HVA SQL Server to Binary Log Reader Migration FAQs
Overview and timeline
What is Binary Log Reader?
Binary Log Reader (BLR) is a proprietary Fivetran-developed incremental sync method that reads changes directly from SQL Server transaction logs. For more information, see our Binary Log Reader documentation.
Why do I need to migrate from HVA to Binary Log Reader?
We are ending support for the HVA SQL Server connector. It will be replaced by our SQL Server connector, which uses the Binary Log Reader incremental sync method.
Binary Log Reader provides a simpler user experience. Compared to the HVA SQL Server connector, Binary Log Reader has a smaller footprint on your source, is simpler to install and configure, and supports all the features available with HVA SQL Server. It also performs most transaction log processing in the Fivetran environment, reducing the processing load on your source host.
How does Binary Log Reader differ from HVA SQL Server?
Binary Log Reader uses SQL Server Common Language Runtime (CLR) integration to run the Fivetran Binary Log Reader DLL on the SQL Server host. The DLL reads the SQL Server transaction logs and sends the relevant log records to Fivetran for processing.
Unlike the High-Volume Agent (HVA), which runs continuously, the Binary Log Reader DLL uses source resources only while a connection is syncing. A single Binary Log Reader installation on a SQL Server host can also support multiple SQL Server connections across multiple databases.
What are the migration timeline and key dates?
- September 1, 2026: Migration for HVA SQL Server connections becomes available in your Fivetran dashboard.
- December 1, 2026: End of Availability (EoA). You can no longer create new HVA SQL Server connections or resume paused connections. However, existing HVA SQL Server connections will continue to run. Fivetran Support will continue to address breaking issues and critical security vulnerabilities, but will no longer deliver feature enhancements for HVA SQL Server.
- March 1, 2027: End of Life (EoL). Any HVA SQL Server connections that have not been migrated will stop syncing at the end of this day.
To avoid disruption to your syncs, migrate your SQL Server HVA connections before March 1, 2027. We recommend that you migrate your HVA SQL Server connections as soon as migration becomes available to take advantage of the improved performance, reliability, and lower maintenance overhead offered by the Binary Log Reader incremental sync method.
Migration process
What happens during the migration?
Fivetran evaluates your HVA SQL Server connection configuration and replication state to determine whether the connection is eligible for migration. If a readiness test fails, Fivetran displays the issue and the steps required to resolve it.
When all readiness tests pass, the connection is migrated in place. The migration preserves the connection name, supported configuration, and transaction log position, and does not require a historical re-sync.
After migration, the connection uses Binary Log Reader as its incremental sync method and continues syncing to the same destination schema at the same sync frequency.
How does the migration process work from start to finish?
The migration to Binary Log Reader involves the following steps:
Check the migration guide
- Open the Status tab on the connection details page
- Click the View migration guide button in the blue banner
Complete prerequisites
- Download the Binary Log Reader DLL
- Download the PowerShell script
- Run the PowerShell script
- Complete the Windows Authentication setup (if applicable).
Validate eligibility
- Click the "Test setup" button
- If any tests fail, follow the instructions to fix them.
Migrate the connector
- Click the Migrate button
For detailed step-by-step instructions, see our quickstart guide for HVA SQL Server migration.
Do I need to recreate my connection?
No. The migration updates your existing connection to use Binary Log Reader.
Will there be downtime or interruption during migration?
Besides pausing your connection for a few seconds, migration does not require downtime. The connection is paused when you click the Migrate button and resumes once the migration is completed successfully.
How long does migration take?
The actual migration takes a few seconds, but the setup tests that determine whether a connector is eligible may take 1 to 3 minutes.
Can I test Binary Log Reader before migrating?
Yes. You can create a new Binary Log Reader connection, validate it, and then proceed with migrating your existing connection. For more information on creating a new connection with Binary Log Reader, see our setup guide.
Will my existing configuration change?
No. Existing sync configuration (such as history mode or soft deletes) remains unchanged after migration.
Will my Monthly Active Rows (MAR) usage change?
No. Migration only changes the incremental sync method and does not impact the Monthly Active Rows (MAR) usage.
Eligibility and outcomes
How do I check whether my connection is eligible for migration?
Open the Status tab on the connection details page.
If the connection is not eligible, a warning message lists the pre-migration requirements and any failed eligibility tests, along with exact remediation steps. After your connection meets the prerequisites and you run a sync, the warning automatically disappears.
Will my connection get a full re-sync when it migrates?
No. Your connection's log position, along with all other relevant state, is recorded and copied over during the migration.
Are there SQL Server version requirements?
Yes. Migration requires a supported SQL Server version (2016-2025).
What database permissions are required?
To set up the Binary Log Reader, you must have a SQL Server account with sysadmin privileges.
To read from online transaction logs using the Binary Log Reader method, you require the following permissions:
| # | Permission / Object | Principal | Scope | Grant Type | Condition |
|---|---|---|---|---|---|
| 1 | clr enabled = 1 | (server config, not a principal) | Server (master) | sp_configure + RECONFIGURE | Always (unless -BackupLogMode) |
| 2 | UNSAFE ASSEMBLY | FivetranUser (CLR login) | Server | GRANT | Always (unless -BackupLogMode) |
| 3 | Trusted assembly hash registration | (server-wide trust list) | Server | sys.sp_add_trusted_assembly | SQL Server ≥ 2017 (major version ≥ 14), not -BackupLogMode |
| 4 | VIEW SERVER STATE | [MinimalPermissionsUser] | Server | GRANT | SQL Server major version < 16 |
| 4b | VIEW SERVER PERFORMANCE STATE | [MinimalPermissionsUser] | Server | GRANT | SQL Server major version ≥ 16 (2022+) |
| 5 | ADMINISTER BULK OPERATIONS | [MinimalPermissionsUser] | Server | GRANT | Always |
| 6 | db_datareader membership | [MinimalPermissionsUser] | Database (source DB) | ALTER ROLE ... ADD MEMBER | Only if -UseDBDatareaderRole |
| 6b | fivetran_datareader membership (custom role, created if missing) | [MinimalPermissionsUser] | Database (source DB) | CREATE ROLE + ALTER ROLE ... ADD MEMBER | Only if not -UseDBDatareaderRole |
| 7 | SELECT on SCHEMA::sys | fivetran_datareader role | Database (source DB) | GRANT | Only if not -UseDBDatareaderRole |
| 8 | SELECT on SCHEMA::cdc | fivetran_datareader role | Database (source DB) | GRANT | Only if not -UseDBDatareaderRole |
| 9 | VIEW DEFINITION on DATABASE::[dbName] | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable |
| 10 | EXECUTE on sp_fivetran_cdc_enable_db | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable |
| 11 | EXECUTE on sp_fivetran_cdc_drop_job | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable |
| 12 | EXECUTE on sp_fivetran_cdc_stop_job | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable |
| 13 | EXECUTE on sp_fivetran_cdc_enable_table | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable |
| 14 | EXECUTE on sp_fivetran_replflush | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable |
| 15 | EXECUTE on sp_fivetran_repldone | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable |
| 16 | EXECUTE on sp_fivetran_repltrans | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable and not -BackupLogMode |
| 17 | EXECUTE on sp_fivetran_readlog | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable and not -BackupLogMode |
| 18 | EXECUTE on sp_fivetran_logslice | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable and not -BackupLogMode |
| 19 | EXECUTE on sp_fivetran_readlog_filtered | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable and not -BackupLogMode |
| 20 | EXECUTE on sp_fivetran_importtdecertificate | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable and not -BackupLogMode |
| 21 | EXECUTE on sp_fivetran_istdecertificateimported | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable and not -BackupLogMode |
| 22 | EXECUTE on sp_fivetran_importdecrypteddek | [MinimalPermissionsUser] | Database (source DB) | GRANT | Database writable |
| 23 | EXECUTE on sp_fivetran_xp_dirtree | [MinimalPermissionsUser] | msdb | GRANT | Always |
| 24 | EXECUTE on sp_fivetran_xp_fileexist | [MinimalPermissionsUser] | msdb | GRANT | Always |
| 25 | EXECUTE on sp_fivetran_restore_info | [MinimalPermissionsUser] | msdb | GRANT | Always |
| 26 | EXECUTE on sp_fivetran_dbcc_dbtable | [MinimalPermissionsUser] | msdb | GRANT | Not -BackupLogMode |
| 27 | EXECUTE on sp_fivetran_dbcc_loginfo | [MinimalPermissionsUser] | msdb | GRANT | Not -BackupLogMode |
To easily grant all necessary permissions for your chosen configuration, run the installation script, or follow the instructions.
Preparation and prerequisites
What common prerequisites must I complete before the migration?
Your connection's Status tab lists the prerequisites and remediation steps specific to your environment. For step-by-step instructions, see our quickstart guide for HVA migration.
Security and installation
What does the Binary Log Reader installation script do?
The Binary Log Reader installation script configures your SQL Server environment with the objects and permissions required to use Binary Log Reader.
For online transaction logs, the script enables SQL Server Common Language Runtime (CLR) integration, configures the Binary Log Reader DLL, creates the required stored procedures, and grants the Fivetran database user the permissions required to run Binary Log Reader.
For backup transaction logs, the script can be run in Backup Log mode, which does not require CLR integration or installation of the Binary Log Reader DLL.
The script requires a SQL Server account with sysadmin privileges during setup. The Fivetran database user used for ongoing syncs can use the minimal permissions required for replication.
What stored procedures does Binary Log Reader install?
Binary Log Reader installs only a small number of Fivetran stored procedures. These include the procedure used to read the SQL Server transaction log, a procedure used for diagnostic purposes, and, when applicable, procedures used for TDE certificate handling.
The exact procedures installed depend on your Binary Log Reader configuration.
Does the Binary Log Reader DLL modify data on my SQL Server host?
No. The Binary Log Reader DLL uses read-only operations to capture binary data from the SQL Server transaction log.
How does Fivetran verify and establish trust for the Binary Log Reader DLL?
Fivetran signs the Binary Log Reader DLL to verify its authenticity. During installation, the script verifies the DLL and configures SQL Server to trust the assembly. For SQL Server 2017 and later, the script also registers the assembly as a trusted assembly using its SHA2-512 hash.
The Binary Log Reader DLL has dependencies on Microsoft .NET Framework, SQL Server, and Windows APIs.
Can I use Binary Log Reader without enabling CLR integration?
Yes. Binary Log Reader requires CLR integration when reading directly from online transaction logs.
If you configure Binary Log Reader to read from backup transaction logs, CLR integration and the Binary Log Reader DLL are not required.
What transaction log data does Binary Log Reader send to Fivetran?
Binary Log Reader does not send every transaction log record to Fivetran. The DLL filters out operations that are not relevant to replication before sending log records to Fivetran.
However, this filtering is not based on the tables selected in your Fivetran connection. Relevant log records for both selected and unselected tables may be sent to Fivetran. After Fivetran parses the table information, records for tables that are not included in your connection configuration are discarded.
Why does Binary Log Reader require `UNSAFE ASSEMBLY` permission?
Binary Log Reader reads SQL Server transaction log files using a DLL that runs within SQL Server through CLR integration.
SQL Server restricts direct access to transaction log files. The Binary Log Reader DLL uses the Windows ReadFile API to read these files. SQL Server considers file access from a CLR assembly to be an unsafe operation, which is why the CLR assembly requires UNSAFE permission.
Does the Fivetran database user have `UNSAFE ASSEMBLY` permission?
No. The Fivetran database user used for ongoing syncs does not receive the UNSAFE ASSEMBLY permission.
The installation script grants UNSAFE ASSEMBLY to the login associated with the Binary Log Reader CLR assembly. The Fivetran database user receives the server-, database-, and stored-procedure permissions required to perform replication.
Behavior and data types
Does Binary Log Reader support all data types supported by HVA SQL Server?
Yes. Binary Log Reader supports all data types supported by HVA SQL Server. It also supports the HIERARCHYID data type, which HVA SQL Server does not support.
How does Binary Log Reader handle DDL operations?
DDL operations are parsed from the logs and, when possible, incorporated into the connection's schema model. Binary Log Reader can automatically detect and process tables and columns that are added or dropped.
After migration
What should I verify after migration?
Ensure all tables are syncing as expected and monitor your connection for errors or warnings over the next 24 to 48 hours.
Will any tables be re-synced?
Migration will not resync any tables. If tables begin to erroneously resync, contact our support team.
Troubleshooting
What should I do if I see a data integrity issue after migration?
If you see a data integrity issue after migration, re-sync the affected tables. If the issue persists after re-sync, contact our support team.
What if my connection is not eligible for migration?
If your connection is not eligible for migration, review the warning in the migration section of the Status tab to identify the issue. The warning lists missing prerequisites, permissions, or unsupported configuration, along with steps to resolve them. After resolving the issue, run a sync to re-check eligibility.
Who do I contact if the eligibility checks still fail after I have followed all necessary instructions?
Contact our support team with a screenshot of the connection status and the eligibility failure messages. The eligibility warning contains instructions, context, and the SQL/steps to run. If applicable, include any DBA output that shows the nature of your problem in more detail. Fivetran can validate or help with staging tests.
Exceptions
What if I cannot migrate before the deadline?
Exceptions are possible, but they are evaluated on a case-by-case basis. Contact our support team to submit an exception request with justification and environment details. Fivetran reviews exception requests and approves them only with valid justification.
What about databases managed by third parties or vendors?
If your database is managed by a third party, coordinate with the vendor to enable the migration prerequisites (PDB service name, wallet access, required grants, ASM staging, etc.). If the vendor blocks migration, contact our support team and include vendor’s contact or justification; Fivetran evaluates exceptions on a case-by-case basis.
How do you handle security concerns about DLL installation, directory permissions, and Binary Log Reader access?
Security concerns when installing new software on a database host are common. Fivetran provides guidance and secure configuration options for environments with strict security requirements. If security policies prevent a required privilege, contact our support team including the specific security requirement so we can propose a locked-down permission pattern or evaluate an exception.
What happens if I migrate and I find that the new service is not acceptable?
Contact our support team and we will be happy to help. In rare cases, we may roll the connector back to the HVA service while we work on improving the Binary Log Reader to accommodate your situation.