SCCM - SQL Server Security

Sokoban 991 Reputation points
2023-01-06T15:10:14.02+00:00

Hi

I haver posted that before but I dont got really good answer. I trying to install SCCM Site server, error:

276907-sscm-error.jpg

The SQL Server name specified is configured for SQL authentication security. It is recommended to configure the SQL Server to operate only in Windows authentication security before you continue Configuration Manager Setup.

XXX; SQL Server security mode; Warning; The SQL Server name specified is configured for SQL authentication security. It is recommended to configure the SQL Server to operate only in Windows authentication security before you continue Configuration Manager Setup.

I have installed SQL server on another server and Site Server there is WSUS installed that pointed to SQL Server.

SQL Server and Site server have that open ports:

8531 TCP Any (null)
8530 TCP Any (null)
1688 TCP Any (null)
8530 TCP Any (null)
2701 TCP Any (null)
445 TCP Any (null)
443 TCP Any (null)
4022 TCP Any (null)
1433 TCP Any (null)
1434 UDP Any (null)
32400 TCP Any (null)
135 TCP Any (null)

I have also that settings with SQL:

276915-windows-authentication.jpg

Error

276936-firewall-error.jpg

Any idea what I can do ?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,176 questions
Microsoft Configuration Manager
0 comments No comments
{count} votes

6 answers

Sort by: Most helpful
  1. Garth Jones 1,351 Reputation points
    2023-01-06T19:30:26+00:00

    You log snipit show firewall check not sql security mode, review those log snipits. Btw it is just a warning, you can ignore it if you like.


  2. Sokoban 991 Reputation points
    2023-01-06T21:48:30.15+00:00
    INFO: 'SqlServer.XXX.org' is a valid FQDN. Configuration Manager Setup 2023-01-06 20:36:52 2040 (0x07F8)  
    Installing service SMS_SERVER_BOOTSTRAP_SCCMSite.XXX.org_SMS_SQL_SERVER on remote server SqlServer.XXX.org ... Configuration Manager Setup 2023-01-06 20:37:15 2040 (0x07F8)  
    Installed service SMS_SERVER_BOOTSTRAP_SCCMSite.XXX.org_SMS_SQL_SERVER on remote server SqlServer.XXX.org Configuration Manager Setup 2023-01-06 20:37:36 2040 (0x07F8)  
    Starting service SMS_SERVER_BOOTSTRAP_SCCMSite.XXX.org_SMS_SQL_SERVER with command-line arguments "SOK D:\SMS_SCCMSite.XXX.org_SMS_SQL_SERVER0 /createcertificate SOFTWARE\MicrosoftCertBootStrap\ SMS_SQL_SERVER"... Configuration Manager Setup 2023-01-06 20:37:36 2040 (0x07F8)  
    Could not start service SMS_SERVER_BOOTSTRAP_SCCMSite.XXX.org_SMS_SQL_SERVER. The operating system reported error 1008: Configuration Manager Setup 2023-01-06 21:36:19 2040 (0x07F8)  
    ERROR: Failed to create SQL Server certificate on server SqlServer.XXX.org Configuration Manager Setup 2023-01-06 21:36:19 2040 (0x07F8)  
    ERROR: Failed to create SQL Server [SqlServer.XXX.org] certificate remotely. Configuration Manager Setup 2023-01-06 21:36:19 2040 (0x07F8)  
    Not recovery mode or not top level site. Skip restoring client piloting packages. Configuration Manager Setup 2023-01-06 21:36:19 2040 (0x07F8)  
    ~===================== Completed Configuration Manager Server Setup ===================== Configuration Manager Setup 2023-01-06 21:36:19 2040 (0x07F8)  
      
    

    I have SQL Server 2017 , SCCM 2002 and Windows Server 2022. Maybe I will try with a newer SCCM edition ?

    // :-)


  3. Sokoban 991 Reputation points
    2023-01-10T12:04:51.84+00:00

    ![277868-error-install.jpg][1]

    I know its about the security , something I have missed ?

    SQL Server

    • The admin account and the SCCM server is local admin
    • SQL Server have security "Windows Authentication Mode"
    • The admin account have "public" and "Sysadmin"

    // :-)


  4. Sokoban 991 Reputation points
    2023-01-10T15:59:33.257+00:00

    277977-enabled-pipes.jpg

    Yes :-)

    0 comments No comments

  5. Garth Jones 1,656 Reputation points MVP
    2023-01-10T18:42:09.283+00:00

    and on the 32 bit connection too?