Querona server installation procedure¶
Step 1. Start the installation by running Querona.msi¶
Welcome window appears.
Step 2. Read the license text and if you agree, accept the license¶
You may install Querona only after you accept the license. If you agree click Next, otherwise click Cancel to abort the installation.
Step 3. Select destination folder¶
Step 4. Provide database server name¶
The deployment of metadata databases to different servers is not supported by the installer. If you need such configuration, it has to be done manually.
Provide database server name you want to host Querona metabase and Spark metastore databases on.
Do not enter “(local)” alias for local database because it will break Apache Spark. For local database always use localhost with optional instance name like localhost\myinstance.
If you already have MANUALLY installed or upgraded Querona and Apache Spark metabases, uncheck the “Install or upgrade Querona and local Apache Spark metabases” checkbox to skip automatic database deployment.
Step 5. Provide configuration of the Windows service¶
Please choose the proper settings using the table below:
|NT AUTHORITY||NetworkService||not required (leave empty)||The NetworkService account is a predefined local account used by the service control manager. It has minimum privileges on the local computer and acts as the computer on the network. This account does not have a password, so any password information that you provide is ignored. A service that runs in the context of the NetworkService account presents the computer’s credentials to remote servers. By default, the remote token contains SIDs for the Everyone and Authenticated Users groups.|
|NT AUTHORITY||LocalService||not required (leave empty)||The LocalService account is a predefined local account used by the service control manager. It has minimum privileges on the local computer and presents anonymous credentials on the network. This account does not have a password, so any password information that you provide is ignored.|
|Machine name||<custom local user>||enter local user designated password||Local user account created on machine you install on.|
|Domain name||<custom domain user>||enter domain user designated password||Domain user account from your company domain.|
Two scenarios are common for choosing the service account:
|Local computer Network Service (NT AUTHORITY\NetworkService).||To authenticate using computer account pick NetworkService as service user name and NT AUTHORITY as NetBIOS domain name. A password is not required and ignored if entered.|
|Designated Active Directory user (NETBIOS_DOMAIN\user_name), for example CONTOSO\queronaSvc.||To authenticate using designated AD user, pick domain from the list or enter domain name manually, then enter the user name and provide password designated for the user name entered.|
Service user name and password will be validated against Active Directory (AD) or local store respectively. In case you provide wrong credentials, an error message will be displayed:
Click OK and correct credentials entered until validation passes.
Step 6. Configure Querona instance parameters¶
Provide custom TDS port, Web port, and Web SSL port, or accept the defaults. Installer will verify that designated network ports are available. If any of the port is in use, a warning will appear. Port availability check can be skipped by ticking the check box Skip network port “in use” check during installation.
If you require Secure Sockets Layer (SSL) to be enabled, check the Require SSL for Querona Administrative Portal and WebApi checkbox. Installer loads a list of all certificates from the local machine store, verifies them and presents in a dropdown list. If a friendly name is available, it will be used in a drop down list along with the first six characters from the certificate thumbprint. Verified certificates are marked with “(VERIFIED)” name postfix which means that they passed the X.509 chain validation.
It is recommended to choose from verified certificates. Certificates that do not pass verification may not work. In such case you will not be able to connect to Querona Administrative Portal over SSL even if installation is successful.
Select the desired certificate from the list and installer will take care of configuring proper certificate binding in Windows.
Step 7. In the confirmation dialog click Install and allow privilege elevation when asked¶
A progress windows will appear. Wait for the installation to finish.
When the installation completes successfully click Finish.
- Launch Web Administrative portal by navigating to http://localhost, assuming you are logged on to Querona Windows server using Remote Desktop.
- Provide administrative credentials to log in. By default, all users that belong to Administrators group on a machine hosting Querona, have administrative privileges in Querona. If you want to logon using built-in credentials, use the default user/password: admin/admin. Default behavior and security settings can be changed using Querona Administrative Portal, as described in Configuration section that follows.
- Follow the steps described in Configuration Settings and Security section.