AMD Device Management Portal (ADMP)

2.1 SQLite Setup

No setup required. SQLite is included within the ADMP binary and does not need external configuration.

You can continue directly to installation.

2.2 SQL Server Setup

2.2.1 Install SQL Server

Download and install SQL Server (Express or Developer Edition) from Microsoft:

Copyhttps://www.microsoft.com/en-us/sql-server/sql-server-downloads

2.2.2 Verify sqlcmd Utility

Check if sqlcmd is available using Command Prompt:

Copysqlcmd -?

If you receive a “command not found” or similar error, install SQLCMD utility from:

Copyhttps://learn.microsoft.com/en-us/sql/tools/sqlcmd-utility

2.2.3 Grant Permissions for ADMP Database

Run the following command to grant ADMP access rights:

Copysqlcmd -S localhost\SQLEXPRESS -Q "CREATE LOGIN [NT AUTHORITY\SYSTEM] FROM WINDOWS; ALTER SERVER ROLE [sysadmin] ADD MEMBER [NT AUTHORITY\SYSTEM];"

2.3 PostgreSQL Setup

2.3.1 Install PostgreSQL

Download and install PostgreSQL from the official site:

Copyhttps://www.postgresql.org/download/windows/

2.3.2 Add PostgreSQL to PATH

Add PostgreSQL binaries to the system environment PATH:

Copy%ProgramFiles%\PostgreSQL\16\bin

2.3.3 SSL Certificate Storage

Store all SSL certificates and keys in the following folder:

Copy%ProgramFiles%\AMD\ADMP\SSLCerts\

2.3.4 Create Server Configuration File

Create server_san.cnf inside the SSL folder with the following content:

CopysubjectAltName = @alt_names
[alt_names]
DNS.1 = {server name}
IP.1 = {server ip}

2.3.5 Generate Server Keys & Certificates

Run these commands inside the SSL folder:

Copy
openssl genrsa -out server.key 2048
openssl genrsa -out admpkey.key 2048
openssl req -new -key server.key -out server.csr -subj "/CN=your_server_name"
openssl req -new -key admpkey.key -out admpcert.csr -subj "/CN=your_server_name"
openssl x509 -req -in server.csr -CA CA.crt -CAkey CA.key -CAcreateserial -out server.crt -days 365 -sha256 -extfile server_san.cnf
openssl x509 -req -in admpcert.csr -CA CA.crt -CAkey CA.key -CAcreateserial -out admpcert.crt -days 365 -sha256 -extfile server_san.cnf

2.3.6 Generate Client Keys & Certificates

Run the following commands inside the SSL folder:

Copy
openssl genrsa -out client.key 2048
openssl req -new -key client.key -out client.csr -subj "/CN=postgres"
openssl x509 -req -in client.csr -CA CA.crt -CAkey CA.key -CAcreateserial -out client.crt -days 365

2.3.7 Update pg_hba.conf

Open the following configuration file:

Copy%ProgramFiles%\PostgreSQL\16\data\pg_hba.conf

Add the following lines to enable SSL and certificate authentication:

Copyhostssl all all 0.0.0.0/0 cert clientcert=verify-full

# IPv4 local connections:
host all all 127.0.0.1/32 scram-sha-256

# IPv6 local connections:
hostssl all all ::/0 cert clientcert=verify-full

2.3.8 Update postgresql.conf

Open the following configuration file:

Copy%ProgramFiles%\PostgreSQL\16\data\postgresql.conf

Enable SSL in the configuration file:

Copyssl = on
ssl_ca_file = 'C:\\Program Files\\AMD\\ADMP\\SSLCerts\\CA.crt'
ssl_cert_file = 'C:\\Program Files\\AMD\\ADMP\\SSLCerts\\server.crt'
ssl_key_file = 'C:\\Program Files\\AMD\\ADMP\\SSLCerts\\server.key'

2.3.9 Secure Certificate Key Permissions

Run the following commands as Administrator to restrict key file access:

Run the following commands to secure the key permissions:

Copy

icacls "%ProgramFiles%\AMD\ADMP\SSLCerts\server.key" /inheritance:r
icacls "%ProgramFiles%\AMD\ADMP\SSLCerts\server.key" /remove:g Users Everyone
icacls "%ProgramFiles%\AMD\ADMP\SSLCerts\server.key" /grant Administrator:F /grant "NT AUTHORITY\NetworkService:R" /grant "NT AUTHORITY\SYSTEM:R"

icacls "%ProgramFiles%\AMD\ADMP\SSLCerts\client.key" /inheritance:r
icacls "%ProgramFiles%\AMD\ADMP\SSLCerts\client.key" /remove:g Users Everyone
icacls "%ProgramFiles%\AMD\ADMP\SSLCerts\client.key" /grant Administrator:F /grant "NT AUTHORITY\NetworkService:R" /grant "NT AUTHORITY\SYSTEM:R"

2.3.10 Restart PostgreSQL Service

Restart the PostgreSQL service to apply the SSL and authentication changes.