Configure the SQL Database for IPAM

 

Updated: November 19, 2015

Checklist: Deploy IPAM Server > Install IPAM Server > Choose an IPAM Provisioning Method > Configure the SQL Database for IPAM

Important

External database support is introduced in Windows Server® 2012 R2, enabling you to choose Windows Internal Database (WID) or a Microsoft SQL database. This option is not available in Windows Server® 2012. Skip this procedure if your IPAM server is running Windows Server 2012. Configuration of the SQL database for IPAM differs if IPAM is running on the same computer with SQL Server. Steps are also different depending on whether you use Windows authentication or SQL authentication.

Choose one of the four following procedures to configure the IPAM database on Microsoft SQL Server 2008 or later.

Tip

In the Provision IPAM wizard, IPAM server credentials refers to using Windows authentication. If you select IPAM server credentials, then perform the procedure to configure Windows authentication.

Substitute names and values that are appropriate for your environment for the placeholder values that are used in the following procedures. These values are described in the following table.

Value

Description

contoso\IPAM1$

Domain and computer account of the IPAM server

This is the login domain and computer account name of the IPAM server. The computer account name is its host name terminated with the “$” character.

IPAM_DB

Name of the IPAM database

This must match the name provided when you specify the IPAM database.

ipamuser

SQL authentication login name

This is the user name of the user designated to have database owner permissions in SQL Server. This name must be configured on the SQL server and the same name must be used when the IPAM server is provisioned.

P@ssword1

Password for the IPAM user

This is the SQL database password for the IPAM user. This does not need to be the same password as the user’s Windows password.

Membership in the Administrators group, or equivalent, is the minimum required to complete these procedures. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477).

Database configuration with SQL and IPAM on separate computers

Use one of the following procedures on a computer running Microsoft SQL Server 2008 or later to configure the SQL database for a connection to IPAM on a separate computer.

To use Windows authentication

  1. To use the SQLCMD utility to enter Transact-SQL statements, open an elevated command prompt and type SQLCMD.

  2. Type the following commands at the SQLCMD prompt:

    CREATE LOGIN [contoso\IPAM1$] FROM WINDOWS
    CREATE DATABASE IPAM_DB
    GO
    USE IPAM_DB
    CREATE USER IPAM FOR LOGIN [contoso\IPAM1$]
    ALTER ROLE DB_OWNER ADD MEMBER IPAM
    USE MASTER
    GRANT VIEW ANY DEFINITION TO [contoso\IPAM1$]
    
  3. Type exit to quit the SQLCMD prompt.

To use SQL authentication

  1. To use the SQLCMD utility to enter Transact-SQL statements, open an elevated command prompt and type SQLCMD.

  2. Type the following commands at the SQLCMD prompt:

    CREATE LOGIN ipamuser WITH PASSWORD = 'P@ssword1'
    CREATE DATABASE IPAM_DB
    GO
    USE IPAM_DB
    CREATE USER IPAM FOR LOGIN ipamuser
    ALTER ROLE DB_OWNER ADD MEMBER IPAM
    GO
    USE MASTER
    GRANT VIEW ANY DEFINITION TO ipamuser
    GO
    
  3. Type exit to quit the SQLCMD prompt.

Tip

If a connection to the database fails due to invalid login, verify that the SQL server is enabled for SQL authentication.

Database configuration with SQL and IPAM on the same computer

Use one of the following procedures to configure the SQL database for a connection to IPAM on the same computer.

To use Windows authentication

  1. To use the SQLCMD utility to enter Transact-SQL statements, open an elevated command prompt and type SQLCMD.

  2. Type the following commands at the SQLCMD prompt:

    CREATE LOGIN [NT AUTHORITY\Network Service] FROM WINDOWS
    CREATE DATABASE IPAM_DB
    GO
    USE IPAM_DB
    CREATE USER IPAM FOR LOGIN [NT AUTHORITY\Network Service]
    ALTER ROLE DB_OWNER ADD MEMBER IPAM
    GO
    USE MASTER
    GRANT VIEW ANY DEFINITION TO [NT AUTHORITY\Network Service]
    GO
    
  3. Type exit to quit the SQLCMD prompt.

To use SQL authentication

  1. To use the SQLCMD utility to enter Transact-SQL statements, open an elevated command prompt and type SQLCMD.

  2. Type the following commands at the SQLCMD prompt:

    CREATE LOGIN ipamuser WITH PASSWORD = 'P@ssword1'
    CREATE DATABASE IPAM_DB
    GO
    USE IPAM_DB
    CREATE USER IPAM FOR LOGIN ipamuser
    ALTER ROLE DB_OWNER ADD MEMBER IPAM
    GO
    USE MASTER
    GRANT VIEW ANY DEFINITION TO ipamuser
    GO
    
  3. Type exit to quit the SQLCMD prompt.

See also

Specify the IPAM Database