Working with Azure SQL

This section describes which actions must be taken to prepare a Microsoft Azure database for Kaspersky Security Center, prepare an Azure storage account, and migrate an existing database to Azure SQL.

SQL Database is a general-purpose relational database managed service in Microsoft Azure.

The addresses of web pages cited in this document are correct as of the Kaspersky Security Center release date.

Creating Azure storage account

You have to create a storage account in Microsoft Azure for working with Azure SQL database and for deployment scripts.

To create a storage account:

1. Sign in to the Azure portal.
2. In the left pane, select Storage accounts to proceed to the Storage accounts window.
3. In the Storage accounts window, click the Add button to proceed to the Create storage account window.
4. Fill in all the necessary fields to create a storage account:
   • Location: must be the same as the location of the Administration Server.
   • Other fields: you may leave the default values.

   Use the tooltips to get information about each field.

   After the storage account is created, the list of your storage accounts is displayed.

5. In the list of your storage accounts, click the name of the newly created account to see information about this account.
6. Make sure you know the account name, the resource group, and access keys for this storage account. You will need this information for working with Kaspersky Security Center.

You can refer to Azure website for help.

If you already have a storage account, you can use it for working with Kaspersky Security Center.

Creating Azure SQL database and SQL Server

You need an SQL database and SQL Server in the Azure environment.

To create an Azure SQL database and SQL Server:

1. Follow the instructions on the Azure website.

   You can create a new server when Microsoft Azure prompts you to do so; if you already have an Azure SQL Server, you can use it for Kaspersky Security Center rather than creating a new one.

2. After creating the SQL database and SQL Server, make sure that you know its resource name and resource group:
   1. Go to https://portal.azure.com and make sure that you are logged in.
   2. In the left pane, select SQL databases.
   3. Click the name of a database from the list of your databases.

      The properties window opens.

   4. The name of the database is the resource name. The name of the resource group is displayed in the Overview section of the properties window.

You need the resource name and resource group of the database for migrating the database to Azure SQL.

Migrating the database to Azure SQL

Expand all | Collapse all

After Administration Server is deployed in the Azure environment, you can migrate your Kaspersky Security Center database from an on-premises device to Azure SQL. You need an Azure storage account for an Azure SQL database. You also must have Microsoft SQL Server Data-Tier Application Framework (DacFx) and SQLSysCLRTypes on your Administration Server.

To perform the migration of the database:

1. Make sure that you have created an Azure storage account.
2. Make sure that you have SQLSysCLRTypes and DacFx on your Administration Server.

   You can download Microsoft SQL Server Data-Tier Application Framework (17.0.1 DacFx) and SQLSysCLRTypes (choose the version corresponding to the version of your SQL Server) from the official Microsoft website.

3. On your physical Administration Server (on-premises), run the Kaspersky Backup utility to back up Administration Server data with the Migrate to Azure format option enabled.
4. Copy the backup file to the Azure Administration Server.

   Make sure that you have enough disk space on the Azure virtual machine where the Administration Server is installed. In the Azure environment, you can add disk space to your virtual machines to accommodate the process of database migration.

5. On the Administration Server located in the Microsoft Azure environment, start the Kaspersky Backup utility again in interactive mode.

   The Backup and Restore Wizard starts.

6. At the Select action step, select Restore Administration Server data and click Next.
7. At the Restore settings step, click the Browse button next to the Folder for storage of backup copies.
8. In the Sign In to Online Storage window that opens, fill in the following fields and then click OK:
   • Azure storage account name

     You created the name of the Azure storage account for working with Kaspersky Security Center.

   • Backup folder

     Specify the location of the storage folder that is meant for backup.

   • Azure Subscription ID

     You created the subscription on the Azure portal.

   • Azure Application password

     You received the password of the Application ID when you created the Application ID.

     The characters of the password are displayed as asterisks. After you begin entering the password, the Show button becomes available. Click and hold this button to view the characters you entered.

   • Azure storage access key

     Available in the properties of your storage account, in the Access Keys section. You can use any of the keys (key1 or key2).

   • Azure SQL server name

     Available in the properties of your Azure SQL Server.

   • Azure SQL server resource group

     Available in the properties of your Azure SQL Server.

   • Azure Application ID

     You created this application ID on the Azure portal.

     You can provide only one Azure Application ID for polling and other purposes. If you want to poll another Azure segment, you must first delete the existing Azure connection.

9. Select the Migrate from local backup option.

   The Browse button becomes available.

10. Click the Browse button to choose the folder on the Azure Administration Server where you copied the backup file.
11. Click Next and complete the procedure.

Your data will be restored to the Azure SQL database by using your Azure storage. You can use this database for further work with Kaspersky Security Center in the Azure environment.

The addresses of web pages cited in this document are correct as of the Kaspersky Security Center release date.