FactoryTalk DB Connection Config Utility

How do I open the FactoryTalk DB Connection Config Utility?
  • Click
    Start > Rockwell Software > FactoryTalk DB Connection Config Utility
    .
The
FactoryTalk
DB Connection Config Utility simplifies the configurations needed for using Windows authentication to access database.
For distributed applications, run this utility on each application server, including FactoryTalk View HMI servers, FactoryTalk Linx, FactoryTalk Alarms and Events, and redundant partners if redundancy is enabled.
The utility can deploy the required services and configuration via user interface or command lines.
Choose an account type to implement Windows authentication:
  • Windows built-in Network Service user
    Choose this option to add the Network Service account as the new SQL Server logon account. If all application servers and SQL Server are on the same computer, run the utility on the computer. After that, clients connected to the applications can access the SQL Server. If application servers and SQL Server are on different computers in a domain, run this utility on each computer.
  • Pre-configured FactoryTalk Data Access Local group
    FactoryTalk Data Access is a local group installed by FactoryTalk Services Platform. Choose this option if your application servers and SQL Server are on the same computer. It adds system local group (FactoryTalk Data Access) as the new SQL Server logon account. The pre-configured local group users can access the SQL Server. You need to provide a user account whose password does not expire. If the previous password of the user account expires, rerun this utility to provide a new password.
    Users must be added to this group manually through the Windows user management console or this utility.
  • Active Directory domain group
    Choose this option to add the Active Directory domain group as the new SQL Server logon account. Users of the domain group can access the SQL Server. This applies to applications that are hosted within multi-computer domain environments. You need to provide a domain user account whose password does not expire. If the previous password of the user account expires, rerun this utility to provide a new password.
    Your domain controller needs to have an Active Directory domain group. After the configuration, restart your SQL Server computer.
  • Group Managed Service Account (gMSA)
    Choose this option to add group Managed Service Account (gMSA) as the new SQL Server logon account. To use more gMSA accounts, add them to the security group that is manually added to the SQL Server. This applies to applications that are hosted within multi-computer domain environments where enterprise service users are available for use by applications.
    If you have a set of devices that need to access the database, before using this method, create a gMSA account on the domain controller and register this gMSA account to each domain computer that needs to use the database. For more information, see Getting Started with Group Managed Service Accounts from Microsoft.
    TIP:
    This method only supports
    Windows Server
    2012 R2 or later, Windows 10 or later, and SQL Server 2014 or later.
    Before using this method, install Hotfix for Windows Server 2012 R2 (KB2998082).
    If you want to use the gMSA security group as the new SQL Server logon user, add the gMSA security group that includes the gMSA account used in this utility to SQL Server after configuration of this utility.
Provide Feedback
Have questions or feedback about this documentation? Please submit your feedback here.
Normal