Changing to a new database server or updating database connection properties

This section describes how to use the Centrify-PAS-ModifyInstallation.ps1 script to change the database server or to change the credentials used to access the database. For additional Centrify-PAS-ModifyInstallation.ps1 script information, see Centrify-PAS-ModifyInstallation.

To change to a new database or update database credentials:

  1. If you are not already logged in to the Management node, log in as a user with administrator rights.
  2. At an elevated PowerShell prompt, run Centrify-PAS-ModifyInstallation.ps1 using the proper parameters to change the database server or to change the credentials used to access the database. Parameters include:

    • [-DBServer] <String>]—Enter the new server hostname (URI) for PostgreSQL.
    • [-DBPort] <String>]—Enter the PostgreSQL server port, typically 5432.
    • [-DBUser] <String>]—Type the new user name required to log in to the database.
    • [-DBPassword] <String>]—Type the new password credential required to log in to the PostgreSQL database.

    • [-DBDatabase] <String>]—(Optional) Enter the PostgreSQL database name to use when verifying access.

    For example, to change the database and the database credentials:

    .\Centrify-PAS-ModifyInstallation.ps1 -DBUser newcentrifyAccount -DBPassword newsecretCode -DBServer newpostgres.corpnet -DBPort 5432

  3. After updating the database, you must create a new deployment and deploy it to all nodes (TCP Relay Logging if applicable, TCP Relay, Web and Background nodes). Once you create the new nodes, set the new deployment active. For detailed instructions on deploying new nodes, see the following sections:

Connection string management

Use the config map section databaseConnections for connection strings with the following keys:

  • Common
  • Global
  • GlobalReadonly
  • Tenant
  • TenantReadonly

These keys drive creation of the storage.xml keys and enable you to easily tune of the common connection string.