- Server configuration prep
- Separate data drive (with sufficient space)
- (High Perf): Separate LDF drive
- Separate backup drive (with sufficient space)
- (High Perf): separate TempDB drive.
- Collation checks if migration from previous environment
Check SQL collation from prior environment
it is usually either:
a) SQL_Latin1_General_CP1_CI_AS (sql collation)b) Latin1_General_CI_AS (windows collation)
- Install options
- Location
- Default backup location
- Default data location
- SQL Agent - Automatic
- SQL Browser- IF NAMED: On, IF DEFAULT: Off.
- Mixed mode. (Windows & SQL users allowed)
- Generate secure pw, and store in Password Manager.
- Post-installation configuration (SQL Configuration tool)
- Network protocols
- Firewall port opening (1433,and 1434 if named instance)
- Check if IP and port is configured as static
- SQL Agent
- SQL Browser (if named instance)
- Users
- Create SECURE users for specific users that require access with least privilege
- Create Windows Authentication SQL groups access: SQL - Create Evolution User in SQL
- Configuration options:
Default backup compression on;
Check default backup location
- Review hardening template: SQL Database - Hardening template
- Additional security possibilities:
- Logon trigger: SQL - Logon trigger with blocks