SSIS Catalog

The SSISDB catalog is the central point for working with Integration Services (SSIS) projects that you’ve deployed to the Integration Services server. For example, you set project and package parameters, configure environments to specify runtime values for packages, execute and troubleshoot packages, and manage Integration Services server operations.

The objects that are stored in the SSISDB catalog include projects, packages, parameters, environments, and operational history.

You inspect objects, settings, and operational data that are stored in the SSISDB catalog, by querying the views in the SSISDB database. You manage the objects by calling stored procedures in the SSISDB database or by using the UI of the SSISDB catalog. In many cases, the same task can be performed in the UI or by calling a stored procedure.

To maintain the SSISDB database, it is recommended that you apply standard enterprise policies for managing user databases. For information about creating maintenance plans, see Maintenance Plans.

The SSISDB catalog and the SSISDB database support Windows PowerShell. For more information about using SQL Server with Windows PowerShell, see SQL Server PowerShell. For examples of how to use Windows PowerShell to complete tasks such as deploying a project, see the blog entry, SSIS and PowerShell in SQL Server 2012, on blogs.msdn.com.

For more information about viewing operations data, see Monitor Running Package and Other Operations.

You access the SSISDB catalog in SQL Server Management Studio by connecting to the SQL Server Database Engine and then expanding the Integration Services Catalogs node in Object Explorer. You access the SSISDB database in SQL Server Management Studio by expanding the Databases node in Object Explorer.

Note

You cannot rename the SSISDB database.

Note

If the SQL Server instance that the SSISDB database is attached to, stops or does not respond, the ISServerExec.exe process ends. A message is written to a Windows Event log.

If the SQL Server resources failover as part of a cluster failover, the running packages do not restart. You can use checkpoints to restart packages. For more information, see Restart Packages by Using Checkpoints.

Features and capabilities

Catalog Object Identifiers

When you create a new object in the catalog, assign a name to the object. The object name is an identifier. SQL Server defines rules for which characters can be used in an identifier. Names for the following objects must follow identifier rules.

  • Folder

  • Project

  • Environment

  • Parameter

  • Environment Variable

Folder, Project, Environment

Consider the following rules when renaming a folder, project, or environment.

  • Invalid characters include ASCII/Unicode characters 1 through 31, quote ("), less than (<), greater than (>), pipe (|), backspace (\b), null (\0), and tab (\t).

  • The name might not contain leading or trailing spaces.

  • @ is not allowed as the first character, but subsequent characters might use @.

  • The length of the name must be greater than 0 and less than or equal to 128.

Parameter

Consider the following rules when naming a parameter.

  • The first character of the name must be a letter as defined in the Unicode Standard 2.0, or an underscore (_).

  • Subsequent characters can be letters or numbers as defined in the Unicode Standard 2.0, or an underscore (_).

Environment Variable

Consider the following rules when naming an environment variable.

  • Invalid characters include ASCII/Unicode characters 1 through 31, quote ("), less than (<), greater than (>), pipe (|), backspace (\b), null (\0), and tab (\t).

  • The name might not contain leading or trailing spaces.

  • @ is not allowed as the first character, but subsequent characters might use @.

  • The length of the name must be greater than 0 and less than or equal to 128.

  • The first character of the name must be a letter as defined in the Unicode Standard 2.0, or an underscore (_).

  • Subsequent characters can be letters or numbers as defined in the Unicode Standard 2.0, or an underscore (_).

Catalog Configuration

You fine-tune how the catalog behaves by adjusting the catalog properties. Catalog properties define how sensitive data is encrypted, and how operations and project versioning data is retained. To set catalog properties, use the Catalog Properties dialog box or call the catalog.configure_catalog (SSISDB Database) stored procedure. To view the properties, use the dialog box or query catalog.catalog_properties (SSISDB Database). You access the dialog box by right-clicking SSISDB in Object Explorer.

Operations and Project Version Cleanup

Status data for many of the operations in the catalog is stored in internal database tables. For example, the catalog tracks the status of package executions and project deployments. To maintain the size of the operations data, the SSIS Server Maintenance Job in SQL Server Management Studio is used to remove old data. This SQL Server Agent job is created when Integration Services is installed.

You can update or redeploy an Integration Services project by deploying it with the same name to the same folder in the catalog. By default, each time you redeploy a project, the SSISDB catalog retains the previous version of the project. To maintain the size of the operations data, the SSIS Server Maintenance Job is used to remove old versions of projects.

To run the SSIS Server Maintenance Job, SSIS creates the SQL Server login ##MS_SSISServerCleanupJobLogin##. This login is only for internal use by SSIS.

The following SSISDB catalog properties define how this SQL Server Agent job behaves. You can view and modify the properties by using the Catalog Properties dialog box or by using catalog.catalog_properties (SSISDB Database) and catalog.configure_catalog (SSISDB Database).

Clean Logs Periodically
The job step for operations cleanup runs when this property is set to True.

Retention Period (days)
Defines the maximum age of allowable operations data (in days). Older data are removed.

The minimum value is one day. The maximum value is limited only by the maximum value of the SQL Server int data. For information about this data type, see int, bigint, smallint, and tinyint (Transact-SQL).

Periodically Remove Old Versions
The job step for project version cleanup runs when this property is set to True.

Maximum Number of Versions per Project
Defines how many versions of a project are stored in the catalog. Older versions of projects are removed.

Encryption Algorithm

The Encryption Algorithm property specifies the type of encryption that is used to encrypt sensitive parameter values. You can choose from the following types of encryption.

  • AES_256 (default)

  • AES_192

  • AES_128

  • DESX

  • TRIPLE_DES_3KEY

  • TRIPLE_DES

  • DES

    When you deploy an Integration Services project to the Integration Servicesserver, the catalog automatically encrypts the package data and sensitive values. The catalog also automatically decrypts the data when you retrieve it. The SSISDB catalog uses the ServerStorage protection level. For more information, see Access Control for Sensitive Data in Packages.

    Changing the encryption algorithm is a time-intensive operation. First, the server has to use the previously specified algorithm to decrypt all configuration values. Then, the server has to use the new algorithm to re-encrypt the values. During this time, there cannot be other Integration Services operations on the server. Thus, to enable Integration Services operations to continue uninterrupted, the encryption algorithm is a read-only value in the dialog box in Management Studio.

    To change the Encryption Algorithm property setting, set the SSISDB database to the single-user mode and then call the catalog.configure_catalog stored procedure. Use ENCRYPTION_ALGORITHM for the property_name argument. For the supported property values, see catalog.catalog_properties (SSISDB Database). For more information about the stored procedure, see catalog.configure_catalog (SSISDB Database).

    For more information about single-user mode, see Set a Database to Single-user Mode. For information about encryption and encryption algorithms in SQL Server, see the topics in the section, SQL Server Encryption.

    A database master key is used for the encryption. The key is created when you create the catalog.

    The following table lists the property names shown in the Catalog Properties dialog box and the corresponding properties in the database view.

Property Name (Catalog Properties dialog box) Property Name (database view)
Encryption Algorithm Name ENCRYPTION_ALGORITHM
Clean Logs Periodically OPERATION_CLEANUP_ENABLED​
Retention Period (days) RETENTION_WINDOW
Periodically Remove Old Versions VERSION_CLEANUP_ENABLED
Maximum Number of Versions per Project MAX_PROJECT_VERSIONS
Server-wide Default Logging Level SERVER_LOGGING_LEVEL

Permissions

Projects, environments, and packages are contained in folders that are securable objects. You can grant permissions to a folder, including the MANAGE_OBJECT_PERMISSIONS permission. MANAGE_OBJECT_PERMISSIONS enables you to delegate the administration of folder contents to a user without having to grant the user membership to the ssis_admin role. You can also grant permissions to projects, environments, and operations. Operations include initializing Integration Services, deploying projects, creating and starting executions, validating projects and packages, and configuring the SSISDB catalog.

For more information about database roles, see Database-Level Roles.

The SSISDB catalog uses a DDL trigger, ddl_cleanup_object_permissions, to enforce the integrity of permissions information for SSIS securables. The trigger fires when a database principal, such as a database user, database role, or a database application role, is removed from the SSISDB database.

If the principal has granted or denied permissions to other principals, revoke the permissions given by the grantor, before the principal can be removed. Otherwise, an error message is returned when the system tries to remove the principal. The trigger removes all permission records where the database principal is a grantee.

It is recommended that the trigger is not disabled because it ensures that are no orphaned permission records after a database principal is dropped from the SSISDB database.

Managing Permissions

You can manage permissions by using the SQL Server Management Studio UI, stored procedures, and the Microsoft.SqlServer.Management.IntegrationServices namespace.

To manage permissions using the SQL Server Management Studio UI, use the following dialog boxes.

Folders

A folder contains one or more projects and environments in the SSISDB catalog. You can use the catalog.folders (SSISDB Database) view to access information about folders in the catalog. You can use the following stored procedures to manage folders.

Projects and Packages

Each project can contain multiple packages. Both projects and packages can contain parameters and references to environments. You can access the parameters and environment references by using the Configure Dialog Box.

You can carry out other project tasks by calling the following stored procedures.

Parameters

You use parameters to assign values to package properties at the time of package execution. To set the value of a package or project parameter and to clear the value, call catalog.set_object_parameter_value (SSISDB Database) and catalog.clear_object_parameter_value (SSISDB Database). To set the value of a parameter for an instance of execution, call catalog.set_execution_parameter_value (SSISDB Database). You can retrieve default parameter values by calling catalog.get_parameter_values (SSISDB Database).

These views show the parameters for all packages and projects, and parameter values that are used for an instance of execution.

Server Environments, Server Variables, and Server Environment References

Server environments contain server variables. The variable values can be used when a package is executed or validated on the Integration Services server.

The following stored procedures enable you to perform many other management tasks for environments and variables.

Executions and Validations

An execution is an instance of a package execution. Call catalog.create_execution (SSISDB Database) and catalog.start_execution (SSISDB Database) to create and start an execution. To stop an execution or a package/project validation, call catalog.stop_operation (SSISDB Database).

To cause a running package to pause and create a dump file, call the catalog.create_execution_dump stored procedure. A dump file provides information about the execution of a package that can help you troubleshoot execution issues. For more information about generating and configuring dump files, see Generating Dump Files for Package Execution.

For details about executions, validations, messages that are logged during operations, and contextual information related to errors, query these views.

Create the SSIS Catalog

After you design and test packages in SQL Server Data Tools, you can deploy the projects that contain the packages to an Integration Services server. Before you can deploy the projects to the Integration Services server, the server must contain the SSISDB catalog. The installation program for SQL Server 2012 does not automatically create the catalog; you need to manually create the catalog by using the following instructions.

You can create the SSISDB catalog in SQL Server Management Studio. You also create the catalog programmatically by using Windows PowerShell.

To create the SSISDB catalog in SQL Server Management Studio

  1. Open SQL Server Management Studio.

  2. Connect to the SQL Server Database Engine.

  3. In Object Explorer, expand the server node, right-click the Integration Services Catalogs node, and then click Create Catalog.

  4. Click Enable CLR Integration.

    The catalog uses CLR stored procedures.

  5. Click Enable automatic execution of Integration Services stored procedure at SQL Server startup to enable the catalog.startup stored procedure to run each time the SSIS server instance is restarted.

    The stored procedure performs maintenance of the state of operations for the SSISDB catalog. It fixes the status of any packages there were running if and when the SSIS server instance goes down.

  6. Enter a password, and then click Ok.

    The password protects the database master key that is used for encrypting the catalog data. Save the password in a secure location. It is recommended that you also back up the database master key. For more information, see Back Up a Database Master Key.

To create the SSISDB catalog programmatically

  1. Execute the following PowerShell script:

    # Load the IntegrationServices Assembly  
    [Reflection.Assembly]::LoadWithPartialName("Microsoft.SqlServer.Management.IntegrationServices")  
    
    # Store the IntegrationServices Assembly namespace to avoid typing it every time  
    $ISNamespace = "Microsoft.SqlServer.Management.IntegrationServices"  
    
    Write-Host "Connecting to server ..."  
    
    # Create a connection to the server  
    $sqlConnectionString = "Data Source=localhost;Initial Catalog=master;Integrated Security=SSPI;"  
    $sqlConnection = New-Object System.Data.SqlClient.SqlConnection $sqlConnectionString  
    
    # Create the Integration Services object  
    $integrationServices = New-Object $ISNamespace".IntegrationServices" $sqlConnection  
    
    # Provision a new SSIS Catalog  
    $catalog = New-Object $ISNamespace".Catalog" ($integrationServices, "SSISDB", "P@assword1")  
    $catalog.Create()  
    

    For more examples of how to use Windows PowerShell and the Microsoft.SqlServer.Management.IntegrationServices namespace, see the blog entry, SSIS and PowerShell in SQL Server 2012, on blogs.msdn.com. For an overview of the namespace and code examples, see the blog entry, A Glimpse of the SSIS Catalog Managed Object Model, on blogs.msdn.com.

Catalog Properties Dialog Box

Use the Catalog Properties dialog box to configure the SSISDB catalog. Catalog properties define how sensitive data is encrypted, how operations and project versioning data is retained, and when validation operations time out. The SSISDB catalog is a central storage and administration point for Integration Services projects, packages, parameters, and environments.

You can also view catalog properties in the catalog.catalog_property view, and set the properties by using the catalog.configure_catalog stored procedure. For more information, see catalog.catalog_properties (SSISDB Database) and catalog.configure_catalog (SSISDB Database).

What do you want to do?

Open the Catalog Properties Dialog Box

  1. Open SQL Server Management Studio.

  2. Connect Microsoft SQL Server Database Engine.

  3. In Object Explorer, expand the Integration Services node, right-click SSISDB, and then click Properties.

Configure the Options

Options

The following table describes certain properties in the dialog box and the corresponding properties in the catalog.catalog_property view.

Property Name (Catalog Properties dialog box) Property Name (catalog.catalog_property view) Description
Encryption Algorithm Name ENCRYPTION_CLEANUP_ENABLED Specifies the type of encryption that is used to encrypt the sensitive parameter values in the catalog. The following are the possible values:

DES

TRIPLE_DES

TRIPLE_DES_3KEY

DESPX

AES_128

AES_192

AES_256 (default)
Validation Timeout (seconds) VALIDATION_TIMEOUT Specify the maxium number of seconds a project validation or a package validation can run before it is stopped. The default value is 300 seconds.

Performing the validation is an asynchronous operation. The larger the project or package is, the longer it will take to validate.

For information on validating projects and packages, see Integration Services Data Types in Expressions.
Clean Logs Periodically OPERATION_CLEANUP_ENABLED Set the property to True to indicate that the SQL Server Agent job, operations cleanup, runs. Otherwise, set the property to False.
Retention Period (days) RETENTION_WINDOW Specify the maximum age of allowable operations data (in days). Data that is older than the specified number of days will be removed by the SQL Agent job, operations cleanup.
Maximum Number of Versions per Project MAX_PROJECT_VERSIONS Specify how many versions of a project will be stored in the catalog. Older versions of projects that exceed the maximum will be removed when the project version cleanup job runs.

Back up, Restore, and Move the SSIS Catalog

THIS TOPIC APPLIES TO: yesSQL Server (starting with 2016)noAzure SQL DatabasenoAzure SQL Data Warehouse noParallel Data Warehouse

SQL Server 2017 Integration Services (SSIS) includes the SSISDB database. You query views in the SSISDB database to inspect objects, settings, and operational data that are stored in the SSISDB catalog. This topic provides instructions for backing up and restoring the database.

The SSISDB catalog stores the packages that you’ve deployed to the Integration Services server. For more information about the catalog, see SSIS Catalog.

To Back up the SSIS Database

  1. Open SQL Server Management Studio and connect to an instance of SQL Server.

  2. Back up the master key for the SSISDB database, by using the BACKUP MASTER KEY Transact-SQL statement. The key is stored in a file that you specify. Use a password to encrypt the master key in the file.

    For more information about the statement, see BACKUP MASTER KEY (Transact-SQL).

    In the following example, the master key is exported to the c:\temp directory\RCTestInstKey file. The LS2Setup! password is used to encrypt the master key.

    backup master key to file = 'c:\temp\RCTestInstKey'  
           encryption by password = 'LS2Setup!'  
    
  3. Back up the SSISDB database by using the Backup Database dialog box in SQL Server Management Studio. For more information, see How to: Back Up a Database (SQL Server Management Studio).

  4. Generate the CREATE LOGIN script for ##MS_SSISServerCleanupJobLogin##, by doing the following. For more information, see CREATE LOGIN (Transact-SQL).

    1. In Object Explorer in SQL Server Management Studio, expand the Security node and then expand the Logins node.

    2. Right-click ##MS_SSISServerCleanupJobLogin##, and then click Script Login as > CREATE To > New Query Editor Window.

  5. If you will be restoring the SSISDB database to an SQL Server instance where the SSISDB catalog was never created, generate the CREATE PROCEDURE script for sp_ssis_startup, by doing the following. For more information, see CREATE PROCEDURE (Transact-SQL).

    1. In Object Explorer, expand the Databases node and then expand the master > Programmability > Stored Procedures node.

    2. Right click dbo.sp_ssis_startup, and then click Script Stored Procedure as > CREATE To > New Query Editor Window.

  6. Confirm that SQL Server Agent has been started

  7. If you will be restoring the SSISDB database to an SQL Server instance where the SSISDB catalog was never created, generate a script for the SSIS Server Maintenance Job by doing the following. The script is created in SQL Server Agent automatically when the SSISDB catalog is created. The job helps clean up cleanup operation logs outside the retention window and remove older versions of projects.

    1. In Object Explorer, expand the SQL Server Agent node and then expand the Jobs node.

    2. Right click SSIS Server Maintenance Job, and then click Script Job as > CREATE To > New Query Editor Window.

To Restore the SSIS Database

  1. If you are restoring the SSISDB database to an SQL Server instance where the SSISDB catalog was never created, enable common language runtime (clr) by running the sp_configure stored procedure. For more information, see sp_configure (Transact-SQL) and clr enabled Option.

    use master   
           sp_configure 'clr enabled', 1  
           reconfigure  
    
  2. If you are restoring the SSISDB database to an SQL Server instance where the SSISDB catalog was never created, create the asymmetric key and the login from the asymmetric key, and grant UNSAFE permission to the login.

    Create Asymmetric key MS_SQLEnableSystemAssemblyLoadingKey  
           FROM Executable File = 'C:\Program Files\Microsoft SQL Server\110\DTS\Binn\Microsoft.SqlServer.IntegrationServices.Server.dll'  
    

    Integration Services CLR stored procedures require UNSAFE permissions to be granted to the login because the login requires additional access to restricted resources, such as the Microsoft Win32 API. For more information about the UNSAFE code permission, see Creating an Assembly.

    Create Login MS_SQLEnableSystemAssemblyLoadingUser  
           FROM Asymmetric key MS_SQLEnableSystemAssemblyLoadingKey   
    
           Grant unsafe Assembly to MS_SQLEnableSystemAssemblyLoadingUser  
    
  3. Restore the SSISDB database from the backup by using the Restore Database dialog box in SQL Server Management Studio. For more information, see the following topics.

  4. Execute the scripts that you created in the To Back up the SSIS Database for ##MS_SSISServerCleanupJobLogin##, sp_ssis_startup, and SSIS Server Maintenance Job. Confirm that SQL Server Agent has been started.

  5. Run the following statement to set the sp_ssis_startup prodecure for autoexecution. For more information, see sp_procoption (Transact-SQL).

    EXEC sp_procoption N'sp_ssis_startup','startup','on'  
    
  6. Map the SSISDB user ##MS_SSISServerCleanupJobUser## (SSISDB database) to ##MS_SSISServerCleanupJobLogin##, by using the Login Properties dialog box in SQL Server Management Studio.

  7. Restore the master key by using one of the following methods. For more information about encryption, see Encryption Hierarchy.

    • Method 1

      Use this method if you’ve already performed a backup of the database master key, and you have the password used to encrypt the master key.

             Restore master key from file = 'c:\temp\RCTestInstKey'  
             Decryption by password = 'LS2Setup!' -- 'Password used to encrypt the master key during SSISDB backup'  
             Encryption by password = 'LS3Setup!' -- 'New Password'  
             Force  
      
      Note

      Confirm that the SQL Server service account has permissions to read the backup key file.

      Note

      You will see the following warning message displayed in SQL Server Management Studio if the database master key has not yet been encrypted by the service master key. Ignore the warning message.

      The current master key cannot be decrypted. The error was ignored because the FORCE option was specified.

      The FORCE argument specifies that the restore process should continue even if the current database master key is not open. For the SSISDB catalog, because the database master key has not been opened on the instance where you are restoring the database, you will see this message.

    • Method 2

      Use this method if you have the original password that was used to create SSISDB.

      open master key decryption by password = 'LS1Setup!' --'Password used when creating SSISDB'  
             Alter Master Key Add encryption by Service Master Key  
      
  8. Determine whether the SSISDB catalog schema and the Integration Services binaries (ISServerExec and SQLCLR assembly) are compatible, by running catalog.check_schema_version.

  9. To confirm that the SSISDB database has been restored successfully, perform operations against the SSISDB catalog such as running packages that have been deployed to the Integration Services server. For more information, see Run Integration Services (SSIS) Packages.

To Move the SSIS Database

  • Follow the instructions for moving user databases. For more information, see Move User Databases.

    Ensure that you back up the master key for the SSISDB database and protect the backup file. For more information, see To Back up the SSIS Database.

    Ensure that the Integration Services (SSIS) relevant objects are created in the new SQL Server instance where the SSISDB catalog has not yet been created.

Upgrade the SSIS Catalog (SSISDB)

Run the SSISDB Upgrade Wizard to upgrade the SSIS Catalog database, SSISDB, when the database is older than the current version of the SQL Server instance. This occurs when one of the following conditions is true.

  • You restored the database from an older version of SQL Server.

  • You did not remove the database from an Always On Availability Group before upgrading the SQL Server instance. This prevents the automatic upgrade of the database. For more info, see Upgrading SSISDB in an availability group.

    The wizard can only upgrade the database on a local server instance.

Upgrade the SSIS Catalog (SSISDB) by running the SSISDB Upgrade Wizard

  1. Backup the SSIS Catalog database, SSISDB.

  2. In SQL Server Management Studio, expand the local server, and then expand Integration Services Catalogs.

  3. Right-click on SSISDB, and then select Database Upgrade to launch the SSISDB Upgrade Wizard.

    Launch the SSISDB upgrade wizard

  4. On the Select Instance page, select a SQL Server instance on the local server.

    Important

    The wizard can only upgrade the database on a local server instance.

    Select the checkbox to indicate that you have backed up the SSISDB database before running the wizard.

    Select the server in the SSISDB Upgrade Wizard

  5. Select Upgrade to upgrade the SSIS Catalog database.

  6. On the Result page, review the results.

    Review the results in the SSISDB Upgrade Wizard

Always On for SSIS Catalog (SSISDB)

The Always On Availability Groups feature is a high-availability and disaster-recovery solution that provides an enterprise-level alternative to database mirroring. An availability group supports a failover environment for a discrete set of user databases, known as availability databases, that fail over together. For more information, see Always On Availability Groups.

In order to provide the high-availability for the SSIS catalog (SSISDB) and its contents (projects, packages, execution logs, etc.), you can add the SSISDB database (just the same as any other user database) to an Always On Availability Group. When a failover occurs, one of the secondary nodes automatically becomes the new primary node.

Important

When a failover occurs, packages that were running do not restart or resume.

In this section:

  1. Prerequisites

  2. Configure SSIS support for Always On

  3. Upgrading SSISDB in an availability group

Prerequisites

You must perform the following pre-requisite steps before enabling Always On support for the SSISDB database.

  1. Set up a Windows failover cluster. See Installing the Failover Cluster Feature and Tools for Windows Server 2012 blog post for instructions. You should install the feature and tools on all cluster nodes.

  2. Install SQL Server 2016 with Integration Services (SSIS) feature on each node of the cluster.

  3. Enable Always On Availability Groups for each SQL Server instance. See Enable Always On Availability Groups for details.

Configure SSIS support for Always On

Important
  • You must perform these steps on the primary node of the availability group.
  • You must enable SSIS support for Always On after you add SSISDB to an Always On Availability Group.

Step 1: Create Integration Services Catalog

  1. Launch SQL Server Management Studio and connect to a SQL Server instance in the cluster that you want to set as the primary node of Always On high availability group for SSISDB.

  2. In Object Explorer, expand the server node, right-click the Integration Services Catalogs node, and then click Create Catalog.

  3. Click Enable CLR Integration. The catalog uses CLR stored procedures.

  4. Click Enable automatic execution of Integration Services stored procedure at SQL Server startup to enable the catalog.startup stored procedure to run each time the SSIS server instance is restarted. The stored procedure performs maintenance of the state of operations for the SSISDB catalog. It fixes the status of any packages there were running if and when the SSIS server instance goes down.

  5. Enter a password, and then click Ok. The password protects the database master key that is used for encrypting the catalog data. Save the password in a secure location. It is recommended that you also back up the database master key. For more information, see Back Up a Database Master Key.

Step 2: Add SSISDB to an Always On Availability Group

Adding the SSISDB database to an Always On Availability Group is almost same as adding any other user database into an availability group. See Use the Availability Group Wizard.

You need to provide the password that you specified while creating the SSIS Catalog in the Select Databases page of the New Availability Group wizard.

New Availability Group

Step 3: Enable SSIS support for Always On

After you create the Integration Service Catalog, right click the Integration Service Catalogs node, and click Enable Always On Support…. You should see the following Enable Support for Always On dialog box. If this menu item is disabled, confirm that you have all the prerequisites installed and click Refresh.

Enable Support for Always On

Warning

Auto-failover of SSISDB database is not supported until you enable SSIS Support for Always On.

The newly added secondary replicas from the Always On availability group will be shown in the table. Click Connect… button for each replica in the list and enter authentication credentials to connect to the replica. The user account must be a member of sysadmin group on each replica to enable SSIS support for Always On. After you successfully connect to each replica, click OK to enable SSIS support for Always On.

If the Enable Always On support option on the context menu appears to be disabled after you've completed the other prerequisites, try these things:

  1. Refresh the context menu by clicking the Refresh option.
  2. Make sure you are connecting to the primary node. You have to enable Always On support on the primary node.
  3. Make sure the SQL Server version is 13.0 or higher. SSIS supports Always On only on SQL Server 2016 and later versions.

Upgrading SSISDB in an availability group

If you're upgrading SQL Server from a previous version, and SSISDB is in an Always On availability group, your upgrade may be blocked by the “SSISDB in Always On Availability Group check” rule. This blocking occurs because upgrade runs in single-user mode, while an availability database must be a multi-user database. Therefore, during upgrade or patching, all availability databases including SSISDB are taken offline and are not upgraded or patched. To let upgrade continue, you have to to first remove SSISDB from the availability group, then upgrade or patch each node, then add SSISDB back to the availability group.

If you are blocked by the “SSISDB in Always On Availability Group check” rule, you have to follow these steps to upgrade SQL Server.

  1. Remove the SSISDB database from the availability group. For more info, see Remove a Secondary Database from an Availability Group (SQL Server) and Remove a Primary Database from an Availability Group (SQL Server).

  2. Click Re-run in the upgrade wizard. The “SSISDB in Always On Availability Group check” rule will pass.

  3. Click the Next to continue the upgrade.

  4. After you have upgraded all the nodes, add the SSISDB database back to the Always On availability group. For more info, see Add a Database to an Availability Group (SQL Server).

    If you're not blocked when you upgrade SQL Server, and SSISDB is in an Always On availability group, you have to upgrade SSISDB separately after you upgrade the SQL Server database engine. Use the SSIS Upgrade Wizard to upgrade the SSISDB as described in the following procedure.

  5. Move the SSISDB database out of the availability group, or delete the availability group if SSISDB is the only database in the availability group. You have to launch SQL Server Management Studio on the primary node of the availability group to perform this task.

  6. Remove the SSISDB database from all replica nodes.

  7. Upgrade the SSISDB database on the primary node. InObject Explorer in SQL Server Management Studio, expand Integration Services Catalogs, right-click SSISDB, and then select Database Upgrade. Follow the instructions in the SSISDB Upgrade Wizard to upgrade the database. You have to launch the SSIDB Upgrade Wizard locally on the primary node.

  8. Follow the instructions in Step 2: Add SSISDB to an Always On Availability Group to add the SSISDB back to an availability group.

  9. Follow the instructions in Step 3: Enable SSIS support for Always On.