App Control: 8.10.4 Server upgrade error due to a critical database script "add_server_role"

[#1]

Environment

• App Control Server 8.10.2-8.10.4

Symptoms

The following popup error is displayed during the upgrade process:

A critical database script "add_server_role" needed to install the App Control Server failed with an error.

Once the "Ok" button is selected the upgrade completes. At this point the server was partially upgraded, the database was successfully upgraded, but the web console and some registry values were only partially updated.

Cause

The error is displayed when the SQL Server doesn't have a login principal with name "SA" configured.
 

Resolution

To resolve this please uninstall and re-install the 8.10.4 server version:

1. Log in to the server with the App Control Service Account
   • If an Agent is installed, please temporarily disable Tamper Protection
2. Open Control Panel > Programs > Uninstall Carbon Black App Control Server
3. Run the 8.10.4 App Control Server Installer again > Don't accept the conditions just yet
4. Navigate to the following folder: C:\Users\<AppCServiceAcct>\AppData\Local\Temp
5. Order by date modified and find the most recent folders
6. Search for the following file: 

   C:\Users\<AppCService>\AppData\Local\Temp\{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXX}\{ECD2D524-718A-4A49-8026-337428C013EB}\add_server_role.sql

7. Open the file "add_server_role.sql" in Notepad and find the following file:

   CREATE SERVER ROLE [AppCWebServer] AUTHORIZATION SA;

8. Update the line to: 

   CREATE SERVER ROLE [AppCWebServer];

9. Save the changes to "add_server_role.sql"
10. Continue with the server setup wizard and App Control will install successfully afterwards

Additional Notes

There is a bug for this to have it resolved in the next release.

Related Content

CREATE SERVER ROLE (Transact-SQL) - SQL Server