Open Database Connectivity (ODBC)

To create a connection to your school's Blackbaud database, you must make a Open Database Connectivity (ODBC) Data Source Name (DSN) connection from within your school. To do this, you'll first use a Virtual Private Network (VPN) to connect to Blackbaud's school network.

  • Follow the instructions to use the VPN.

  • The ODBC DSN must use Microsoft SQL Server 2008 ODBC driver or a more recent version. We recommend you use the latest version (Microsoft ODBC Driver 11 for SQL).

  • Your contact at Blackbaud will provide a database login and password.

  • Follow the instructions to create the ODBC DSN.

Ready only data views - dictionary and diagram

This connection provides read-only data views. The views you access are the same as the objects used in advanced list manager.

  1. To view the data dictionary and data diagram, log in to your school's solution for Blackbaud Education Management and go to advanced lists.

  2. Select to create an advanced list.

  3. You'll find links to view the the data dictionary and data diagram near the options to Cancel or Save.

Enroll in FortiToken VPN

  1. Open the email from Blackbaud Education Management K-12 Hosting operations which includes the VPN username you'll register.

  2. Select the link from the email to register your VPN user.

  3. Enter the required information.

    • Username

    • Password

    • Confirm password

    • First name

    • Last name

    • Email address

    • Confirm email address

  4. Select Submit.

  5. A prompt will ask you to verify your email address. Open your email, copy the verification code, and paste the code into the verification prompt.

  6. Select Submit. A message will appear with a confirmation message indicating your registration was successful.

    Enter verification code and select Submit

  7. After registering, you'll receive an email which asks for a verification code to ensure the email address is valid.

  8. Validate the email address.

  9. After the email address is validated, Blackbaud's Education Management Operations team will review your submission and approve your enrollment.

  10. After Blackbaud approves your enrollment, you'll receive an confirmation notification by email.

  11. After you have confirmation from Blackbaud, you can continue the connection process.

    Don't proceed without this confirmation.

Data security for PCI

Multi Factor Authentication (MFA) increases security by requiring you to login with "something you know" (a password) with "something you have" (a token). This is required for compliance with data security standards for the Payment Card Industry (PCI).

This VPN implements the follow additional requirements for PCI.

  • Passwords expire every 90 days. Watch your email for messages notices from hostingmfa@bbk12.com. If you don't reset your password promptly when emailed, you must create a ticket with customer support for help getting your access restored.

  • Sessions will timeout when idle, possible as quickly as 30 minutes.

  • You must have a smart phone with the FortiToken Mobile app installed. You'll use this for your MFA token.

Enroll in FortiToken Mobile

  1. Log into FortiAuthenticator at http://kpe1-fgt-auth.bbk12.com

  2. Select Register Token (left side).

  3. Select FortiToken Mobile.

  4. For the delivery method, select your email address (not SMS).

  5. Select OK

  6. Open your email. Ensure you receive a message confirming your enrollment.

  7. After you have confirmation, you can continue the connection process. Don't proceed without this confirmation.

Install FortiToken Mobile on your mobile device

  1. Using your smart phone, navigate to the app store on your mobile device.

    FortiToken Mobile

  2. Search for and install FortiToken.

  3. After the app is installed, open it.

  4. Select +Add (top right).

  5. If prompted, select Allow access to your camera.

  6. Active the app.

    • We recommend scanning the bar code from the email attachment.

    • Alternatively, you can manually enter the code.

  7. Your FortiToken is activated.

    The token code may be hidden by default. Tap the "eye" icon to show the code.

    Select eye icon to show code

Install FortiClient VPN on your computer

  1. Using your computer's internet browser, go to http://forticlient.com/

  2. You'll be automatically redirected to http://fortinet.com/endpoint-security/forticlient

  3. Select Product Download.

  4. Choose the current version of FortiClient - VPN ONLY.

    FortiClient 7.4 VPN only

  5. Choose your operating system from the list of available. Download the installer file to your local device.

  6. Open the downloaded installer file. This prompts the FortiClient download. Continue to Install FortiClient.

    Download FortiClient VPN with option to install

  7. For each of the remaining prompts, accept the default settings and select Continue.

  8. When the installation is complete, open FortiClient. A prompt will ask you to agree to their terms of use. Accept the agreement.

XML Settings

Configure FortiClient with IPSecVPN

Warning: If SSL-VPN connection already exists, don't edit the existing connection. You must make a new connection.

Tip: Download the .XML settings and import via CommandLine or Terminal. Edit the file to update the Preshared key, Username, and Phase 1 Local ID.

  1. Add a new connection.

    • For Windows, select the gear icon (top right)

    • For Mac OS, select the "hamburger" icon (three lines) beside the connection name.

  2. For VPM choose IPSEC VPN.

    Create new VPN connection as IPsec VPN

  3. Enter a unique connection name.

  4. Enter an optional description.

  5. For Remote Gateway, enter remote.bbk12.com.

  6. For Authentication Method, select Pre-Shared Key.

  7. Enter the Domain Name System (DNS) value for your database For example odbc#.bbk12.com

  8. For Authentication (XAuth), you can choose to save the login. Otherwise, retain the default.

  9. You should have the username and password from previous setup steps.

  10. Don't choose Single Sign On (SSO).

  11. For Advanced settings, select + Advanced Settings.

    VPN Settings with option for Advanced Settings

  12. Choose these VPN Settings.

    • For IKE, select Version 1.

    • For Mode, select Aggressive.

    • For Address Assignment, select Mode config.

    VPN Advanced settings

  13. Choose these settings for Phase 1.

    • For IKE Proposal, choose Encryption AES256 Authentication SHA1 and Encryption AES256 Authentication SHA256.

    • For DH Group, select 14. Don't select additional options.

    • For Key Life, use the default value of 86400.

    • For Local ID, enter the Domain Name System (DNS) value based on your database. For example odbc#.bbk12.com

    • Enable the Dead Peer Detection.

    • Enable Network Address Translation (NAT) Traversal.

    Phase 1 settings for VPN

  14. Choose these settings for Phase 2.

    • For IKE Proposal, choose Encryption AES256 Authentication SHA1 and Encryption AES256 Authentication SHA256.

    • For Key Life, choose 43200 seconds.

      Don't select 5120 KBytes.

    • For DH Group, select 14.

    Phase 2 settings for VPN

  15. Save the settings.

Connect to FortiVPN

  1. Use your computer to open the FortiClient application.

  2. Verify your VPN usernamen is correct.

  3. Select Connect.

  4. A prompt for MFA will appear. Enter the code from your mobile device's FortiToken Mobile app.

  5. Select OK.

  6. You should now be connected to VPN.

    If you aren't connected, review the configuration steps. If the issue continues, contact Blackbaud customer support.

  7. When the FortiVPN is connected, continue to SDK/ODBC configuration.

Creating the ODBC DSN

  1. Go to https://www.microsoft.com/en-us/download/details.aspx?id=36434 and download Microsoft ODBC Driver 11 for SQL Server Setup.

  2. The following screenshots detail the creation of the ODBC DSN required to access to the Blackbaud school database. These steps are specific to Windows XP, and may vary in other Windows environments.

    1. Select User DSN.

    2. Add a User Data Source.

      • Name - ODBC test

      • Platform - 32/64-bit

      • Driver - ODBC Driver 11 for SQL Server

    ODBC Data Source Administrator settings

  3. Select Finish.

    Create new data source with Finish option

Crystal Reports

If you plan to use Crystal Reports and run them in the app, configure the following.

  1. From Control Panel, go to Administrative Tools, and open the OCBC Data Source Administrator.

  2. Select System DSN.

  3. Select Add.

  4. Select ODBC Driver 11 for SQL Server, based on your needs.

  5. For Name, enter "Blackbaud K-12 - Access".

  6. Enter a description to help you identify this DSN.

  7. Enter the Server, based on the information previously provided by Blackbaud.

    Microsoft SQL Server DSN Configuration with options to set up data source

  8. Select Next.

  9. Select With SQL Server authentication....

  10. Login using the database Login ID and Password provided by hosting.

    Microsoft SQL Server DSN Configuration with login

  11. Select Client Configuration.

  12. Review the settings and ensure TCP/IP is enabled for Network libraries.Then select Next.

  13. Ensure Multi-subnet failover is enabled. Then select Next.

    Microsoft SQL Server DSN Configuration with multi-subnet fallover selected

  14. Use the default selections (Perform translation for character data should be the only option enabled) and select Finish.

    ODBC Microsoft SQL Setup with option to test data source

  15. Select Test data source.

    ODBC Microsoft SQL Setup with option to test data source

  16. When finished, select OK.

Server Information

Use the DNS name from your Blackbaud support contact.

School Location Domain Name System (DNS) default DB
DB1 Schools odbc1.bbk12.com\cl1 ds172_school
DB2 Schools odbc2.bbk12.com\cl2 ds172_school
DB3 Schools odbc3.bbk12.com\cl3 ds172_school
DB4 Schools odbc4.bbk12.com\cl1 k12_db4
DB5 Schools odbc5.bbk12.com\cl2 k12_db5
DB6 Schools odbc6.bbk12.com\cl3 k12_db6
DB7 Schools odbc7.bbk12.com\cl1 hed_db7