovered database name.
To automate this process, you can use the Windows PowerShell command prompt to enter a command line on the Administration and Monitoring Server that is similar to the following: | **Parameter** | **Description** |
|----------------------|---------------------------------------------------------------|
| $SERVERNAME$ | Name of the server to which the files will be copied. |
| $DESTINATIONSHARE$ | Name of the share and path to which the files will be copied. |
``` syntax ### Restore the Recovery Database on Server B
PS C:\> reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MBAM Server\Web" /v RecoveryDBConnectionString /t REG_SZ /d "Integrated Security=SSPI;Initial Catalog=$DATABASE$;Data Source=$SERVERNAME$\$SQLINSTANCENAME$" /f
PS C:\> Set-WebConfigurationProperty '/connectionStrings/add[@name="KeyRecoveryConnectionString"]' -PSPath "IIS:\sites\Microsoft Bitlocker Administration and Monitoring\MBAMAdministrationService" -Name "connectionString" -Value “Data Source=$SERVERNAME$\$SQLINSTANCENAME$;Initial Catalog=MBAM Recovery and Hardware;Integrated Security=SSPI;”
PS C:\> Set-WebConfigurationProperty '/connectionStrings/add[@name="Microsoft.Mbam.RecoveryAndHardwareDataStore.ConnectionString"]' -PSPath "IIS:\sites\Microsoft Bitlocker Administration and Monitoring\MBAMRecoveryAndHardwareService" -Name "connectionString" -Value "Data Source=$SERVERNAME$\$SQLINSTANCENAME$;Initial Catalog=MBAM Recovery and Hardware;Integrated Security=SSPI;”
```
**Note**   1. Restore the Recovery Database on Server B by using the **Restore Database** task in SQL Server Management Studio.
This connection string is shared by all local MBAM web applications. Therefore, it needs to be updated only once per server.
  2. When the previous task finishes, select **From Device**, and then select the database backup file.
Use the following table to replace the values in the code example with values that match your environment. 3. Use the **Add** command to select the **MBAM Recovery Database Data.bak** file, and click **OK** to complete the restoration process.
<table> 4. To automate this procedure, create a SQL file (.sql) that contains the following SQL script:
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Parameter</th>
<th align="left">Description</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>$SERVERNAME$\$SQLINSTANCENAME$</p></td>
<td align="left"><p>Server name and instance of SQL Server where the Recovery Database is located.</p></td>
</tr>
<tr class="even">
<td align="left"><p>$DATABASE$</p></td>
<td align="left"><p>Name of the Recovery database.</p></td>
</tr>
</tbody>
</table>
  ```syntax
7. **Resume the instance of the Administration and Monitoring Website** -- Restore MBAM Recovery Database.
1. On the server that is running the Administration and Monitoring Website, use the Internet Information Services (IIS) Manager console to start the Administration and Monitoring Website. USE master
2. To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following: GO
``` syntax -- Drop certificate created by MBAM Setup.
PS C:\> Start-Website "Microsoft BitLocker Administration and Monitoring"
```
**Note**   DROP CERTIFICATE [MBAM Recovery Encryption Certificate]
To run this command, you must add the IIS module for Windows PowerShell to the current instance of Windows PowerShell.
  GO
## Moving the Compliance and Audit Database --Add certificate
CREATE CERTIFICATE [MBAM Recovery Encryption Certificate]
FROM FILE = 'Z:\SQLServerInstanceCertificateFile'
WITH PRIVATE KEY
(
FILE = ' Z:\SQLServerInstanceCertificateFilePrivateKey',
DECRYPTION BY PASSWORD = '$PASSWORD$'
);
GO
-- Restore the MBAM Recovery Database data and log files.
RESTORE DATABASE [MBAM Recovery and Hardware]
FROM DISK = 'Z:\MBAM Recovery Database Data.bak'
WITH REPLACE
```
5. Use the following value to replace the values in the code example with values that match your environment.
**$PASSWORD$** - password that you used to encrypt the Private Key file.
6. In Windows PowerShell, run the script that is stored in the file and similar to the following:
```syntax
PS C:\> Invoke-Sqlcmd -InputFile 'Z:\RestoreMBAMRecoveryandHardwarDatabaseScript.sql' -ServerInstance $SERVERNAME$\$SQLINSTANCENAME$
```
7. Use the following value to replace the values in the code example with values that match your environment.
**$SERVERNAME$\$SQLINSTANCENAME$** - Server name and instance to which the Recovery Database will be restored.
### Configure access to the Database on Server B and update connection data
1. Verify that the Microsoft SQL Server user login that enables Recovery Database access on the restored database is mapped to the access account that you provided during the configuration process.
>[!NOTE]
>If the login is not the same, create a login by using SQL Server Management Studio, and map it to the existing database user.
2. On the server that is running the Administration and Monitoring Website, use the Internet Information Services (IIS) Manager console to update the connection string information for the MBAM websites.
3. Edit the following registry key:
**HKLM\\Software\\Microsoft\\MBAM Server\\Web\\RecoveryDBConnectionString**
4. Update the **Data Source** value with the name of the server and instance (for example, \$SERVERNAME\$\\\$SQLINSTANCENAME) to which the Recovery Database was moved.
5. Update the **Initial Catalog** value with the recovered database name.
6. To automate this process, you can use the Windows PowerShell command prompt to enter a command line on the Administration and Monitoring Server that is similar to the following:
```syntax
PS C:\> reg add "HKEY_LOCAL_MACHINE\SOFTWARE\\Microsoft\MBAM Server\\Web" /v
RecoveryDBConnectionString /t REG_SZ /d "Integrated Security=SSPI;Initial
Catalog=$DATABASE$;Data Source=$SERVERNAME$\$SQLINSTANCENAME$" /f
PS C:\> Set-WebConfigurationProperty
'connectionStrings/add[@name="KeyRecoveryConnectionString"]' -PSPath
"IIS:\sites\Microsoft Bitlocker Administration and
Monitoring\MBAMAdministrationService" -Name "connectionString" -Value “Data
Source=$SERVERNAME$\$SQLINSTANCENAME$;Initial Catalog=MBAM Recovery and
Hardware;Integrated Security=SSPI;”
PS C:\> Set-WebConfigurationProperty
'connectionStrings/add[\@name="Microsoft.Mbam.RecoveryAndHardwareDataStore.ConnectionString"]'
-PSPath "IIS:\sites\Microsoft Bitlocker Administration and
Monitoring\MBAMRecoveryAndHardwareService" -Name "connectionString" -Value
"Data Source=$SERVERNAME$\$SQLINSTANCENAME$;Initial Catalog=MBAM Recovery
and Hardware;Integrated Security=SSPI;”
```
>[!Note]
>This connection string is shared by all local MBAM web applications. Therefore, it needs to be updated only once per server.
7. Use the following table to replace the values in the code example with values that match your environment.
```html
<table>
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Parameter</th>
<th align="left">Description</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>$SERVERNAME$\$SQLINSTANCENAME$</p></td>
<td align="left"><p>Server name and instance of SQL Server where the
Recovery Database is located.</p></td>
</tr>
<tr class="even">
<td align="left"><p>$DATABASE$</p></td>
<td align="left"><p>Name of the Recovery database.</p></td>
</tr>
</tbody>
</table>
```
### Install MBAM Server software and run the MBAM Server Configuration wizard on Server B
Install the MBAM 2.5 Server software on Server B. For more details, see [Installing the MBAM 2.5 Server Software](https://docs.microsoft.com/en-us/microsoft-desktop-optimization-pack/mbam-v25/installing-the-mbam-25-server-software).
1. On Server B, start the MBAM Server Configuration wizard, click **Add New Features**, and then select only the **Recovery Database** feature.
>[!TIP]
>Alternatively, you can use the **Enable-MbamDatabase** Windows PowerShell cmdlet to configure the Recovery Database.
2. For instructions on how to configure the databases, see [How to Configure the MBAM 2.5 Databases](https://docs.microsoft.com/en-us/microsoft-desktop-optimization-pack/mbam-v25/how-to-configure-the-mbam-25-databases).
### Resume the instance of the Administration and Monitoring Website
On the server that is running the Administration and Monitoring Website, use the Internet Information Services (IIS) Manager console to start the Administration and Monitoring Website.
To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following:
```syntax
PS C:\> Start-Website "Microsoft BitLocker Administration and Monitoring"
```
>[!NOTE]
>To run this command, you must add the IIS module for Windows PowerShell to the current instance of Windows PowerShell.
## Move the Compliance and Audit Database
The high-level steps for moving the Compliance and Audit Database are: The high-level steps for moving the Compliance and Audit Database are:
1. Stop all instances of the MBAM Administration and Monitoring Website 1. Stop all instances of the MBAM Administration and Monitoring Website
2. Install MBAM Server software and run the MBAM Server Configuration wizard on Server B 2. Back up the Compliance and Audit Database on Server A
3. Back up the Compliance and Audit Database on Server A 3. Move the Compliance and Audit Database from Server A to Server B
4. Move the Compliance and Audit Database from Server A to Server B 4. Restore the Compliance and Audit Database on Server B
5. Restore the Compliance and Audit Database on Server B 5. Configure access to the Database on Server B and update connection data
6. Configure access to the Database on Server B and update connection data 6. Install MBAM Server software and run the MBAM Server Configuration wizard on
Server B
7. Resume the instance of the Administration and Monitoring Website 7. Resume the instance of the Administration and Monitoring Website
**How to move the Compliance and Audit Database** ### How to move the Compliance and Audit Database
1. **Stop all instances of the MBAM Administration and Monitoring Website** **Stop all instances of the MBAM Administration and Monitoring Website**
- On each server that is running the MBAM Administration and Monitoring Server Website, use the Internet Information Services (IIS) Manager console to stop the Administration and Monitoring Website. On each server that is running the MBAM Administration and Monitoring Server Website, use the Internet Information Services (IIS) Manager console to stop the Administration and Monitoring Website.
To automate this procedure, you can use Windows PowerShell to enter a command that is similar to the following: To automate this procedure, you can use Windows PowerShell to enter a command that is similar to the following:
``` syntax ```syntax
PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
```
**Note**   PS C:\> Stop-Website "Microsoft BitLocker Administration and Monitoring"
To run this command, you must add the Internet Information Services (IIS) module for Windows PowerShell to the current instance of Windows PowerShell.
  ```
2. **Install MBAM Server software and run the MBAM Server Configuration wizard on Server B** >[!NOTE]
>To run this command, you must add the Internet Information Services (IIS) module for Windows PowerShell to the current instance of Windows PowerShell.
1. Install the MBAM 2.5 Server software on Server B. For instructions, see [Installing the MBAM 2.5 Server Software](installing-the-mbam-25-server-software.md). ### Back up the Compliance and Audit Database on Server A
2. On Server B, start the MBAM Server Configuration wizard, click **Add New Features**, and then select only the **Compliance and Audit Database** feature. 1. Use the **Back Up** task in SQL Server Management Studio to back up the Compliance and Audit Database on Server A. By default, the database name is **MBAM Compliance Status Database**.
Alternatively, you can use the **Enable-MbamDatabase** Windows PowerShell cmdlet to configure the Compliance and Audit Database. 2. To automate this procedure, create a SQL file (.sql) that contains the following SQL script:
For instructions on how to configure the databases, see [How to Configure the MBAM 2.5 Databases](how-to-configure-the-mbam-25-databases.md). ```syntax
3. **Back up the Compliance and Audit Database on Server A** USE master;
1. Use the **Back Up** task in SQL Server Management Studio to back up the Compliance and Audit Database on Server A. By default, the database name is **MBAM Compliance Status Database**. GO
To automate this procedure, create a SQL file (.sql) that contains the following SQL script: ALTER DATABASE "MBAM Compliance Status"
``` syntax SET RECOVERY FULL;
USE master;
GO
ALTER DATABASE "MBAM Compliance Status"
SET RECOVERY FULL;
GO
-- Create MBAM Compliance Status Data logical backup devices.
USE master
GO
EXEC sp_addumpdevice 'disk', 'MBAM Compliance Status Database Data Device',
'Z: \MBAM Compliance Status Database Data.bak';
GO
-- Back up the full MBAM Compliance Recovery database.
BACKUP DATABASE [MBAM Compliance Status] TO [MBAM Compliance Status Database Data Device];
GO
```
2. Run the script that is stored in the .sql file by using a Windows PowerShell command that is similar to the following: GO
``` syntax -- Create MBAM Compliance Status Data logical backup devices.
PS C:\> Invoke-Sqlcmd -InputFile "Z:\BackupMBAMComplianceStatusDatabaseScript.sql" –ServerInstance $SERVERNAME$\$SQLINSTANCENAME$
```
Using the following value, replace the values in the code example with values that match your environment: USE master
**$SERVERNAME$\\$SQLINSTANCENAME$** - server name and instance from which the Compliance and Audit Database will be backed up. GO
4. **Move the Compliance and Audit Database from Server A to Server B** EXEC sp_addumpdevice 'disk', 'MBAM Compliance Status Database Data Device',
- Use Windows Explorer to move the **MBAM Compliance Status Database Data.bak** file from Server A to Server B. 'Z: \MBAM Compliance Status Database Data.bak';
To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following: GO
``` syntax -- Back up the full MBAM Compliance Recovery database.
PS C:\> Copy-Item "Z:\MBAM Compliance Status Database Data.bak" \\$SERVERNAME$\$DESTINATIONSHARE$
```
Using the following table, replace the values in the code example with values that match your environment. BACKUP DATABASE [MBAM Compliance Status] TO [MBAM Compliance Status Database Data Device];
<table> GO
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Parameter</th>
<th align="left">Description</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>$SERVERNAME$</p></td>
<td align="left"><p>Name of the server to which the files will be copied.</p></td>
</tr>
<tr class="even">
<td align="left"><p>$DESTINATIONSHARE$</p></td>
<td align="left"><p>Name of the share and path to which the files will be copied.</p></td>
</tr>
</tbody>
</table>
  ```
5. **Restore the Compliance and Audit Database on Server B** 3. Run the script that is stored in the .sql file by using a Windows PowerShell command that is similar to the following:
1. Restore the Compliance and Audit Database on Server B by using the **Restore Database** task in SQL Server Management Studio. ```syntax
2. When the previous task finishes, select **From Device**, and then select the database backup file. PS C:\> Invoke-Sqlcmd -InputFile "Z:\BackupMBAMComplianceStatusDatabaseScript.sql" –ServerInstance $SERVERNAME$\$SQLINSTANCENAME$
3. Use the **Add** command to select the **MBAM Compliance Status Database Data.bak** file, and click **OK** to complete the restoration process. ```
To automate this procedure, create a SQL file (.sql) that contains the following SQL script: 4. Using the following value, replace the values in the code example with values that match your environment:
``` syntax **$SERVERNAME$\$SQLINSTANCENAME$** - server name and instance from which the Compliance and Audit Database will be backed up.
-- Create MBAM Compliance Status Database Data logical backup devices.
Use master
GO
-- Restore the MBAM Compliance Status database data files.
RESTORE DATABASE [MBAM Compliance Status]
FROM DISK = 'C:\test\MBAM Compliance Status Database Data.bak'
WITH REPLACE
```
4. Run the script that is stored in the .sql file by using a Windows PowerShell command that is similar to the following: ### Move the Compliance and Audit Database from Server A to Server B**
``` syntax 1. Use Windows Explorer to move the **MBAM Compliance Status Database Data.bak** file from Server A to Server B.
PS C:\> Invoke-Sqlcmd -InputFile "Z:\RestoreMBAMComplianceStatusDatabaseScript.sql" -ServerInstance $SERVERNAME$\$SQLINSTANCENAME$
```
Using the following value, replace the values in the code example with values that match your environment. 2. To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following:
**$SERVERNAME$\\$SQLINSTANCENAME$** - Server name and instance to which the Compliance and Audit Database will be restored. ```syntax
6. **Configure access to the Database on Server B and update connection data** PS C:\> Copy-Item "Z:\MBAM Compliance Status Database Data.bak"
\\$SERVERNAME$\$DESTINATIONSHARE$
1. Verify that the Microsoft SQL Server user login that enables Compliance and Audit Database access on the restored database is mapped to the access account that you provided during the configuration process. ```
If the login is not the same, create a login by using SQL Server Management Studio, and map it to the existing database user. 3. Using the following table, replace the values in the code example with values that match your environment.
2. On the server that is running the Administration and Monitoring Website, use the Internet Information Services (IIS) Manager console to update the connection string information for the Website. | **Parameter** | **Description** |
|----------------------|---------------------------------------------------------------|
| $SERVERNAME$ | Name of the server to which the files will be copied. |
| $DESTINATIONSHARE$ | Name of the share and path to which the files will be copied. |
3. Edit the following registry key: **HKLM\\Software\\Microsoft\\MBAM Server\\Web\\ComplianceDBConnectionString** ### Restore the Compliance and Audit Database on Server B
4. Update the **Data Source** value with the name of the server and instance (for example, $SERVERNAME$\\$SQLINSTANCENAME) to which the Recovery Database was moved. 1. Restore the Compliance and Audit Database on Server B by using the **Restore Database** task in SQL Server Management Studio.
5. Update the **Initial Catalog** value with the recovered database name. 2. When the previous task finishes, select **From Device**, and then select the database backup file.
To automate this process, you can use the Windows PowerShell command prompt to enter a command line on the Administration and Monitoring Server that is similar to the following: 3. Use the **Add** command to select the **MBAM Compliance Status Database Data.bak** file and click **OK** to complete the restoration process.
``` syntax 4. To automate this procedure, create a SQL file (.sql) that contains the following SQL script:
PS C:\> reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MBAM Server\Web" /v ComplianceDBConnectionString /t REG_SZ /d "Integrated Security=SSPI;Initial Catalog=$DATABASE$;Data Source=$SERVERNAME$\$SQLINSTANCENAME$" /f
```
**Note**   ```syntax
This connection string is shared by all local MBAM web applications. Therefore, it needs to be updated only once per server.
  -- Create MBAM Compliance Status Database Data logical backup devices.
Using the following table, replace the values in the code example with values that match your environment. Use master
<table> GO
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Parameter</th>
<th align="left">Description</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>$SERVERNAME$\$SQLINSTANCENAME$</p></td>
<td align="left"><p>Server name and instance of SQL Server where the Recovery Database is located.</p></td>
</tr>
<tr class="even">
<td align="left"><p>$DATABASE$</p></td>
<td align="left"><p>Name of the recovered database.</p></td>
</tr>
</tbody>
</table>
  -- Restore the MBAM Compliance Status database data files.
7. **Resume the instance of the Administration and Monitoring Website** RESTORE DATABASE [MBAM Compliance Status]
1. On the server that is running the Administration and Monitoring Website, use the Internet Information Services (IIS) Manager console to start the Administration and Monitoring Website. FROM DISK = 'C:\test\MBAM Compliance Status Database Data.bak'
2. To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following: WITH REPLACE
``` syntax ```
PS C:\> Start-Website "Microsoft BitLocker Administration and Monitoring"
```
**Note**   5. In Windows PowerShell, run the script that is stored in the file and similar to the following:
To run this command, you must add the IIS module for Windows PowerShell to the current instance of Windows PowerShell.
  ```syntax
PS C:\> Invoke-Sqlcmd -InputFile "Z:\RestoreMBAMComplianceStatusDatabaseScript.sql" -ServerInstance $SERVERNAME$\$SQLINSTANCENAME$
```
## Related topics 6. Using the following value, replace the values in the code example with values that match your environment.
**$SERVERNAME$\$SQLINSTANCENAME$** - Server name and instance to which the Compliance and Audit Database will be restored.
[How to Configure the MBAM 2.5 Databases](how-to-configure-the-mbam-25-databases.md) ### Configure access to the Database on Server B and update connection data
[Configuring MBAM 2.5 Server Features by Using Windows PowerShell](configuring-mbam-25-server-features-by-using-windows-powershell.md) 1. Verify that the Microsoft SQL Server user login that enables Compliance and Audit Database access on the restored database is mapped to the access account that you provided during the configuration process.
[Moving MBAM 2.5 Features to Another Server](moving-mbam-25-features-to-another-server.md) >[!NOTE]
>If the login is not the same, create a login by using SQL Server Management Studio, and map it to the existing database user.
  2. On the server that is running the Administration and Monitoring Website, use the Internet Information Services (IIS) Manager console to update the connection string information for the Website.
  3. Edit the following registry key:
## Got a suggestion for MBAM?
- Add or vote on suggestions [here](http://mbam.uservoice.com/forums/268571-microsoft-bitlocker-administration-and-monitoring).
- For MBAM issues, use the [MBAM TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopmbam).
**HKLM\\Software\\Microsoft\\MBAM Server\\Web\\ComplianceDBConnectionString**
4. Update the **Data Source** value with the name of the server and instance (for example, \$SERVERNAME\$\\\$SQLINSTANCENAME) to which the Recovery Database was moved.
5. Update the **Initial Catalog** value with the recovered database name.
6. To automate this process, you can use the Windows PowerShell command prompt to enter a command line on the Administration and Monitoring Server that is similar to the following:
```syntax
PS C:\> reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MBAM Server\Web" /v
ComplianceDBConnectionString /t REG_SZ /d "Integrated Security=SSPI;Initial
Catalog=$DATABASE$;Data Source=$SERVERNAME$\$SQLINSTANCENAME$" /f
```
>[!NOTE]
>This connection string is shared by all local MBAM web applications. Therefore, it needs to be updated only once per server.
7. Using the following table, replace the values in the code example with values that match your environment.
```html
<table>
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Parameter</th>
<th align="left">Description</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>$SERVERNAME$\$SQLINSTANCENAME$</p></td>
<td align="left"><p>Server name and instance of SQL Server where the Recovery Database is located.</p></td>
</tr>
<tr class="even">
<td align="left"><p>$DATABASE$</p></td>
<td align="left"><p>Name of the recovered database.</p></td>
</tr>
</tbody>
</table>
```
### Install MBAM Server software and run the MBAM Server Configuration wizard on Server B
1. Install the MBAM 2.5 Server software on Server B. For details, see [Installing the MBAM 2.5 Server Software](https://docs.microsoft.com/en-us/microsoft-desktop-optimization-pack/mbam-v25/installing-the-mbam-25-server-software).
2. On Server B, start the MBAM Server Configuration wizard, click **Add New Features**, and then select only the **Compliance and Audit Database** feature.
>[!TIP]
>Alternatively, you can use the **Enable-MbamDatabase** Windows PowerShell cmdlet to configure the Compliance and Audit Database.
For details on how to configure the databases, see [How to Configure the MBAM 2.5 Databases](https://docs.microsoft.com/en-us/microsoft-desktop-optimization-pack/mbam-v25/how-to-configure-the-mbam-25-databases).
### Resume the instance of the Administration and Monitoring Website
On the server that is running the Administration and Monitoring Website, use the Internet Information Services (IIS) Manager console to start the Administration and Monitoring Website.
To automate this procedure, you can use Windows PowerShell to run a command that is similar to the following:
```syntax
PS C:\> Start-Website "Microsoft BitLocker Administration and Monitoring"
```
>[!NOTE]
>To run this command, you must add the IIS module for Windows PowerShell to the current instance of Windows PowerShell.