External database overview

This is a simple overview of possible steps for setting up an external database to connect to the

CylanceON-PREM

virtual appliance. This is not a list of requirements because configuring an external database depends on your environment. This list is simply provided as guidance and could help if you have issues connecting the database to the virtual appliance.

Install PostgreSQL and PostgreSQL server.

Initialize the PostgreSQL database.

Start and enable autostart postgres service to start the database when the server starts.

Force postgres to listen on all ports in postgresql.conf.

Allow postgres port through firewall.

Enable the pgcrypto extention.

Create a postgres user.

If the database is dedicated to

CylanceON-PREM

, using the default postgres user is an option.

If the database is shared, then you should create a new postgres user for the

CylanceON-PREM

database. A shared database is not recommended for

CylanceON-PREM

Authorize remote postgres authentication in pg_hba.conf file.

Generate SSL certificates for postgres server connection.

Configure SSL in postgresql.conf file.

When you connect the external database to

CylanceON-PREM

, consider the following:

Use the fully qualified domain name (FQDN) of the external database. Using the external database IP address is also an option.

The default port for PostgreSQL is 5432.

TLS/SSL requires uploading the external database certificate to

CylanceON-PREM

. During initial configuration, enable

Verify Peer Mode

, upload the certificate, then disable

Verify Peer Mode

requires configuring certificates on the host and client.

Section:

Configuring the CylanceON-PREM virtual appliance