First-time Server Setup
For a first-time installation, perform the following steps in the order shown:

1. Install the Database Security Server.
   
   IMPORTANT:
   • ​The class javax.xml.bind.DatatypeConverter was removed in Java 9. If you install a version of Java later than 8, this class is unavailable and migration fails.
   • When installing, make sure that you select the HSQLDB option. Do not select the option to migrate the back-end database.
   • After you have finished the installation, do not start the Database Security Server.
      
2. If you are not running Database Security Server 4.6.4 or later, install the latest Java Runtime (JRE) 8:
   1. Download JRE 8 from the Java Downloads site.
      
      NOTE: Make sure that you download the correct version (32-bit or 64-bit) of JRE, for the platform used by the Database Security Server.
      If you are installing Database Security Server 4.6.4 or later, you already have an appropriate version of Java and can skip to step 5.
       
   2. Add the system path:
      See the "How do I set or change the PATH system variable" Java site for full steps.
3. Upgrade the Java Virtual Machine (JVM) of the Database Security Server to Java 8.
   See KB88438 - How to update the Java Virtual Machine in McAfee Database Security to Java 8.
    
4. Modify the migration script:
   NOTE: You only need to perform this step for a Windows installation.
    
   1. Go to: /bin/
   2. Open migration_tool.bat in a text editor of your choice.
   3. Change:
      if exist "%BINPATH%\..\java\jre6\bin" goto local_java_path
      to
      REM if exist "%BINPATH%\..\java\jre6\bin" goto local_java_path
       
5. If you are not running Database Security Server 4.6.6 or later, upgrade the Microsoft JDBC 4.2 driver for SQL Server to 6.0.
   NOTE: If you are installing Database Security Server 4.6.6 or later, you already have an appropriate version of this driver and can skip to step 6.
   1. Download the driver at Microsoft JDBC Driver 6.0 for SQL Server.
       
   2. After the downloaded file has been extracted, you find the following file inside: sqljdbc42.jar.
      Copy this file to the /webapps/ROOT/WEB-INF/lib folder.
       
   3. Rename the file sqljdbc4-3.0.jar to sqljdbc4-3.0.jar.BAK.
       
6. Migrate the back-end database to the MSSQL 2016 instance by running the migration script, then follow the instructions to migrate the database:
   • For Windows run: migration_tool.bat
   • For Linux run: migration-tool.sh
      
7. Set the MSSQL 2016 compatibility level to SQL 2014:
   1. Open a command-line session.
   2. Log on to the MSSQL 2016 command line.
   3. Type ALTER DATABASE SNTRSRV SET COMPATIBILITY_LEVEL = 120; and press Enter.
      
      NOTE: For more information about running this command, see this Microsoft article.
       
8. Start the McAfee Database Security Server Service.
   Verify the server log files to make sure that no errors occur during connection to the back-end SQL Server.

To upgrade an existing back-end database on MSSQL to MSSQL 2016:

When you upgrade only the back-end database to MSSQL 2016, there is no need for the migration steps.
Instead, perform the following steps:

NOTE: Some steps are described in detail above. If you are running Database Security Server 4.6.6 or later, skip to step 5.

1. Stop the McAfee Database Security service.
2. Install the latest Java Runtime 8 (JRE).
3. Upgrade the JVM of the Database Security Server to Java 8. See KB88438 - How to update the Java Virtual Machine in McAfee Database Security to Java 8.
4. Upgrade the Microsoft JDBC 4.2 driver for SQL Server to 6.0.
5. Set the MSSQL 2016 compatibility level to: SQL 2014.
    
6. Update the back-end database connection parameters to match the new database:
   1. Go to /conf/.
   2. Open server-custom.properties in a text editor of your choice.
   3. Edit the server-custom.properties file as in the following example:
      
      database.url=jdbc\:sqlserver\://\:;databaseName\=SNTRSRV
      database.user=
      database.password=
       
7. Start the McAfee Database Security service.