veriato recon / 360...1.5 gb free disk space is recommended. recon local data storage requires more...

Veriato Recon / 360

Version 9.0.3

1/3/2018

Upgrade Guide

January 3, 2018

Veriato Recon/360 Upgrade Guide © 2018, Veriato Inc. iii

Table of Contents

Before You Begin .......................................................................................................... 1

What's New ............................................................................................................................................... 1

How the System Works ............................................................................................................................. 1

Upgrade Support ....................................................................................................................................... 6

Update Antivirus Exclusions ...................................................................................................................... 8

Upgrade Options ......................................................................................................... 10

Upgrading SQL Express to SQL Express ................................................................................................... 10

Upgrading Using an Existing Full SQL Server Database ........................................................................... 18

Upgrading an Express Quick Install with Full SQL ................................................................................... 27

Setting up SQL Server 2016 Standard ..................................................................................................... 31

Setting up Hosted SQL Server on Azure .................................................................................................. 38

Install the Database Separately .............................................................................................................. 50

The Master Login Account ...................................................................................................................... 54

Installing a Standalone Management Console ....................................................................................... 57

Completing the Upgrade ............................................................................................. 60

Activating a Veriato Recon/360 upgrade ................................................................................................ 60

Restoring a Legacy Backup ...................................................................................................................... 62

Updating (Reinstalling) Recorders .......................................................................................................... 65

Adding Recorders .................................................................................................................................... 68

Adding Android Recorders ...................................................................................................................... 72

Configuring After Upgrade ...................................................................................................................... 77

Contact and Copyright ................................................................................................ 80

Contact Us ............................................................................................................................................... 80

Copyrights and Trademarks .................................................................................................................... 81

Veriato Recon/360 Upgrade Guide © 2018, Veriato Inc. 1

Before You Begin

What's New

Before you upgrade, read the Release Notes.

Version 9.0.2

Look for these additions and improvements:

Immediate alerting on keywords at the client.

Return relevant screenshots when a keyword alert is triggered (Veriato Recon and Veriato 360).

Accelerated screenshots option as an "action" for Event Alerts (Veriato 360).

Pre‐setup help and testing for antivirus detection on Quick Installs (and evaluations).

Improvements in device deployment, status and notification.

Management Console control over backups and backup location for File Storage.

Multiple license selection for Manual Setup files.

Automatic licensing option to assist with Citrix VDI deployments.

Ability to seed and control names of client files.

If you are upgrading from version 8.5

New architecture ‐ Allows scaling to 100’s of thousands of endpoints.

Quick return of data ‐ Data recorded at a device appears in the dashboard within 4 minutes.

Android device recording ‐ Allows logging calls and locations, capturing the mobile screen and more.

Enhanced Active Directory integration ‐ Facilitates management of Recorders.

Compromised Credentials ‐ A new Recon alert analyzes and detects unusual VPN logons to assist in

discovering privilege escalation or a breach.

Single Management Console ‐ The former Control Center and Dashboard features are now combined in

one, easier to use application.

Deployment progress status ‐ Provides status and detailed errors that can occur between deployment

and a fully operational Recorder.

Data warehouse view ‐ Gives you the flexibility to use SQL reporting tools as you wish.

How the System Works

To capture data, Veriato Recon/360 relies on endpoint Recorders, load balancing (if enabled), application server(s),

and a database. The Management Console accesses the database through the server to provide status and views


of the data. When you install using the Veriato Setup program, you install a Veriato Database, the "primary"

Veriato Application Server, and a Management Console.

NOTE: Contact Veriato Technical Support for assistance in setting up multiple Application Servers.

Installing all components on one server

You have several options when you first install. The default is to install all server components, including a

Management Console, on a single computer ‐ the computer you are installing on. The "Quick Install" and "Install


with Options" provide a single‐server installation with SQL Server Express (limited database size). Use "Install with

Options" to select an existing SQL Server (2016 Standard edition) to provide your database. When you use and

existing SQL Server, you will need to (1) create a database instance before you begin, (2) provide the SA SQL

account and the name of the SQL instance during the installation.

NOTE: Screenshot and Attachment files (File Storage) can take up a great deal of disk space. The default

location is on the same, single server. You can direct this storage area to a separate hard drive during "Install

with Options," if you wish.

Installing the database on its own server

For a large number of clients generating a lot of data, you may want to install SQL Server and the Veriato database

on a separate computer. After installing SQL Server 2016 (or setting up access to a web‐hosted SQL Server), create

a new, empty SQL Server instance. You will install the Veriato database first, on the SQL Server computer, using the

"Install Database Only" option. When the Veriato database is set up, install the Veriato Server at its computer using

"Install with Options."


IMPORTANT: If you plan to connect to a SQL Server Standard database, create an empty database instance

first (even if you are upgrading).

Using a separate file storage server

To ensure that many screenshots will not interfere with performance, set up a separate file server.

NOTE: The file storage location needs a direct connection to the application server. Contact Veriato Technical

Support for assistance.


Veriato Database

The database instance when hosted on SQL Server Standard (or another "full" edition) provides a 30 GB admin

database and a 50 GB Reporting database, with growth by 15% as needed, and no maximum size. The database

when installed with SQL Server Express has a maximum size and is limited to a single, 9 GB maximum size for

admin and reporting databases.

Veriato Application Servers

Add Application Servers to speed up performance and contribute to efficient load balancing. One or more servers

relay data uploaded by the Recorder to the database. A "load balancer" can intercepts Recorder data and passes it

to an application server, which in turn routes it to the database. The entire process, even for hundreds of

thousands of endpoints, takes a few seconds. Only one database is necessary, even for the largest installations.

Veriato Endpoint Recorder

The Recorder can be deployed en masse to endpoint computers from the Management Console or by creating a

manual setup file to execute at each device by other means (such as SCCM). A license is required for each device

recorded. Use a manual setup file to install a Recorder app on Android mobile devices.

Management Console

The Management Console provides dashboards, data views, configuration, and access to all components, as

permitted by each user's login account. Install as many Management Consoles as you need.


Upgrade Support

If you are currently running Veriato Recon version 8.5, you can install over your installation. Please consult the

Upgrade Notes before you begin for important changes.

General requirements

Disk space ‐ If upgrading from version 8.5 version to 9.0.2, account for double the disk space consumed

by your current data during setup.

Recorder versions pre‐ 9.x not supported – 8.5 Recorders continue to record, but do not return data

until you re‐install ("push") the latest version, downloaded on product activation.

Return the server to its default address ‐ If you are upgrading from version 9.0 R2 and have changed the

server URL, before upgrading, return the server address to the original device address. You can then re‐

apply the desired address following the upgrade.

Veriato Server

See detailed Requirements and Guidelines for Data Storage for additional information.

Minimum of 23+ GB free to upgrade.

64‐bit Windows Operating System required

32‐bit systems are no longer supported.

Windows 8.1, Windows 10, Server 2012 or Server 2016

Windows 7 is supported ONLY if connecting to SQL Server on another machine.

8 GB RAM required

Quad Core i7 or better required

Ports used:

TCP 443 (HTTPS)

TCP 54709 (HTTPS)

UDP 1434 for SQL Browser Service

TCP 1433 (or random/custom) for SQL instance (check the error log for the port number)

Note: Because the feature has been redesigned, 360 Event Alerts will NOT be migrated with version 8.5

data. If you use 360 Event Alerts, while your version 8.5 is still in place, you may want to print each alert

definition. Select File | Print from the Modify Alert dialog box menu.

Veriato database upgrade

Upgrade the database first – If have distributed components or plan to distribute components,

upgrade in this order: (1) the Veriato database, (2) the Veriato primary server components, and finally (3)


any 9.x secondary app servers or Management Consoles. Note that the Version 8.5 Dashboard and

Control Center are no longer used.

One database ‐ You can migrate only one STORAGE database when upgrading to MS SQL Server

Express. If you move to full SQL Server, you will be able to migrate all STORAGE databases and all

archives into the single database.

One File Storage location ‐ When "installing over," your existing file storage location (e.g.,

C:\VeriatoData) will be used. Multiple file storage locations can be manually copied into the new,

single file storage location.

Moving to SQL Server Standard ‐ If you plan to upgrade to SQL Server standard, configure the SQL

Server instance locally or in the cloud, and then install the Veriato database before installing other

components.

Recon/360 Recorder (computers)

Recorders will NOT return data until they are upgraded to version 9.x.

Windows® 10, 8, 7, Windows Server® 2016, 2012, 2008 R2 are supported.

Windows Vista is no longer supported,

Mac OS® X 10.10 or higher with 64‐bit Intel processor is supported.

Mac 10.9 is no longer supported.

1.5 GB free disk space is recommended.

Recon local data storage requires more than 360.

Network access to server via TCP/IP (Windows Domain or Workgroup) is required.

Administrator access to the computer for remote installation.

You now provide endpoint credentials separately when scheduling installation.

360 Recorder (Android mobile)

Install the Recorder app directly to each mobile device. See Deploying to Android.

Android OS 5.0+ mobile phone or tablet is required.

Install the required Chromium app (145 MB).

Install the Veriato Recorder app (24 MB).

Cell network or wireless connection to server is required for data uploads.


Update Antivirus Exclusions A few antivirus and anti‐spyware programs will scan for and attempt to remove Veriato files on a computer.

Files may be removed during or after Veriato Recon/360 installation, preventing the installation from working

properly. Keep in mind that upgrades include new server or client files, which may require updating your

antivirus exclusions.

To find out how your antivirus interacts with Veriato, consult the product‐specific information provided in the

Veriato Antivirus Guide, keeping in mind that antivirus products are constantly being updated. Make the

suggested changes to your antivirus policies BEFORE installing Veriato to avoid frustration. Suggestions may

include:

Temporarily disable the antivirus while running the setup

1. Find the antivirus icon.

At the computer where you will run the Veriato Setup program, look in the windows notification area in the

lower right corner of your desktop. Active antivirus programs usually display an icon directly on the task bar

or when you click an up‐arrow in the notification area.

2. Right‐click the antivirus icon and select "Disable <Program>."

If a "disable" option is not available, open or modify the program and find the control to temporarily disable

it. (If the install program needs to restart the computer due to prerequisites installation, you may need to

turn it off again.)

3. When finished, re‐enable antivirus scanning.

When Veriato files are excluded, re‐enable antivirus scant.

Exclude risk names

If your antivirus solution has names for "known risks," such as Symantec or Trend Micro, enter the

appropriate risk names. Refer to the Antivirus Guide for your particular solution to learn which risk names to

exclude.

Exclude Veriato Server folders or files

Set exclusions BEFORE downloading and running the Veriato Setup. If you use enterprise‐level antivirus,

create a network‐wide exclusions policy to cover any computer that will host Veriato Server components.

Otherwise, set exclusions at each computer where you plan to run the Veriato Setup in the local antivirus

console. Run an antivirus scan on server computers before deploying Recorders to test.

Refer to Excluding Server Files from Scanning.


Exclude Veriato Recorder files across the network

Before re‐installing you deploy Recorders across the network, work with a test Windows computer to see

how your antivirus solution reacts. If files are detected, take steps to exclude them.

If you use an enterprise antivirus solution, such as McAfee or Symantec, open the management application and

exclude the Veriato Recorder files for all Windows devices (and VMs) on your network you plan to manage. Build

this step into your network‐wide endpoint policy and virtual machine setup. If you do NOT use an enterprise

solution, go to each endpoint Windows computer and exclude the Veriato Recorder files within the antivirus

control panel.

If the problem lies in additional local applications, such as Windows Defender, you could disable the program as

part of group policy to avoid any future problems.

Refer to Excluding the Recorder from Scanning.


Upgrade Options

Upgrading SQL Express to SQL Express The fast and easy Quick Install option automatically installs or upgrades a size‐limited SQL Server Express

database. If you install version 9.x over version 8.5, a side‐by‐side installation creates a new SQL Express

database instance and imports a single STORAGE database from your current installation. You will provide a

Master Account during the installation that replaces your current SA account. Additional STORAGE databases

and archives cannot be imported.

NOTE: The SQL Server Express database has size limit of 9 GB for admin and reporting data. It cannot grow

larger. For these reasons, ongoing use of SQL Server Express is recommended only for evaluations or

installations with fewer than 100 clients. See Guidelines for Data Storage.

Step One: Decide how to handle multiple STORAGE databases

If your current installation has only one STORAGE database, you can skip this section. If you are installing over

a version 8.5 installation with multiple databases, an error message appears. You must exit the setup and

choose one of the following options to continue:

Archive all STORAGE databases except one.

Open the version 8.5 Control Center and archive all STORAGE databases except the current (not full) one.

When you install over the current installation, the single STORAGE database remaining will be imported.

See below.

Or, start the setup and install “as new” on a different machine.

You may decide to keep your entire version 8.5 installation and its data separate and go forward with

new data on a separate machine.

Or, purchase and install SQL Server Standard 2016 before upgrading.

A full SQL Server installation will automatically import all STORAGE databases and archives into the new,

single SQL Server instance. See Upgrading SQL Express to SQL Standard.

Or, upgrade to SQL Server Standard following the Veriato upgrade.

If you archive all STORAGE databases except one in order to proceed with the Veriato "Quick install"

upgrade, you can later upgrade your SQL Server Express installation to a full SQL Server edition. The SQL

upgrade automatically converts your limited Express database to an expanding, unlimited database

instance. Following the upgrade, you will be able to import your 8.5 archives from the version 9.x

Management Console.

Option: Archive all but one database and “install over”

If you have multiple STORAGE databases, follow these steps.


1. Log in to your version 8.5 Control Center.

2. Open Database | Backup & Restore.

Find the list of STORAGE databases.

3. Archive all databases except the most recent.

In the list of databases, select a full STORAGE database, right‐click and select Archive. Repeat this for all

STORAGE databases until only your most recent, not‐yet‐full STORAGE database remains. (You can only

perform an archive if the database is full.) Keep in mind that the limited size SQL Express database will not

allow restoring your archives, so archived data will be unavailable until you upgrade to full SQL Server.

4. Create a Full Backup.

Create a backup of the remaining, single STORAGE database, in case you need it later.

5. Use Quick Install or Install with Options.

If you are using Install with Options, leave "Use existing SQL Server" unchecked as you proceed through the

setup. SQL Server Express will be installed and you are prompted to migrate the single database to the new

installation. The old installation is no longer available. See Configure After Upgrade.

NOTE: Your archives will be unavailable until you upgrade to SQL Server Standard.

Option: Install “as new” elsewhere without upgrading

To keep version 8.5 intact while you begin using version 9.0, you can install "as new" on a different machine.

Contact Veriato for product key assistance. You will be able to view old data on the old installation and new

data on the new installation. However, without restoring old data to the new installation, you cannot

aggregate the data.

1. Run the setup on a new machine.

Make sure it meets system requirements and has ample disk space.

2. Use Quick Install or Install with Options.

If you are using Install with Options, leave "Use existing SQL Server" unchecked as you proceed through the

setup. SQL Server Express will be installed, but no migration takes place.

3. Stop the Data Vault Server in your 8.5 installation.

After Veriato 9.0.* is installed, and before "Adding" Recorders, return to the old Veriato Server and stop the

Data Vault. This causes Recorders to keep data locally until they have a server to return to.

4. Restore your version 8.5 backup.

Do this in the Management Console, in System Management | Backup & Restore | Browse for

Restore | Restore Legacy Data. See Configure After Upgrade.

5. Upgrade Recorders to version 9.0.

You must upgrade all Recorders to version 9.0 to retrieve device status and data in the new 9.0


Management Console. The "push" install will provide the new server location, and Recorders will upload

data to the correct location.

Steps for "Installing Over"

1. Start the setup ‐ Following purchase, go to www.veriato.com/support, enter your product key, and

download the setup package.

Extract the package, open the extracted folder, and open the Installer folder.

Double‐click the VeriatoSetup file to start the installation.

2. Choose to upgrade/migrate or to install without upgrading.

If you are "installing over," when the setup detects the Veriato 8.5 installation, you have the choice of

automatically migrating your data (YES) or installing side‐by‐side without upgrading (NO). If you select NO,

you can migrate your data after the installation is complete from the Management Console. See Restoring a

Legacy Backup.

3. Welcome ‐ At the Welcome panel, click "More About This Upgrade" to review changes. Click Next.


Some important changes are highlighted. Click each to read, and then click Next.

License ‐ Read the end user license agreement, press Agree, and click Next.

4. Options for upgrading ‐ Enter the SA password for your current Veriato 8.5 installation. \

Remove version 8.5 following 9.0 installation: This setup can automatically remove the old server

version following the upgrade. Clear this option to keep the old version active and intact after this

upgrade. Check this option to remove the old version.

Backup version 8.5 data: This setup can perform a full database backup on version 8.5 before

proceeding. Clear if you've already backed up the data and check to create another backup now.


Press Next.

5. Options for installing ‐ To upgrade using SQL Express, select Quick Install or Install with Options (and do

not select "Use an Existing SQL Server"). Select the Quick Install if you do not Antivirus ‐ Because antivirus

can interfere with this installation, we recommend "excluding" Veriato files and disabling scanning during

the Veriato installation. Note that file names and folders have changed with this upgrade! Press the blue

buttons to learn more and get a list of files to exclude. Press Next.

need to redirect the File Storage location. Your existing file storage will be used.

Services Installation Path ‐ The Veriato Service will be installed in this folder, on this machine. The

default location is C:\Program Files\Veriato. If you wish, click Change and browse to a different

folder or drive (preferably on this machine).

Management Console Installation Path ‐The Management Console installed WITH the Veriato

Server will be installed at this location. If you wish, click Change and browse to a different folder or

drive on this machine.


6. Antivirus ‐ Because antivirus can interfere with this installation, we recommend "excluding" Veriato files

and disabling scanning during the Veriato installation. Note that file names and folders have changed with

this upgrade! Press the blue buttons to learn more and get a list of files to exclude. Press Next.

7. Create the master login account ‐ You are creating the primary, full‐access login account for this Veriato

Recon/360 installation. For complete details, see The Master Login Account.

Email Address ‐ Enter your email address. You can use your email address to log in to the

Management Console. Uncheck the "Use email as login name" box to enter a unique SQL user name.

Password ‐ Enter a password for the account that meets the displayed criteria. Type the password

again to verify.

How to send alert emails ‐ Email can be routed through a Veriato Server so that you don't have to

set up your own SMTP relay at this time. Your above email address will be the first "alert operator."

Read more about email service options.

Press Next. to begin installing


8. Wait for the installation to complete, then press Finish.

9. If you chose to migrate data as part of the setup, wait for the migration to complete.

Progress is shown at the bottom of the desktop. When the migration is finished, choose to Restart Now.

If you plan to use Veriato Recon/360 with SQL Server Standard, you'll need to install (or connect to a cloud version

of) SQL Server and create a database instance BEFORE running the Veriato Setup. For complete SQL Server

installation information, consult the Microsoft website.

NOTE: If you plan to use Veriato Recon/360 with SQL Server EXPRESS and are aware the limitations, you can

skip this step.


If the login prompt does not appear, use Windows to find and start the Veriato Management Console. Log in using

the account you just created.

Upgrade errors

If you receive errors during the upgrade, or if the upgrade fails, review the above steps and the requirements.

Contact Veriato Technical Support for assistance.

Manage data following installation

Keep the following limitations in mind while using version 9.0 with SQL Express:

Because there is only ONE database and you will NOT be able to Archive data going forward, you will

need to trim data from the database as it becomes full. Use System Management | Data Retention in

the Management Console to do this.

For archives of all data, export detailed reports from the Management Console. Each data view provides

some kind of export to file, and Screenshots can be exported as individual slides or "movies."

There is only one File Storage location. You can use Windows to copy in additional folders to your single

File Storage location.


Upgrading Using an Existing Full SQL Server Database Use this option to "install over" and connect to an existing SQL Server database.

If you have multiple file storage shares, or are installing "as new," you will need to migrate your File Storage

(base path) folders to the new, single File Storage location (default is C:\Veriato360 on the Veriato Server

computer). You can do this using Windows.

Prepare the SQL Server database instance

Upgrade to SQL Server 2016 before running the setup. Version 2016 is required. If your current

SQL Server database is not 2016, upgrade now. If you choose to use a hosted database, be sure to

choose SQL Server 2016 or a 2016 Enterprise version.

Create a new (empty) database instance. An empty database instance is required for upgrading from

version 8.5. Even if you currently full SQL Server with Veriato 8.5, you need a new instance with a new

name before starting the setup. The upgrade process configures the Veriato Recon/360 database for the

new instance you have created and migrates older data into it.

Have SA credentials ready. You will point to the location of SQL Server and new instance from the

Veriato Setup. You'll need to provide "root" System Administrator account credentials to your SQL Server

so that the Veriato Setup can complete database configuration. (You will create a new login account for

Veriato.)

Upgrade by installing over

If your current machine meets system requirements, you can install over your Veriato 8.5 installation.

1. Start the setup. At the computer where you want to install Veriato, run the VeriatoSetup file.

2. Choose to upgrade/migrate or to install without upgrading.

When the setup detects a Veriato 8.5 installation, you still have the choice of automatically

migrating your data (YES) or installing side‐by‐side without upgrading (NO). If you select NO, you can

migrate your data after the installation is complete from the Management Console.


3. Welcome ‐ At the Welcome panel, click "More About This Upgrade" to review changes. Click Next.

4. Some important changes are highlighted. Click each to read, and then click Next.

5. License ‐ Read the end user license agreement, press Agree, and Next.


6. Disable antivirus and set exclusions.

There are many new files with this version! Press the blue buttons to learn more and get a list of

files to exclude. Press Next.

7. Enter your SA account credentials.

Type the SA password for our database instance to access your current data.

The setup then presents some options on how to handle the migration. These operations are performed AFTER the

installation as part of the migration process.

Remove version 8.5 following 9.0 installation

Leave this option checked if you want it cleaned off the machine following installation. Clear to leave the

previous installation intact.

Backup version 8.5 data

Leave this option checked if you want the setup to create a full backup before it removes the 8.5

installation. Click Next.


Screenshots and Attachment Migration

If you have multiple file storage locations, the Veriato Setup detects them and offers the option to

migrate the files or to skip migration. You won't see this panel unless the locations are detected. If you

choose to migrate the files as part of the setup, the File Storage location in the next step will need to

have enough disk space for all files.

8. Choose Install with Options.

You now proceed to the "new" install portion of the setup.

If you chose to do so, the setup automatically upgrades all of your STORAGE databases to the

new single database.

Use an existing SQL Server installation ‐ Check to use a full MS SQL Server (recommended) pre‐

installed on this or at another location.

Services Port ‐ The default communication port for Recorder to Server communication is 443 at the

Server computer. Change this only if there is a conflict on your network.


Services Installation Path ‐ The Veriato Service will be installed in this folder, on this machine. The

default location is C:\Program Files\Veriato. If you wish, click Change and browse to a different

folder or drive (preferably on this machine).

Management Console Installation Path ‐The Management Console installed WITH the Veriato

Server will be installed at this location. If you wish, click Change and browse to a different folder or


SQL Server Data Path ‐ The directory where the Veriato database instance stores data.

If installing SQL Server Express ("use existing SQL Server" is not checked), you can direct the data to

a local drive local to this SQL Server Express installation. Leave this blank to use the SQL Server data

location or SQL Server VM location specified a cloud database installation. Otherwise, specify the

complete machine path (\\server02\share\MyData) to match the location already set for data in the

Database‐only installation.

Screenshots and Attachments Path ‐ Indicates where captured Screen Snapshot and Email

Attachment files are stored (the File Storage folder). If you are upgrading on the same machine, your

current File Storage location is maintained. Otherwise, the default location is set to C:\VeriatoData.

Select Change and navigate to any folder local to the Veriato Server where you want files stored.

Note: The Veriato Service requires full privileges at database, file storage, and backup locations. When all default options are

selected, it is installed as a local service. If you enter a remote location, you will be prompted for network credentials with access

to the location(s).

9. Your File Storage location is maintained.

You don't have to migrate files; they remain available to the new database instance.

10. Connect to SQL Server.

If you selected the option to use an existing SQL Server installation, a second Options panel appears.


If you did NOT choose the option, this panel does not appear.

SQL Instance Name ‐ The name of the SQL Server database instance you have created for Veriato

installation purposes, or the name of Veriato database instance that has already been installed

(using "Install Database Only").

SQL Username ‐ The root login account to the SQL Server installation you will be using, usually SA.

The Veriato setup needs full access to SQL Server to continue.

SQL Password ‐ The password for the SA username you provided.

SQL Server Address ‐ Specify a fully qualified device name (computer.domain) or IP address to

locate the SQL Server installation you want to use.

SQL Server IP Port ‐ Normally SQL Server communicates at TCP/IP port 1433, but will dynamically

select available ports for its named instances. If SQL server will communicate on a fixed port for your

Veriato instance, enter the port here. Do NOT enter a value here unless you are fully aware of your

network infrastructure.

11. Create a Master Account.

Moving on to the new installation, now you create your new Master Account. The SA account will no

longer be used. For the new "Master" account, you can use either an email address or a unique user

name (uncheck the "Use Email" option). Create a password and type it again to confirm.


Email Address ‐ Enter your email address. You can use your email address to log in to the

Management Console. Uncheck the "Use email as login name" box to enter a unique SQL user

name.

Password ‐ Enter a password for the account that meets the displayed criteria. Type the

password again to verify.

How to send alert emails ‐ Email can be routed through a Veriato Server so that you don't have

to set up your own SMTP relay at this time. Your above email address will be the first "alert

operator." Read more about email service options.

8. Wait for the installation to complete.


Then, press Finish.

12. If you chose to migrate data as part of the setup, wait for the migration to complete.

Progress is shown at the bottom of the desktop. When the migration is finished, choose to Restart

Now.

Install an upgrade as "new"

If you are installing on a new machine, or have installed the database separately, follow this procedure.

Contact Veriato Technical Support for further questions.

1. Disable data uploads and create a full backup.

Stop the current Data Vault service at the current server machine to force Recorders to keep newly

recorded data at the local computer. Create a full backup of your version 8.5 database. Include

Snapshots and Attachments.

2. Start the setup.

Download the setup package, extract it, open the extracted folder, and open the Installer folder,

Double‐click the VeriatoSetup file to start the installation. Follow instructions in Install with Full SQL.

3. Configure the upgrade.

Following setup, open the Management Console and follow instructions in Configure After Upgrade.


Restore your 8.5 database backup. Copy the File Storage files to the default C:\Veriato360 location

(or the location you request for file storage).

Upgrade errors

If you receive errors during the upgrade, or if the upgrade fails, review the above steps and the requirements.

Contact Veriato Technical Support for assistance.

Next steps

If the login prompt does not appear, use Windows to find and start the Veriato Management Console. Log in

using the NEW account you just created (your old SA account will not work).

Once in the Management Console, follow instructions in Configure After Upgrade for all steps necessary to

complete your setup, including:

1. Activate your product key.

2. Restore your 8.5 database backup, if necessary.

3. Copy your File Storage folders, if necessary.

4. Update ALL Recorders to 9.0.

5. And the remaining steps to configure your upgrade.

See Configure After Upgrade.


Upgrading an Express Quick Install with Full SQL The fast and easy Quick Install option automatically installs a size‐limited SQL Server Express database. SQL

Server Express presents some challenges, both for restoring Veriato Recon/360 version 8.5 backups and

archives, and for ongoing access to data (see Guidelines for Data Storage). However, it is possible to install

using the Quick Install and later upgrade SQL Server Express to SQL Server Standard or Enterprise. This

procedure can be used following product evaluation.

Preparation

1. Acquire SQL Server Standard 2016 or Enterprise 2016 from Microsoft.

2. Make sure the computer you are installing on meets requirements.

NOTE: After upgrading SQL Express to full SQL, you will be able to migrate all archives into the single,

expanding database. The database is converted on upgrade.

Install Steps

1. First, install Veriato Recon/360 with MS SQL Server Express 2016 (either "Quick Install" or "With Options").

2. At any time following installation, copy a purchased SQL Server installation package to the Veriato

Recon/360 computer.

3. Run the SQL Server installer to upgrade the SQL Server Express edition. At the opening installation panel,

select Maintenance | Edition Upgrade.


4. Enter the product key for your purchased full SQL Server 2016 and click Next.

5. Accept the license terms and click Next.


6. The installer should find and display the Veriato SQL Server Express instance on this machine.

Click Next.

7. At the "Ready to upgrade edition" panel, click Upgrade.


8. A summary of component upgrades shows the completed upgrade. Click Close. You now are operating with

full SQL Server instead of SQL Server Express.


Setting up SQL Server 2016 Standard

If you plan to use Veriato Recon/360 with SQL Server Standard, you'll need to install (or connect to a cloud

version of) SQL Server and create a database instance BEFORE running the Veriato Setup. For complete SQL

Server installation information, consult the Microsoft website.

If you're upgrading Veriato Recon/360 with SQL Server Standard installation, you still need to create a new

database instance.

NOTE: If you plan to use Veriato Recon/360 with SQL Server EXPRESS and are aware the limitations, you can

skip this step.

1. Download a SQL Standard 2016 package from Microsoft.

If you have an existing SQL Server installation, make sure it has been upgraded to 2016.

2. Run the SQL Installer elevated as Administrator.

3. Click Installation in the left navigation.

Select "New SQL Server stand‐alone installation or add features to an existing installation."

4. Enter your SQL Server product key.

At the Product Key panel, enter your SQL Server product key and click Next.


5. Accept the license Agreement.

Click Next.

6. At the Product Updates panel click Next.

7. At the Feature Selection pane:

Be sure to check the following:

Database Engine Services

Client Tools Connectivity

Client Tools Backwards Compatibility

Leave the default instance root directory, or change it if you wish. You'll need the instance root directory during

Veriato Setup.

Click Next.

8. At the Instance Configuration panel, set up the new instance.

Select Named Instance and give your Veriato Database instance a name. Any name will do, but it's best to

specify something that is NOT the SQL default. We use VERIATO360 in documentation examples and as the

default for SQL Server Express installations. The instance ID is automatically supplied.

You'll need the instance name during Veriato Setup. Click Next.


9. Note the SQL Service accounts.

On the Server Configuration panel leave the default settings. Click the Collation tab.


10. Under Collation, check language settings.

Veriato Recon/360 requires Latin1_General settings. Make sure Collation panel selections for Database

Engine and Analysis Service are as shown below. Click Next.

11. On Database Engine Configuration select Mixed Mode.

Type a secure SQL Server System Administrator (SA) password and confirm the password. This SA password

is required during the Veriato Setup.

For emergency use, assign a local Windows Administrator‐user the same SA access rights:Use the

current login account ‐ Add Current User, or someone else ‐ Add. Specify credentials as prompted.

Click Next.


12. Select the "Data Directories" tab and note the default directories.

You can change them to another location on the local machine, if you wish.


You'll need the System database directory during Veriato Setup.

13. For advanced setup, select TempDB.

If you are configuring an advanced, performance setup, select the "TempDB" tab and specify the log file

configuration.


11. Press Next and then press Install.

Next step: Install the Veriato Server

or Install the Veriato Database Only, if remote


Setting up Hosted SQL Server on Azure

Customers who prefer not to purchase and management a SQL Server Standard installation can purchase SQL

Server on a Virtual Machine (VM) through Microsoft Azure. Azure provides ready‐to‐go SQL Server on a

variety of Windows VM images that can connect securely to your on‐site Veriato Server.

Acquire a Microsoft Azure Account

If you already have a Microsoft login, log in to Microsoft. Otherwise access Azure and create an Azure

account.

Select a SQL Server 2016 VM Image

Microsoft Azure offers several SQL Server Virtual Machine plans of varying price points. Contact Microsoft for

complete information on subscription and VM pricing.

https://azure.microsoft.com/en‐us/resources/videos/create‐windows‐server‐virtual‐machine/

1. Log in to the Azure portal using your Microsoft account.

2. Click New or Create resources to set up a VM resource on your account.

1. Under "New," select Compute and Windows Server 2016 Datacenter.

Or, you can display Everything and select "SQL Server 2016 SP1 Standard on Windows Server


2016."

3. Leave Resource Manager selected as the deployment model. Click the Create button to create a virtual

machine.

Fill in the form to create a VM (see below for help with each field) and click OK.


Name ‐ Give the VM machine a name. This will be the name of your SQL Server computer.

VM disk type ‐ HDD is less expensive; SSD provides better performance. Your selection affects VM

image selections available.

User name ‐ Account name you will use to log in to the VM.

Password ‐ The password to log in to the VM. The password must be 12 characters long and contain

3 types of characters (letters, numbers, and special).

Subscription ‐ If you already have a Microsoft subscription, select it here for better pricing.

Otherwise, "Free Trial" appears.

Resource group ‐ Create a new Azure resource group for your account or add this VM to an existing

resource group.


Windows Server license ‐ Click Yes if you have a Windows Server license to use.

4. Choose the virtual machine image.

Note that options for disk type HDD are different from SSD. Click View All next to "Recommended" for

more choices for your selected drive type.

Scroll down to find the optimal VM image. A2 Basic has been available as a machine that meets

Veriato requirements and serves as an inexpensive trial; however, the choices you see may be

different, as offerings change. Click on your VM choice and then on Select at the bottom of the

window.

5. Configure the VM settings.

In this case "Use Managed disks" was enabled, but all other options were left at the default. The default

"new" network will be your resource group name plus "'‐vnet." The default network security group (firewall)


is named from your VM name plus "‐nsg." No specific settings are required for the Veriato Database. Click

OK to continue.


6. Configure SQL Server settings.

SQL connectivity ‐ Select Public (Internet).

Port ‐ The default SQL port is 1433, but you may specify a different one (important info for your

Veriato installation).

SQL Authentication ‐ Be sure to enable authentication.

Login name ‐ The username and password you created earlier are displayed as the default

authentication. This is the SQL Server account you will access to install Veriato Recon/360. If you

wish, you can create a new account.

Storage configuration, Automated patching ‐ Default settings are OK.

Automated backup ‐ Disable this option. Your installed Veriato Database will automatically back up its

data.

Azure Key Vault integration, R Services ‐ Disable.

Click OK to continue.


7. Check your VM configuration in the Summary. (Note, this illustration shows a Microsoft subscription; yours

will show the terms of your trial or purchase.) Click OK.

8. Wait for the server to deploy.

9. Configure the VM to accept remote connections ONLY from the external facing IP address used by your

Veriato Server.

Go to Network security groups in Azure (use Search if necesssary).

Find the your VM security group and select it. Under Settings, select Inbound security rules.


Change default‐allow‐rdp to allow. Set the Source as your IP address. Change default‐allow‐sql to allow, with Source limited to your IP address.

Configure SQL Server for Veriato on the VM

1. Open Remote Desktop and connect to your Azure VM remotely.

Use the VM machine name and the login account you provided in step #5 above.

2. Access Windows Services on the VM and disable SQL services that will not be necessary to the Veriato

Recon/360 database:

SQL Server Analysis Services CEIP

SQL Server CEIP service

SQL Server Integration Services 13.0

SQL Server Integration Services CEIP Service

SQL Server Reporting Services


Start the SQL Browser service if it is not already running.

3. If you wish, access SQL Server to create a default Veriato instance. If you do not, the default instance,

MSSQL13.MSSQLSERVER, will be used.

Install the Veriato database only your VM

1. Copy or download the Veriato Setup from the Veriato website to your VM.


1. Run it using Install Database Only. On the options panel, use your SQL Server VM settings.

SQL Server Data Path ‐ Enter F:\Data, the default path for SQL Server. If you have created a directory for Veriato data, enter the directory name.

SQL Instance Name ‐ Use the default instance name, MSSQL13.MSSQLSERVER, unless you created a special instance.

SQL Username ‐ Use the authentication user name you entered in SQL Server settings.

SQL Password ‐ Use the password you for your SQL Server account (SQL Server settings).

SQL Server IP Port ‐ If you changed the default SQL port (SQL Server settings), enter the port number here, otherwise leave this blank to use the default.

Follow steps to finish the Veriato database installation.


Install the Veriato Server on a local server

1. On the network machine that will be your server, run the Veriato Setup again.

2. When you get to Options, select Install with Options and check "Use an existing SQL Server installation."

Services Port ‐ For the Veriato Service; leave at the default setting unless you need to change it.

Services Installation Path ‐ Install path for the primary server services and the Veriato Service.

Management Console Installation Path ‐ Where the application will be installed.

SQL Server Data Path ‐ Leave this blank.

Screenshots and Attachments Path ‐ Direct to a separate hard drive to conserve space on your

Veriato Server.

3. Click Next and enter your SQL Server VM information.


SQL Instance Name ‐ The default instance name, MSSQL13.MSSQLSERVER, unless you created a special instance.

SQL Username and Password ‐ The authentication account you approved or entered in the Azure

SQL Server Settings (step #5 above).

SQL Server Address ‐ The public IP address of your SQL Server VM.

SQL Server IP Port ‐ If you changed the default SQL port (step #5 above), enter the port number

here, otherwise leave this blank to use the default.

4. Follow steps to finish the Veriato Server and Management Console installation. Open the Management

Console and test the database connection.

NOTE: If you have trouble with any of these steps, contact Veriato Technical Support.

Microsoft information is available at:

https://azure.microsoft.com/en‐us/services/virtual‐machines/sql‐server/


Install the Database Separately A Veriato installation serving many Recorder endpoints will need the ability to store rapidly accumulating

data. Install the Veriato Database separately on a dedicated machine to be assured that data and data

backups can be reasonably managed without the worry of running out of disk space due to other reasons.

Start a database-only setup

1. Download and run the setup file at your MS SQL Server computer.

2. At the Welcome panel, click Next.

3. End user license agreement

Read the license agreement, press Agree, and Next.

4. Options for installing ‐ Select "Install Database Only" to view the database install options. The

Options panel is where you connect to SQL Server and direct the setup how to configure the


database instance

SQL Server Data Path ‐ Directory where SQL Server instance will store data. For example,

C:\Program Files\Microsoft SQL Server\MSSQL13.VERIATO360\MSSQL\DATA (where VERIATO360 is

the instance name). If you wish, select Change and navigate to a location on the current computer

you want to use for Veriato data.

SQL Instance Name ‐ Enter the name of the SQL Server instance you have created for Veriato (it

may or may not be VERIATO360). The Management Console will connect to this SQL instance to

access data.

SQL Username ‐ The setup needs privileged access to configure the Veriato instance. Provide your

"root" SQL Server username, usually "SA" (System Administrator).

SQL Password ‐ Enter the password for the SQL Server account you named above. If the

username/password is incorrect, an error appears when you click Next.

SQL Server IP Port ‐ Normally SQL Server communicates at TCP/IP port 1433, but will dynamically

select available ports for its named instances. If SQL Server will communicate on a fixed port for your

Veriato instance, enter the port here. Do NOT enter a value here unless you are fully aware of your

network infrastructure.

5. Press Next to continue. Messages that follow may include:


Database Files Found ‐ Are you sure you wish to continue and overwrite these files? There are

existing files in the selected SQL Server Data Path. Click Yes to overwrite the files or No to choose a

different Data Path. Be careful not to overwrite existing data unless you are ready to!

Verifying SQL credentials...

An error appears if credentials are incorrect or SQL Server cannot be accessed. Check the SQL

Username, Password and Port you entered.

Checking space requirements... A message appears if there is not enough free space for database

configuration or data files.

Checking Screenshots and Attachments path access... A message appears if there is not enough free

space for file storage..


Find out if your antivirus program will detect and quarantine Veriato files in the Antivirus Guide. When it

does, you can disable scanning during installation and/or "exclude" Veriato Server files. Press the blue

buttons to learn more and get a list of files to exclude. Press Next.

7. Wait for the installation to complete


8. Then, press Finish.

Next, Install the Veriato Server

Install the Veriato Server and Management Console at another machine using Install with Options. You will

point to this SQL Server machine and specify the configured Veriato SQL instance you just created.


The Master Login Account

The Master Login Account is the first account created for your Veriato database instance, and has full access

and permissions to Veriato features, devices, and users. This will be the login you use the first time you open

the Veriato Management Console. If you are upgrading from Veriato Recon/360 version 8.5, your SA login

account is replaced by this account (read more about upgrades).

Email address

The email address identifies a point of contact for Veriato, can stand as the Master Login user name, and

provides an initial email operator address to receive Recon, 360 Event, or System Health email alerts. If this

is an evaluation, just provide your own email address.

Use email as login name

Check this option if you prefer to use the email address to log in. Deselect this option to enter a unique

SQL user name, separate from the email address. Remember the username and password you choose: you

need them to login the first time!

Password

Type a password for the new Master Login account. Verify the password by typing it again. The password

must be at least 6 characters long and include THREE of the following criteria:

An uppercase letter

A lowercase letter

A number

A non‐alphabetic character, such as # ^ _ ‐

Do NOT use the characters: / | ' " [ ] { } ( ) , ; ? * ! @ $ \ or <space>


Type the password again to verify it and continue.

NOTE: Make sure this password meets any system security requirements for your own network.

Use Veriato secure email service

When installation is complete and you have installed Veriato Recorders, you'll want to begin receiving alert

email immediately. The default choice is an email service provided by Veriato. This option requires no setup

and guarantees you will receive the first email the Veriato Server sends. Email is simply relayed through the

Veriato service to the target email address. Nothing is retained at the mail server, and no one at Veriato can

see your email. Read the End User License Agreement for more information.

It's easy to switch from this service to another SMTP service following installation. Simply open the

Management Console, select Global Options on the top bar, and change the email service.

Global Options

NOTE: The email address you specify during installation is automatically added as an email operator and is assigned to receive

System Health notifications. Following installation, you can edit or delete this operator and change assignment.

Use another SMTP email service

If you are familiar with mail servers and know which one you want to use, select "Use another SMTP email

service." You will need to provide the host name and a valid account to access the service. A test option

allows you to check your settings, and if successful, sends the Veriato Welcome Email to the address you

provided..


Outgoing Server ‐ Name of the email server host you would like to use.

Mail Login Account ‐ A valid user login to the email server host.

Password ‐ The login account's password.

Use SSL ‐ Use security, check only if the host uses SSL for SMTP outbound email.

Port ‐ Change if this host does not use port 25 for outgoing email.

Send Timeout (sec) ‐ Period of time to try sending email before timing out.

Test ‐ Sends a test email to the email address you provided on the main Account panel using these

settings. If the email is successfully delivered you see:

It's easy to change the email delivery details following installation. Simply open the Management Console,

select Global Options on the top bar and click Configure Alert Email Delivery. The Management Console form

provides a few more options for refining mail delivery.

Global Options


Installing a Standalone Management Console

Install a standalone Management Console AFTER you have installed the Veriato Server components.

NOTE: Your version 8.5 Dashboards and Control Centers will NOT work with the 9.0 upgrade.

1. Welcome ‐ At the Welcome panel, click Next.

2. End user license agreement ‐ Read the license agreement, press Agree, and Next.


2. Find out if your antivirus program will detect and quarantine Veriato files in the Antivirus

Guide. When it does, you can disable scanning during installation and/or "exclude" Veriato


Server files. Press the blue buttons to learn more and get a list of files to exclude. Press Next.

3. Options for installing ‐ Select "Install Management Console Only."

Management Console Installation Path ‐ The folder where the application will be installed.

Change the installation folder, if you wish, by clicking Change and browsing to a different folder or


Veriato Server address ‐ Enter the fully qualified domain name (FQDN) or an IP address (IPV4 or

IPv6) of the device where your Veriato Server is located. An error appears if the device cannot be

found. Examples of appropriate entries are:

MYMACHINE.mydomain.local

192.162.0.55

Veriato Server Port ‐ The Veriato Server communication port, by default 443. If the Veriato Server

uses a custom port, change this entry to match.

Press Next.

An error appears if the server address could not be found. Check your entry and try again.


When the server is found, you see "Checking Space Requirements" as the setup checks this

computer for Management Console requirements.

3. Wait for the installation to complete and click Finish. You exit the setup, and the Management

Console login prompt appears.

4. Log in to test the installation.

5. You don't have to select the Veriato Server, since you just entered it. But if the server can't be

found when you're logging in, click the drop‐down to select or type in the server name.


Completing the Upgrade

Activating a Veriato Recon/360 upgrade

Following a Veriato Recon/360 upgrade, you need to re‐activate your licenses. If you do not activate the upgrade,

recording continues at computers without interruption, but alerting and data uploads will stop until activation is

complete.

For a newly upgraded installation, activation contacts the Veriato licensing service:

Your product key is registered and (if necessary) replaces an older serial number.

The single product key will handle all the types and combinations of licenses you need.

Your current licenses will be enabled for this version.

Any new licenses are added to your installation.

NOTE: The activation exchanges encrypted licensing and registration information with Veriato. No other data

is exchanged.

Online upgrade activation

When you open the Management Console following setup, the activation prompt appears. If you are

upgrading from version 8.5, your serial number will be converted to a product key. If the computer has

Internet access, click Activate Now and wait as the product activates. Activation may take several minutes. A

message tells you when activation is complete. To view your licenses, select Configurations | Recorder

Licenses.

Alternate, offline activation

If the server does not have Internet access, or if you prefer, use the alternate method of activation.

1. Select Use alternate activation.

2. Click Create a File. An HTML file, UpgradeActivation.html, is created and opens. The file is saved on

the desktop.

3. Copy the file to a device that has Internet access.

4. Open the HTML file and click the Request Activation button.

5. A connection is made to Veriato. An activation file is created for you.

You can choose to download the file in your browser or have it sent as an email attachment. To send

email, enter a valid email address (for example, [email protected]).

If you choose to download, follow normal procedures for downloading a file within the type of

browser you are using.


Two files will be downloaded: Your license information and the new Recorder Version

package.

6. Copy or move the downloaded files or email attachments to a location where you can access them

from the Veriato Recon/360 server.

7. Use the Browse button on the Activate Upgrade dialog box to locate and open the file.

8. Wait as Veriato Recon/360 is activated and Recorder Versions are installed.

A message informs you when the restore is successfully activation. If an error occurs, try the procedure again,

or contact Veriato.

Alternate activation errors

Unable to create the request file

There is sometimes a problem creating the file when an old file is still on the desktop. Delete any old

activation request files and go through the procedure again.

Expired HTML file

If you use an out‐of‐date file to connect to the Veriato website, you will get an error. The file is good only

for 3 days. Go through the procedure to generate a file again.

Expired file

If you try to load an out‐of‐date file into Veriato Recon/360 to complete activation, an error appears. Go

through the entire procedure again to obtain a fresh file.

Invalid activation file

If you browse to and open different file type or a file containing the wrong data, Veriato Recon/360 can't

read it and displays an error. Be sure to browse to and open the correct text file. Or, cancel out of the

dialog box and go through the procedure again to create a new, valid file.


Restoring a Legacy Backup

If you did not migrate data while running the Veriato Setup, or if you wish to migrate archives into a full SQL

Server database, you can restore from the Management Console to System Management | Backup &

Restore. If your upgraded installation uses full SQL Server, you can also restore multiple STORAGE databases

and archives, adding them to your new, single database.

IMPORTANT: Once a backup has been restored, active Recorder clients should appear in the Recorders list. You

must update them (using "push" reinstall) to version 9.0+ before they will upload locally held data to the new

server installation. If devices do not appear, use Recorders | Deployment | Add Recorder to add them.

Before you begin

Keep these points in mind:

Use the primary Management Console.

Perform the restore from the Management Console installed with your "primary" Veriato Server

installation. This insures best results in restoring data and associated files to the File Storage location

(local to the Veriato Server). If you will be using non‐default data storage locations, see Veriato Service

Permission Veriato Service Permission.

A Veriato 9.0 SQL Server Express instance restores one database.

If you are using a SQL Server Express Veriato 9.0 database instance, a backup with one STORAGE

database and associated files imports easily. If the backup contains multiple STORAGE databases, it will

fail. Contact Veriato Technical Support.

A Veriato 9.0 full SQL Server instance restores multiple databases.

If you are using a full SQL Server Veriato 9.0 database instance, the restore can handle a backup with

multiple STORAGE databases, plus files stored with the backup.

A minimum of 23 GB free disk space is required.

A restore of an 8.5 backup with one STORAGE database (includes the other administrative and

configuration databases) takes about 20 GB. A restore involving multiple STORAGE databases requires an

additional 4 GB for each STORAGE database. Keep this in mind as you choose the data location for the

restore. The drive needs to be large enough to handle the size of the data.

Take no actions during the restore!

While the restore is in progress, do not try to use the Management Console. We recommend restoring at

a time when other Management Consoles are not in use.

If Veriato Recon/360 version 8.5 is still up and running:

STOP the Data Vault service before creating the final 8.5 backup from Servers | Data Vault in the 8.5


Control Center. This causes Recorders to hold data locally while you complete the migration process, and

insures your backup contains ALL data up to the point of a successful "restore."

Restoring an 8.5 backup

1. Copy the backup folder to the computer where the Veriato database is installed.

2. In the Management Console, select System Management | Backup & Restore.

3. Select Browse for Restore | Restore Legacy Backup from the top bar.

4. Next to "Restore this backup folder," click the browse button and navigate to and select the backup

folder.

5. The "To this location" field shows the current path to Veriato data.

You can restore the backup to any location on the database computer. If the default location does

not have enough disk space for the data set, click the browse button and navigate to and select a

different drive. If necessary, add a drive with more disk space. SQL will find and use the data as part

of the Veriato instance.

Choose whether or not to Include snapshots/attachments.

Yes copies any snapshot or attachment subfolders in the backup to the new, 9.0 File Storage location displayed in

the field. No skips the files and restores only the database backup. Permission to access the file location is verified.

If the Veriato Service does not have access to the location, the files cannot be restored. See The Veriato Service.

6. A SQL Server Express installation will not show the following options. Select All data for a full

database restore.


7. Click Start Restore.

8. A bar at the bottom of the window shows progress and notes the steps in the restore. When the

restore is complete, or if there is an error, the message appears here.

NOTE: Version 8.5 backups take the time zone of the local server where they were created.

Restoring 8.5 administrative data

To restore devices and configurations separately from the full database, select "Only administrative data (devices,

profiles, etc.)."

Restoring 8.5 archives

If you are running a full SQL Server Veriato database instance, the Restore Legacy Backups panel provides the

opportunity to restore archives. You must have first restored your 8.5 full backup, or you won't be able to do this.

1. Copy the archive folder to the computer where the Veriato database is installed.

2. From the Restore Legacy Backup panel, select the folder.

3. The "To this location" field shows the current path to Veriato data.

If you wish, browse to and select another location, local to the database computer for this data.

4. Click Start Restore.

5. The progress bar at the bottom of the window tells you when the restore is complete.

NOTE: A Veriato 9.0 SQL Express instance cannot import or restore archives.


Updating (Reinstalling) Recorders To complete your upgrade, update Recorders at all endpoints. The latest Recorder versions were automatically

downloaded when you activated the upgrade. A Recorder Update normally "pulls" changes from the server.

However, following a server upgrade, or if a Recorder is no longer valid, you must reinstall, or "push" the Recorder

software to the device. Accomplish this from the Management Console or by using a Manual Setup file.

IMPORTANT: Recorders earlier than version 9.* will continue to record, but are not

Check the Restart message

If you use a restart message for Recorder installation, make sure it is still there by checking Global Options next to

your login at the top of the Management Console window.

Check recorded devices

When you migrate data into the new database, all devices associated with user data are imported into Recorder

groups. Click on Recorders in the Management Console to display groups in the sidebar. If properly migrated,

these are the same "Computers Groups" you had in the version 8.5 Control Center. Click each group to see its list

of devices.

Ungrouped ‐ Devices not in a group, or devices that could not be migrated to a group, appear in

"Ungrouped." You can create groups and move devices into them as you wish.

Missing devices ‐ Devices that did not have associated user data will not appear in any group. To add

missing devices, use Deployment | Add Recorder at the top of the window. See Adding Recorders.

Error status Migrated devices that are not detected, or that have an invalidRecorder

version installed, appear with a red status symbol. These devices are not able to return data to the

server!

Device details ‐ Click the drop‐down symbol to the left of the device to examineany device's status

details.

To update Recorders with errors, either select devices and use Deployment | Update Recorder at the top of the

window, OR respond to error status details within the list, as described below.


Select and update outdated Recorders

To quickly update devices, select them in the Recorder group list and use Deployment | Update Recorder at the

top of the window.

1. Check devices to update. Use the Device checkbox at the top of the list to select all devices in the group.

2. Select Deployment | Update Recorder from the top bar. At least one device must be selected.

3. The latest Recorder version is automatically selected.

4. Schedule the update for Now or At scheduled time.

Now is "as soon as possible." There will be a time lag for the deployment process, especially if many

devices are selected.

At scheduled time delays installation to as close as possible to the date and time you select. Click

the clock icon to open a calendar and clock settings, or simply type over the date and time.


5. Select Reinstall (push) the software. Normally a Recorder version update is "pulled" by the endpoint device and doesn't require credentials. For

this upgrade, you must "Push" a complete reinstallation of the Recorder software.

6. Enter account credentials with permission to install on these devices.

If the credentials are not valid for a device in the selection list, an error status appears after the scheduled

install time.

7. Click Submit in the upper left corner of the panel.

Upgrading from the error status

Select a Recorders group. If any Recorders are unsupported, they appear with a red error status: "Recorder

version is invalid. Please update." Click the down arrow at the end of a device row to see the status details.

You can update the Recorder directly from the status details.

1. Choose "Set credentials and schedule installation."

2. Provide credentials with administrator‐user permissions at the device (can be the same account you

previously used for the Control Center). If devices require different credentials, respond to error status

individually.

3. Schedule the installation.


4. Click Apply in the upper right corner of the error message. If "Apply to all devices" is available, you can

check it to push a new version to all devices with the same error, using the same credentials.

If there are devices in the list you no longer need to manage, click the device row arrow and select Remove

device and Apply. This removes the device from the group list.

Upgrading using Manual Setup

You can re‐deploy Recorders using a manual setup file. The manual setup file now includes licensing

information, so be careful to use a setup file based on license (in addition to OS) selection. Access the

Manual Setup File form from Recorders | Deployment | Create Manual Setup.

Adding Recorders If you have just installed the Veriato Server and migrated data, but existing Recorder clients do not appear, you'll

need to add them. Select Recorders and a group. If groups aren't listed, select Ungrouped in the sidebar.

NOTE: Be sure to set antivirus exclusions for Windows clients before deploying the Recorder. You won't add

Android devices using this method. Instead, you will create a Manual Setup file and install a Veriato Recorder

app on each device.

1. Select Deployment | Add Recorder from the top bar. The window flips around.


2. Select Deployment | Add Recorder from the top bar.

The window flips around.

3. List devices.

The wizard attempts to discover and list devices from your network.

If you are on a domain network, choose a method for listing devices:

Active Directory ‐ Browse your Active Directory folders for devices. You can import entire

organizational units, if you wish, and use the OU name as a Veriato Recorders group name.

Import File ‐ Import a list of devices in .CSV format.

Add One ‐ (recommended for evaluation or testing) ‐ Type in the name of a device you want to

record.

4. Select devices to record.

Check the device or devices you want to record on the Select panel. You have a number of options for

building a list of devices where you want to install the Recorder. Be aware that a license will be assigned to

all devices in this selection list, so make selections carefully. For details, see Add Recorder: Select. Click Next

at the bottom‐right of the panel to continue.

5. Prepare for Recorder installation.

On the Prepare panel, you set a schedule for Recorder installation and provide elevated, administrator‐user

credentials to access and install software at these computers. The credentials must be verified, but if they

aren't valid at one of the currently selected devices, you'll have a chance to correct the problem when the

install fails, and an error status appears for the device in its Recorder group. See Add Recorder: Prepare.


Click Next at the bottom‐right of the panel to continue.

NOTE: To deploy to Mac, you may need to enable SSH access for the administrator account you are using. A Mac Access Error

will appear in the Recorders list if this is a problem. If you decide to install using Manual Setup, be sure to first remove the device

from the Recorders list.

6. Assign a license to the devices.

On the License panel, you select a Veriato license (360, Recon, or whatever types you have purchased) to

assign to your selected list of devices. You can see how many licenses are available, and back up and reduce

your selection, if necessary. See Add Recorder: Assign a License. Click Next at the bottom‐right of the panel

to continue.

7. View the Summary and click Install.

The Summary panel shows the number of devices selected and your schedule and license selections, giving


you a final opportunity to back up and make adjustments. When you are ready, click the Install button at the

bottom of the panel to deploy the Recorder package to these devices.

8. Address any issues.

Following deployment, you return to the Recorder list, where installation status is maintained for each

newly added device. Click a row with an error to open details and address the issue directly. See Install

Errors.


Adding Android Recorders

Deploy the Veriato Android Recorder by installing an app directly on the mobile device. In addition to a Recorder,

you will install Chromium to provide a mobile web browser that allows Veriato monitoring. The basic steps are:

Create a manual setup file

Start at the Veriato Management Console on your computer. One setup file can install the Recorder on any

supported Android mobile device.

1. Go to Recorders and open a sidebar group, such as Ungrouped.

2. From the top bar, select Deployment | Create Manual Setup.

3. In the Create a Setup File panel, select Android and the Veriato 360 license type.

4. Select the group you want the Android devices to appear in. (You will be able to move devices to other

groups once they appear in the group list.)

5. If you want to change the Recording Policy or Recorder Version, select Change Android Configuration.

6. Otherwise, click Create File.

7. Save the compressed VeriatoAndroid setup package to your computer. You can rename the file, but do not

change its file extension.


8. Unzip (extract) the VeriatoAndroid setup folder. It contains 3 files:

9. Next, assemble Android devices and follow the instructions below for each.

Name the device for organized monitoring

Start by verifying that the device meets OS requirements and has a unique name that can be associated with

the device user. If mobile devices are not being formally managed and do not have specific names, data

uploaded from multiple devices may become corrupted, and the user activity unreadable. Use each mobile

device's Settings to check or set the device name.

NOTE: Menu options on mobile devices differ, depending on the OS version, carrier, and manufacturer. If you

are unable to follow the general steps below, consult the device's help or website to learn more.

Access Settings | About Device | Device Name.

Enter (or verify) the name for this device and press Done.


Set the device to allow apps from unknown sources

Because you will install the Recorder app directly from your computer and not from a "store," you need to

temporarily allow app installation from "Unknown sources." If you don't do this, an "Install blocked" message will

prevent Recorder installation.

1. Navigate to the phone's Settings area and find Security.

Look for it under a section called "Device Administration."

2. Enable (check) installation from Unknown sources. Choose to trust both trusted and unknown sources.

3. Connect the device to your computer via USB. The device should appear in the computer's file management.

Copy the setup files to the device

1. From the computer, copy the 3 unzipped files (Ctrl+C).

2. Navigate to the mobile device's Download directory.

Paste (Ctrl+V) or drag the files to this directory.


Install the Veriato Recorder

From the mobile device, find and install the Veriato app.

1. Navigate to the mobile device's Download directory and tap the Veriato.apk file.

The installation process begins. Accept all prompts along the way.

2. When prompted to "activate device administrator," tap ACTIVATE.


Install Chromium

1. Tap the Chromium.apk file in the Android Download directory.

The Chromium installation process begins. Accept all prompts along the way.

2. The Chrome browser opens at the end of the installation.

3. The Android device is now fully set up. If you wish, you can return to Settings | Security and disable

installation of apps from unknown sources.

4. Check the Management Console. Within minutes, the device should appear in the Recorders group that you

selected for this manual setup.

Updating and Uninstalling the Veriato Recorder

Recorder updates are essential for keeping pace with changes to the OS and other recorded apps. Install an

Update as you did the initial Recorder app, using a Manual Setup file and installing directly on the device.

Uninstall directly on the device following instructions in the Veriato Help.


Configuring After Upgrade

Refer to the Release Notes for important changes. If you have upgraded from version 8.5, you'll notice that

many features have been redesigned and improved. Some settings may no longer be in place, or not exactly

as you left them. Take a tour through the Management Console before you deploy Recorders to check

settings.

NOTE: Web Filtering and Auditing are not supported in this release and do not appear in the Management

Console.

Check your login accounts.

Go to System Management | Accounts. This is where you set up and manage users of the Management Console.

Your previous database login accounts should have been migrated, but note these changes:

SA is replaced by the new "Master Account."

Your previous SA password will not be present in the list of accounts. It has been replaced by the Master

login account you create during the "Account" step of the upgrade process. This Master account has

access to all features and users, and the access cannot be changed.

Your "Master" accounts may have changed.

During the upgrade, version 8.5 "Master" users were given full access control, even if they previously

didn’t have it. Check each account. You might want to change some of these accounts to "Standard" with

custom permissions.

Your "Standard" accounts have changed.

During the upgrade, version 8.5 "Standard" users lost any customized, more elevated access, and may

now be able to access only top‐level data‐viewing features. Modify these accounts to restore their

previous privileges.

Network accounts are converted to SQL.

In version 9.0, only SQL login authentication is used. Existing accounts set to authenticate as Windows

network users have been migrated to SQL accounts. The new username for each SQL account is a

combination of the previous domain\username. For example, "MYDOMAIN\jsmith" becomes user

"mydomain‐jsmith." Passwords were not migrated, so you need to set new ones! Once logged in, the

user can control his or her own password as before.

Check Users

Select Users in the sidebar.

Previous "user groups" should appear in the sidebar.

If you used User Groups (in the Dashboard), the appropriate users should be listed within each

group. "Ungrouped" lists all users that do not belong to a group.


Users without data do not appear.

Data migrated from previous versions includes only "recorded" users. Users who were never recorded

and had no data in the database will not be included. You may need to add them for inclusion in Recon

and future recording. Select Add User from the top bar.

Enable SIEM exports, if used

Select Configurations | Export in the sidebar. Your SIEM export settings should be present following the

upgrade data migration, but they are now "disabled" because tracking was reset.

1. Select the export you want to enable from "Available Export Profiles."

2. Check export settings and Field Mappings.

3. In the Export Profile details, select Enable under "Status."

Redefine 360 Event Alerts, if used

Select Alerts & Policies | Event Alerts in the sidebar. If you had Event Alerts defined for Veriato 360 recording, the

alert definitions were not migrated, because the feature has been redesigned. If your version 8.5 installation is still

available, printing the settings for Event Alerts might help you recreate them.

1. Click Add Alert on the top bar.

2. Follow the add alert wizard through, selecting an alert type, users, conditions, and email operators.

3. Save the alert.

Direct System Health emails to the right person.

Select System Management | Server Settings in the sidebar. Look for "System Health." Use Add Alert Operator

if you want to choose or define a different operator to receive this important email. This should be an IT person

who can respond to server disk space and database issues. There must be at least one "Alert Operator" for the

System Health alert. See System Health Alert in the Management Console Guide.

Manage backups

Select System Management | Data Retention in the sidebar. The database is completely new. None of your

previous settings exist. You'll want to set up backup management. Backups occur automatically: full backups are

once a week on Sunday nights, and differentials are nightly, as before. See Data Retention.

Tour the Management Console

Take a tour through the new views of Users, the Dashboards, Data Explorer, Reports, Categories and Alerts &

Policies.


When you migrate data to version 9.0, duplicate records are not permitted. As a result, you may have

fewer data records than before. This should not change your views of user activity.

Categories, in addition to User Groups, are used for criteria selection, and may not have exactly the same

elements as before.

Web Filtering and Auditing are not supported in this release.

NOTE: The limited Database API is no longer available. Use another export method or use a SQL method as an alternative.


Contact and Copyright

Contact Us When sending email, please include your company name, city, and state to ensure your request is handled as

promptly as possible.

General Contact

Veriato, Inc.

4440 PGA Boulevard

Suite 500

Palm Beach Gardens, FL 33410

www.veriato.com

Toll Free +1 888‐598‐2788

Phone +1 772 770 5670

Fax +1 772 770 3442

Monday through Friday, 7:00 AM to 7:00 PM Eastern Time

[email protected]

Technical Support

Use the telephone number above or contact Veriato Technical Support.


Copyrights and Trademarks Copyright © 2018 Veriato, Inc., 4440 PGA Boulevard, Suite 500, Palm Beach Gardens, FL 33410.

Veriato, Veriato Recon/360, and Veriato Recon are Registered Trademarks of Veriato, Inc..

Your use of Veriato Help Files constitutes your acknowledgment and acceptance of the Veriato terms of use.

If you do not agree with these terms of use, please do not use these Help Files.

All materials appearing anywhere within this guide are protected by worldwide copyright laws and treaty

provisions. The copyright on such materials is held by Veriato or its subsidiaries (collectively, "Veriato"), or by

the original creator of the materials. None of the materials may be copied (other than for personal use),

reproduced (other than for personal use), displayed, modified, published, uploaded, posted, transmitted, or

distributed in any form or by any means without prior written permission from Veriato. All rights not

expressly granted herein are reserved. Any unauthorized use of the materials appearing on Veriato Help Files

may violate copyright, trademark, and other applicable laws and could result in criminal or civil penalties.

Trademarks for other companies

Microsoft Windows, MSN and other Microsoft products referenced herein are either registered

trademarks or trademarks of Microsoft Corporation in the U.S. and / or other countries.

Android is a trademark of Google, Inc.

AOL and AOL Instant Messenger are trademarks of America Online, Inc.

Adium is a trademark of the Free Software Foundation, Inc.

Bonjour, iChat, iCloud and other Apple software and web products are trademarks of Apple

Computer, Inc.

Yahoo! Brand Features are trademarks of Yahoo! Inc.

Gmail and Google are trademarks of Google, Inc.

Lotus Notes is registered trademark of IBM.

ICQ is a trademark of ICQ, Inc.

Citrix is a registered trademarks or trademarks of Citrix Systems, Inc.

Skype is a registered trademark of Skype Limited.

Trillian is a trademark of Cerulean Studios.

These Help Files may contain other names and phrases (marks) that may or may not be trademarks of other

organizations. All other trademarks and service marks are the property of their respective owners.

Third-party software

Veriato uses third‐party tools and/or code under terms of license or public domain: please view online.

veriato recon / 360...1.5 gb free disk space is recommended. recon local data storage requires more...

Documents