All versions of Venafi TPP on MS SQL Server
When creating a new, or upgrading a Venafi TPP installation, some scripts need to be run directly on the Database server. These scripts perform several important functions
Most of the scripts require SysAdmin rights to run. Some can be run with DBO rights on the Venafi designated Database, but not all.
These scripts include the following, along with a brief description of what each does.
- CreateDB - This script is used to create the base or shell of the DB that Venafi will use. It creates the tables, scripts, and triggers necessary for storing information.
- mssql_update - these are used to upgrade the database structure (originally created with CreateDB above) to the new format.
- Sample-Grants - this is used to apply rights to the service account used by Venafi to read and write data into the database (configured during installation). In older product versions, there were update "versions" of this script as well.
At least one SQL command found in some of these scripts requires SysAdmin:
RAISERROR ........ WITH LOG
This is found in the CreateDB scripts and in some of the Upgrade scripts.
There may be others, but this should be sufficient reason to ensure the DBO is either present and personally running the scripts, or has granted another user the appropriate rights.