How-to guides

• 1: Managing DB Services
• 2: Backing up and restoring the DB
• 3: Add Secondary
• 4: Microsoft SQL Server(DBaaS) server connection

1 - Managing DB Services

Users can manage Microsoft SQL Server (DBaaS) through the Samsung Cloud Platform Console.

Managing Database

For the Microsoft SQL Server Enterprise edition, you can add a new database. You can add up to 100 per cluster.

Add Database

To add a Database, follow these steps.

1. All Services > Database > Microsoft SQL Server (DBaaS) Click the menu. 1. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. Click the Microsoft SQL Server(DBaaS) menu on the Service Home page. 2. Microsoft SQL Server(DBaaS) List Go to the page.
3. Microsoft SQL Server(DBaaS) List On the page, click the resource to add storage. 3. Microsoft SQL Server(DBaaS) Details Go to the page.
4. Click the Add button for the Database name field. 4. Add Database The popup window opens.
5. Add Database In the popup window, click the + button to enter the database name and select a drive, then click the Confirm button.

Delete Database

To delete the Database, follow these steps.

1. All Services > Database > Microsoft SQL Server (DBaaS) Click the menu. 1. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Go to the page.
3. Microsoft SQL Server(DBaaS) List On the page, click the resource to add storage. 3. Microsoft SQL Server(DBaaS) Details Go to the page.
4. Click the Edit button for the Database name field. 4. Delete Additional Database A popup window opens.
5. Delete added Database In the request popup, check the Database you want to delete and click the Delete button. 5. Database Delete The popup window opens.
6. Delete Database In the popup window, after entering the name of the Database you want to delete, click the Confirm button.

Managing Parameters

Provides a feature that allows you to easily view and modify database configuration parameters.

View Parameter

To view configuration parameters, follow these steps.

1. All Services > Database > Microsoft SQL Server (DBaaS) Click the menu. 1. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. Click the Microsoft SQL Server(DBaaS) menu on the Service Home page. 2. Microsoft SQL Server(DBaaS) List Navigate to the page.
3. Microsoft SQL Server(DBaaS) List Click the resource on the page for which you want to view or modify parameters. 3. Microsoft SQL Server(DBaaS) Details Navigate to the page.
4. Click the More button, then click the Parameter Management button. 4. Parameter Management The popup window opens.
5. In the Parameter Management popup, click the Search button. 5. The Lookup Notification popup window opens.
6. When the View Notification popup appears, click the Confirm button. 6. Retrieving may take a short amount of time.

Edit Parameter

To modify the configuration parameters, follow the steps below.

1. All Services > Database > Microsoft SQL Server(DBaaS) Click the menu. 1. Go to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Go to the page.
3. Microsoft SQL Server(DBaaS) List Click the resource on the page whose parameters you want to view and modify. 3. Microsoft SQL Server(DBaaS) Details Go to the page.
4. Click the More button, then click the Parameter Management button. 4. Parameter Management popup window opens.
5. Parameter Management In the popup window, click the Search button. 5. View Notification A popup window opens.
6. When the View Notification popup appears, click the Confirm button. 6. Retrieving may take a short amount of time.
7. If editing is required, click the Edit button and enter the changes in the custom value field of the Parameter to be edited.
8. When the input is complete, click the Done button.

Manage DB Users

Provides functionality to view and manage DB user information.

Query DB Users

To look up DB users, follow these steps.

1. All Services > Database > Microsoft SQL Server (DBaaS) Click the menu. 1. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Navigate to the page.
3. Microsoft SQL Server(DBaaS) List page, click the resource whose DB users you want to view. 3. Microsoft SQL Server(DBaaS) Details Go to the page.
4. Click the More button and then click the DB User Management button. 4. Navigate to the DB User Management page.
5. On the DB User Management page, click the Search button. 5. Retrieving may take a short amount of time.

Changing DB User Status

To change the status of the retrieved DB user, follow these steps.

1. All Services > Database > Microsoft SQL Server (DBaaS) Click the menu. 1. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Go to the page.
3. Microsoft SQL Server(DBaaS) List page, click the resource for which you want to edit the DB user. 3. Microsoft SQL Server(DBaaS) Details Navigate to the page.
4. Click the More button, then click the DB User Management button. 4. Go to the DB User Management page.
5. On the DB User Management page, click the Search button. 5. Retrieving may take a short amount of time.
6. If modification is required, click the Edit button, and change the status area value or enter remarks.
7. When the input is complete, click the Complete button.

Modify Audit Settings

You can modify the Audit log storage settings for Microsoft SQL Server (DBaaS).

To change the Audit log storage settings of Microsoft SQL Server(DBaaS), follow the steps below.

1. All Services > Database > Microsoft SQL Server(DBaaS) Click the menu. 1. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. Click the Microsoft SQL Server(DBaaS) menu on the Service Home page. 2. Microsoft SQL Server(DBaaS) List Navigate to the page.
3. Microsoft SQL Server (DBaaS) List Click the resource to view the service status on this page. 3. Microsoft SQL Server(DBaaS) Details Go to the page.
4. Click the Edit icon of Audit Settings at the bottom of the detailed information. 4. Audit Settings Modification The popup window opens.
5. Audit Settings Modification After modifying the usage in the popup window, click the Confirm button.
   • When Use is selected, the Audit log feature is enabled. * Enabling audit logging may degrade database performance.
   • If you disable usage, the Audit log storage file will be deleted. * Back up the Audit log file separately before disabling.

Export DB Log

Supports exporting log data that requires long-term retention among audit (Audit) logs to Object Storage. Users can directly configure the log types that need to be stored, the destination Bucket for export, and the log export interval. Copies logs to the specified Object Storage for retention according to the configured criteria. Additionally, to efficiently manage disk space, we also provide an option that exports logs to Object Storage while automatically deleting the original log files. By using this option, you can effectively free up storage capacity while safely retaining the necessary log data for the long term.

Setting the DB Log export mode

To set the DB Log export mode, follow these steps.

1. All Services > Database > Microsoft SQL Server (DBaaS) Click the menu. 1. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Go to the page.
3. Microsoft SQL Server(DBaaS) List Click the resource on the page for which you want to export the DB Log. 3. Microsoft SQL Server(DBaaS) Details Go to the page.
4. Click the More button, then click the Export DB Log button. 4. Export DB Log Go to the page.
5. Click the Register button on the DB Log Export page. 5. Go to the DB Log Export Registration page.
6. On the DB Log Export Registration page, after entering the required information, click the 완료 button.

   Category	Required	Detailed description
   Log type	Required	Log type to be saved
   Save bucket name	Required	Object Storage bucket name to be saved
   Authentication key > Access key	Required	Access key for accessing the Object Storage you want to store
   Authentication key > Secret key	Required	Secret key for accessing the Object Storage you want to store
   File creation cycle	Required	File creation frequency in Object Storage
   Whether to delete the original log	Selection	Whether to delete the original logs when exporting to Object Storage

   Table. Microsoft SQL Server (DBaaS) DB Log Export Configuration Items

Manage DB Log Export

To modify, cancel, or immediately export the DB Log export settings, follow these steps.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. 1. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Go to the page.
3. Microsoft SQL Server(DBaaS) List Click the resource on the page for which you want to manage DB Log export. 3. Microsoft SQL Server(DBaaS) Details Navigate to the page.
4. Click the More button, then click the DB Log Export button. 4. Export DB Log Go to the page.
5. On the DB Log Export page, depending on the log type you want to manage, click the More button and then click the Export Now, Edit, Terminate buttons.
   • Export Immediately: The selected logs are exported to the bucket of the previously configured Object Storage.
   • Edit: Modify the DB Log export mode setting.
   • Cancel: Cancel the DB Log export mode setting.

Minor version upgrade

Provides version upgrade functionality due to feature enhancements and security patches. Only minor version upgrades are supported within the same major version.

To perform a minor version upgrade, follow the steps below.

1. All Services > Database > Microsoft SQL Server(DBaaS) Click the menu. 1. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Go to the page.
3. Microsoft SQL Server(DBaaS) List page, click the resource to upgrade the version. 3. Microsoft SQL Server(DBaaS) Details Go to the page.
4. Click the Edit button of the Image version item. 4. Version Upgrade A popup window opens.
5. Version Upgrade In the popup, select the updated version and whether to enable backup, then click the Confirm button.
6. Version Upgrade Notification Click the OK button in the popup window.

2 - Backing up and restoring the DB

Users can configure backups of Microsoft SQL Server (DBaaS) through the Samsung Cloud Platform Console and restore from the backed‑up files.

Microsoft SQL Server(DBaaS) Backup

Microsoft SQL Server (DBaaS) provides a data backup feature based on its own backup commands. Additionally, it provides an optimized backup environment for data protection and management through backup history verification and backup file deletion features.

Configure Backup

For instructions on configuring backup settings for Microsoft SQL Server (DBaaS), see the Microsoft SQL Server(DBaaS) 생성하기 guide.

To modify the backup settings of the created resource, follow the steps below.

1. All Services > Database > Microsoft SQL Server (DBaaS) Click the menu. 1. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Go to the page.
3. Microsoft SQL Server(DBaaS) List page, click the resource you want to configure backup for. 3. Microsoft SQL Server(DBaaS) Details Go to the page.
4. Click the Edit button of the backup item. 4. Backup Settings The popup window opens.
5. When configuring a backup, click Use in the Backup Settings popup, select the retention period, backup start time, and Archive backup interval, then click the Confirm button.
   • If you want to stop the backup setting, uncheck Use in the Backup Settings popup window and authenticate via the logged-in user’s mobile phone.
     Once user authentication is completed, the backup setting is disabled and backup execution stops.

Perform immediate backup

If additional data protection is needed, you can quickly create a backup using the instant backup feature.

To perform an immediate backup, follow these steps.

1. All Services > Database > Microsoft SQL Server(DBaaS) Click the menu. 1. Go to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Navigate to the page.
3. Microsoft SQL Server(DBaaS) List page, click the resource to perform an immediate backup. 3. Microsoft SQL Server(DBaaS) Details Navigate to the page.
4. Click the Immediate Backup button of the backup item. 4. Immediate backup settings popup window opens.
5. In the Immediate Backup Settings popup, click the Confirm button.

Check backup history

To view the backup history, follow these steps.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. 1. Go to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Navigate to the Microsoft SQL Server(DBaaS) List page.
3. Microsoft SQL Server(DBaaS) List Click the resource to view the backup history on the page. 3. Microsoft SQL Server(DBaaS) Details Navigate to the page.
4. Backup History Click the button. 4. Backup History The popup window opens.
5. Backup History In the popup window, you can view the backup status, version, backup start time, backup completion time, and size.

Delete backup file

To delete the backup history, follow these steps.

1. All Services > Database > Microsoft SQL Server(DBaaS) Click the menu. 1. Go to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Go to the page.
3. On the Microsoft SQL Server(DBaaS) List page, click the resource to view the backup history. 3. Microsoft SQL Server(DBaaS) Details Navigate to the page.
4. Click the Backup History button. 4. Backup History The popup window opens.
5. Backup History In the popup window, check the files you want to delete, then authenticate using the logged-in user’s mobile phone.
   • When user authentication is completed, the backup file will be deleted.

Recover Microsoft SQL Server(DBaaS)

If a failure or data loss requires restoration from a backup file, recovery can be performed based on a specific point in time using the recovery feature. When you perform a Microsoft SQL Server(DBaaS) recovery, a new server is created with the OS image from the initial provisioning point, the database is installed with the version from the backup point, and the recovery proceeds using the database’s configuration information and data.

To restore Microsoft SQL Server(DBaaS), follow these steps.

1. All Services > Database > Microsoft SQL Server(DBaaS) Click the menu. 1. Go to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Go to the Microsoft SQL Server(DBaaS) List page.
3. Microsoft SQL Server(DBaaS) Resource On the list page, click the resource you want to recover. 3. Microsoft SQL Server(DBaaS) Details Navigate to the page.
4. Click the Database Recovery button. 4. Database Recovery Navigate to the page.
5. After entering the relevant information in the Database Recovery Configuration area, click the Complete button.

   Category	required status	Detailed description
   Recovery type	Required	Set the point in time the user wants to recover Backup point (recommended): Recover based on the backup file. Select from the list of backup points displayed in the list Custom point: Recover to a user‑desired point within the range of recoverable backup times. The recoverable period depends on the Archive backup schedule setting, allowing recovery to 1 hour/30 minutes/10 minutes/5 minutes before the current time from the initial backup start point. Select the date and time to back up
   Server name prefix	Required	Recovery DB server name must start with a lowercase English letter and may include lowercase letters, numbers, and special characters (-) using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters using 2~16 characters and between 2~16 characters between 2~16 characters between 2~16 characters 2~ Recovery DB server name in English English English
   Cluster name	Required	Recovery DB cluster name Enter using English letters, 3 ~ 20 characters A cluster is a unit that groups multiple servers
   Service Type > Server Type	Required	Recovery DB server type Standard: standard specifications commonly used High Capacity: large-capacity server of 24 vCore or more
   Service Type > Planned Compute	Selection	Status of resources with Planned Compute set In Use: Number of resources with Planned Compute that are currently in use Configured: Number of resources with Planned Compute set Coverage Preview: Amount applied per resource by Planned Compute Create Planned Compute Service: Go to the Planned Compute service application page For more details, see Planned Compute 신청하기
   Service Type > Block Storage	Required	Block Storage settings used by the recovery DB Basic OS: Area where the DB engine is installed DATA: Data storage area Applied identically with the storage type set in the original cluster Enter capacity as a multiple of 8 within the range 16 to 5,120 Additional: Data storage area Applied identically with the storage type set in the original cluster In the recovery DB, only DATA and TEMP purposes can be added After selecting Use, enter the storage purpose and capacity To add storage, click the Add button; to delete, click the x button Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created
   Use AD	Selection	Preconfigured AD (Active Directory) server usage setting AD Server ID: AD User ID AD Server Password: User Password
   Database username	Required	Database username Apply the same username set in the original cluster
   Database Port number	Required	Database Port number Apply the same Port number as configured in the original cluster
   IP access control	Selection	Service Access Policy Configuration Since the access policy is set for the IP entered on the page, you do not need to configure a separate Security Group policy Enter the IP in IP format (example: 192.168.10.1) or CIDR format (example: 192.168.10.0/24, 192.168.10.1/32) and click the Add button To delete an entered IP, click the x button next to the IP
   Maintenance period	Selection	DB maintenance window If you select Use, you can set the day of the week, start time, and duration The maintenance window is a feature that allows the user to set the time slot for performing patch operations, and any patch work within that period is performed directly by the user. We ask you to set a maintenance window for the stable operation of the system, and we are not responsible for any issues arising from not setting it or from failure to perform within the window.
   tag	Selection	Add Tag After clicking the Add Tag button, enter or select Key, Value values

   Table. Microsoft SQL Server (DBaaS) recovery configuration items

3 - Add Secondary

The user can enter the required information for Secondary through the Samsung Cloud Platform Console and create the service using detailed options.

Add Secondary

Through secondary configuration, you can create replica servers for read‑only or disaster‑recovery purposes. To add a Secondary, it must be created with HA redundancy configuration and Enterprise Edition, and the backup feature must be enabled.

To set up Secondary, follow these steps.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. 1. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Go to the page.
3. Microsoft SQL Server(DBaaS) List On the page, click the resource to configure Secondary. 3. Microsoft SQL Server(DBaaS) Details Navigate to the page.
4. Click the Add Secondary button. 4. Go to the Secondary Add page.
5. After entering information in the Secondary configuration area, click the Create button.

   Category	Required status	Detailed description
   Region	Required	Region to configure Secondary (DR) Secondary configuration (Other Region) shown only when selected
   Secondary number	Required	Number of Secondary to configure Only one can be configured per cluster
   Secondary name	Required	Secondary server name must start with a lowercase English letter, and using lowercase letters, numbers, and special characters (-) be entered with 3 ~ 15 characters The entered Secondary name is displayed as the cluster name in the list
   Service Type > Server Type	Required	Secondary server type Apply the same as the server type set in the source DB
   Service Type > Planned Compute	Selection	Status of resources with Planned Compute configured In Use: Number of resources with Planned Compute configured that are currently in use Configured: Number of resources with Planned Compute configured Coverage Preview: Amount applied by Planned Compute per resource Create Planned Compute Service: Go to the Planned Compute service application page For more details, see Planned Compute 신청하기
   Network > Common Settings	Essential	Network settings where the servers created by the service are installed applied identically to the network settings configured in the original DB
   Network > Server Settings	Required	Network settings for servers created in the service Select when you want to apply different settings per installed server Apply the same as the network settings configured in the original DB When setting per server 10.10.10.0/24 enter an IP address within the range
   License	Required	SQL Server License Key Enter the issued license key. If the entered license key is invalid, the service may not be created.
   AD(Active Directory)	Selection	Enter AD information entered when creating the service AD Server ID: AD User ID AD Server Password: User Password

   Table. Microsoft SQL Server (DBaaS) Secondary configuration items

Promoting Secondary (DR) to Primary

You can promote a configured Secondary (DR) to Primary.

To promote Secondary(DR) to Primary, follow these steps.

1. All Services > Database > Microsoft SQL Server (DBaaS) Click the menu. 1. Go to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Navigate to the page.
3. Microsoft SQL Server(DBaaS) List On the page, click the resource to promote to Primary. 3. Microsoft SQL Server(DBaaS) Details Navigate to the page.
4. Click the More button, then click the Primary Promotion button. 4. Primary Promotion Notification The popup window opens.
5. Primary Promotion Notification In the popup window, click the Confirm button.

4 - Microsoft SQL Server(DBaaS) server connection

Scenario Overview

Microsoft SQL Server(DBaaS) server connection The scenario involves creating a Bastion host (Virtual Server) and a Database service, and accessing the DB service through the Bastion host. To reliably connect to Microsoft SQL Server (DBaaS) in the Samsung Cloud Platform environment, you need to create a Bastion host and establish a network connection using it. To maintain stability and a high level of security, we recommend configuring the Database service in a Private Subnet environment and setting up the Bastion host in a restricted Public Subnet environment.

This scenario primarily describes creating a Bastion host and Database service, configuring the network environment for Bastion host and Database access, and connecting through a DB client.

Scenario components

You can build the scenario using the following services.

Scenario setup method

Create the services needed to build the scenario by following the procedure below.

1. ## Configure Network

Describes the process of configuring the network environment for accessing the Bastion Host and Database services.

1-1. ### Create VPC

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Create VPC button. 2. Go to the Create VPC page.
3. On the VPC creation page, enter the information required to create the service.
   • Enter the IP range as 192.168.x.0/16.
4. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • When creation is complete, check the created resources on the VPC List page.

1-2. ### Create Subnet

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Subnet menu. 2. Go to the Subnet list page.
3. Create Subnet Click the button. 3. Go to the Subnet Creation page.
4. On the Subnet Creation page, enter the information required to create the service.
   • Select the Subnet type as General.
   • Select a pre‑created VPC.
   • Enter the IP range as 192.168.x.0/24.
5. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • After creation is complete, check the created resources on the Subnet List page.

1-3. ### Create Internet Gateway

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway menu. 2. Go to the Internet Gateway List page.
3. Internet Gateway creation Click the button. 3. Go to the Create Internet Gateway page.
4. On the Internet Gateway Creation page, enter the required information needed to create the service.
   • Select a pre‑created VPC.
   • In the Firewall usage option, select Use.
5. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • Once creation is complete, check the created resource on the Internet Gateway List page.

1-4. ### Create Public IP

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Public IP menu. 2. Go to the Public IP List page.
3. Public IP reservation Click the button. 3. Go to the Public IP reservation page.
4. On the Public IP reservation page, enter the required information for service reservation.
5. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • After creation is complete, check the created resources on the Public IP List page.

1-5. ### Create Security Group

1. Click the All Services > Networking > Security Group menu. 1. Go to the Service Home page of the Security Group.
2. On the Service Home page, click the Create Security Group button. 2. Go to the Security Group Creation page.
3. On the Security Group creation page, enter the required information to create the service.
4. Check the input information and click the Done button.
   • After creation is complete, verify the created resources on the Security Group List page.

2. ## Create Bastion host

Explains the process of configuring a Bastion Host that requires the Database access client to be installed.

2-1. ### Create Server Keypair

1. All Services > Compute > Virtual Server Click the menu. 1. Navigate to the Service Home page of the Virtual Server.
2. On the Service Home page, click the Keypair menu. 2. Go to the Keypair List page.
3. Create Keypair button, click it. 3. Go to the Keypair creation page.
4. On the Keypair Creation page, enter the required information needed to create the service.
5. Verify the creation information and click the Complete button.
   • The key can be downloaded only for the first time, and reissuance is not provided.
   • Please store the downloaded key in a secure location.

2-2. ### Create Bastion host

1. Click the All Services > Compute > Virtual Server menu. 1. Navigate to the Service Home page of the Virtual Server.
2. On the Service Home page, click the Create Virtual Server button. 2. Go to the Create Virtual Server page.
3. On the Virtual Server Creation page, enter the required essential information needed to create the service.
   • Select Windows for the image.
   • Select the pre-created VPC and Subnet.
   • Click Use NAT, and select the reserved Public IP from 1-4. Public IP 생성하기.
   • Connect the Keypair created in 2-1. Create Server Keypair.
4. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • When creation is complete, check the created resources on the Virtual Server list page.

2-3. ### Check Bastion host login ID and PW

1. All Services > Compute > Virtual Server Click the menu. 1. Navigate to the Service Home page of the Virtual Server.
2. On the Service Home page, click the Virtual Server menu. 2. Go to the Virtual Server List page.
3. Virtual Serve List page, click the resource you created in 2-2. Bastion host 생성하기. 3. Go to the detailed information page for the resource.
4. Click the RDP password view button in the Keypair name field on the detail information page. 4. RDP password lookup A popup window opens.
5. RDP password lookup in the popup window, attach the keypair file downloaded from 2-1. 서버 Keypair 생성하기.
6. After attaching, click the Password verification button. 6. The ID and password required to access the resource are displayed.
   • The ID and Password are used later as credentials to access the Bastion host in 5-1. Bastion host 접속하기.

3. ## Create Database

Describes the process of creating a Database service.

3-1. ### Create Microsoft SQL Server(DBaaS) Service

1. All Services > Database > Microsoft SQL Server(DBaaS) Click the menu. 1. Go to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) Create button. 2. Microsoft SQL Server(DBaaS) Creation Navigate to the page.
3. Microsoft SQL Server(DBaaS) Creation page, enter the required information to create the service.
   • Select the pre‑created VPC and Subnet and connect them.
   • Enter database-related creation information on the required information input screen.
   • Add the Bastion host IP in the IP access control item.
   • The database port defaults to 2866, but users can also specify a different one.
4. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • After creation is complete, check the created resource on the Microsoft SQL Server(DBaaS) list page.

4. ## Configure Rules

Describes the process of setting rules for a user to connect to the Bastion host and rules for connecting to the Database from the Bastion host.

4-1. ### Security Group Add security rule

1. Click the All Services > Networking > Security Group menu. 1. Go to the Service Home page of the Security Group.
2. On the Service Home page, click the Security Group menu. 2. Navigate to the Security Group List page.
3. 1-5. 3. Security Group CreateSelect the Security Group resource created in 3. Go to the detailed information page for the resource.
4. On the detail information page, click the Rules tab. 4. Go to the Rules tab.
5. Click the Add Rule button on the Rule tab. 5. Add Rule Navigate to the popup window.
6. Add Rule In the popup window, enter the rule below, and click the Confirm button.

   Direction	Remote	Target address	Protocol	Port	Explanation
   Inbound	CIDR	User PC IP	TCP	3389 (RDP)	Bastion access PC → Bastion host
   Outbound	CIDR	DB IP	TCP	Database Port (manual entry)	Bastion host → Database

   Table. Security Group rules that need to be added

4-2. ### Add IGW Firewall rule

1. All Services > Networking > FirewallClick the menu. 1. Navigate to the Firewall’s Service Home page.
2. On the Service Home page, click the Firewall menu. 2. Go to the Firewall List page.
3. On the Firewall List page, select the Internet Gateway resource name created in 1-3. Internet Gateway 생성하기. 3. Go to the detailed information page for the resource.
4. On the detail information page, click the Rules tab. 4. Go to the Rules tab.
5. Click the Add Rule button on the Rule tab. 5. Add Rule Navigate to the popup window.
6. Add Rule In the popup window, enter the rule below, and click the Confirm button.

   Origin address	Destination address	Protocol	Port	Operation	Direction	Explanation
   Bastion connection PC IP	Bastion host IP	TCP	3389(RDP)	Allow	Inbound	User PC → Bastion host

   Table. Internet Gateway Firewall rules to be added

5. ## Database Connect

Describes the process of a user connecting to a database through a DB client program.

This guide provides instructions on how to connect using SSMS (Microsoft SQL Server Management Studio). Database client programs and CLI utilities are diverse, so you can install and use the tool that best suits your needs.

5-1. ### Connecting to Bastion host

1. In the Windows environment of the PC that will connect to the Bastion host, run Remote Desktop Connection, then enter the NAT IP of the Bastion Host and click the Connect button.
2. When the remote desktop connection succeeds, user credential input window opens. 2. Enter the ID and Password verified in 2-3. Bastion host 접속 ID 및 PW 확인하기 and click the Confirm button.

5-2. ### Install the DB client program (SSMS) on the Bastion host

1. Go to the official Microsoft SQL Server page and download the SSMS program.
   • SSMS program download URL: https://learn.microsoft.com/en-us/ssms/download-sql-server-management-studio-ssms
2. Connect the user’s PC hard drive to upload the file to the Bastion host.
3. Click the Details button of the Local devices and resources item on the Local Resources tab of the Remote Desktop Connection.
4. Select the local disk of the location where the file was downloaded on the drive, and click the Confirm button.
5. Copy the downloaded file, upload it to the Bastion Host, and click the SSMS (Microsoft SQL Server Management Studio) installation file to install.

5-3. ### Connecting to the Database using the DB client program (SSMS)

1. Run SSMS (Microsoft SQL Server Management Studio). 1. Connect to Server A popup window appears.
2. In the Connect to Server popup, enter the Database server information created in 3-1. Microsoft SQL Server(DBaaS) 서비스 생성하기 and click the Connect button.

   Required input element item	input value
   Server type	Database Engine
   Server name	Database server IP, Database Port (ex. 192.168.10.1,2866)
   Authentication	SQL Server Authentication
   Login	Database username
   Password	Database password
   Encryption	Optional

   Table DB connection client program input fields
3. When the connection is complete, the Database will be accessed. 3. After connecting, you can perform simple queries, etc.