Veriato Recon / 360. Version 9.0.3

Transcription

1 Veriato Recon / 360 Version /3/2018

2 Upgrade Guide January 3, 2018

3 Table of Contents Before You Begin... 1 What's New... 1 How the System Works... 1 Upgrade Support... 6 Update Antivirus Exclusions... 8 Upgrade Options Upgrading SQL Express to SQL Express Upgrading Using an Existing Full SQL Server Database Upgrading an Express Quick Install with Full SQL Setting up SQL Server 2016 Standard Setting up Hosted SQL Server on Azure Install the Database Separately The Master Login Account Installing a Standalone Management Console Completing the Upgrade Activating a Veriato Recon/360 upgrade Restoring a Legacy Backup Updating (Reinstalling) Recorders Adding Recorders Adding Android Recorders Configuring After Upgrade Contact and Copyright Contact Us Copyrights and Trademarks Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. iii

4 Before You Begin What's New Before you upgrade, read the Release Notes. Version Look for these additions and improvements: Immediate alerting on keywords at the client. Return relevant screenshots when a keyword alert is triggered (Veriato Recon and Veriato 360). Accelerated screenshots option as an "action" for Event Alerts (Veriato 360). Pre setup help and testing for antivirus detection on Quick Installs (and evaluations). Improvements in device deployment, status and notification. Management Console control over backups and backup location for File Storage. Multiple license selection for Manual Setup files. Automatic licensing option to assist with Citrix VDI deployments. Ability to seed and control names of client files. If you are upgrading from version 8.5 New architecture Allows scaling to 100 s of thousands of endpoints. Quick return of data Data recorded at a device appears in the dashboard within 4 minutes. Android device recording Allows logging calls and locations, capturing the mobile screen and more. Enhanced Active Directory integration Facilitates management of Recorders. Compromised Credentials A new Recon alert analyzes and detects unusual VPN logons to assist in discovering privilege escalation or a breach. Single Management Console The former Control Center and Dashboard features are now combined in one, easier to use application. Deployment progress status Provides status and detailed errors that can occur between deployment and a fully operational Recorder. Data warehouse view Gives you the flexibility to use SQL reporting tools as you wish. How the System Works To capture data, Veriato Recon/360 relies on endpoint Recorders, load balancing (if enabled), application server(s), and a database. The Management Console accesses the database through the server to provide status and views Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 1

5 of the data. When you install using the Veriato Setup program, you install a Veriato Database, the "primary" Veriato Application Server, and a Management Console. NOTE: Contact Veriato Technical Support for assistance in setting up multiple Application Servers. Installing all components on one server You have several options when you first install. The default is to install all server components, including a Management Console, on a single computer the computer you are installing on. The "Quick Install" and "Install Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 2

6 with Options" provide a single server installation with SQL Server Express (limited database size). Use "Install with Options" to select an existing SQL Server (2016 Standard edition) to provide your database. When you use and existing SQL Server, you will need to (1) create a database instance before you begin, (2) provide the SA SQL account and the name of the SQL instance during the installation. NOTE: Screenshot and Attachment files (File Storage) can take up a great deal of disk space. The default location is on the same, single server. You can direct this storage area to a separate hard drive during "Install with Options," if you wish. Installing the database on its own server For a large number of clients generating a lot of data, you may want to install SQL Server and the Veriato database on a separate computer. After installing SQL Server 2016 (or setting up access to a web hosted SQL Server), create a new, empty SQL Server instance. You will install the Veriato database first, on the SQL Server computer, using the "Install Database Only" option. When the Veriato database is set up, install the Veriato Server at its computer using "Install with Options." Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 3

7 IMPORTANT: If you plan to connect to a SQL Server Standard database, create an empty database instance first (even if you are upgrading). Using a separate file storage server To ensure that many screenshots will not interfere with performance, set up a separate file server. NOTE: The file storage location needs a direct connection to the application server. Contact Veriato Technical Support for assistance. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 4

8 Veriato Database The database instance when hosted on SQL Server Standard (or another "full" edition) provides a 30 GB admin database and a 50 GB Reporting database, with growth by 15% as needed, and no maximum size. The database when installed with SQL Server Express has a maximum size and is limited to a single, 9 GB maximum size for admin and reporting databases. Veriato Application Servers Add Application Servers to speed up performance and contribute to efficient load balancing. One or more servers relay data uploaded by the Recorder to the database. A "load balancer" can intercepts Recorder data and passes it to an application server, which in turn routes it to the database. The entire process, even for hundreds of thousands of endpoints, takes a few seconds. Only one database is necessary, even for the largest installations. Veriato Endpoint Recorder The Recorder can be deployed en masse to endpoint computers from the Management Console or by creating a manual setup file to execute at each device by other means (such as SCCM). A license is required for each device recorded. Use a manual setup file to install a Recorder app on Android mobile devices. Management Console The Management Console provides dashboards, data views, configuration, and access to all components, as permitted by each user's login account. Install as many Management Consoles as you need. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 5

9 Upgrade Support If you are currently running Veriato Recon version 8.5, you can install over your installation. Please consult the Upgrade Notes before you begin for important changes. General requirements Disk space If upgrading from version 8.5 version to 9.0.2, account for double the disk space consumed by your current data during setup. Recorder versions pre 9.x not supported 8.5 Recorders continue to record, but do not return data until you re install ("push") the latest version, downloaded on product activation. Return the server to its default address If you are upgrading from version 9.0 R2 and have changed the server URL, before upgrading, return the server address to the original device address. You can then reapply the desired address following the upgrade. Veriato Server See detailed Requirements and Guidelines for Data Storage for additional information. Minimum of 23+ GB free to upgrade. 64 bit Windows Operating System required 32 bit systems are no longer supported. Windows 8.1, Windows 10, Server 2012 or Server 2016 Windows 7 is supported ONLY if connecting to SQL Server on another machine. 8 GB RAM required Quad Core i7 or better required Ports used: TCP 443 (HTTPS) TCP (HTTPS) UDP 1434 for SQL Browser Service TCP 1433 (or random/custom) for SQL instance (check the error log for the port number) Note: Because the feature has been redesigned, 360 Event Alerts will NOT be migrated with version 8.5 data. If you use 360 Event Alerts, while your version 8.5 is still in place, you may want to print each alert definition. Select File Print from the Modify Alert dialog box menu. Veriato database upgrade Upgrade the database first If have distributed components or plan to distribute components, upgrade in this order: (1) the Veriato database, (2) the Veriato primary server components, and finally (3) Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 6

10 any 9.x secondary app servers or Management Consoles. Note that the Version 8.5 Dashboard and Control Center are no longer used. One database You can migrate only one STORAGE database when upgrading to MS SQL Server Express. If you move to full SQL Server, you will be able to migrate all STORAGE databases and all archives into the single database. One File Storage location When "installing over," your existing file storage location (e.g., C:\VeriatoData) will be used. Multiple file storage locations can be manually copied into the new, single file storage location. Moving to SQL Server Standard If you plan to upgrade to SQL Server standard, configure the SQL Server instance locally or in the cloud, and then install the Veriato database before installing other components. Recon/360 Recorder (computers) Recorders will NOT return data until they are upgraded to version 9.x. Windows 10, 8, 7, Windows Server 2016, 2012, 2008 R2 are supported. Windows Vista is no longer supported, Mac OS X or higher with 64 bit Intel processor is supported. Mac 10.9 is no longer supported. 1.5 GB free disk space is recommended. Recon local data storage requires more than 360. Network access to server via TCP/IP (Windows Domain or Workgroup) is required. Administrator access to the computer for remote installation. You now provide endpoint credentials separately when scheduling installation. 360 Recorder (Android mobile) Install the Recorder app directly to each mobile device. See Deploying to Android. Android OS 5.0+ mobile phone or tablet is required. Install the required Chromium app (145 MB). Install the Veriato Recorder app (24 MB). Cell network or wireless connection to server is required for data uploads. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 7

11 Update Antivirus Exclusions A few antivirus and anti spyware programs will scan for and attempt to remove Veriato files on a computer. Files may be removed during or after Veriato Recon/360 installation, preventing the installation from working properly. Keep in mind that upgrades include new server or client files, which may require updating your antivirus exclusions. To find out how your antivirus interacts with Veriato, consult the product specific information provided in the Veriato Antivirus Guide, keeping in mind that antivirus products are constantly being updated. Make the suggested changes to your antivirus policies BEFORE installing Veriato to avoid frustration. Suggestions may include: Temporarily disable the antivirus while running the setup 1. Find the antivirus icon. At the computer where you will run the Veriato Setup program, look in the windows notification area in the lower right corner of your desktop. Active antivirus programs usually display an icon directly on the task bar or when you click an up arrow in the notification area. 2. Right click the antivirus icon and select "Disable <Program>." If a "disable" option is not available, open or modify the program and find the control to temporarily disable it. (If the install program needs to restart the computer due to prerequisites installation, you may need to turn it off again.) 3. When finished, re enable antivirus scanning. When Veriato files are excluded, re enable antivirus scant. Exclude risk names If your antivirus solution has names for "known risks," such as Symantec or Trend Micro, enter the appropriate risk names. Refer to the Antivirus Guide for your particular solution to learn which risk names to exclude. Exclude Veriato Server folders or files Set exclusions BEFORE downloading and running the Veriato Setup. If you use enterprise level antivirus, create a network wide exclusions policy to cover any computer that will host Veriato Server components. Otherwise, set exclusions at each computer where you plan to run the Veriato Setup in the local antivirus console. Run an antivirus scan on server computers before deploying Recorders to test. Refer to Excluding Server Files from Scanning. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 8

12 Exclude Veriato Recorder files across the network Before re installing you deploy Recorders across the network, work with a test Windows computer to see how your antivirus solution reacts. If files are detected, take steps to exclude them. If you use an enterprise antivirus solution, such as McAfee or Symantec, open the management application and exclude the Veriato Recorder files for all Windows devices (and VMs) on your network you plan to manage. Build this step into your network wide endpoint policy and virtual machine setup. If you do NOT use an enterprise solution, go to each endpoint Windows computer and exclude the Veriato Recorder files within the antivirus control panel. If the problem lies in additional local applications, such as Windows Defender, you could disable the program as part of group policy to avoid any future problems. Refer to Excluding the Recorder from Scanning. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 9

13 Upgrade Options Upgrading SQL Express to SQL Express The fast and easy Quick Install option automatically installs or upgrades a size limited SQL Server Express database. If you install version 9.x over version 8.5, a side by side installation creates a new SQL Express database instance and imports a single STORAGE database from your current installation. You will provide a Master Account during the installation that replaces your current SA account. Additional STORAGE databases and archives cannot be imported. NOTE: The SQL Server Express database has size limit of 9 GB for admin and reporting data. It cannot grow larger. For these reasons, ongoing use of SQL Server Express is recommended only for evaluations or installations with fewer than 100 clients. See Guidelines for Data Storage. Step One: Decide how to handle multiple STORAGE databases If your current installation has only one STORAGE database, you can skip this section. If you are installing over a version 8.5 installation with multiple databases, an error message appears. You must exit the setup and choose one of the following options to continue: Archive all STORAGE databases except one. Open the version 8.5 Control Center and archive all STORAGE databases except the current (not full) one. When you install over the current installation, the single STORAGE database remaining will be imported. See below. Or, start the setup and install as new on a different machine. You may decide to keep your entire version 8.5 installation and its data separate and go forward with new data on a separate machine. Or, purchase and install SQL Server Standard 2016 before upgrading. A full SQL Server installation will automatically import all STORAGE databases and archives into the new, single SQL Server instance. See Upgrading SQL Express to SQL Standard. Or, upgrade to SQL Server Standard following the Veriato upgrade. If you archive all STORAGE databases except one in order to proceed with the Veriato "Quick install" upgrade, you can later upgrade your SQL Server Express installation to a full SQL Server edition. The SQL upgrade automatically converts your limited Express database to an expanding, unlimited database instance. Following the upgrade, you will be able to import your 8.5 archives from the version 9.x Management Console. Option: Archive all but one database and install over If you have multiple STORAGE databases, follow these steps. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 10

14 1. Log in to your version 8.5 Control Center. 2. Open Database Backup & Restore. Find the list of STORAGE databases. 3. Archive all databases except the most recent. In the list of databases, select a full STORAGE database, right click and select Archive. Repeat this for all STORAGE databases until only your most recent, not yet full STORAGE database remains. (You can only perform an archive if the database is full.) Keep in mind that the limited size SQL Express database will not allow restoring your archives, so archived data will be unavailable until you upgrade to full SQL Server. 4. Create a Full Backup. Create a backup of the remaining, single STORAGE database, in case you need it later. 5. Use Quick Install or Install with Options. If you are using Install with Options, leave "Use existing SQL Server" unchecked as you proceed through the setup. SQL Server Express will be installed and you are prompted to migrate the single database to the new installation. The old installation is no longer available. See Configure After Upgrade. NOTE: Your archives will be unavailable until you upgrade to SQL Server Standard. Option: Install as new elsewhere without upgrading To keep version 8.5 intact while you begin using version 9.0, you can install "as new" on a different machine. Contact Veriato for product key assistance. You will be able to view old data on the old installation and new data on the new installation. However, without restoring old data to the new installation, you cannot aggregate the data. 1. Run the setup on a new machine. Make sure it meets system requirements and has ample disk space. 2. Use Quick Install or Install with Options. If you are using Install with Options, leave "Use existing SQL Server" unchecked as you proceed through the setup. SQL Server Express will be installed, but no migration takes place. 3. Stop the Data Vault Server in your 8.5 installation. After Veriato 9.0.* is installed, and before "Adding" Recorders, return to the old Veriato Server and stop the Data Vault. This causes Recorders to keep data locally until they have a server to return to. 4. Restore your version 8.5 backup. Do this in the Management Console, in System Management Backup & Restore Browse for Restore Restore Legacy Data. See Configure After Upgrade. 5. Upgrade Recorders to version 9.0. You must upgrade all Recorders to version 9.0 to retrieve device status and data in the new 9.0 Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 11

15 Management Console. The "push" install will provide the new server location, and Recorders will upload data to the correct location. Steps for "Installing Over" 1. Start the setup Following purchase, go to enter your product key, and download the setup package. Extract the package, open the extracted folder, and open the Installer folder. Double click the VeriatoSetup file to start the installation. 2. Choose to upgrade/migrate or to install without upgrading. If you are "installing over," when the setup detects the Veriato 8.5 installation, you have the choice of automatically migrating your data (YES) or installing side by side without upgrading (NO). If you select NO, you can migrate your data after the installation is complete from the Management Console. See Restoring a Legacy Backup. 3. Welcome At the Welcome panel, click "More About This Upgrade" to review changes. Click Next. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 12

16 Some important changes are highlighted. Click each to read, and then click Next. License Read the end user license agreement, press Agree, and click Next. 4. Options for upgrading Enter the SA password for your current Veriato 8.5 installation. \ Remove version 8.5 following 9.0 installation: This setup can automatically remove the old server version following the upgrade. Clear this option to keep the old version active and intact after this upgrade. Check this option to remove the old version. Backup version 8.5 data: This setup can perform a full database backup on version 8.5 before proceeding. Clear if you've already backed up the data and check to create another backup now. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 13

17 Press Next. 5. Options for installing To upgrade using SQL Express, select Quick Install or Install with Options (and do not select "Use an Existing SQL Server"). Select the Quick Install if you do not Antivirus Because antivirus can interfere with this installation, we recommend "excluding" Veriato files and disabling scanning during the Veriato installation. Note that file names and folders have changed with this upgrade! Press the blue buttons to learn more and get a list of files to exclude. Press Next. need to redirect the File Storage location. Your existing file storage will be used. Services Installation Path The Veriato Service will be installed in this folder, on this machine. The default location is C:\Program Files\Veriato. If you wish, click Change and browse to a different folder or drive (preferably on this machine). Management Console Installation Path The Management Console installed WITH the Veriato Server will be installed at this location. If you wish, click Change and browse to a different folder or drive on this machine. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 14

18 6. Antivirus Because antivirus can interfere with this installation, we recommend "excluding" Veriato files and disabling scanning during the Veriato installation. Note that file names and folders have changed with this upgrade! Press the blue buttons to learn more and get a list of files to exclude. Press Next. 7. Create the master login account You are creating the primary, full access login account for this Veriato Recon/360 installation. For complete details, see The Master Login Account. Address Enter your address. You can use your address to log in to the Management Console. Uncheck the "Use as login name" box to enter a unique SQL user name. Password Enter a password for the account that meets the displayed criteria. Type the password again to verify. How to send alert s can be routed through a Veriato Server so that you don't have to set up your own SMTP relay at this time. Your above address will be the first "alert operator." Read more about service options. Press Next. to begin installing Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 15

19 8. Wait for the installation to complete, then press Finish. 9. If you chose to migrate data as part of the setup, wait for the migration to complete. Progress is shown at the bottom of the desktop. When the migration is finished, choose to Restart Now. If you plan to use Veriato Recon/360 with SQL Server Standard, you'll need to install (or connect to a cloud version of) SQL Server and create a database instance BEFORE running the Veriato Setup. For complete SQL Server installation information, consult the Microsoft website. NOTE: If you plan to use Veriato Recon/360 with SQL Server EXPRESS and are aware the limitations, you can skip this step. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 16

20 If the login prompt does not appear, use Windows to find and start the Veriato Management Console. Log in using the account you just created. Upgrade errors If you receive errors during the upgrade, or if the upgrade fails, review the above steps and the requirements. Contact Veriato Technical Support for assistance. Manage data following installation Keep the following limitations in mind while using version 9.0 with SQL Express: Because there is only ONE database and you will NOT be able to Archive data going forward, you will need to trim data from the database as it becomes full. Use System Management Data Retention in the Management Console to do this. For archives of all data, export detailed reports from the Management Console. Each data view provides some kind of export to file, and Screenshots can be exported as individual slides or "movies." There is only one File Storage location. You can use Windows to copy in additional folders to your single File Storage location. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 17

21 Upgrading Using an Existing Full SQL Server Database Use this option to "install over" and connect to an existing SQL Server database. If you have multiple file storage shares, or are installing "as new," you will need to migrate your File Storage (base path) folders to the new, single File Storage location (default is C:\Veriato360 on the Veriato Server computer). You can do this using Windows. Prepare the SQL Server database instance Upgrade to SQL Server 2016 before running the setup. Version 2016 is required. If your current SQL Server database is not 2016, upgrade now. If you choose to use a hosted database, be sure to choose SQL Server 2016 or a 2016 Enterprise version. Create a new (empty) database instance. An empty database instance is required for upgrading from version 8.5. Even if you currently full SQL Server with Veriato 8.5, you need a new instance with a new name before starting the setup. The upgrade process configures the Veriato Recon/360 database for the new instance you have created and migrates older data into it. Have SA credentials ready. You will point to the location of SQL Server and new instance from the Veriato Setup. You'll need to provide "root" System Administrator account credentials to your SQL Server so that the Veriato Setup can complete database configuration. (You will create a new login account for Veriato.) Upgrade by installing over If your current machine meets system requirements, you can install over your Veriato 8.5 installation. 1. Start the setup. At the computer where you want to install Veriato, run the VeriatoSetup file. 2. Choose to upgrade/migrate or to install without upgrading. When the setup detects a Veriato 8.5 installation, you still have the choice of automatically migrating your data (YES) or installing side by side without upgrading (NO). If you select NO, you can migrate your data after the installation is complete from the Management Console. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 18

22 3. Welcome At the Welcome panel, click "More About This Upgrade" to review changes. Click Next. 4. Some important changes are highlighted. Click each to read, and then click Next. 5. License Read the end user license agreement, press Agree, and Next. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 19

23 6. Disable antivirus and set exclusions. There are many new files with this version! Press the blue buttons to learn more and get a list of files to exclude. Press Next. 7. Enter your SA account credentials. Type the SA password for our database instance to access your current data. The setup then presents some options on how to handle the migration. These operations are performed AFTER the installation as part of the migration process. Remove version 8.5 following 9.0 installation Leave this option checked if you want it cleaned off the machine following installation. Clear to leave the previous installation intact. Backup version 8.5 data Leave this option checked if you want the setup to create a full backup before it removes the 8.5 installation. Click Next. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 20

24 Screenshots and Attachment Migration If you have multiple file storage locations, the Veriato Setup detects them and offers the option to migrate the files or to skip migration. You won't see this panel unless the locations are detected. If you choose to migrate the files as part of the setup, the File Storage location in the next step will need to have enough disk space for all files. 8. Choose Install with Options. You now proceed to the "new" install portion of the setup. If you chose to do so, the setup automatically upgrades all of your STORAGE databases to the new single database. Use an existing SQL Server installation Check to use a full MS SQL Server (recommended) preinstalled on this or at another location. Services Port The default communication port for Recorder to Server communication is 443 at the Server computer. Change this only if there is a conflict on your network. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 21

25 Services Installation Path The Veriato Service will be installed in this folder, on this machine. The default location is C:\Program Files\Veriato. If you wish, click Change and browse to a different folder or drive (preferably on this machine). Management Console Installation Path The Management Console installed WITH the Veriato Server will be installed at this location. If you wish, click Change and browse to a different folder or drive on this machine. SQL Server Data Path The directory where the Veriato database instance stores data. If installing SQL Server Express ("use existing SQL Server" is not checked), you can direct the data to a local drive local to this SQL Server Express installation. Leave this blank to use the SQL Server data location or SQL Server VM location specified a cloud database installation. Otherwise, specify the complete machine path (\\server02\share\mydata) to match the location already set for data in the Database only installation. Screenshots and Attachments Path Indicates where captured Screen Snapshot and Attachment files are stored (the File Storage folder). If you are upgrading on the same machine, your current File Storage location is maintained. Otherwise, the default location is set to C:\VeriatoData. Select Change and navigate to any folder local to the Veriato Server where you want files stored. Note: The Veriato Service requires full privileges at database, file storage, and backup locations. When all default options are selected, it is installed as a local service. If you enter a remote location, you will be prompted for network credentials with access to the location(s). 9. Your File Storage location is maintained. You don't have to migrate files; they remain available to the new database instance. 10. Connect to SQL Server. If you selected the option to use an existing SQL Server installation, a second Options panel appears. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 22

26 If you did NOT choose the option, this panel does not appear. SQL Instance Name The name of the SQL Server database instance you have created for Veriato installation purposes, or the name of Veriato database instance that has already been installed (using "Install Database Only"). SQL Username The root login account to the SQL Server installation you will be using, usually SA. The Veriato setup needs full access to SQL Server to continue. SQL Password The password for the SA username you provided. SQL Server Address Specify a fully qualified device name (computer.domain) or IP address to locate the SQL Server installation you want to use. SQL Server IP Port Normally SQL Server communicates at TCP/IP port 1433, but will dynamically select available ports for its named instances. If SQL server will communicate on a fixed port for your Veriato instance, enter the port here. Do NOT enter a value here unless you are fully aware of your network infrastructure. 11. Create a Master Account. Moving on to the new installation, now you create your new Master Account. The SA account will no longer be used. For the new "Master" account, you can use either an address or a unique user name (uncheck the "Use " option). Create a password and type it again to confirm. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 23

27 Address Enter your address. You can use your address to log in to the Management Console. Uncheck the "Use as login name" box to enter a unique SQL user name. Password Enter a password for the account that meets the displayed criteria. Type the password again to verify. How to send alert s can be routed through a Veriato Server so that you don't have to set up your own SMTP relay at this time. Your above address will be the first "alert operator." Read more about service options. 8. Wait for the installation to complete. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 24

28 Then, press Finish. 12. If you chose to migrate data as part of the setup, wait for the migration to complete. Progress is shown at the bottom of the desktop. When the migration is finished, choose to Restart Now. Install an upgrade as "new" If you are installing on a new machine, or have installed the database separately, follow this procedure. Contact Veriato Technical Support for further questions. 1. Disable data uploads and create a full backup. Stop the current Data Vault service at the current server machine to force Recorders to keep newly recorded data at the local computer. Create a full backup of your version 8.5 database. Include Snapshots and Attachments. 2. Start the setup. Download the setup package, extract it, open the extracted folder, and open the Installer folder, Double click the VeriatoSetup file to start the installation. Follow instructions in Install with Full SQL. 3. Configure the upgrade. Following setup, open the Management Console and follow instructions in Configure After Upgrade. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 25

29 Restore your 8.5 database backup. Copy the File Storage files to the default C:\Veriato360 location (or the location you request for file storage). Upgrade errors If you receive errors during the upgrade, or if the upgrade fails, review the above steps and the requirements. Contact Veriato Technical Support for assistance. Next steps If the login prompt does not appear, use Windows to find and start the Veriato Management Console. Log in using the NEW account you just created (your old SA account will not work). Once in the Management Console, follow instructions in Configure After Upgrade for all steps necessary to complete your setup, including: 1. Activate your product key. 2. Restore your 8.5 database backup, if necessary. 3. Copy your File Storage folders, if necessary. 4. Update ALL Recorders to And the remaining steps to configure your upgrade. See Configure After Upgrade. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 26

30 Upgrading an Express Quick Install with Full SQL The fast and easy Quick Install option automatically installs a size limited SQL Server Express database. SQL Server Express presents some challenges, both for restoring Veriato Recon/360 version 8.5 backups and archives, and for ongoing access to data (see Guidelines for Data Storage). However, it is possible to install using the Quick Install and later upgrade SQL Server Express to SQL Server Standard or Enterprise. This procedure can be used following product evaluation. Preparation 1. Acquire SQL Server Standard 2016 or Enterprise 2016 from Microsoft. 2. Make sure the computer you are installing on meets requirements. NOTE: After upgrading SQL Express to full SQL, you will be able to migrate all archives into the single, expanding database. The database is converted on upgrade. Install Steps 1. First, install Veriato Recon/360 with MS SQL Server Express 2016 (either "Quick Install" or "With Options"). 2. At any time following installation, copy a purchased SQL Server installation package to the Veriato Recon/360 computer. 3. Run the SQL Server installer to upgrade the SQL Server Express edition. At the opening installation panel, select Maintenance Edition Upgrade. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 27

31 4. Enter the product key for your purchased full SQL Server 2016 and click Next. 5. Accept the license terms and click Next. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 28

32 6. The installer should find and display the Veriato SQL Server Express instance on this machine. Click Next. 7. At the "Ready to upgrade edition" panel, click Upgrade. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 29

33 8. A summary of component upgrades shows the completed upgrade. Click Close. You now are operating with full SQL Server instead of SQL Server Express. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 30

34 Setting up SQL Server 2016 Standard If you plan to use Veriato Recon/360 with SQL Server Standard, you'll need to install (or connect to a cloud version of) SQL Server and create a database instance BEFORE running the Veriato Setup. For complete SQL Server installation information, consult the Microsoft website. If you're upgrading Veriato Recon/360 with SQL Server Standard installation, you still need to create a new database instance. NOTE: If you plan to use Veriato Recon/360 with SQL Server EXPRESS and are aware the limitations, you can skip this step. 1. Download a SQL Standard 2016 package from Microsoft. If you have an existing SQL Server installation, make sure it has been upgraded to Run the SQL Installer elevated as Administrator. 3. Click Installation in the left navigation. Select "New SQL Server stand alone installation or add features to an existing installation." 4. Enter your SQL Server product key. At the Product Key panel, enter your SQL Server product key and click Next. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 31

35 5. Accept the license Agreement. Click Next. 6. At the Product Updates panel click Next. 7. At the Feature Selection pane: Be sure to check the following: Database Engine Services Client Tools Connectivity Client Tools Backwards Compatibility Leave the default instance root directory, or change it if you wish. You'll need the instance root directory during Veriato Setup. Click Next. 8. At the Instance Configuration panel, set up the new instance. Select Named Instance and give your Veriato Database instance a name. Any name will do, but it's best to specify something that is NOT the SQL default. We use VERIATO360 in documentation examples and as the default for SQL Server Express installations. The instance ID is automatically supplied. You'll need the instance name during Veriato Setup. Click Next. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 32

36 9. Note the SQL Service accounts. On the Server Configuration panel leave the default settings. Click the Collation tab. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 33

37 10. Under Collation, check language settings. Veriato Recon/360 requires Latin1_General settings. Make sure Collation panel selections for Database Engine and Analysis Service are as shown below. Click Next. 11. On Database Engine Configuration select Mixed Mode. Type a secure SQL Server System Administrator (SA) password and confirm the password. This SA password is required during the Veriato Setup. For emergency use, assign a local Windows Administrator user the same SA access rights:use the current login account Add Current User, or someone else Add. Specify credentials as prompted. Click Next. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 34

38 12. Select the "Data Directories" tab and note the default directories. You can change them to another location on the local machine, if you wish. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 35

39 You'll need the System database directory during Veriato Setup. 13. For advanced setup, select TempDB. If you are configuring an advanced, performance setup, select the "TempDB" tab and specify the log file configuration. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 36

40 11. Press Next and then press Install. Next step: Install the Veriato Server or Install the Veriato Database Only, if remote Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 37

41 Setting up Hosted SQL Server on Azure Customers who prefer not to purchase and management a SQL Server Standard installation can purchase SQL Server on a Virtual Machine (VM) through Microsoft Azure. Azure provides ready to go SQL Server on a variety of Windows VM images that can connect securely to your on site Veriato Server. Acquire a Microsoft Azure Account If you already have a Microsoft login, log in to Microsoft. Otherwise access Azure and create an Azure account. Select a SQL Server 2016 VM Image Microsoft Azure offers several SQL Server Virtual Machine plans of varying price points. Contact Microsoft for complete information on subscription and VM pricing. us/resources/videos/create windows server virtual machine/ 1. Log in to the Azure portal using your Microsoft account. 2. Click New or Create resources to set up a VM resource on your account. 1. Under "New," select Compute and Windows Server 2016 Datacenter. Or, you can display Everything and select "SQL Server 2016 SP1 Standard on Windows Server Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 38

42 2016." 3. Leave Resource Manager selected as the deployment model. Click the Create button to create a virtual machine. Fill in the form to create a VM (see below for help with each field) and click OK. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 39

43 Name Give the VM machine a name. This will be the name of your SQL Server computer. VM disk type HDD is less expensive; SSD provides better performance. Your selection affects VM image selections available. User name Account name you will use to log in to the VM. Password The password to log in to the VM. The password must be 12 characters long and contain 3 types of characters (letters, numbers, and special). Subscription If you already have a Microsoft subscription, select it here for better pricing. Otherwise, "Free Trial" appears. Resource group Create a new Azure resource group for your account or add this VM to an existing resource group. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 40

44 Windows Server license Click Yes if you have a Windows Server license to use. 4. Choose the virtual machine image. Note that options for disk type HDD are different from SSD. Click View All next to "Recommended" for more choices for your selected drive type. Scroll down to find the optimal VM image. A2 Basic has been available as a machine that meets Veriato requirements and serves as an inexpensive trial; however, the choices you see may be different, as offerings change. Click on your VM choice and then on Select at the bottom of the window. 5. Configure the VM settings. In this case "Use Managed disks" was enabled, but all other options were left at the default. The default "new" network will be your resource group name plus "' vnet." The default network security group (firewall) Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 41

45 is named from your VM name plus " nsg." No specific settings are required for the Veriato Database. Click OK to continue. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 42

46 6. Configure SQL Server settings. SQL connectivity Select Public (Internet). Port The default SQL port is 1433, but you may specify a different one (important info for your Veriato installation). SQL Authentication Be sure to enable authentication. Login name The username and password you created earlier are displayed as the default authentication. This is the SQL Server account you will access to install Veriato Recon/360. If you wish, you can create a new account. Storage configuration, Automated patching Default settings are OK. Automated backup Disable this option. Your installed Veriato Database will automatically back up its data. Azure Key Vault integration, R Services Disable. Click OK to continue. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 43

47 7. Check your VM configuration in the Summary. (Note, this illustration shows a Microsoft subscription; yours will show the terms of your trial or purchase.) Click OK. 8. Wait for the server to deploy. 9. Configure the VM to accept remote connections ONLY from the external facing IP address used by your Veriato Server. Go to Network security groups in Azure (use Search if necesssary). Find the your VM security group and select it. Under Settings, select Inbound security rules. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 44

48 Change default allow rdp to allow. Set the Source as your IP address. Change default allow sql to allow, with Source limited to your IP address. Configure SQL Server for Veriato on the VM 1. Open Remote Desktop and connect to your Azure VM remotely. Use the VM machine name and the login account you provided in step #5 above. 2. Access Windows Services on the VM and disable SQL services that will not be necessary to the Veriato Recon/360 database: SQL Server Analysis Services CEIP SQL Server CEIP service SQL Server Integration Services 13.0 SQL Server Integration Services CEIP Service SQL Server Reporting Services Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 45

49 Start the SQL Browser service if it is not already running. 3. If you wish, access SQL Server to create a default Veriato instance. If you do not, the default instance, MSSQL13.MSSQLSERVER, will be used. Install the Veriato database only your VM 1. Copy or download the Veriato Setup from the Veriato website to your VM. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 46

50 1. Run it using Install Database Only. On the options panel, use your SQL Server VM settings. SQL Server Data Path Enter F:\Data, the default path for SQL Server. If you have created a directory for Veriato data, enter the directory name. SQL Instance Name Use the default instance name, MSSQL13.MSSQLSERVER, unless you created a special instance. SQL Username Use the authentication user name you entered in SQL Server settings. SQL Password Use the password you for your SQL Server account (SQL Server settings). SQL Server IP Port If you changed the default SQL port (SQL Server settings), enter the port number here, otherwise leave this blank to use the default. Follow steps to finish the Veriato database installation. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 47

51 Install the Veriato Server on a local server 1. On the network machine that will be your server, run the Veriato Setup again. 2. When you get to Options, select Install with Options and check "Use an existing SQL Server installation." Services Port For the Veriato Service; leave at the default setting unless you need to change it. Services Installation Path Install path for the primary server services and the Veriato Service. Management Console Installation Path Where the application will be installed. SQL Server Data Path Leave this blank. Screenshots and Attachments Path Direct to a separate hard drive to conserve space on your Veriato Server. 3. Click Next and enter your SQL Server VM information. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 48

52 SQL Instance Name The default instance name, MSSQL13.MSSQLSERVER, unless you created a special instance. SQL Username and Password The authentication account you approved or entered in the Azure SQL Server Settings (step #5 above). SQL Server Address The public IP address of your SQL Server VM. SQL Server IP Port If you changed the default SQL port (step #5 above), enter the port number here, otherwise leave this blank to use the default. 4. Follow steps to finish the Veriato Server and Management Console installation. Open the Management Console and test the database connection. NOTE: If you have trouble with any of these steps, contact Veriato Technical Support. Microsoft information is available at: us/services/virtual machines/sql server/ Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 49

53 Install the Database Separately A Veriato installation serving many Recorder endpoints will need the ability to store rapidly accumulating data. Install the Veriato Database separately on a dedicated machine to be assured that data and data backups can be reasonably managed without the worry of running out of disk space due to other reasons. Start a database-only setup 1. Download and run the setup file at your MS SQL Server computer. 2. At the Welcome panel, click Next. 3. End user license agreement Read the license agreement, press Agree, and Next. 4. Options for installing Select "Install Database Only" to view the database install options. The Options panel is where you connect to SQL Server and direct the setup how to configure the Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 50

54 database instance SQL Server Data Path Directory where SQL Server instance will store data. For example, C:\Program Files\Microsoft SQL Server\MSSQL13.VERIATO360\MSSQL\DATA (where VERIATO360 is the instance name). If you wish, select Change and navigate to a location on the current computer you want to use for Veriato data. SQL Instance Name Enter the name of the SQL Server instance you have created for Veriato (it may or may not be VERIATO360). The Management Console will connect to this SQL instance to access data. SQL Username The setup needs privileged access to configure the Veriato instance. Provide your "root" SQL Server username, usually "SA" (System Administrator). SQL Password Enter the password for the SQL Server account you named above. If the username/password is incorrect, an error appears when you click Next. SQL Server IP Port Normally SQL Server communicates at TCP/IP port 1433, but will dynamically select available ports for its named instances. If SQL Server will communicate on a fixed port for your Veriato instance, enter the port here. Do NOT enter a value here unless you are fully aware of your network infrastructure. 5. Press Next to continue. Messages that follow may include: Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 51

55 Database Files Found Are you sure you wish to continue and overwrite these files? There are existing files in the selected SQL Server Data Path. Click Yes to overwrite the files or No to choose a different Data Path. Be careful not to overwrite existing data unless you are ready to! Verifying SQL credentials... An error appears if credentials are incorrect or SQL Server cannot be accessed. Check the SQL Username, Password and Port you entered. Checking space requirements... A message appears if there is not enough free space for database configuration or data files. Checking Screenshots and Attachments path access... A message appears if there is not enough free space for file storage.. 6. Disable antivirus and set exclusions. Find out if your antivirus program will detect and quarantine Veriato files in the Antivirus Guide. When it does, you can disable scanning during installation and/or "exclude" Veriato Server files. Press the blue buttons to learn more and get a list of files to exclude. Press Next. 7. Wait for the installation to complete Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 52

56 8. Then, press Finish. Next, Install the Veriato Server Install the Veriato Server and Management Console at another machine using Install with Options. You will point to this SQL Server machine and specify the configured Veriato SQL instance you just created. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 53

57 The Master Login Account The Master Login Account is the first account created for your Veriato database instance, and has full access and permissions to Veriato features, devices, and users. This will be the login you use the first time you open the Veriato Management Console. If you are upgrading from Veriato Recon/360 version 8.5, your SA login account is replaced by this account (read more about upgrades). address The address identifies a point of contact for Veriato, can stand as the Master Login user name, and provides an initial operator address to receive Recon, 360 Event, or System Health alerts. If this is an evaluation, just provide your own address. Use as login name Check this option if you prefer to use the address to log in. Deselect this option to enter a unique SQL user name, separate from the address. Remember the username and password you choose: you need them to login the first time! Password Type a password for the new Master Login account. Verify the password by typing it again. The password must be at least 6 characters long and include THREE of the following criteria: An uppercase letter A lowercase letter A number A non alphabetic character, such as # ^ _ Do NOT use the characters: / ' " [ ] { } ( ), ;? $ \ or <space> Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 54

58 Type the password again to verify it and continue. NOTE: Make sure this password meets any system security requirements for your own network. Use Veriato secure service When installation is complete and you have installed Veriato Recorders, you'll want to begin receiving alert immediately. The default choice is an service provided by Veriato. This option requires no setup and guarantees you will receive the first the Veriato Server sends. is simply relayed through the Veriato service to the target address. Nothing is retained at the mail server, and no one at Veriato can see your . Read the End User License Agreement for more information. It's easy to switch from this service to another SMTP service following installation. Simply open the Management Console, select Global Options on the top bar, and change the service. Global Options NOTE: The address you specify during installation is automatically added as an operator and is assigned to receive System Health notifications. Following installation, you can edit or delete this operator and change assignment. Use another SMTP service If you are familiar with mail servers and know which one you want to use, select "Use another SMTP service." You will need to provide the host name and a valid account to access the service. A test option allows you to check your settings, and if successful, sends the Veriato Welcome to the address you provided.. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 55

59 Outgoing Server Name of the server host you would like to use. Mail Login Account A valid user login to the server host. Password The login account's password. Use SSL Use security, check only if the host uses SSL for SMTP outbound . Port Change if this host does not use port 25 for outgoing . Send Timeout (sec) Period of time to try sending before timing out. Test Sends a test to the address you provided on the main Account panel using these settings. If the is successfully delivered you see: It's easy to change the delivery details following installation. Simply open the Management Console, select Global Options on the top bar and click Configure Alert Delivery. The Management Console form provides a few more options for refining mail delivery. Global Options Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 56

60 Installing a Standalone Management Console Install a standalone Management Console AFTER you have installed the Veriato Server components. NOTE: Your version 8.5 Dashboards and Control Centers will NOT work with the 9.0 upgrade. 1. Welcome At the Welcome panel, click Next. 2. End user license agreement Read the license agreement, press Agree, and Next. 1. Disable antivirus and set exclusions. 2. Find out if your antivirus program will detect and quarantine Veriato files in the Antivirus Guide. When it does, you can disable scanning during installation and/or "exclude" Veriato Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 57

61 Server files. Press the blue buttons to learn more and get a list of files to exclude. Press Next. 3. Options for installing Select "Install Management Console Only." Management Console Installation Path The folder where the application will be installed. Change the installation folder, if you wish, by clicking Change and browsing to a different folder or drive on this machine. Veriato Server address Enter the fully qualified domain name (FQDN) or an IP address (IPV4 or IPv6) of the device where your Veriato Server is located. An error appears if the device cannot be found. Examples of appropriate entries are: MYMACHINE.mydomain.local Veriato Server Port The Veriato Server communication port, by default 443. If the Veriato Server uses a custom port, change this entry to match. Press Next. An error appears if the server address could not be found. Check your entry and try again. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 58

62 When the server is found, you see "Checking Space Requirements" as the setup checks this computer for Management Console requirements. 3. Wait for the installation to complete and click Finish. You exit the setup, and the Management Console login prompt appears. 4. Log in to test the installation. 5. You don't have to select the Veriato Server, since you just entered it. But if the server can't be found when you're logging in, click the drop down to select or type in the server name. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 59

63 Completing the Upgrade Activating a Veriato Recon/360 upgrade Following a Veriato Recon/360 upgrade, you need to re activate your licenses. If you do not activate the upgrade, recording continues at computers without interruption, but alerting and data uploads will stop until activation is complete. For a newly upgraded installation, activation contacts the Veriato licensing service: Your product key is registered and (if necessary) replaces an older serial number. The single product key will handle all the types and combinations of licenses you need. Your current licenses will be enabled for this version. Any new licenses are added to your installation. NOTE: The activation exchanges encrypted licensing and registration information with Veriato. No other data is exchanged. Online upgrade activation When you open the Management Console following setup, the activation prompt appears. If you are upgrading from version 8.5, your serial number will be converted to a product key. If the computer has Internet access, click Activate Now and wait as the product activates. Activation may take several minutes. A message tells you when activation is complete. To view your licenses, select Configurations Recorder Licenses. Alternate, offline activation If the server does not have Internet access, or if you prefer, use the alternate method of activation. 1. Select Use alternate activation. 2. Click Create a File. An HTML file, UpgradeActivation.html, is created and opens. The file is saved on the desktop. 3. Copy the file to a device that has Internet access. 4. Open the HTML file and click the Request Activation button. 5. A connection is made to Veriato. An activation file is created for you. You can choose to download the file in your browser or have it sent as an attachment. To send , enter a valid address (for example, mname@mycompany.com). If you choose to download, follow normal procedures for downloading a file within the type of browser you are using. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 60

64 Two files will be downloaded: Your license information and the new Recorder Version package. 6. Copy or move the downloaded files or attachments to a location where you can access them from the Veriato Recon/360 server. 7. Use the Browse button on the Activate Upgrade dialog box to locate and open the file. 8. Wait as Veriato Recon/360 is activated and Recorder Versions are installed. A message informs you when the restore is successfully activation. If an error occurs, try the procedure again, or contact Veriato. Alternate activation errors Unable to create the request file There is sometimes a problem creating the file when an old file is still on the desktop. Delete any old activation request files and go through the procedure again. Expired HTML file If you use an out of date file to connect to the Veriato website, you will get an error. The file is good only for 3 days. Go through the procedure to generate a file again. Expired file If you try to load an out of date file into Veriato Recon/360 to complete activation, an error appears. Go through the entire procedure again to obtain a fresh file. Invalid activation file If you browse to and open different file type or a file containing the wrong data, Veriato Recon/360 can't read it and displays an error. Be sure to browse to and open the correct text file. Or, cancel out of the dialog box and go through the procedure again to create a new, valid file. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 61

65 Restoring a Legacy Backup If you did not migrate data while running the Veriato Setup, or if you wish to migrate archives into a full SQL Server database, you can restore from the Management Console to System Management Backup & Restore. If your upgraded installation uses full SQL Server, you can also restore multiple STORAGE databases and archives, adding them to your new, single database. IMPORTANT: Once a backup has been restored, active Recorder clients should appear in the Recorders list. You must update them (using "push" reinstall) to version 9.0+ before they will upload locally held data to the new server installation. If devices do not appear, use Recorders Deployment Add Recorder to add them. Before you begin Keep these points in mind: Use the primary Management Console. Perform the restore from the Management Console installed with your "primary" Veriato Server installation. This insures best results in restoring data and associated files to the File Storage location (local to the Veriato Server). If you will be using non default data storage locations, see Veriato Service Permission Veriato Service Permission. A Veriato 9.0 SQL Server Express instance restores one database. If you are using a SQL Server Express Veriato 9.0 database instance, a backup with one STORAGE database and associated files imports easily. If the backup contains multiple STORAGE databases, it will fail. Contact Veriato Technical Support. A Veriato 9.0 full SQL Server instance restores multiple databases. If you are using a full SQL Server Veriato 9.0 database instance, the restore can handle a backup with multiple STORAGE databases, plus files stored with the backup. A minimum of 23 GB free disk space is required. A restore of an 8.5 backup with one STORAGE database (includes the other administrative and configuration databases) takes about 20 GB. A restore involving multiple STORAGE databases requires an additional 4 GB for each STORAGE database. Keep this in mind as you choose the data location for the restore. The drive needs to be large enough to handle the size of the data. Take no actions during the restore! While the restore is in progress, do not try to use the Management Console. We recommend restoring at a time when other Management Consoles are not in use. If Veriato Recon/360 version 8.5 is still up and running: STOP the Data Vault service before creating the final 8.5 backup from Servers Data Vault in the 8.5 Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 62

66 Control Center. This causes Recorders to hold data locally while you complete the migration process, and insures your backup contains ALL data up to the point of a successful "restore." Restoring an 8.5 backup 1. Copy the backup folder to the computer where the Veriato database is installed. 2. In the Management Console, select System Management Backup & Restore. 3. Select Browse for Restore Restore Legacy Backup from the top bar. 4. Next to "Restore this backup folder," click the browse button and navigate to and select the backup folder. 5. The "To this location" field shows the current path to Veriato data. You can restore the backup to any location on the database computer. If the default location does not have enough disk space for the data set, click the browse button and navigate to and select a different drive. If necessary, add a drive with more disk space. SQL will find and use the data as part of the Veriato instance. Choose whether or not to Include snapshots/attachments. Yes copies any snapshot or attachment subfolders in the backup to the new, 9.0 File Storage location displayed in the field. No skips the files and restores only the database backup. Permission to access the file location is verified. If the Veriato Service does not have access to the location, the files cannot be restored. See The Veriato Service. 6. A SQL Server Express installation will not show the following options. Select All data for a full database restore. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 63

67 7. Click Start Restore. 8. A bar at the bottom of the window shows progress and notes the steps in the restore. When the restore is complete, or if there is an error, the message appears here. NOTE: Version 8.5 backups take the time zone of the local server where they were created. Restoring 8.5 administrative data To restore devices and configurations separately from the full database, select "Only administrative data (devices, profiles, etc.)." Restoring 8.5 archives If you are running a full SQL Server Veriato database instance, the Restore Legacy Backups panel provides the opportunity to restore archives. You must have first restored your 8.5 full backup, or you won't be able to do this. 1. Copy the archive folder to the computer where the Veriato database is installed. 2. From the Restore Legacy Backup panel, select the folder. 3. The "To this location" field shows the current path to Veriato data. If you wish, browse to and select another location, local to the database computer for this data. 4. Click Start Restore. 5. The progress bar at the bottom of the window tells you when the restore is complete. NOTE: A Veriato 9.0 SQL Express instance cannot import or restore archives. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 64

68 Updating (Reinstalling) Recorders To complete your upgrade, update Recorders at all endpoints. The latest Recorder versions were automatically downloaded when you activated the upgrade. A Recorder Update normally "pulls" changes from the server. However, following a server upgrade, or if a Recorder is no longer valid, you must reinstall, or "push" the Recorder software to the device. Accomplish this from the Management Console or by using a Manual Setup file. IMPORTANT: Recorders earlier than version 9.* will continue to record, but are not Check the Restart message If you use a restart message for Recorder installation, make sure it is still there by checking Global Options next to your login at the top of the Management Console window. Check recorded devices When you migrate data into the new database, all devices associated with user data are imported into Recorder groups. Click on Recorders in the Management Console to display groups in the sidebar. If properly migrated, these are the same "Computers Groups" you had in the version 8.5 Control Center. Click each group to see its list of devices. Ungrouped Devices not in a group, or devices that could not be migrated to a group, appear in "Ungrouped." You can create groups and move devices into them as you wish. Missing devices Devices that did not have associated user data will not appear in any group. To add missing devices, use Deployment Add Recorder at the top of the window. See Adding Recorders. Error status Migrated devices that are not detected, or that have an invalidrecorder version installed, appear with a red status symbol. These devices are not able to return data to the server! Device details Click the drop down symbol to the left of the device to examineany device's status details. To update Recorders with errors, either select devices and use Deployment Update Recorder at the top of the window, OR respond to error status details within the list, as described below. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 65

69 Select and update outdated Recorders To quickly update devices, select them in the Recorder group list and use Deployment Update Recorder at the top of the window. 1. Check devices to update. Use the Device checkbox at the top of the list to select all devices in the group. 2. Select Deployment Update Recorder from the top bar. At least one device must be selected. 3. The latest Recorder version is automatically selected. 4. Schedule the update for Now or At scheduled time. Now is "as soon as possible." There will be a time lag for the deployment process, especially if many devices are selected. At scheduled time delays installation to as close as possible to the date and time you select. Click the clock icon to open a calendar and clock settings, or simply type over the date and time. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 66

70 5. Select Reinstall (push) the software. Normally a Recorder version update is "pulled" by the endpoint device and doesn't require credentials. For this upgrade, you must "Push" a complete reinstallation of the Recorder software. 6. Enter account credentials with permission to install on these devices. If the credentials are not valid for a device in the selection list, an error status appears after the scheduled install time. 7. Click Submit in the upper left corner of the panel. Upgrading from the error status Select a Recorders group. If any Recorders are unsupported, they appear with a red error status: "Recorder version is invalid. Please update." Click the down arrow at the end of a device row to see the status details. You can update the Recorder directly from the status details. 1. Choose "Set credentials and schedule installation." 2. Provide credentials with administrator user permissions at the device (can be the same account you previously used for the Control Center). If devices require different credentials, respond to error status individually. 3. Schedule the installation. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 67

71 4. Click Apply in the upper right corner of the error message. If "Apply to all devices" is available, you can check it to push a new version to all devices with the same error, using the same credentials. If there are devices in the list you no longer need to manage, click the device row arrow and select Remove device and Apply. This removes the device from the group list. Upgrading using Manual Setup You can re deploy Recorders using a manual setup file. The manual setup file now includes licensing information, so be careful to use a setup file based on license (in addition to OS) selection. Access the Manual Setup File form from Recorders Deployment Create Manual Setup. Adding Recorders If you have just installed the Veriato Server and migrated data, but existing Recorder clients do not appear, you'll need to add them. Select Recorders and a group. If groups aren't listed, select Ungrouped in the sidebar. NOTE: Be sure to set antivirus exclusions for Windows clients before deploying the Recorder. You won't add Android devices using this method. Instead, you will create a Manual Setup file and install a Veriato Recorder app on each device. 1. Select Deployment Add Recorder from the top bar. The window flips around. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 68

72 2. Select Deployment Add Recorder from the top bar. The window flips around. 3. List devices. The wizard attempts to discover and list devices from your network. If you are on a domain network, choose a method for listing devices: Active Directory Browse your Active Directory folders for devices. You can import entire organizational units, if you wish, and use the OU name as a Veriato Recorders group name. Import File Import a list of devices in.csv format. Add One (recommended for evaluation or testing) Type in the name of a device you want to record. 4. Select devices to record. Check the device or devices you want to record on the Select panel. You have a number of options for building a list of devices where you want to install the Recorder. Be aware that a license will be assigned to all devices in this selection list, so make selections carefully. For details, see Add Recorder: Select. Click Next at the bottom right of the panel to continue. 5. Prepare for Recorder installation. On the Prepare panel, you set a schedule for Recorder installation and provide elevated, administrator user credentials to access and install software at these computers. The credentials must be verified, but if they aren't valid at one of the currently selected devices, you'll have a chance to correct the problem when the install fails, and an error status appears for the device in its Recorder group. See Add Recorder: Prepare. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 69

73 Click Next at the bottom right of the panel to continue. NOTE: To deploy to Mac, you may need to enable SSH access for the administrator account you are using. A Mac Access Error will appear in the Recorders list if this is a problem. If you decide to install using Manual Setup, be sure to first remove the device from the Recorders list. 6. Assign a license to the devices. On the License panel, you select a Veriato license (360, Recon, or whatever types you have purchased) to assign to your selected list of devices. You can see how many licenses are available, and back up and reduce your selection, if necessary. See Add Recorder: Assign a License. Click Next at the bottom right of the panel to continue. 7. View the Summary and click Install. The Summary panel shows the number of devices selected and your schedule and license selections, giving Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 70

74 you a final opportunity to back up and make adjustments. When you are ready, click the Install button at the bottom of the panel to deploy the Recorder package to these devices. 8. Address any issues. Following deployment, you return to the Recorder list, where installation status is maintained for each newly added device. Click a row with an error to open details and address the issue directly. See Install Errors. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 71

75 Adding Android Recorders Deploy the Veriato Android Recorder by installing an app directly on the mobile device. In addition to a Recorder, you will install Chromium to provide a mobile web browser that allows Veriato monitoring. The basic steps are: Create a manual setup file Start at the Veriato Management Console on your computer. One setup file can install the Recorder on any supported Android mobile device. 1. Go to Recorders and open a sidebar group, such as Ungrouped. 2. From the top bar, select Deployment Create Manual Setup. 3. In the Create a Setup File panel, select Android and the Veriato 360 license type. 4. Select the group you want the Android devices to appear in. (You will be able to move devices to other groups once they appear in the group list.) 5. If you want to change the Recording Policy or Recorder Version, select Change Android Configuration. 6. Otherwise, click Create File. 7. Save the compressed VeriatoAndroid setup package to your computer. You can rename the file, but do not change its file extension. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 72

76 8. Unzip (extract) the VeriatoAndroid setup folder. It contains 3 files: 9. Next, assemble Android devices and follow the instructions below for each. Name the device for organized monitoring Start by verifying that the device meets OS requirements and has a unique name that can be associated with the device user. If mobile devices are not being formally managed and do not have specific names, data uploaded from multiple devices may become corrupted, and the user activity unreadable. Use each mobile device's Settings to check or set the device name. NOTE: Menu options on mobile devices differ, depending on the OS version, carrier, and manufacturer. If you are unable to follow the general steps below, consult the device's help or website to learn more. Access Settings About Device Device Name. Enter (or verify) the name for this device and press Done. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 73

77 Set the device to allow apps from unknown sources Because you will install the Recorder app directly from your computer and not from a "store," you need to temporarily allow app installation from "Unknown sources." If you don't do this, an "Install blocked" message will prevent Recorder installation. 1. Navigate to the phone's Settings area and find Security. Look for it under a section called "Device Administration." 2. Enable (check) installation from Unknown sources. Choose to trust both trusted and unknown sources. 3. Connect the device to your computer via USB. The device should appear in the computer's file management. Copy the setup files to the device 1. From the computer, copy the 3 unzipped files (Ctrl+C). 2. Navigate to the mobile device's Download directory. Paste (Ctrl+V) or drag the files to this directory. Veriato Recon/360 Upgrade Guide 2018, Veriato Inc. 74