SWP-0014 Moving an Organization Between AFHCAN tconsult Servers. Revision: 1. Effective Date: 8/19/2010

Transcription

1 Software Procedure SWP-0014 Moving an Organization Between AFHCAN tconsult Servers Revision: 1 Effective Date: 8/19/2010 Alaska Native Tribal Health Consortium Division of Health Information & Technology 4000 Ambassador Drive Anchorage, AK Tel: (907) Fax: (907) Copyright 2010 Alaska Native Tribal Health Consortium. All rights reserved. Page 1 of 31

2 Contents Purpose... 3 Audience... 3 Scope... 3 Additional Resources... 3 Capturing the tconsult Database, Support Files and Certificates... 3 Moving and Restoring a tconsult Organization onto a Single Org Server Moving and Restoring a tconsult Organization onto a Server that Hosts Multiple Organizations Page 2 of 31

3 Purpose The purpose of this document is to step the reader through the necessary steps to successfully move an existing tconsult database and support files from one host server to another. Audience This document is written for IT technicians and system administrators who are responsible for building, configuring, or maintaining an AFHCAN tconsult Server. It is assumed readers are familiar with intermediate-level computer terms and concepts. Scope There may be an occasion when a host server will be replaced with a newer model, or a host server suffers a hardware failure. Procedures for moving an existing tconsult database and supporting files to a new server, and reconfiguring the tconsult Server Software and Organization are detailed in this document. Additional Resources SWP-0007 AFHCAN tconsult Server Software v5.x Installation Procedures SWP-0017 Obtaining New Certificate Public Key Capturing the tconsult Database, Support Files and Certificates Disclaimer: This document does not give the reader step by step instructions on how to do a backup, but relies on an organizations backup strategy to be able to restore the AFHCAN Advanced tconsult Server in the event of an untimely failure. The SQL Databases, specifically the AFHCAN Telehealth Case database, (tconsult, CaseDB), should be backed up using the SQL Backup function or 3rd party solution, such as Veritas with SQL Agent. For the purposes of this document, a backup of the SQL Database should be completed using the SQL Backup function and placed in the MSSQL\Backup folder on the D:\drive. The folders critical to a successful restoral are: D:\AFHCAN\Blobs* D:\MSSQL\Backup E:\InetPub\AFHCANRoot\AFHCAN** *On older AFHCAN Telehealth Servers, this may be the D:\ATS\Blobs folder **On older AFHCAN Telehealth Servers, this may be the E:\InetPub\WWWRoot\AFHCAN In addition to the above files and folders, the AFHCAN Telehealth Signing, and AFHCAN Telehealth CA certificates need to be exported and saved to the root of the D:\drive. Page 3 of 31

4 1. Click on Start, select Run and enter mmc and then click on OK. Select File from the Menu Bar and choose Add/Remove Snap-In. Click on Add and select Certificates, clicking on Add again. Figure 1 - Adding Standalone Snap-in to the MMC 2. When asked what this snap-in will always use to manage certificates, select Computer account. Click on Next. Figure 2 - Managing Certificates for Computer Account 3. Select the Local Computer that this snap-in will manage, and then click on Finish. Page 4 of 31

5 Figure 3 - Snap-in Manages Local Computer 4. Expand the Console Root to Certificates Personal Certificates. Do a right-mouse on the AFHCAN Telehealth Signing certification, select All Tasks and choose Export to invoke the Certificate Export Wizard. Click on Next. Figure 4 Certificate Export Wizard 5. Always export the private key by selecting the radio button Yes. Page 5 of 31

6 Figure 5 Export the Private Key 6. Leave the default export file format of Personal Information Exchange (.pfx) while enabling strong protection. Figure 6 Personal Information Exchange with Strong Protection 7. Leave the Password field blank. Page 6 of 31

7 Figure 7 Password Dialog Box 8. Enter an appropriate file name such as the name of the organization and save to the root of the D:\drive. Figure 8 Naming the Exported Certificate 9. Click on Finish after reviewing the settings. Page 7 of 31

8 10. Click on OK. Figure 9 Reviewing the Settings Figure 10 Successful Personal Certificate Export 11. Expand Trusted Root Certificates in the left pane, click on Certificates, and locate the AFHCAN Telehealth CA certificate in the right pane. Do a right-mouse and select All Tasks Export. Figure 11 Starting the Export of the Root Certificate 12. At the start of the Certificate Export Wizard, click on Next. Page 8 of 31

9 Figure 12 Certificate Export Wizard 13. Select the Base-64 encoded X.509 (.CER) file format for export. Figure 13 File Format of Base-64 Encoded X.509 (.CER) 14. Enter an appropriate file name such as the name of the organization and save to the root of the D:\drive. Page 9 of 31

10 Figure 14 Saving the AFHCAN Telehealth CA Certificate to the D:\drive 15. Review the settings of the Certificate Export Wizard and click on Finish. Figure 15 Reviewing the AFHCAN Telehealth CA Certificate Export Settings 16. Click OK on the Successful completion. Figure 16 Successful Export Dialog Box Page 10 of 31

11 17. Using Windows 2003 Server Backup utility, backup D:\Certificates (.pfx) and (.cer), D:\AFHACN\Blobs, D:\MSSQL\Backup and E:\InetPub\AFHCANRoot\AFHCAN. 18. Place the created backup onto an encrypted drive for transport to the new host server. 19. Copy the backup to the root of the D:\drive on the new server. Moving and Restoring a tconsult Organization onto a Single Org Server The detailed steps in this section outline the restoration of a tconsult organization and supporting files onto a new server that hosts a single organization. 1. Install the tconsult Server software, creating a new organization. Please refer to SWP-0007 AFHCAN tconsult Server Software v5.x Installation Procedures for detailed instructions. 2. Make a note of the tconsult user account that is created. 3. Using the Windows 2003 Server Backup utility, restore to their original locations the backed up database and supporting files from the old server. 4. Stop the tconsult Server Service in Administrative Tools Services mmc 5. Click on Start, select Run and enter mmc and then click on OK. Select File from the Menu Bar and choose Add/Remove Snap-In. Click on Add and select Certificates, clicking on Add again. Figure 17 - Adding Standalone Snap-in to the MMC 6. When asked what this snap-in will always use to manage certificates, select Computer account. Click on Next. Page 11 of 31

12 Figure 18 - Managing Certificates for Computer Account 7. Select the Local Computer that this snap-in will manage, and then click on Finish. Figure 19 - Snap-in Manages Local Computer 8. Expand the Console Root to Certificates Personal Certificates. Highlight the existing AFHCAN Telehealth Signing certificate in the right pane and choose Delete. Click Yes on the warning dialog box to confirm deletion. Page 12 of 31

13 Figure 20 Confirming Deletion of Existing Certificate 9. Do a right mouse on Certificates under Personal and select Import. The Certificate Import Wizard will start. Click on Next. Figure 21 Certificate Import Wizard. 10. Change the file type to Personal Information Exchange (*.pfx,*.p12) and locate the certificate that was exported from the old server and restored to the original location in the root of the D:\drive. Highlight the certificate and click on Open. Page 13 of 31

14 Figure 22 Locating the Personal Information Exchange Certificate 11. Click on Next to continue the Certificate Import Wizard. Figure 23 Continuing the Certificate Import Wizard 12. Ensure a checkmark is placed in front of Mark Private Key as Exportable before clicking on Next. Page 14 of 31

15 Figure 24 Marking this Key as Exportable 13. Place all Certificates in the Personal Certificate Store and click on Next. Figure 25 Placing Certificates in the Personal Certificate Store 14. Click Finish at the final review screen. Page 15 of 31

16 15. Click on OK. Figure 26 Reviewing the Settings Figure 27 Import Successful Dialog Box 16. Expand Trusted Root Certificates in the left pane, click on Certificates, and locate the AFHCAN Telehealth CA certificate in the right pane. Do a right-mouse and select Delete. Confirm deletion by clicking on Yes. Figure 28 Confirming Deletion of AFHCAN Telehealth CA Root Certificate Page 16 of 31

17 17. Again clicking on Certificates under Trusted Root Certificates, do a right-mouse and select All Tasks Import. Figure 29 Importing the AFHCAN Telehealth CA Root Certificate 18. The Certificate Import Wizard will startup. Click on Next. Figure 30 Certificate Import Wizard 19. Browse to the root of the D:\drive where the root certificate was restored then click on Next.. Page 17 of 31

18 Figure 31 Locating the AFHCAN Telehealth CA Root Certificate 20. Accept the default location for placement of the certificate and click on Next. Figure 32 Placement of AFHCAN Telehealth CA Root Certificate 21. Review the settings and click on Finish. Page 18 of 31

19 Figure 33 Finishing the AFHCAN Telehealth CA Root Certificate Import 22. Click on OK at the successful import of the AFHCAN CA Root Certificate. Figure 34 Import Successful Dialog Box 23. Open Enterprise Manager (if SQL 2000) or SQL Server Management Studio if SQL Expand Databases. Do a right-mouse click on Databases and select All Tasks Restore Database. Restore as tconsult database from the device of D:\MSSQL\Backup leaving the backup set database-complete. Then click on Options tab. Page 19 of 31

20 Figure 35 Restoring a SQL Database 24. Force a restore over the existing database, and ensure that physical file name is that of the database being overwritten. Click on OK. Figure 36 Restore Database Options 25. Click on OK at the Successful Restore Database dialog box. Page 20 of 31

21 Figure 37 Successful Restore of Database Dialog Box 26. Expand the tconsult database highlight Users and delete the existing tconsult user in the right pane. Click on Yes to verify the deletion. This user is from the old server and no longer applicable to this new server. Figure 38 Removing Old Server User Account 27. Do a right-mouse click on Users and select New User. Select the tconsult account created and noted in Step 2 of this section. Permit this user the role of public and db_owner prior to clicking on OK. Page 21 of 31

22 Figure 39 - Adding a New User and Selecting Roles for a Database 28. Click on Tables and locate the Server table in the right pane. Do a right-mouse click and select Open Table Returning all rows. Figure 40 Returning All Rows upon Opening a Table 29. Locate the name of the organization in the Description column (type will be Home). Highlight the ServerGUID in the first column and copy to the clipboard. Page 22 of 31

23 Figure 41 Copying the ServerGUID to Computer Clipboard 30. Click on Start Run and enter regedit (without the quotes). Editing needs to be done with extreme care to avoid critical failures. Using regedit is at the readers own risk. AFHCAN assumes no responsibility for failure to follow the below steps. 31. Expand the registry to locate HKLM Software AFHCAN. Expand Organizations. Do a right-mouse click on the first key under Organizations and select Rename. Paste the ServerGUID obtained in Step 29. Figure 42 Renaming the ServerGUID within the Registry 32. In the right pane, click on the Name value and ensure the Value Data is the correct name of the Organization that was just restored. Page 23 of 31

24 Figure 43 Correcting the Value Data for the Name 33. Within Computer Management, set the tconsult user account to never expire and restart the tconsult Server Service. 34. Open Internet Explorer and enter The AFHCAN Server Information page should display as seen in Figure 44. Figure 44 Displaying the Ping Page for an Organization 35. Close Internet Explorer. Page 24 of 31

25 Moving and Restoring a tconsult Organization onto a Server that Hosts Multiple Organizations The detailed steps in this section outline the restoration of a tconsult organization and supporting files onto a new server that hosts multiple organizations. This procedure assumes the tconsult Server software has already been installed and several organizations have been created. 1. Create a new organization noting the name of the tconsultx user account, name of tconsultx database and location of the data files. 2. Using the Windows 2003 Server Backup utility, restore the database and supporting files to these new locations. 3. Stop the tconsultx Server Service in Administrative Tools Services mmc. 4. Open Enterprise Manager (if SQL 2000) or SQL Server Management Studio if SQL Expand Databases. Click on the newly created database and expand it. Click on Tables. Do a right-mouse on the Server Table in the right pane to return all open rows. Write down the ServerGUID to be located in the registry later in this procedure. Figure 45 Returning All Rows in a Table 5. Do a right-mouse click on Databases and select All Tasks Restore Database. Restore as tconsult database from the device of D:\MSSQL\Backup leaving the backup set database-complete. Then click on Options tab. Page 25 of 31

26 Figure 46 Restoring a SQL Database 6. Force a restore over the existing database, and ensure that physical file name is that of the database being overwritten. Click on OK. Figure 47 Restore Database Options Page 26 of 31

27 7. Click on OK at the Successful Restore Database dialog box. Figure 48 Successful Restore of Database Dialog Box 8. Expand the tconsultx database highlight Users and delete the existing tconsultx user in the right pane. Click on Yes to verify the deletion. This user is from the old server and no longer applicable to this new server. Figure 49 Removing Old Server User Account 9. Do a right-mouse click on Users and select New User. Select the tconsultx account created and noted in Step 1 of this section. Permit this user the role of public and db_owner prior to clicking on OK. Page 27 of 31

28 Figure 50 - Adding a New User and Selecting Roles for a Database 10. Click on Tables and locate the Server table in the right pane. Do a right-mouse click and select Open Table Returning all rows. Figure 51 Returning All Rows upon Opening a Table 11. Locate the name of the organization in the Description column (type will be Home). Highlight the ServerGUID in the first column and copy to the clipboard. Page 28 of 31

29 Figure 52 Copying the ServerGUID to Computer Clipboard 12. Click on Start Run and enter regedit (without the quotes). Editing needs to be done with extreme care to avoid critical failures. Using regedit is at the readers own risk. AFHCAN assumes no responsibility for failure to follow the below steps. 13. Expand the registry to locate HKLM Software AFHCAN. Expand Organizations. Click on the key of the Organization that is the ServerGUID number written down in Step 4 of this section. Once the correct Organization is verified, do a right-mouse click on the key of the Organization restored and select Rename. Paste the ServerGUID obtained in Step 11. Figure 53 Renaming the ServerGUID within the Registry Page 29 of 31

30 14. In the right pane, click on the Name value and ensure the Value Data is the correct name of the Organization that was just restored. Figure 54 Correcting the Value Data for the Name 15. Since multiple organizations are already installed on the server, all are using an AFHCAN Telehealth Signing certificate that was installed when the tconsult Server Software was originally installed. The newly restored database needs to have this public key applied to the database. Please refer to SWP-0017 Obtaining New Certificate Public Key to obtain and apply the public key. 16. Once the public key has been applied to the restored database, set the tconsultx user account to never expire and restart the tconsultx Server Service. 17. Open Internet Explorer and enter The AFHCAN Server Information page should display as seen in Figure 55. Page 30 of 31

31 Figure 55 Displaying the Ping Page for an Organization 18. Close Internet Explorer. End of procedure. Page 31 of 31