When your ePO - On-prem server is in a domain, an Agent Handler installed in the DMZ cannot connect to the ePO - On-prem SQL database because the Agent Handler cannot use domain credentials.
To bypass this limitation, configure the Agent Handler to use the SQL database system administrator (sa) account credentials.
Enable the system administrator account.
Open SQL Management Studio, expand Security → Logins, then double-click the sa account.
On the General tab, enter and confirm your password.
On the Status tab, set Login to Enabled, then click OK.
Right-click the database instance name and click Properties.
The system administrator account is enabled.
Change the system administrator account to connect to the ePO - On-prem database.
You must use SQL authentication to connect to the database. If Agent Handler cannot use domain account and ePO - On-prem uses the domain account for SQL connection, you need to manually deselect the option to use ePO - On-prem database configuration and provide non-domain SQL credentials with appropriate roles to access ePO - On-prem database.
Open a web browser and go to
https://localhost:8443/core/config-auth.Note
8443 is the console communication port. If you use a different port to access the ePO - On-prem console, include that port number in the address instead.
Log on with your ePO - On-prem credentials.
Delete the entry in the User Domain field, then type sa.
Provide a password for the system administrator account, then click Test Connection.
If the test is successful, click Apply.
Note
If the test is unsuccessful, re-enter your password, then click Test Connection again.
The Agent Handler uses the system administrator credentials to communicate with the ePO - On-prem database.