Production deployment overview

For production deployments:

  • Centrify recommends that you use a production-capable version of SQL Server and not SQL Server Express.

    SQL Server Express has a limit of 10Gb of data, does not provide the ability to schedule tasks

  • Centrify recommends that you do not use virtual machines.
  • Use at least 4 GB memory and 2 cores. leave enough memory for the operating system and allocate the rest to SQL server. For more details, see Memory requirements.
  • Centrify recommends that you use a new database instance; do not use an existing instance of SQL server. The reason for this is because uninstalling SSRS leaves some files behind and can cause problems with re-installation, if you’re reusing the database instance. For more information, see Impact of using a new or existing SQL Server instance.
  • If you're using a PostgreSQL database, Centrify recommends using a new PostgreSQL installation.
  • Do not install Centrify report services on a domain controller.

How to set up a production version of Centrify report services:

  1. Prepare your environment:

    • Users and groups with required permissions. For details, see Before installing - prerequisites .
      1. service account - the user account that runs the reporting service (in the background)
      2. installer/administrator - the user account that installs and configures the Centrify reporting service.
      3. Report administrator - user(s) who can run reports, edit reports, build new reports
      4. Report reader - user(s) who can view reports but not edit them nor create new ones.
    • The correct operating system that supports what you need. The operating system needs to be supported for Centrify software, SQL Server, and SQL Server Reporting Services (SSRS).

      Don’t install SSRS on the domain controller.

      IMPORTANT: Use an existing database instance with a real version of SQL Server, not the Express version. Express isn’t designed to handle the performance needs of a production environment.

  2. Run the Centrify installer. Install the report services in ONE place in your forest.

    • If you’re upgrading from a prior version of Centrify Server Suite or Centrify Authentication Service, Privilege Elevation Service, and Audit & Monitoring Service, the Access Manager reports are still there and they are installed anywhere you install Access Manager. In contrast, the new Centrify reporting service installs into one place in your forest. Plus, the database is optimized for reporting and retrieval.
  3. Do the reporting configurations:

    • Configure the reporting service as needed, including starting the service.
    • Set up the report security: assign users and groups to SSRS roles and configure Internet Explorer.
  4. View and share the reports.

  5. For custom report building, make sure that you’ve installed Report Builder for your version of SQL Server, if you don’t have it installed already. You may need to download this separately.