Symphia Control

Installation and Upgrade Guide

For Version 8.0

February 23, 2023

 Copyright Notice

© 2023 Cognyte Software Ltd. All rights reserved worldwide

Use of these products or certain features may be subject to applicable legal regulation. The user should
familiarize itself with any applicable restrictions before use.

Unauthorized use, duplication, or modification of this document in whole or in part without the written consent
of Cognyte Software Ltd. is strictly prohibited. By providing this document, Cognyte Software Ltd. is not
making any representations regarding the correctness or completeness of its contents and reserves the right to
alter this document at any time without notice. Features listed in this document are subject to change. Contact
your Cognyte representative for current product features and specifications. All marks referenced herein with
the ® or TM symbol are registered trademarks or trademarks of Cognyte Software Ltd. or its subsidiaries. All
rights reserved. All other marks are trademarks of their respective owners.

Please visit our website at https://www.cognyte.com/terms-of-service/ for updated information on Cognyte

Intellectual Property.

2 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Contents

Contents

Contents 3

Preface 5
About this Document 5
Documentation 5
Contacting Cognyte Sales and Marketing 6
About Cognyte 6
About Cognyte SIS 6
Contacting Cognyte Service and Support 6

Summary of Changes 8
Version 8.0 8
February 2023 8

Chapter 1: Getting Started 10

Prerequisites 11
Installation Checklist 12
Common Administrative User Account Configurations 15
Database Server Deployment 15
Installing SQL Server 2019 Standard Edition 16
Installing Microsoft SQL Server 2019, SQL Server Management Studio and
SQL Server Reporting Services Using a Script 23
Prerequisites for Running the Installation Script 23
Installing SQL Server, SSMS and SSRS Using an Installation Script 24
Installing SQL Server Management Studio 26
Installing and Configuring the SQL Server Reporting Services 26
Setting the Report Server Database Recovery Model 31
Setting Server Properties 32
Source Machine Configuration for Batch Installation 33
Setting the DVD as a Shared Drive on the Source Machine 33
Creating Site Folders on the Source Machine 37
Adding Target Machine to a Site Folder on the Source Machine 39

Chapter 2: Installation 40

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 3

 Contents

Starting the Installer 41

Installing the Symphia Application Server 43
Using Trusted and Password Protected Certificates in Admin Hub 47
Installing the Symphia Control Integration Server 50
Adding the Symphia Insight Server 52
Installing the Symphia Insight Server Module 53
Installing the Operator Client Online Application 55
Installing the Operator Client Offline Application 56
Installing the Symphia Control Health Check Agent 58
Installing the Rollup 61

Chapter 3: Post-Installation 63
Adding Subsystem Adaptors 64
Available Integrations 65
Reconfiguring Database Properties 66
Granting User Permissions to the SQL Server Reporting Services 67
Connecting to SQL Instance with Port Number 70
Adding the Port Number in the Configuration File 70
Changing the Connection Strings in the Reporting Services Configuration
Manager 72
Connecting to the SQL Server Reporting Services in the Configuration File 76
Forwarding Health Check Alerts to an SNMP Trap Receiver 78
Deployments with No Internet Access 80
Web- Based Maps in Blocked Internet Networks 83

Chapter 4: Upgrade 84
The Admin Hub Client 86
Refreshing Subsystem Adaptors 86
Re-Discovering Devices 87

Antivirus Guidelines 88
Recommended Antivirus Software 88
Virus Scanner Exclusion List 89
Processes, Services and Files 89
File Extensions 89
Folders 90

Firewall Guidelines 91

4 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

Preface

Operator, powered by Symphia Control, is ideal for use by organizations that need to provide a
high-degree of situational awareness to security and operational staff in the domain of finance,
retail, and critical infrastructures such as safe cities, transportation, and school and work
campuses.

Symphia Control collects information from a variety of security, safety, and enterprise systems.
When integrated into Symphia Control, the multiple devices within these systems are available in
Operator. Integrated systems can include cameras, mobile phones, GPS tracking, computer-
aided dispatch, mass notification, license plate recognition, face recognition, weather, radar,
identity, access control, panic alarms, intrusion detection, fire, video management and video
analytics.

Using Operator, security staff and operational users can manage and control devices, analyze the
information from the underlying system devices to efficiently identify situations and persons of
interest, and initiate a rapid, effective response, often in collaboration with first responders and
outside agencies.

About this Document

The Symphia Control Installation and Upgrade Guide provides the recommended sequence of
tasks required to prepare for, and then install Symphia Control servers and Operator.

Documentation
• You can download documentation from the COGNYTE PARTNER PORTAL.
• Send your questions or comments on the current document, or any other Cognyte/Symphia
user documentation, to our documentation feedback team at
[email protected].

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 5

 Contacting Cognyte Sales and Marketing

Contacting Cognyte Sales and Marketing

About Cognyte
Cognyte is a global leader in security analytics software that empowers governments and
enterprises with Actionable Intelligence for a Safer WorldTM. Our open software fuses, analyzes
and visualizes disparate data sets at scale to help security organizations find the needles in the
haystacks. Over 1,000 government and enterprise customers in more than100 countries rely on
Cognyte’s solutions to accelerate security investigations and connect the dots to successfully
identify, neutralize, and prevent threats to national security, business continuity and cyber
security.

About Cognyte SIS

Cognyte’s Situational Intelligence Solutions helps enterprises and governments manage complex
security operations, fuse information from various sources, analyze vast amounts of data, and
gain insight for better incident management, response and investigations. With our solutions,
organizations can see what’s happening across their operations, make quick and confident
decisions for decisive actions. Powered by our Symphia portfolio of solutions, we help our
customers orchestrate better outcomes to protect what matters most.

To schedule an online demo today, contact us on:

• https://www.cognyte.com/contact/
• [email protected]
• +1866-639-8482

Contacting Cognyte Service and Support

At Cognyte, we value our users and partners, and we strive to continuously improve the customer
service experience. Cognyte Smart Support™ ensures 24/7, on-demand service and support.
Enter support requests, access training and troubleshooting tips, initiate RMAs, check warranty
status, access resources, and more.

If you encounter any type of problem after reading this document, contact your local distributor or
Cognyte representative. For the main service and support page on the Cognyte web page, visit:
https://www.cognyte.com/contact

For immediate assistance, contact the support team:

6 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Preface

Cognyte Support™ App Contact Support

Android Americas Symphia

Phone: +1 888 747 6246

NowForce

Phone: +1 888 924 7247

Email: [email protected]

Canada/USA: Open 9:00 am to 5:00 pm (Local Time)

iOS
Monday to Friday
Europe, UK: +44 208 194 3368
Middle East,
Israel: +972 9 962 4286
and Africa
Email: [email protected]

Open 8:00 am to 6:00 pm (GMT) Monday to Friday

Asia/Pacific India: +91 225 032 3020

Singapore: +65 310 51276

Email: [email protected]

Open 9:00 am to 5:00 pm Local Time (Monday to

Friday)

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 7

 Summary of Changes

Summary of Changes

This Summary of Changes lists what topics are new and updated in the guide for each software
release.

Version 8.0

February 2023
• Added the "Installation Checklist" (page 12).
• Added new sub-sections to "Getting Started" (page 10):
• "Prerequisites" (page 11)
• "Installation Checklist" (page 12)
• Updated the images and steps in "Installing and Configuring the SQL Server Reporting
Services" (page 26) section.
• Updated images for SQL 2019 in "Setting the Report Server Database Recovery Model" (page
31) and "Setting Server Properties" (page 32).
• Added a note for ArcGIS licensing and added steps for configuring a Symphia Insight in
"Installing the Symphia Application Server" (page 43).
• Updated the topic to reflect the new Symphia Insight Server in "Adding the Symphia Insight
Server " (page 52).
• Added a note for onboard Intel graphics cards, added a note for deployments with blocked
internet, and updated the .Net version required in "Installing the Operator Client Online
Application" (page 55).
• Added the section, "Available Integrations" (page 65).
• Updated an image in "Granting User Permissions to the SQL Server Reporting Services" (page
67).
• Added the section "Deployments with No Internet Access" (page 80).
• Added a URL to the allowed list in "Web- Based Maps in Blocked Internet Networks " (page
83).
• Added a note on Uploading Existing Maps in "The Admin Hub Client" (page 86).

8 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Summary of Changes

• Added upgrade details to "Upgrade" (page 84).

• Added the section, "Re-Discovering Devices" (page 87).
• Added the section "Firewall Guidelines" (page 91).

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 9

 1
Getting Started

Symphia Control is a distributed client-server application that is deployed over a Windows

IP network. Symphia Control can be deployed within a single IP network or distributed over several
networks.

The Integration Servers and Operator client workstations can be deployed behind firewalls on
different networks from the Symphia Application Server.

Tip
This document explains how to perform Symphia Control installations and upgrades using a
standalone SQL server intended only for Symphia Control. For instructions on installing Symphia
Control using a database on an SQL Server farm, see technical note TN866: Installing Symphia
Control with an SQL Farm Database Deployment.

Prerequisites 11
Installation Checklist 12
Common Administrative User Account Configurations 15
Database Server Deployment 15
Source Machine Configuration for Batch Installation 33

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 10

 Prerequisites

Prerequisites
The following prerequisites are required for a successful installation.

• A common administrative user account must be created for the Symphia Control Application
Server and the SQL Server and SQL Server Reporting Services on the Database Server.
Create the user account with the username SAServices and a strong password. See
"Common Administrative User Account Configurations" (page 15).
• The target machines must meet the minimum hardware and software requirements, as
specified in the Symphia Control 8.0 Customer Furnished Equipment Guide (CFE) Guide.

• For a typical deployment, you must create the following partitions on the target machines prior
to the installation:

• Application Server - Partition C: 100 GB and partition D: 200 GB

Note
On physical machines, you can place any additional storage in partition D:.

• Database Server - Partition C: 100 GB and partition D: 1.6TB

• Integration Server - Partition C: 100 GB and partition D: 75 GB.
• Insight Server - Partition C: 100 GB and partition D: 75 GB
Caution
It is recommended you review the Symphia Control 8.0 Customer Furnished
Equipment Guide (CFE) Guide to confirm your deployment's specifications.

• You must install the SQL Database Server before installing the Symphia Control Application
Server.

• If you are installing to multiple target machines, you need to first set up the source machine.
See "Source Machine Configuration for Batch Installation" (page 33).

• Microsoft® SQL Server® 2019 is required for all new Symphia Control 8.0 deployments. A
license per deployed Database Server is required. See the Symphia Control 8.0 Planning
Guide.
• If installing SQL 2019 from the script the prerequisites listed in"Prerequisites for Running the
Installation Script" (page 23) must be met.
• To enable the installation to multiple clients and servers from a single Source Machine ensure
you have the:

11 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

• IP address of all target machines.

• IP address of source machine.
• Administrator user name and password for all machines.
• The Application Server passkey encrypts and decrypts data shared between Symphia Control
servers, and must be identical for all Windows and SQL Symphia Control servers at your site.

Installation Checklist
The following tasks are listed in the sequence that they are to be performed. Those tasks are
recommended for preparing database server and source machine configuration prior to installing
Symphia Control.

# Task Completed
1 Create a common admin account username and password enabling
communication between the Symphia Control Application Server and
the Database Server's SQL Server and SQL Server Reporting Services.
See "Common Administrative User Account Configurations" (page 15).
2 Install SQL 2019 on a dedicated Database Server.

If manually installing SQL 2019 follow the steps in:

• "Installing SQL Server 2019 Standard Edition" (page 16)

• "Installing SQL Server Management Studio" (page 26)
• "Installing and Configuring the SQL Server Reporting Services" (page
26)

If running the script see:

• "Installing Microsoft SQL Server 2019, SQL Server Management

Studio and SQL Server Reporting Services Using a Script" (page 23)
3 Configure the Source Machine by either:

Sharing DVD drive access, see "Setting the DVD as a Shared Drive on
the Source Machine" (page 33) or

Creating site folders and adding target machines, see:

• "Creating Site Folders on the Source Machine" (page 37) and

• "Adding Target Machine to a Site Folder on the Source Machine"
(page 39)

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 12

 Installation Checklist

# Task Completed
4 Install Symphia Control 8.0 in the following order from the Installer, see
"Starting the Installer" (page 41).

• Application Server, see "Installing the Symphia Application Server"

(page 43)

Note
Setting trusted and password protected certificates is
recommended, see "Using Trusted and Password Protected
Certificates in Admin Hub" (page 47) for the steps to follow.

• Integration Server, see "Installing the Symphia Control Integration

Server" (page 50) and for the full list of integrations see the Post-
Installation Procedures section.
• The Symphia Insight Server, see "Adding the Symphia Insight Server
" (page 52).

• Install the Operator Client Applications on workstations.

For Online, see "Installing the Operator Client Online Application"
(page 55)

For Offline, see "Installing the Operator Client Offline Application"

(page 56)

• Health Check Agent (for a standalone SQL Server machine), see

"Installing the Symphia Control Health Check Agent" (page 58)
• Optional see, "Installing the Rollup" (page 61)

13 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

# Task Completed
5 After installing the components, do the following Post-Installation
configuration:

• Install the required Sub-System Adaptors for the required

integrations, see "Adding Subsystem Adaptors" (page 64)and the list
of "Available Integrations" (page 65)
• Changing Application Server server's FusionDatabase properties,
see " Reconfiguring Database Properties " (page 66)
• SQL Server Reporting Services user permissions need to be set, see
"Granting User Permissions to the SQL Server Reporting Services"
(page 67)
• Defining the SQL connection preferences from instance name to port
number, see "Connecting to SQL Instance with Port Number" (page
70)
• Enable SNMP Trap Receiver to receive Admin Hub Health Check
Alerts, see "Forwarding Health Check Alerts to an SNMP Trap
Receiver" (page 78)
• To configure system for a deployment with blocked internet, see
"Deployments with No Internet Access" (page 80).
• Allow your Operator Client to display Web-Based Maps in a blocked
internet connection network, see "Web- Based Maps in Blocked
Internet Networks " (page 83)
6 Optional Upgrade Procedures must be performed in sequence to ensure
a smooth upgrade and to minimize system downtime and include:

• Upgrading Admin Hub Client, see "The Admin Hub Client" (page 86)
• Updating the Sub-System Adaptors, see "Refreshing Subsystem
Adaptors" (page 86)

Note
• If you are deploying a High-Availability Installation see the Symphia Control 8.0 Planning
Guide and the TN1097 Deploying Redundancy Solutions for Symphia VMS and Symphia
Control.
• If you are upgrading your installation to Symphia Control 8.0 see "Upgrade" (page 84).

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 14

 Common Administrative User Account Configurations

Common Administrative User Account

Configurations
For Symphia Control and SQL Server services to communicate with each other, a common
administrative user account must be created. The servers that run the Symphia Application
Server, SQL Server and SQL Server Reporting Services must have access to this user account.

• In a domain: create the user account in the Active Directory and add the user to the
Administrators group on each server.

• In a workgroup: create a user account on each server that runs an Application Server, a
SQL Server, or SQL Server Reporting Services (SSRS), and add the user to the
Administrators group. The username and password of this account should be the same on all
the servers.

Note
It is recommended to create the user account with the username SAServices and create a
strong password. Take note of the user name and password because you will need to
provide this information when you install the Symphia Application Server.

For details on creating an administrative user for the SQL Server Reporting Services (SSRS),
see the section "Granting User Permissions to the SQL Server Reporting Services" (page 67)
For details on creating other user accounts, see the Symphia Control Administrator Guide.

Database Server Deployment

As a prerequisite to installing the Symphia Control and its related components, Symphia requires
a database server running Microsoft® SQL Server® Standard, Business Intelligence, or
Enterprise editions. SQL Server 2016 can still be used when upgrading to Symphia Control 8.0
from older versions. For all new 8.0 deployments, Microsoft® SQL Server® 2019 is required.

This section explains how to install Microsoft® SQL Database Server® 2019 Standard Edition
acquired from Microsoft®. It also explains how to set the Report Server DB Recovery Mode for
improved performance.

Contact Microsoft to acquire the relevant licenses.

15 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

Installing SQL Server 2019 Standard Edition

The SQL Server must be deployed on a dedicated database server; it cannot be installed on the
same computer as the Symphia Application Server. This is to ensure optimal performance on both
servers. The SQL Server must be installed prior to the Symphia Application Server.

Tip
Refer to Microsoft TechNet for information about the SQL Server features, installation and
configuration.

▼ To install SQL Server 2019 Standard Edition

1. Log in to the target computer as an administrator.

2. Navigate to the installation directory and click the setup file.
3. In the User Account Control dialog box that opens, click Yes to allow the program access to
your machine.

4. In the SQL Server Installation Center window, click Installation from the list, and then select
New SQL Server stand-alone installation or add features to an existing installation, to
launch the installation wizard.

5. On the Product Key page, select Enter the product key and type the product license key for
SQL Server. Then click Next.
6. On the License Terms page, accept the license terms and click Next.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 16

 Installing SQL Server 2019 Standard Edition

7. On the Microsoft Update page, select the checkbox to ensure that the latest Microsoft
Windows updates are included, and click Next.

8. On the Feature Selection page:

a. Select the following Instance Features to install:

• Database Engine Services
• SQL Server Replication
• Full-Text and Semantic Extractions for Search
• Data Quality Services
b. Select the following Shared Features to install:
• Client Tools Connectivity
• Client Tools Backwards Compatibility
• Client Tools SDK
c. Change the instance root directory to D:\Fusion.

Note
The paths for the Shared Feature Directory should not be changed.

17 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

9. On the Instance Configuration page, specify details for the named SQL Server instance:

a. Select Named instance and change the default name to SymphiaInstance. The Instance
ID is updated accordingly.

b. Take note of the named instance as you need to enter this information during the installation
of the Application Server.

c. Click Next.

10. On the Server Configuration page, in the Service Accounts tab, change the start-up type:
a. From the SQL Server Agent list, select Automatic.
b. In the SQL Server Browser list, verify that Automatic is selected.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 18

 Installing SQL Server 2019 Standard Edition

Note
All other values remain unchanged.

11. Change the collation supported by the database:

a. Click the Collation tab of the Server Configuration page, and then click Customize.

b. From the list that opens, select Collation SQL_Latin1_General_CP1_CI_AS.

c. Click Next to save your changes.

12. On the Database Engine Configuration page, in the Server Configuration tab:

a. Select Mixed Mode (SQL Server authentication and Windows authentication) as the
Database Engine authentication mode.

b. In the Password box, type a secure password for the SQL Server system administrator
(sa) account.

Note
Take a note of this password since you will need it during installation of Symphia Control.

c. Re-enter the password to confirm it.

d. Click Add Current User to add the new admin user.

19 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

Tip
When specifying the authentication mode and administrators, take note of the user name
and password, as you need to enter this information during the installation of the Application
Server.

13. Click the Data Directories tab and define the Data and Log directories on two different
physical disks:

a. In the Data root directory box, type D:\Fusion.

b. In the User database directory box, type D:\Fusion\Data.
c. In the User database log directory box, type D:\Fusion\Log.
d. In the Backup directory box, type D:\Fusion\Backup.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 20

 Installing SQL Server 2019 Standard Edition

14. Click the TempDB tab, and define the TempDB file location as follows:

a. Change Number of files to 8 (servers having less than 8 CPU cores use the number of
cores minus 1)

b. For Data directories:

21 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

• Click Remove to remove the current location.

• Click Add and change the mapping to D:\TempDb.
c. Under Log directory, change the mapping to D:\TempDb.

15. Click the FILESTREAM tab to support FILESTREAM as follows:

a. Check all three options on the page.

b. For the Enable FILESTREAM for file I/O access option, ensure that
SYMPHIAINSTANCE appears as the Windows share name.

c. Click Next.
16. On the Installation Configuration Rules page, click Next.
17. On the Ready to Install page, click Install.

18. On the Complete page, check that all features have been installed successfully and click
Close.

19. If you want the SQL Server to report health events to the Symphia Control platform, install the
Symphia Control Health Check Agent on the SQL Server machine as described in "Installing
the Symphia Control Health Check Agent" (page 58).

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 22

 Installing Microsoft SQL Server 2019, SQL Server Management Studio and SQL Server Reporting

Installing Microsoft SQL Server 2019, SQL

Server Management Studio and SQL Server
Reporting Services Using a Script
As an alternative to the manual installation described in the previous section "Installing SQL
Server 2019 Standard Edition" (page 16), you can run a script that installs Microsoft SQL Server
2019, Microsoft SQL Server Management Studio and SQL Server Reporting Services with
default values contained in an ini file. The Microsoft SQL Server installation requires some user
intervention, but all values are automatically filled in..

The following sections describes the prerequisites and process to perform the installation using a
script:

• "Prerequisites for Running the Installation Script" (page 23)

• "Installing SQL Server, SSMS and SSRS Using an Installation Script" (page 24)

Prerequisites for Running the Installation Script

The following prerequisites must be fulfilled before running the installation script:

• A D drive on the Microsoft SQL Server machine.

• A Microsoft SQL Server 2019 license and product key.
• Download the <AutoSQL2019_package.zip> file.
• The Microsoft SQL Server installation files.
• Microsoft SQL Server 2019 Reporting Services (SSRS) - The
SQLServerReportingServices.exe application file.
• SQL Server Management Studio (SSMS) - The SSMS-Setup-ENU.exe application file.

23 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

Installing SQL Server, SSMS and SSRS Using an

Installation Script
After you have fulfilled the prerequisites for running the installation script, perform the following:

▼ To automate the Microsoft SQL Server, SSMS and SSRS installation

1. On the machine that will host Microsoft SQL Server, create an <Installation>folder.

2. Extract the <AutoSQL2019_package.zip> file to the <Installation> folder.

Note
• The extracted file contains an empty SQL_Server_2019 folder and some configuration
files.
• The structure of the extracted <AutoSQL1019_package.zip> file must be retained.
3. Download the Microsoft SQL Server 2019 ISO and extract the installation files to the SQL_
Server_2019 folder.
4. Copy the downloaded SQLServerReportingServices and SSMS-Setup-ENU application files
to the SQL_Server_2019 folder.

5. Click the Windows Start menu, type Command Prompt.

6. Right-click Command Prompt and select Run as administrator.

7. At the command prompt, navigate to the parent folder of SQL_Server_2019, and run the
following command, SQL2019_Installation.bat [SA_PASSWORD] [PRODUCT_KEY]
[SQL_COLLATION] where:

• SA_PASSWORD is the SQL sa user's password,

• PRODUCT_KEY is the Microsoft SQL Server product key
• SQL_COLLATION is the collation for the SQL Instance.
Example
SQL2019_Installation.bat sapassword ABCDE-B12DE-C34FG-D56HI-E78JK SQL_Latin1_
General_CP1_CI_AS

8. On the Product Key screen, ensure the correct product key appears, and click Next.
9. On the License Terms screen, accept the license terms and click Next.
10. On the Microsoft Update page, if it is your company policy, select Use Microsoft Update..,
and click Next.
11. On the Product Updates page, take the appropriate action, and click Next.
12. On the Feature Selection page, click Next.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 24

 Installing SQL Server, SSMS and SSRS Using an Installation Script

13. On the Instance Configuration page, click Next.

14. On the Database Engine Configuration page, click Next.
15. On the Ready to Install page, click Install.

16. When the SQL Server installation finishes, on the Complete page, click Close.

the Management Console now automatically installs.

17. On the Microsoft SQL Server 2019 Reporting Services welcome page, click Install
Reporting Services.
18. On the choose an edition to install, select Enter the product key and enter the product key and
click Next.
19. On the Review the license terms page, click I accept the license terms and click Next.
20. On the Install Database Engine page, click Next.
21. On the specify an Install location screen, use the default install location or browse to an
alternative location, and click Install.
22. When the installation completes, click Close.

Note
• The installation progress is visible in the command prompt Window. Any installation issues
can be viewed and identified if they occur during the installation.
• The Ins-SymphiaInstance-SQL2019ConfigFile file contains the settings used during the
Microsoft SQL Server installation and does not need to be edited for a default installation. If
you would like for example to change the default name of the instance
(default=SymphiaInstance) or the location of the data and log files, you can change the
values during the SQL installation, or carefully update the Ins-SymphiaInstance-
SQL2019ConfigFile file before running the SQL2019_Installation.bat command.

25 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

Installing SQL Server Management Studio

Install SQL Server Management Studio (SSMS) from the SQL Server Installation Center. SSMS
is used to query, design and manage databases and data warehouses.

▼ To install the SQL Server Management Studio

1. From the SQL Server Installation Center, click Installation from the list, and then select Install
SQL Server Management Tools.

Note
If the hyperlink does not open, use: https://docs.microsoft.com/en-us/sql/ssms/download-
sql-server-management-studio-ssms

2. Click the Download SQL Server Management Studio (SSMS) hyperlink.

3. Click Run when prompted and then click Install.

Installing and Configuring the SQL Server

Reporting Services
Reporting services are used in the Symphia Control when producing incident export and other
reports in PDF format. The SQL Server Reporting Services should be installed and configured on
the Microsoft SQL Server before you install the Application Server.

▼ To install and configure SQL Server Reporting Services

1. Download the SQLServerReportingServices.exe application file from Microsoft SQL Server

2019 Reporting Services.
2. Run SQLServerReportingServices.exe.
3. On the Welcome screen, click Install Reporting Services.

4. On the Choose an edition to install screen, in the Choose a free edition drop down, select
Developer, and then click Next.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 26

 Installing and Configuring the SQL Server Reporting Services

5. On the review the license terms screen, accept the license terms, and click Next.
6. On the Install Database Engine screen ensure Install Reporting Services only is selected,
and click Next.
7. On the Specify an install location, select an install location, and click Next.

8. On the Setup completed screen, click Configure report server.

The Report Server Configuration Manager opens.

9. In the Report Server connection screen, specify the SQL server name, the Report Server
instance to configure, and click Connect.
10. If prompted, start the service.

11. Select Service Account from the left-side menu and in Use built-in account, select Virtual
service account, and click Apply.

27 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

12. In the Web Portal URL screen, In Virtual Directory type ReportServer_SymphiaInstance,
and click Apply.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 28

 Installing and Configuring the SQL Server Reporting Services

13. Restart the server and then navigate back to the Report Server Configuration Manager
location to continue.
14. Select Database from the left-side menu and in Current Report Server Database, click
Change Database.
15. Select Create a new report server database and click Next.

16. In Connect to the Database Server, select an authentication type and click Test Connection
to verify the connection.

29 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

17. If the test connection was successful, click Next.

18. On the change database name screen, click Next.
19. On the Credentials screen, click Next

20. In the Summary screen, click Next.

The Report Server Configuration wizard configures the database,

21. When the configuration completes, click Finish.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 30

 Setting the Report Server Database Recovery Model

Setting the Report Server Database Recovery

Model
The next step of the database deployment is to change the default Report Server Database
recovery model from Full to Simple. With this recovery model you have the ability to do complete
backups (an entire copy) or differential backups (any changes since the last complete backup).

▼ To set the Report Service Recovery model

1. Log into the SQL Server Management Studio on your machine.

2. In the Object Explorer, expand the Databases node.

3. Right-click the ReportServer_only database and select Properties.
4. In the Database Properties dialog box, select Options.

5. From the Recovery model list, select Simple.

6. Click OK to save.

31 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

Setting Server Properties

Now you need to set the general server properties as best practices.

▼ To set the server properties

1. Log into the SQL Server Management Studio on your machine.

2. In Object Explorer, right-click the DB node and select Properties.

3. Choose Database Settings.

4. Set Default index fill factor to 60.

5. Select the Compress backup checkbox.
6. Click OK to save your changes and close the window.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 32

 Source Machine Configuration for Batch Installation

Source Machine Configuration for Batch

Installation
Using Installer, you can install all the Symphia Control components on different clients and/or
servers from a single workstation or server.

To do so, you first need to set up the source machine that you are working on as follows:

1. Make the DVD drive a shared drive accessible from the network. This allows the target clients
and servers to access the setup files on the source DVD drive.
2. Create site folders in the Installer to group similar components together.
3. Add the target machines on which to install Symphia Control in the sites.

To set up the source machine, you need the following information:

• IP address of all target machines.

• IP address of source machine.
• Administrator user name and password for all machines.
Note
Symphia recommends using an administrator account and password that is common to all
machines in the site.

Tasks
Setting the DVD as a Shared Drive on the Source Machine 33
Creating Site Folders on the Source Machine 37
Adding Target Machine to a Site Folder on the Source Machine 39

Setting the DVD as a Shared Drive on the

Source Machine
Before installing the Symphia Control components from the source machine, you need to make
the DVD drive into a Shared drive to make it accessible from the network. This allows the target
machines to access the setup files.

▼ To set the DVD as a shared drive on the source machine

33 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

1. Log in to the source machine as an administrator.

2. Insert the Symphia Control and Operator Master Installation DVD into the DVD drive.
3. Right-click DVD > Share With > Advanced Sharing.

4. Click the Sharing Tab.

5. Click Advanced Sharing.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 34

 Setting the DVD as a Shared Drive on the Source Machine

6. Select Share this folder.

7. In the Share name box, type DVD.
8. In the Limit the number of simultaneous user to box, set the maximum numbers of users.

9. Click Permissions.

35 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

10. Under Groups user name, select Everyone.

11. Under Permission for Everyone, select Full control.
12. Click OK to close the Permissions dialog box.
13. Click OK to close the Advanced Sharing dialog box.
14. Click Close.

Concepts
Source Machine Configuration for Batch Installation 33

Tasks
Creating Site Folders on the Source Machine 37
Adding Target Machine to a Site Folder on the Source Machine 39

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 36

 Creating Site Folders on the Source Machine

Creating Site Folders on the Source Machine

Site folders group target machines with the same installed components. Grouping target
machines together into a site folder allows you to simultaneously install or upgrade the targets with
a single install procedure, without having to do the install or upgrade procedure on each target
machine individually.

Note
To use this feature, all target machines in an install site must have a common administrator
account with the same user name and password. If target machine has a different administrator
account, you should place the target machine in the root folder, or create a separate site folder.

Follow the procedure below for each site folder that you need to create.

▼ To create site folders on the source machine

1. From Windows Explorer, in the address bar, enter the IP address of the source machine.

Example: \\172.22.118.207\DVD

2. Browse to the Shared drive and double-click Setup.exe.

Caution
Do not double-click Setup.exe from the current target machine to run Installer. This
prevents the target machines from accessing the setup files.

3. On the Installer Welcome page:

a. In the User name and Password boxes, enter the administrator credentials.
b. Select Remember My Password.
4. Click Apply.

5. Open the network pane: from the View menu, click Network.

37 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 1: Getting Started

6. For each component, create a site.

a. From the network pane, right-click Project and click New Site.

b. Press F2 on the folder to rename the site.

c. Highlight the new site to display the Site Setup page.
d. Under Repository Settings:
i. In the Location box, type the IP address and path to the Shared DVD drive on the
source machine.
ii. In the Username and Password boxes, enter the credentials for the source machine
and click Check.

e. Under Machines Log-in default credentials, in the User name and Password boxes,
type the credentials of the administrator on the target machines.

Note
It is recommended to use the same administrator credentials on all target machines.

f. From the File menu, select Save.

Concepts
Source Machine Configuration for Batch Installation 33

Tasks
Setting the DVD as a Shared Drive on the Source Machine 33
Adding Target Machine to a Site Folder on the Source Machine 39

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 38

 Adding Target Machine to a Site Folder on the Source Machine

Adding Target Machine to a Site Folder on the

Source Machine
Grouping target machines together into a site folder allows you to simultaneously install or
upgrade the targets with a single install procedure, without having to go to each target machine to
perform the install or upgrade.

▼ To add target machines to a site folder on the source machine

1. Log in to the source computer as an administrator.

2. Insert the Symphia Control Platform Master Installation DVD into the DVD drive of the
computer.

3. In Windows Explorer, in the address bar, enter the IP address of the source machine and
browse to the Shared drive and double-click Setup.exe.

Example: \\172.22.118.207\cd

Caution
Do not expand the DVD drive and double-click Setup.exe to run Installer. This prevents
the target machine from accessing the set up files.

4. Open the network pane: from the View menu, click Network.
5. Right-click a site, and click (New Machine).

6. In the New Machine dialog box, enter the IP address of the target server machine.

7. Select Use Default User.

Note
If the target machine is not part of site, enter the administrator credentials.

8. Click Add.
9. On the File menu, click Save.

Concepts
Source Machine Configuration for Batch Installation 33

Tasks
Setting the DVD as a Shared Drive on the Source Machine 33
Creating Site Folders on the Source Machine 37

39 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 2
Installation

Symphia Control is a distributed client-server application that is deployed over a Windows IP

network. Symphia Control can be deployed within a single IP network or distributed over several
networks. The installation of Symphia Control is fast and straightforward.

The Installer guides you through the installation or upgrade of Symphia Control and Operator
components. For the chosen component, Installer verifies that the host computer meets the minimum
system requirements, and installs any prerequisite software and tools, then installs the selected
component.

Installation involves the following tasks:

Starting the Installer 41

Installing the Symphia Application Server 43
Using Trusted and Password Protected Certificates in Admin Hub 47
Installing the Symphia Control Integration Server 50
Adding the Symphia Insight Server 52
Installing the Operator Client Online Application 55
Installing the Operator Client Offline Application 56
Installing the Symphia Control Health Check Agent 58
Installing the Rollup 61

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 40

 Starting the Installer

Starting the Installer

All Symphia Control components are installed via the Symphia Installer. This tool is used to:

• Validate the system settings of the target computer.

• Allow you to customize the deployment and pre-configure the domain controller.
• Install all required third-party software.
• Install the Symphia Control application(s) that you selected.

Before you begin

• Turn off any screen saver or power saver.
• Disable any anti-virus applications (recommended).
• If the machine is not connected to the Internet, download the database installation package file
from a computer with Internet connectivity.

▼ To start the Installer

1. Choose one of the following:

To Do
Install Symphia Control locally using a. Log in to the computer as an administrator.
the DVD b. Insert the Symphia Control and Operator Master
Installation DVD into the DVD drive of the
computer.
c. From Windows Explorer, browse to the DVD and
double-click Setup.exe.
Install Symphia Control from a source a. On the source machine, open Windows Explorer.
machine to one or more target
b. In the address bar, enter the IP address of the
machines
source machine.

c. Browse to the Shared drive and double-click

Setup.exe.

2. On the Installer Welcome page:

a. In the User name and Password boxes, enter the same user credentials that you used to
log in to this computer.

41 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 2: Installation

b. Select Remember My Password.

c. Click Apply.

3. If you are installing from a source machine, do one of the following; otherwise, continue to the
next step.

To Do
Install on a single target Select the target machine.
machine
Install on multiple target Select the site folder with the target machines.
machines

4. Click Next.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 42

 Installing the Symphia Application Server

Installing the Symphia Application Server

The Symphia Application Server is the core of Symphia Control. The Symphia Application Server
records, consolidates, and makes available information provided from the disparate sub-systems
connected to the solution.

The Application Server installation creates the database, called FusionDatabase. The
installation also includes the Symphia Admin Hub application.

An Integration Server is automatically installed by default with the Symphia Application Server.
For more information on Integration Servers and how to install additional Integration Servers, see
"Installing the Symphia Control Integration Server" (page 50).

Before you begin

• You must install the SQL Database Server before installing the Symphia Application Server.
• If you are installing to multiple target machines, you need to first set up the source machine.
See "Source Machine Configuration for Batch Installation" (page 33).

Note
If you are upgrading:

• Before you perform an upgrade, verify in the Symphia Control 8.0 Customer Furnished
Equipment Guide that the hardware and software specifications meet the requirements for
the relevant version.

• Ensure that you close all Operator sessions with the Symphia Application Server before you
start the Symphia Control Application Server upgrade.

• The Symphia Application Server must be upgraded prior to the Integration Server. This
procedure also upgrades the Symphia Control database (FusionDatabase).

• System settings, including passwords and user names, are retained. It is possible, but not
required, to change them during the upgrade.

▼ To install the Symphia Application Server

1. Start the Installer. For details, see "Starting the Installer" (page 41).

2. On the Select Platform page:

a. In the Group list, select SYMPHIA Servers.

b. In the Platform list, select Application Server.

43 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 2: Installation

c. Select Install/Upgrade.
d. Click Next.
3. Read the End User License Agreement, select I Accept, and then click Next.

4. On the Prerequisites Check page, click Next.

Caution
The target computer must meet the minimum hardware and software requirements that
are listed in the Required column of each component. If you receive a message stating
that the software is not safe to install, the installation may fail. If this occurs, check that all
relevant prerequisites have been met before retrying the installation.

5. On the Install Setup page:

a. Expand the Application Server nodes to view the components included in the installation.

b. Configure the Application Server:

• Leave the default configurations or modify as required.

Tip
Selecting a field will display its description to the bottom right of the window.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 44

 Installing the Symphia Application Server

• In the General section, add a Passkey. This should be identical to that of the other
Symphia Control Servers.

• Add passwords for the Application Server User Account and the SQL Server Reporting
Services properties.

Caution
If you use an administrative user name other than Administrator for the SQL
Server Reporting Services, you need to grant this user administrative permissions
to the SQL Server Reporting Services application on the SQL Server as well.
Otherwise your installation will fail. For details, see "Granting User Permissions to
the SQL Server Reporting Services" (page 67).

c. When entering the database connection details, pay attention to the following:

i. In the Database Instance Name field, do one of the following:

• Enter the name of the SQL instance for the Symphia database.
• Leave this field empty to use the default SQL instance.

Tip
There can be multiple SQL instances on the same SQL server, with one unnamed
instance as the default. All other instances must be named.

ii. (Optional) In the TCP Dynamic Port field, enter a database port, so that the connection
to the database is via the port instead of via the SQL instance name.

Caution
If this option is selected, you will also need to manually create a connection to the
SQL Server Reporting Services following the installation. For details, see
"Connecting to the SQL Server Reporting Services in the Configuration File"
(page 76).

iii. Add a password for the Database Management Account.

d. Optionally configure Symphia Control to integrate with the Insight Server modules:

• Select the Insight Server Configuration checkbox.

• In the Address field, type the IP address of the elasticsearch cluster.

Caution
The Insight Server components must be installed independently before this step can
be performed. For details, see "Adding the Symphia Insight Server " (page 52).

45 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 2: Installation

e. Select the Symphia core Sub-System Adaptors to be integrated, from any of the following:
• Symphia NowForce - Integrates Symphia Control with a mobile force management and
dispatch solution.
• Symphia VMS - Integrates Symphia Control with Symphia VMS to enable the viewing of
VMS video from Operator.
• Symphia Video Tracker - Integrates Symphia Control with a target tracking module for
increased surveillance capabilities.
f. Click Next.
6. On the Final Check page, click Next.

7. On the Ready to Install page:

a. Optionally do any of the following:

• Check the Ignore component errors check box to ignore errors during the installation.
The installation will continue regardless of whether one of the components failed to
install. This option is not recommended for a regular installation.
• Clear the Display a prompt before restarting the target machine check box. The
computer restarts more than once during the installation. For each restart a prompt
appears indicating that the system will restart in ten seconds. You can choose to
deactivate the prompt so that the restarts occurs automatically.

• In rare cases you might want to prevent automatic restarts during the installation
process. You can do this if you select the Skip all restarts during installation check
box.

Caution
This should be avoided whenever possible, as there are many inter-dependencies
between core components during the installation. If a restart is skipped, the
installation of one server component will not be completed and this may impact the
installation of subsequent components for the server. This option can be useful in a
lab environment.

• Check the Set Log level to DEBUG mode check box to change the default Log level
from INFO to DEBUG. This increases the detail level of the logs to include informational
events that are most useful for debugging an application. This option is recommended if
system resources permit.
• If you want a report that lists the software installed and Symphia VMS settings made,
select the Report check box. By default, the installation report is saved to the Windows
desktop. Browse to select a new location.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 46

 Using Trusted and Password Protected Certificates in Admin Hub

b. Click Install. The Platform Progress window will be displayed. Wait while the installation
completes.

8. When the Platform Installation Progress window indicates that the installation is complete,
click Done

9. Click to close the Installer.

Note
• Application server installation includes default access to ArcGIS Runtime Lite. To use a
purchased ArcGIS Runtime Standard license, refer to the required steps in the Symphia
Platform 8.0 Admin Hub Administrator Guide.
• Customers with an installed Symphia version 7.7 client or earlier retain an ArcGIS Runtime
Standard license and no configuration is required.

Using Trusted and Password Protected

Certificates in Admin Hub
AdminHub runs under SSL to enable protection from many security threats such as man in the
middle. SSL, requires a certificate. It is best practice to use trusted signed certificates that can be
provided by third parties such as Symantec and Microsoft.

Admin Hub is installed by default with a self-signed certificate with no password protection. This
type of certificate provides basic SSL support as there is no authority that declares the certificate
to be valid.

47 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 2: Installation

If your organization wants to use a trusted certificate with or without password protection, then
you must take the following steps:

Note
• If your organization operates using a self-signed certificate and do not implement a trusted
certificate, users when they sign in to Admin Hub will receive a "Your connection is not
private" or a similar certificate warning. If you bypass this warning, it will reappear when the
cookie expires each time the user opens a new session.

• Step 3 is only required if the certificate is password protected.

▼ To use a trusted certificate or a password protected certificate

1. Sign into the Application Server with Administrator privileges.

2. In Windows Explorer, replace the default key.perm and cert.perm files in

C:\ProgramData\Cognyte\Admin Hub\cert with the key.perm and cert.perm files associated
with the trusted certificate.

3. (Optional) If your certificates were created with password protection, add a cognyte_
adminhub_pass Environment variable and a value as follows:
a. In the Start menu, search for and select View advanced system settings
b. On the System Properties dialog in the Advanced tab, click Environment Variables.
c. Under system variables, click New.
d. In Variable name, enter cognyte_adminhub_pass.
e. In Variable value, enter the certificate password, and then click OK.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 48

 Using Trusted and Password Protected Certificates in Admin Hub

4. Stop and start the Symphia Control Admin Hub service as follows:
a. In the Start menu, search for and select Services.
b. From the list of services locate and right-click Symphia Control Admin Hub.
c. Select Restart to stop and then start the service.

49 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 2: Installation

Installing the Symphia Control Integration

Server
Symphia Control is able to integrate additional Cognyte and third-party subsystems. Each
subsystem is installed via a Sub-System Adaptor (SSA). The adaptors route events, alarms, and
system management information from the Sub-System Adaptor to Symphia Control and back. A
single Integration Server supports up to eight (8) sub-systems. The subsystem adaptors are
hosted on the Integration Server.

SSAs are available for both Cognyte core and third-party subsystems:

• Cognyte Core Subsystems - These include:

• Symphia NowForce - Integrates Symphia Control with a mobile force management and
dispatch solution.
• Symphia VMS - Integrates Symphia Control with Symphia VMS to enable VMS video
display and event retrieval from Operator.
• Symphia Video Tracker - Integrates Symphia Control with a target tracking module for
increased surveillance capabilities.
• SSA Simulator - Integrates an internal tool used to simulate SSA commands and events.
• Third-party subsystems - Examples include Lenel OnGuard, Honeywell Pro-Watch, Cognitech
FaceVACS and others. If you are interested in a third party integration that is not yet included in
your implementation, contact your Cognyte representative.

For a Symphia VMS sub-system, it is recommended to install the Symphia Control Integration
Server and the Symphia Control-Symphia VMS adaptor on the Symphia VMS Management
Server or the Managment Recorder Server. For all other sub-systems, install the Integration
Server and related adaptors on a dedicated Windows Server machine.

Caution
The Integration Server installation sometimes causes a reboot following the Microsoft .NET
framework patch installation. This should be planned for, especially if the adaptor is being
installed on a production Management Server.

▼ To install a Symphia Control Integration Server

1. Start the Installer. For details, see "Starting the Installer" (page 41).

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 50

 Installing the Symphia Control Integration Server

2. On the Select Platform page:

a. In the Group list, select SYMPHIA Site Servers.
b. In the Platform list, select Integration Server.

c. Select Install/Upgrade.

d. Click Next.
3. Read the End User License Agreement, select I Accept, and then click Next.

4. On the Prerequisites Check page, click Next.

Caution
The target computer must meet the minimum hardware and software requirements that
are listed in the Required column of each component. If you receive a message stating
that the software is not safe to install, the installation may fail. If this occurs, check that all
relevant prerequisites have been met before retrying the installation.

5. On the Install Setup page:

a. Leave the default configurations for the Integration Server or modify as required.

Tip
Click a property to see its explanation in the bottom right pane.

b. Expand the Integration Server nodes to view the components included in the installation.

51 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 2: Installation

b. Uncheck any core Sub-System Adaptors that are not to be integrated.

c. In the Passkey field of the General section, type a strong (strong) sentence between 10 and
32 characters long.

Caution
The Management Server passkey encrypts and decrypts data shared between
Symphia Control servers, and must be identical for all Symphia Control servers at
your site. This passkey is safely stored on the computer using a machine specific
encryption technique.

d. Click Next.
6. On the Final Check page, click Next.

7. On the Ready to Install page, optionally change the settings. For a full description of the
configurations on the Ready to Install page, see step 7 of the procedure "Installing the
Symphia Application Server" (page 43).

Caution
To ensure a valid installation, the recommendation is to leave the default values for these
configurations unchanged.

8. Click Install to display the Platform Progress window. Wait while the installation completes.

Note
The installation may take several hours and your machine will reboot at least once.

Adding the Symphia Insight Server

The Symphia Insight Server component is an additional data storage, query, and visualization
platform that can be installed alongside Symphia Control.

The component includes the following modules:

• Symphia Insight Manager - The installation and configuration tool for the Symphia Insight
Configuration component.
• Symphia Insight Server - A non-SQL database that stores all events, alarms and incidents
entering the system.

This section explains how to install/upgrade the Symphia Insight Server module. The installations
automatically include the Symphia Insight Manager. For more details on the possible Symphia

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 52

 Installing the Symphia Insight Server Module

Insight Server deployments, see the Symphia Control Planning Guide. For the machine
requirements for each deployment, see Symphia Control Boundaries and Limitations.

Before you begin

Ensure that the third party applications installed together with the Symphia Insight Server
component include Windows Server 2019 or higher.

Installing the Symphia Insight Server Module

The Symphia Insight Server module can be installed as a single node or as a cluster. If you are
installing the Symphia Insight Server in a cluster, always use a minimum of three nodes. Two
nodes are not recommended as this can lead to a "split brain" phenomenon when communication
is restored following a disruption.

▼ To install the Symphia Insight Server

1. Start the Installer. For details, see "Starting the Installer" (page 41).
2. On the Select Platform page:
a. In the Group list, select SYMPHIA Servers.
b. In the Platform list, select SYMPHIA Insight Server.

c. Select Install/Upgrade.

d. Click Next.
3. Read the End User License Agreement, select I Accept, and then click Next.

4. On the Prerequisites Check page, click Next.

Caution
The target computer must meet the minimum hardware and software requirements that
are listed in the Required column of each component. If you receive a message stating
that the software is not safe to install, the installation may fail. If this occurs, check that all
relevant prerequisites have been met before retrying the installation.

5. On the Install Setup page:

53 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 2: Installation

a. Expand the Insight Server nodes to view the components included in the installation.

b. Select Insight Server checkbox.

Note
The SYMPHIA Agent checkbox is selected automatically. The 3rd party products should
also be included.

c. Update the attributes in the right-hand pane, or leave the default values.

Field Description
Installation Directory The location where the Application Server software will be
installed.
Insight Port The port number of the Insight Services
Cluster Hosts The IP addresses of nodes in the Insight Server cluster,
separated by semi-colon. For example,
node01;node02;node03.
Cluster Name A common name for all nodes in the Insight Server cluster.
Memory Usage The amount of memory to allocate to the JVM heap for
Elasticsearch.
Node Name A unique name identifying this node in the Insight Server
cluster.
Number of Nodes The total number of nodes in the Insight Server cluster.
Health check service address The IP address of the machine to which the Insight Server
node will bind.
Health check service port The port number of the Insight Services (Elasticsearch) to
which the Beats node will bind. When Beats\SA Agent
component is selected this field is mandatory.

Tip
In a cluster installation, the following parameters must be identical across nodes:

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 54

 Installing the Operator Client Online Application

• Cluster Name
• Port Number
• Number of Nodes
• Cluster Hosts

6. Click Next.
7. On the Final Check page, click Next.

8. On the Ready to Install page, optionally change the settings. For a full description of the
configurations on the Ready to Install page, see step 7 of the procedure "Installing the
Symphia Application Server" (page 43).

Caution
To ensure a valid installation, the recommendation is to leave the default values for these
configurations unchanged.

9. Click Install.
10. When the Platform Installation Progress window indicates that the installation is complete,
click Done.

11. Click to close the Installer.

12. Restart the Symphia Insight server.

Installing the Operator Client Online

Application
Organizations can use Operator to plan and monitor security environments, to respond effectively
to events, and to review event responses for auditing, regulatory compliance and improvement.

You can install Operator on one or more client machines by using ClickOnce. ClickOnce is a
Microsoft technology that helps IT staff to more easily provide operators with an up-to-date
version of the Operator client. Using ClickOnce, users can start Operator from an Internet Web
browser by entering the Operator URL. The Operator ClickOnce server pushes the latest version
of Operator to the workstation.

Note
If your Operator client workstation uses an onboard Intel graphics card, refer to TN878:
Changing the Intel Graphics Card Settings for Symphia Client Workstations.

55 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 2: Installation

Before you begin

• You must have Microsoft .Net 4.7.2 or above installed on the workstation.
• When using the Chrome or Edge browser, you will need to install the Meta4 ClickOnce
Launcher extension to use the ClickOnce service.

• For ArcGIS to run properly, ensure that the workstation's system locale and the user locale are
both set to the same language. For more information see How To: Configure Windows to run
ArcGIS in a selected language environment.

Note
To configure ClickOnce workstations in a deployment with no internet access, see
"Deployments with No Internet Access" (page 80).

▼ To install the Operator Client Online Application

1. Open an Internet browser.

2. In the address bar, enter the URL http://Host/SymphiaOperator/, where Host is the IP
address or host name of the Application Server running the Operator ClickOnce service.

3. Click INSTALL APP.

Installing the Operator Client Offline

Application
Organizations can use Operator to plan and monitor security environments, to respond effectively
to events, and to review event responses for auditing, regulatory compliance and improvement.

The Operator Client offline installation is recommended if the Symphia Control Web Server
installation has not been configured and you need to prepare a computer for use by an operator.

Note
• Online and offline modes are not supported on the same machine.
• Installing the Operator Client Offline Application on workstations running Widows 11 is
supported from the 7.7 GA Rev C. For more information, see the Symphia Control 7.7
Release Notes.

• For ArcGIS to run properly, ensure that the workstation's system locale and the user locale
are both set to the same language. For more information see How To: Configure Windows
to run ArcGIS in a selected language environment.

▼ To install the Operator Client Offline Application

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 56

 Installing the Operator Client Offline Application

1. Start the Installer. For details, see "Starting the Installer" (page 41).
2. On the Select Platform page:
a. From the Group list, select SYMPHIA Applications.
b. From the Platform list, select Symphia Operator.

c. Select Install/Upgrade.

d. Click Next.
3. Read the End User License Agreement, select I Accept, and then click Next.

4. On the Prerequisites Check page, click Next.

Caution
The target computer must meet the minimum hardware and software requirements that
are listed in the Required column of each component. If you receive a message stating
that the software is not safe to install, the installation may fail.

5. On the Install Setup page:

a. Select Operator and change the default Operator Standalone installation directory if
necessary.

Tip
Click the property to see its explanation in the bottom right pane.

b. Expand the Operator nodes to view the components included in the installation.

57 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 2: Installation

c. Click Next.
6. On the Final Check page, click Next.

7. On the Ready to Install page, optionally change the settings. For a full description of the
configurations on the Ready to Install page, see step 7 of the procedure "Installing the
Symphia Application Server" (page 43).

Caution
To ensure a valid installation, the recommendation is to leave the default values for these
configurations unchanged.

8. When the Platform Installation Progress window indicates that the installation is complete,
click Done
9. Close Installer.
10. On the workstation:
a. Open Windows Explorer, browse to C:\Program Files\Verint SMC Client Offline.
b. Double-click VerintSMC.application.

Installing the Symphia Control Health

Check Agent
So that a standalone SQL Server machine can report health events to the Symphia Control
Health Check component, you must install the Symphia Control Health Check Agent on the SQL
Server machine. Once installed, certain health events are forwarded from the SQL Server

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 58

 Installing the Symphia Control Health Check Agent

machine's event logs to the Symphia Control. Events are displayed in Admin Hub's Health Check
component.

Before you begin

• You must install the Application Server.
• If you are installing to multiple target machines, you need to first set up the source machine.
See "Source Machine Configuration for Batch Installation" (page 33).

▼ To install the Symphia Control Health Check Agent

1. Start the Installer. For details, see "Starting the Installer" (page 41).
2. On the Select Platform page:
a. In the Group list, click SYMPHIA Servers.
b. In the Platform list, select Health Check Agent.

c. Select Install/Upgrade.

d. Click Next.
3. Read the End User License Agreement, select I Accept, and then click Next.

4. On the Prerequisites Check page, click Next.

Caution
The target computer must meet the minimum hardware and software requirements that
are listed in the Required column of each component. If you receive a message stating
that the software is not safe to install, the installation may fail. If this occurs, check that all
relevant prerequisites have been met before retrying the installation.

5. On the Install Setup page:

59 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 2: Installation

a. In the Installation Directory field, if necessary, select a different location.

Tip
Click the property to see its explanation in the bottom right pane.

b. In the Health Check Service Address field, enter the IP address or hostname of the
Symphia Control Application Server.

c. In the Health Check Service Port field, if necessary, edit the port number used to access
the Symphia Control Application Server.
d. Click Next.
6. On the Final Check page, click Next.

7. On the Ready to Install page, optionally change the settings. For a full description of the
configurations on the Ready to Install page, see step 7 of the procedure "Installing the
Symphia Application Server" (page 43).

Caution
To ensure a valid installation, the recommendation is to leave the default values for these
configurations unchanged.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 60

 Installing the Rollup

Installing the Rollup

The Rollup must be installed on all servers and workstations that are part of the Symphia Control
deployment.

The Symphia Control Rollup should be deployed on servers and workstations in the following
order:

1. Application Servers.

2. Integration Servers.

3. Symphia Insight Server.

4. Symphia Operator workstations.

▼ To install the Rollup

1. From VDelivery, download and run the ISO file.

Note
The downloaded file can be run locally or remotely.

2. Double-click the Rollup Setup.exe file.

3. On the Welcome page:

a. In the User name and Password boxes, enter the Windows administrator credentials that
you used to log into this computer.
b. Click Apply.

4. On the Select Platform page, select Upgrade and then click Next.

Caution
The system automatically displays the latest installation detected in the Group and
Platform fields. Do not change these fields.

5. Accept the terms and conditions, and then click Next.

6. On the Prerequisites Check page, click Next.
7. On the Install Setup page ensure the correct values are displayed and click Next.
8. On the Final Check page, click Next.
9. On the Ready to Install page click Install.

61 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 2: Installation

10. Click Finish when you have finished the installation.

11. Repeat the procedure for the other servers and workstations in the list.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 62

 3
Post-Installation

After installing the components the following configuration should be done.

Adding Subsystem Adaptors 64

Available Integrations 65
Reconfiguring Database Properties 66

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 63

 Adding Subsystem Adaptors

Adding Subsystem Adaptors

If a Symphia Control Integration Server is already deployed, and you subsequently wish to
integrate an additional sub-system into the existing deployment, you must install the appropriate
adaptor on the Symphia Control Integration Server.

For the Symphia subsystems, this can be performed either via the Installeror by using the MSI file
provided for the integration. For third-party subsystems, the integration can be performed via the
MSI file only. This file is obtained on a per license basis from your Symphia representative.

Note
See "Installing the Symphia Control Integration Server" (page 50) for further details.

This section presents the integration of a Symphia subsystem via the Installer. For details on how
to use the MSI files for integrating Symphia and third-party subsystems, and how to fully complete
the integration of each of the SSAs, refer the integration guide for that specific SSA.

▼ To add a Sub-System Adaptor

1. Log on to the Integration Server with a user account that has Windows administrator
credentials.

2. Launch the Installer. For details, see "Starting the Installer" (page 41).

3. Do either of the following:

64 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 3: Post-Installation

• Select SYMPHIA Servers from the Category list and Application Server from the Type
list.
• Select SYMPHIA Site Servers from the Category list and Integration Server from the
Type list.
4. Select Install/Upgrade in the list of options and click Next.
5. In the End User License Agreement page, accept the terms of the agreement.

6. Click Next until you reach the Install Setup page.

7. Keep the default settings for the installation directory, port and passphrase.
8. It is also recommended to keep the default port number 8000 for Symphia VMS.
9. Click Next until you reach the Ready to Install page.
10. On the Ready to Install page, click Install.

11. Click to close the Installer.

Available Integrations
Under the framework of Symphia Connect, a wide variety of integrations are available for
Symphia Control. Please refer to the following matrix for the latest list of integrations, Symphia
Connect Integration Matrix.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 65

 Reconfiguring Database Properties

Reconfiguring Database Properties

The installation of the Symphia Application Server creates a database called FusionDatabase.
The following database properties require reconfiguration post-installation:

• SQL server maximum memory usage

• TempDB file properties (Initial size, Autogrowth, Number of TempDB files)
• FusionDatabase file properties (Initial size, Autogrowth)
The batch file DbConfigPostDeployScripts_ForFreshInstall.bat is used for the
reconfiguration. It is created during the installation and stored in the installation kit under the
following path:

$:\Components\VIS
Components\DatabaseManager\DatabasePostDeployScripts

Tip
This configuration is required for real production environments only. Lab environments or small
setups do not require this additional procedure.

In general, the configuration scripts need to be executed once only. However, if

FusionDatabase is deleted, the scripts will need to be executed again.

▼ To configure FusionDatabase

1. Copy the DatabasePostDeployScripts folder and contents to the database machine.

2. Right-click the DbConfigPostDeployScripts_ForFreshInstall.bat batch file and

uncheck the Read-Only box.
3. Edit the DbConfigPostDeployScripts_ForFreshInstall.bat batch file as follows:
a. Change the SET DbServerName parameter in the header to the name of the current
database server name and instance name (for example, SET
DbServerName=SQLServ2\VERINT).
b. Change the path in all occurrences of the sqlcmd.exe command to C:\Program
Files\Microsoft SQL Server\110\Tools\Binn\SQLCMD.EXE, if a different
path is displayed.

4. Execute the batch file on the database machine by double-clicking it.

Note
Batch file execution can take up to an hour.

66 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

Granting User Permissions to the SQL
Server Reporting Services
The following error might occur in operating systems running Microsoft Windows version 2012
R2, and has been solved for Microsoft Windows version 2016.

During the installation of the Symphia Application Server, the process can fail with the following
error:
Publish Reports failed: Exception: The permissions granted to user 'CD-CMS-
12DB1\SAServices' are insufficient for performing this operation. --->
Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The
permissions granted to user 'CD-CMS-12DB1\SAServices' are insufficient for
performing this operation.

where \SAServices can be any user name.

The error occurs when an administrative user other than Administrator is defined for the SQL
Server Reporting Services section in the Install Setup page for the server. Even though the
defined user has full administrator permissions to the machine, these permissions do not include
the SQL Server Reporting Services.

Note
Only the Administrator user automatically has privileges to the SQL Server Reporting Services.

▼ To grant the user with permissions to the SQL Server Reporting Services

1. On the SQL Server, open the Reporting Services Configuration Manager user interface.

2. Select Web Portal URL in the navigation pane.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 67

 Granting User Permissions to the SQL Server Reporting Services

3. In the results pane, click the URLs hyperlink to access your SQL Server Reporting Services
web portal configurations.

4. From the Settings dropdown list, select Site settings.

5. Under Site settings, select Security and then select + Add group or user.

68 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

6. In the Group or user box, type the name of the non-administrative user, for example,
saservices.

7. Select the System Administrator checkbox to grant the user administrative permissions to
the SQL Server Reporting Services.
8. Click OK.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 69

Connecting to SQL Instance with Port
Number
The Symphia Application Server can establish a connection to the SQL Server using either the
SQL instance name or the port number. These parameters are defined for the
Symphia Application Server during the installation.

This section explains how to change the connection from SQL instance name to port number
following the installation, and presents the additional configurations required for this change to be
implemented.

The steps are as follows:

• " Adding the Port Number in the Configuration File" (page 70)
• "Changing the Connection Strings in the Reporting Services Configuration Manager" (page 72)
• "Connecting to the SQL Server Reporting Services in the Configuration File" (page 76)

Adding the Port Number in the Configuration File

This procedure explains how to change the Application Server configuration file to point to the
SQL instance using port number instead of the instance name following the installation.

▼ To replace the SQL instance name with a port number

1. On the SQL Server, find and open the SQL Server Configuration Manager.

2. Under SQL Server Network Configuration, select Protocols for SYMPHIAINSTANCE to

display the TCP/IP port for Symphia Control.

3. Double-click TCP/IP .

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 70

 Adding the Port Number in the Configuration File

4. In the TCP/IP Properties window, select the IP Addresses tab.

5. Copy the port number from the TCP Dynamic Ports section under IPAll.
6. On the Symphia Control Application Server, browse to the installation directories for the
Application Server. This is usually D:\SYMPHIA\Nextiva Fusion Application
Server.

7. Open the web.config file for editing.

71 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 8. Change the db_svr value from “SQLServer,InstanceName” to
“SQLServer,PortNumber”.

For example, from SymphiaInstance:

To 59177:

9. Save your update and close the file.

What's next
After adding the port number you need to:

• Re-establish the connection to the SQL Server Reporting Services in the Web.config file.
For details, see "Connecting to the SQL Server Reporting Services in the Configuration File"
(page 76)
• Update the connection strings to the SQL Server Reporting Services in the Reporting Services
Configuration manager. For details, see "Changing the Connection Strings in the Reporting
Services Configuration Manager" (page 72)

Changing the Connection Strings in the

Reporting Services Configuration Manager
Each report in the SQL Server Reporting Services contains a database connection string that
includes the database name and database instance entered during the installation. If you
manually change the database name or database instance name following the installation, you
need to manually update the string.

The syntax of the connection string varies according to how the instance name was defined during
the installation:

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 72

 Changing the Connection Strings in the Reporting Services Configuration Manager

Tip
The instance name can be defined in the Installer one of three ways: by specified instance
name, by specified port number, by default instance name (empty field).

• If the SQL instance name was defined, the data string is as follows: Data Source=
[MachineName]\[InstanceName];Initial Catalog=[DatabaseName]

For example: Data Source=SQL0606\SymphiaInstance;Initial

Catalog=FusionDatabase

• If no instance name was defined and the default SQL instance is used, the data source needs
to contain the host name only.

For example, Data Source=SQL0606;Initial Catalog=FusionDatabase

• If the port number was defined instead of the SQL instance, the data source should be set to
MachineName,PortNumber.

For example, Data Source=SQL0606,59177;Initial Catalog=FusionDatabase

This procedure assumes that the SSRS reports were already been defined by Symphia on the
SQL server during the installation.

Before you begin

To complete this procedure (specifically step 5e), the APS Server must be installed as part of
your deployment.

▼ To change the SSRS connection string

1. On the SQL Server, find and open the SQL Server Reporting Services tool.

2. In the login page, enter the server credentials for your machine and click Connect.

3. In the navigation pane, select Web Portal URL and then click the URL link.

73 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

4. In the Windows Security window, enter the user credentials for the SQL Report Server, and
select OK.

Tip
If the page does not open:

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 74

 Changing the Connection Strings in the Reporting Services Configuration Manager

a. Copy the URL into a Chrome browser and add "browse" to the end, so that the URL
reads https: [MachineName]/[InstanceName]/browse. In the example
above, this would be https:sql0614/Reports_SymphiaInstance/browse.

b. In the Sign in window, enter a username and password for the SQL Report Server.

c. Click Sign in.

This opens the Home page where you should see a collection of paginated reports.

5. For each report:

a. Click (...).

b. Select Manage.

c. In the navigation menu, select Data sources.

75 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 d. In the right pane, leave A custom data source selected.

e. Under Connection string, change the connection string to the new one.

f. Click Save.

6. Click to close the SQL Server Reporting Services.

Connecting to the SQL Server Reporting

Services in the Configuration File
When installing the SA Application Server, there are two different options for connecting to the
database instance on the SQL server:

• Entering the SQL instance name or using the default SQL instance name.
• Entering the TCP Dynamic Port number in addition to the above.
If you used the TCP Dynamic Port number, follow the instructions below to manually connect to
the SQL Server Reporting Services. If you used one of the other two options, skip the current
procedure as the connection was performed automatically during the installation.

▼ To connect to the reporting server

1. Log into the Symphia Control Application Server.

2. In the File Explorer, navigate to the Application Server installation directory, which is usually in
the following location:
D:\SYMPHIA\Nextiva Fusion Application Server.
3. Open the Web.config file in a text editor.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 76

 Connecting to the SQL Server Reporting Services in the Configuration File

4. In the <appSettings section, add either of the following lines, depending on whether you
are adding an instance name or using the default instance name:

• Added Instance Name: <add key="SSRS_report_execution_service_url"

value="http://[SQL Server Name]/ReportServer_
[InstanceName]/ReportExecution2005.asmx"/>

• Default Instance Name: <add key="SSRS_report_execution_service_url"

value="http://[SQL Server
Name]/ReportServer/ReportExecution2005.asmx"/>

For example:

5. Save and close the text file.

6. Restart the Internet Information Services (IIS):

a. In the Search box of the Start menu, type cmd.

b. At the command prompt, type: iisreset

All IIS services are either stopped or terminated, and then restarted.

77 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

Forwarding Health Check Alerts to an
SNMP Trap Receiver
Some organizations use an SNMP Trap Receiver to capture, display and log SNMP Traps,
enabling the viewing of alerts and notifications from any network device that supports SNMP.

To forward health check alerts from Admin Hub Health Check to an SNMP Trap Receiver you
must take the following steps:

▼ To forward Health Check Alerts to an SNMP Trap Receiver

1. Navigate to <Installation drive>\Symphia\Verint Fusion HealthCheck.

2. In the Verint.HCM.MonitorServiceHost.exe.Config, file, make the following changes:

a. SnmpManagerIpAddress - Update the value from 127.0.0.1 to the IP Address of the
SNMP trap receiver.
b. SnmpManagerPort - If required update the default port value of 162 which is used for
agent alerts to the SNMP manager.
c. SnmpManagerEnabled - Value should be true.

3. From the Windows start menu, type Services.

The services Window opens.

4. Right-click the Symphia Control HealthCheckMonitor service and click Properties.

5. In Startup type, select Automatic and then click OK.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 78

 Forwarding Health Check Alerts to an SNMP Trap Receiver

6. Right-click the Symphia Control HealthCheckMonitor service, and click Start.

7. On the Symphia Application Server, navigate to the <Installation drive>\Verint\Nextiva Fusion
Application Server folder.

8. In the web.config file, change the value of UseSNMPService from false to true.

9. Restart IIS as follows:

a. From the Start menu, click Run.

b. In the Open box, type cmd, and click OK.
c. At the command prompt, type: iisreset /noforce.

d. IIS attempts to stop all services before restarting. The IISReset command-line utility waits
up to one minute for all services to stop.

Alerts from Admin Hub Health Check should now be forwarded to the SNMP Manager.

79 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

Deployments with No Internet Access
This section applies to deployments with no internet access. This includes deployments in which
internet access is blocked by a firewall, internet is not reachable, or when machines are not
connected to the internet.

When launching Symphia services, Symphia processes attempt to access the internet to check for
Certificate Revocation List (CRL). In a deployment with no internet access, checking for CRL
leads to unsuccessful connection attempts. Continuous unsuccessful connection attempts might
cause your system to slow down. We recommend that you configure your system to avoid
searching for internet connections in order to improve performance.

Use one of the following procedures on servers and workstations to disable the Check for
publisher's certificate revocation:

• Change the default Internet options - Recommended for individual workstations and servers.
• Change the registry key- Recommended for workstations in a domain environment or using
ClickOnce, and can be enforced by domain group policy.

Caution
While these procedures are safe for Symphia services, the change might pose a security
risk, as certificates will no longer be required for applications used on the workstation.

▼ To change your internet options

1. Open the Control Panel.

2. Click Internet Options.
3. Select the Advanced tab.

4. Under the Security heading, clear the Check for publisher's certificate revocation*
checkbox.

Tip
Verify that you are clearing the correct checkbox.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 80

 Deployments with No Internet Access

5. Click OK.

▼ To change the registry key

Note
You must be logged into your workstation as an administrator.

1. In the Windows Search bar, type regedit.

2. Click to open the Registry Editor.
3. Navigate to HKEY_CURRENT_
USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust
Providers\Software Publishing.

4. On the right side pane, double-click State.

81 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

5. In the Edit DWORD Value dialog box, change the Value data to 23e00. This value is defined as
Check for publisher's certificate revocation checkbox is cleared.

Note
The default Value data, 23c00 is defined as Check for publisher's certificate
revocation checkbox is selected.

6. Click OK.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 82

Web- Based Maps in Blocked Internet
Networks
To use service layers (any web- based map service, such as ArcGIS) in a network with blocked
internet communication, you must allow network traffic on the Operator client machine for the
following URLs:

• https://*.tile.openstreetmap.org (When allowing this URL, select the range of A -C)

• https://server.arcgisonline.com
• https://services.arcgisonline.com

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 83

 4
Upgrade

Upgrade the Symphia Control and Integration Server to access the newest capabilities. Upgrading
Symphia Control and Operator is a multistage process that must be performed in sequence to
ensure a smooth upgrade and to minimize system downtime.

Note
Before you perform an upgrade, verify in the Symphia Control 8.0 Customer Furnished
Equipment Guide that the hardware and software specifications meet the requirements for the
relevant version.

In deployments where Symphia VMS is connected with Symphia Control, you must upgrade
Symphia Control first and can upgrade Symphia VMS afterward. Symphia Control must be deployed
at a version that is equal to or later than the deployed version of Symphia VMS.

Upgrade the components in the following order:

1. Symphia Application Server, as described in "Installing the Symphia Application Server" (page
43).
2. Admin Hub workstations, as described in "The Admin Hub Client" (page 86)

3. Integration Server and Sub-System Adaptors, as described in "Installing the Symphia Control
Integration Server" (page 50)

If there are changes to the devices in one of your integrations, you must re-discover the devices of
that SSA. See "Re-Discovering Devices" (page 87) for details.

Note
During an upgrade, it is recommended to refresh existing subsystem adaptors in Admin Hub. If
this step is skipped, SSA updates resulting from the upgrade may not be visible in Admin Hub.
For details on how to refresh the SSAs, see "Refreshing Subsystem Adaptors" (page 86).

4. Operator workstations by doing one of the following:

• (Recommended) Upgrade the Operator ClickOnce server so that when users log in to
Operator, the latest version of Operator is downloaded from the server. See "Installing the
Operator Client Online Application" (page 55)

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 84

 Chapter 4: Upgrade

• To upgrade Operator on each workstation, uninstall Operator from Windows Add Remove
Programs in the Control Panel, then follow the instructions in "Installing the Operator Client
Offline Application" (page 56).

Note
• During the upgrade of the Application Server, clients lose the connection to the integration
servers, sub-systems, and their sensors and devices.
• If an Administrator client is open during the upgrade and a user tries to use it, the user is
logged off.

The Admin Hub Client 86

Refreshing Subsystem Adaptors 86
Re-Discovering Devices 87

85 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Chapter 4: Upgrade

The Admin Hub Client

The Admin Hub client is supported for use in Chrome browser versions 68 and up.

For more information on accessing Admin Hub, see the Logging in to Admin Hub section of the
Symphia Platform Admin Hub 8.0 Administrator Guide.

After completing the Application Server upgrade to version 8.0 , you can access Admin Hub from
your Chrome browser.

Note
If when a user attempts to log in to Admin Hub they receive a Your connection is not private
warning appears, this indicates that your company is not using a signed SSL certificate for the
site. You can continue by selecting Advanced and then selecting Proceed to <IP Address>
(unsafe). For details on best practice, see the "Using Trusted and Password Protected
Certificates in Admin Hub" (page 47) section.

Note
After an upgrade, the Synchronize Operator Maps setting in Admin Hub is defaulted off. The
administrator user must enable this setting for the Map Upload button to display in the
Operator client. All existing map files on the Application Server are available for upload to the
Operator client. For more information see the Control 8.0 Operator User Guide.

Refreshing Subsystem Adaptors

Following the upgrade of an entire system, an integration server, or a subsystem adaptor, it is
recommended to refresh all related subsystem adaptors in Admin Hub. This ensures that SSA
updates resulting from the upgrade appear in Admin Hub.

▼ To refresh existing SSAs in Admin Hub following an upgrade

1. Log into Admin Hub.

2. In Admin Hub, click , and select Assets.

3. In the Asset Tree, navigate to the relevant Integration server and select the sub-system
adaptor.
4. On the right above the devices window, click .

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 86

 Re-Discovering Devices

Re-Discovering Devices
After upgrading to Symphia Control version 8.0, you must rediscover devices if:

• Devices were changed in one of your integrations (re-discover the devices of that SSA only).
• You have also upgraded to Symphia VMS 8.0 (re-discover all devices).
▼ To re-discover devices in a Sub-System

1. In Admin Hub, click , and select Assets.

2. Locate and expand the Integration Server node that hosts the subsystem.
3. Click the Sub-System Adaptor node.
4. On the right above the Devices window, click (Update devices list).

87 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 A
Antivirus Guidelines

If IT policies require the use of an antivirus software, it is the customer’s responsibility to install and
update this software on network servers and other technology-related assets, including Symphia
products. The antivirus software can be installed before or after the installation of Symphia Control or
Operator.

Antivirus protection can involve changes to network servers and other technology-related assets,
including operating systems. It is the customer’s responsibility to update operating systems, service
packages, and hotfixes.

The customer is also responsible for updating virus definition files in order to maintain the
effectiveness of the antivirus solution. Customers who are not prepared to perform this work should
retain the services of a Microsoft-certified provider or other qualified third party.

The minimum system requirements for servers do not consider the additional system load generated
by antivirus software. Symphia cannot guarantee optimal software performance when an antivirus
scan is running on .

Real-time detection is recommended. Scheduling a system scan may produce unexpected results,
such as frame loss or slowing down of the server.

For detailed guidelines pertaining to antivirus applications used with Symphia Control, refer to the
Symphia Control Installation and Upgrade Guide.

Recommended Antivirus Software

It is recommended to use the products below, which have been verified for use with :

• McAfee VirusScan Enterprise

• Symantec EndPoint Protection
• Trend Micro OfficeScan
• Microsoft Security Essentials (workstations only)
• Microsoft Windows Defender (workstations only, from Windows 10 and up)

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 88

 Virus Scanner Exclusion List

Virus Scanner Exclusion List

When running an antivirus program on a computer running , it is important that you exclude
specific file types and locations, as well as some types of network traffic. Without implementing
these exceptions, the virus scan will use considerable system resources, and the scanning
process can temporarily lock files which will likely result in a disruption in the recording process or
even database corruption.

Configure your antivirus software to exclude the following files and folders from the virus scan.

Processes, Services and Files

The following services must be excluded from the scan:

• Integration Server Service

• Verint.HCM.MonitorServiceHost.exe
• Verint.Vms.MediaFusion.exe
• Verint.ES.HostSSAM.exe
• Verint.ES.HostSSA.exe
• W3wp.exe
• Verint Situational Awareness Agent.exe
• VMS.Gateway.Service.exe
• elasticsearch-service-x64.exe
• PlayerDiagnosticsLogger.exe
• PlayerAnalyzer.exe
• VDM.exe

File Extensions
The following table lists the file extensions that must not be scanned by anti-virus applications
across any of the drives:

File Extension File Type

AVI Video file

89 © 2023 Cognyte Software Ltd. All rights reserved worldwide.

 Antivirus Guidelines

File Extension File Type

EDF Motion detection data
MDF Microsoft SQL Server data file
LDF Microsoft SQL Server log file
XML Data file
RAW Application data local cache
TMP Temporary file
CONFIG Configuration file
LOG Log file
DAT Video standard data file

Folders
If your anti-virus solution permits folder-based exclusions, exclude the following folders:

Folder Name Folder Type

C:\Program Files\Verint Verint SA folder
C:\Program Files\Symphia Symphia folder
D:\Verint Verint SA folder
D:\Symphia Symphia folder
D:\PlayerLogs Playerlog folder
D:\PlayerPerfLogs Player performance log folder
D:\PlayerReports Player report folder
C:\ProgramData\Cognyte Program folder

Tip
It is recommended to exclude folders that include Cognyte in their path, for example -
C:\ProgramData\Cognyte, in your permitted exclusions.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 90

 Firewall Guidelines

Firewall Guidelines

Cognyte recommends that you use firewalls to limit network communication between servers and
clients. This method permits only the necessary traffic to enter the network, and blocks
unauthorized connections and associated traffic.

Note
If you are using Windows Firewall, make sure to apply the rules on the required network (public
in addition to private). This is a common use case when using a multi-homed computer.

For more information on configuring firewalls, see Ports in the Symphia Control 8.0 Planning
Guide. For more information on securing your deployment, see the Security Hardening Guide for
Symphia VMS, Symphia Control, and Symphia One.

© 2023 Cognyte Software Ltd. All rights reserved worldwide. 91

Cognyte. Powering Actionable Intelligence®
Cognyte® is a global leader in Actionable Intelligence® solutions with a focus on customer engagement optimization,
security intelligence, and fraud, risk and compliance. Today, more than 10,000 organizations in 180 countries—including
over 80 percent of the Fortune 100—count on Cognyte solutions to make more informed, effective, and timely decisions.