Installation Guide. HIRSCH Velocity 3.5 SP1 MAN

Transcription

1 Installation Guide HIRSCH Velocity 3.5 SP1 MAN

2 Velocity Version 3.5 SP1 Installation Guide MAN , July 11, 2013 Velocity 3.5 SP1 Copyright 2013 Identive Group. All rights reserved. ScramblePad and ScrambleProx are registered trademarks of Identive Group. DIGI*TRAC, MATCH, ScrambleCard, SCRAMBLE*NET (abbreviated S*NET), X*NET, and Velocity are all trademarks of Identive Group. Microsoft and MS are registered trademarks, and Windows, Windows Server 2008, Windows Server 2008 R2, Windows XP, and Windows 7 are trademarks of Microsoft Corporation. Identive Group 1900-B Carnegie Avenue Santa Ana, CA Phone: or (toll-free) Fax: Web: ii

3 MAN Getting Help If you encounter a problem that is not discussed in this guide and you need technical support, do the following: 1. Contact your local dealer or the provider of this product. 2. If your dealer is not available, contact Technical Support directly. This can be done in a number of ways: Mail: Identive Group 1900-B Carnegie Avenue Santa Ana, CA Attn: Technical Support Phone: 877-HIRSCHX ( ) toll-free Fax: (949) support@hirsch-identive.com WWW: Whenever you call your local dealer or Identive Group, be sure to have your registration material, serial number, and software version number available. For future reference, record these numbers here. Serial Number: Version Number: Dealer: Dealer Phone #: CCM Rev/Version #: Getting Help iii

4 Velocity Version 3.5 SP1 Installation Guide UL Requirements The following UL issues are addressed here: GENERAL The UL-Listed Velocity System is comprised of the following: Central Supervisory Station, XBox, M1N, M2, M8, M16, DS37LH, DS47L, DS47L-HI, DS47L-SPX, Power Limitation Board, DTLM1, DTLM2, DTLM3, MELM1, MELM2, and MELM3. The M2, M8, and M16 controllers may employ the following expansion boards: MEB/BE, AEB8, REB8, SNIB, and SNIB2. VELOCITY 1. If Alarm Priority levels are assigned by the user, then the following priority must be assigned for UL applications: a. Fire alarm and industrial supervision where a risk of injury to persons, or damage to or destruction of property may be involved. b. Hold-up or panic alarm. c. Burglar alarm. d. Watchman tour. e. Fire-alarm supervision. f. Burglar-alarm supervision. g. Industrial supervision where a risk of injury to persons, or damage to or destruction of property will not be involved. h. Other supervisory services. Items (b) and (c) may have equal priority; items (e) and (f) may have equal priority; and items (g) and (h) may have equal priority. 2. The Alarm Stacking feature is not to be used for UL applications. 3. The Return to Normal feature is not to be used for UL applications. 4. The Video capability of the Velocity 3.5 SP1 software has not been evaluated by UL. CENTRAL SUPERVISORY STATION 1. For the minimum hardware and software requirements of the central supervisory station equipment, see Prerequisites starting on page The data processing equipment and office appliance equipment used as central supervisory station equipment shall be Listed under Office Appliances and Business Equipment (UL 114), or Information Processing and Business Equipment (UL 478), or Information Technology Equipment (UL 60950). iv UL Requirements

5 MAN A redundant server configuration should be employed, where the servers and workstations are networked via a dedicated Ethernet LAN. The network interfaces the protected premise units through an Xbox with a serial-to-ethernet converter or a SNIB2. 4. The Map Builder function must be employed to display the state and condition of all alarm points of the system. 5. A panel logged off event may be a compromise attempt on the system. 6. Supply line transient protection complying with the Standard for Transient Voltage Surge Suppressors (UL 1449), with a maximum marked rating of 330 V shall be used on Central Monitoring Station Equipment. 7. If the XBox is not installed in the Central Monitoring Station, signal line transient protection complying with the Standard for Protectors for Data communications and Fire Alarm Circuits (UL 497B) with a maximum marked rating of 50 V shall be used on communication circuits extending more than 25 feet from the computing systems. 8. The Central Monitoring Station Equipment shall be installed in a temperature-controlled environment. A temperature-controlled environment is defined as one that can be maintained between C (55 95 F) by the HVAC system. Twenty-four hours of standby power shall be provided for the HVAC system. The standby power for the HVAC system may be supplied by an engine-driven generator alone; a standby battery is not required to be used. 9. In addition to the main power supply and secondary power supply that are required to be provided at the central supervisory station, the system shall be provided with an uninterrupted power supply (UPS) with sufficient capacity to operate the computer equipment for a minimum of 15 minutes. If more than 15 minutes is required for secondary power supply to supply the UPS input power, the UPS shall be capable of providing input power for at least that amount of time. 10. The UPS shall comply with the Standard for Uninterruptible Power Supply Equipment (UL 1778) or the Standard for Fire Protective signaling Devices (UL 1481). 11. To perform maintenance and repair service, a means for disconnecting the input to the UPS while maintaining continuity of power to the automation system shall be provided. 12. The alarm system s network settings shall be designed such that the maximum time lapse from the initiation of an initiating device circuit until it is annunciated at the central supervising station shall not exceed 90 seconds. UL Requirements v

6 Velocity Version 3.5 SP1 Installation Guide 13. The alarm system s network settings shall be designed such that the maximum time for the central supervising station to annunciate a single break, single ground, wire-to-wire short, loss of signal, or any combination of these, shall not exceed 200 seconds. 14. The alarm system configuration shall be designed such that the number of signals on a single channel shall be limited to XBOX 1. XBox configuration and installation are addressed in the DIGI*TRAC Design and Installation Guide (MAN001). 2. UL has not verified the XBox hookup for a remote dialup controller or the modem loop configuration. 3. The alarm relay contact is rated 24 VDC, 2 A, resistive. 4. Wiring to the RS-232 circuit is limited to the same room (50 feet). 5. Shielded cable must be used on the RS-232 circuit. M1N 1. Input rating of the M1N is 120 VAC, 50/60 Hz, 500 ma. 2. The Alarm/Control Relay contact rating is 24 VDC, 1 A, resistive. 3. The M1N shall not employ a secondary battery. M2 1. The Alarm/Control Relay contact rating is 24 VDC, 1 A, resistive. 2. UL has verified compatibility of the DS37L, DS37LH, DS47L, DS47L-HI, DS47L-SPX, and DS47L-HI-SPX with the M2. M8 1. The Alarm/Control Relay contact rating is 24 VDC, 1 A, resistive. 2. UL has verified compatibility of the DS37L, DS37LH, DS47L, DS47L-HI, DS47L-SPX, and DS47L-HI-SPX with the M8. M16 1. Input rating of the M16 is 120 VAC, 50/60 Hz, 1 A. 2. The Alarm/Control Relay contact rating is 24 VDC, 1 A, resistive. 3. UL has verified compatibility of the DS47L-SPX with the M16. vi UL Requirements

7 MAN Contents Getting Help...iii UL Requirements... iv Introduction... 1 How to Proceed...2 Installation... 3 Prerequisites...4 Minimum Hardware Requirements...4 Software Requirements...5 Installing the Operating System...8 Installing Windows Server 2008 R2...9 Enabling Network Discovery...16 Installing Windows 7 or Windows XP Professional...16 Turning Off the Windows Firewall...18 SQL Server Installation...19 Limitations of SQL Server 2008 R2 Express...19 Installing SQL Server 2008 R Velocity Installation...23 Preliminary Recommendations...23 Installing IIS to Support the Velocity Web Console...23 Installing Velocity...25 Installing Velocity on Windows Server 2008 R2 with SQL Server 2008 R Installing Velocity on Windows 7 or Windows XP SP Upgrading Velocity...69 Preparing to Upgrade...69 Upgrading Velocity 3.1 to Velocity 3.5 SP Turning On the Windows Firewall...72 vii

8 Velocity Version 3.5 SP1 Installation Guide Configuring the Windows Firewall...72 Assigning a TCP/IP Port Number to the SQL Server Database Engine...74 Starting an Instance of SQL Server (from the SQL Server Configuration Manager)...75 Starting Velocity...76 Licensing Velocity...78 What s Next...80 Custom Active Directory User & Group Names Setup Creating a New Users Group and Assigning Members on the Domain...85 Creating a New Services Account...90 Assigning SQL Logins for the New Users Group...93 Assigning the New Users Group Permissions to Velocity...97 Enabling Velocity Operators to Use the New Users Group Defining SQL Login Rights for Velocity Services Enabling the New Users Group to Use Velocity Services Checking File and Folder Permissions viii

9 MAN Introduction Velocity 3.5 SP1 is the latest version of Identive Group s access control and security management program. The program was designed to use the DIGI*TRAC controller in an integrated environment. Velocity 3.5 SP1 can run on these operating systems: Windows Server 2008 R2 (for Velocity server, Velocity database server, or standalone workstation) Windows 7 (for Velocity standalone workstation, or client) Windows XP Professional (for Velocity client only) If you are using Windows Server 2008 R2 or a standalone system using Windows 7, the Velocity database can use a runtime version of SQL Server 2008 R2 called SQL Server 2008 R2 Express. SQL Server 2008 Express is included on the Velocity 3.5 SP1 DVD and is installed automatically as part of the Velocity install routine. If you already have SQL Server 2008 R2 installed on your server, Velocity detects and uses the full version of SQL Server instead of the Express version for the Velocity database. For more information about Windows and SQL Server compatibilities, refer to Software Requirements on page 5. The purpose of this manual is to make your first experience with Velocity 3.5 SP1 as simple as possible. This manual only covers basic hardware configuration guidelines and initial software installation procedures. Instructions for operating Velocity are contained in the online help file which is available after you ve installed and started Velocity. 1

10 Velocity Version 3.5 SP1 Installation Guide How to Proceed This manual covers these major topics: Hardware and software requirements: Prerequisites starting on page 4. Installing all supported Windows operating systems: Installing the Operating System starting on page 8. Installing SQL Server 2008 R2 for use with Windows Server 2008 R2: Installing SQL Server 2008 R2 starting on page 20. Installing Velocity software: Velocity Installation starting on page 23. Upgrading Velocity: Upgrading Velocity starting on page 69. Starting Velocity: Starting Velocity starting on page 76. For information about configuring and using Velocity, refer to the Velocity online help. The order in which these subjects appears does not imply the order in which you should actually undertake them. Some of these tasks you ll need to do while others you won t. To save time and complications, basic hardware should be installed, connected, and configured before you actually install and configure Velocity. This includes printers, DVRs, enrollment stations, CCTV, and the serial and parallel ports to support them. 2 How to Proceed

11 MAN Installation Velocity 3.5 SP1 is easy to install if you follow these steps to get started: 1. Make sure you have the required hardware and software on your computer(s) as described in Prerequisites on page If not already done, install the operating system Windows Server 2008 R2, Windows 7, or Windows XP Professional and its respective service pack. For more about this, refer to Installing the Operating System on page 8. The type of Windows operating system you install depends on what type of role each computer on your network will take. Use: For this role: A standalone workstation has the functionality of a server and a single client on the same computer. Windows Server 2008 R2 64-bit Standard or Enterprise Edition Windows 7 SP1 32-bit or 64-bit Professional, Ultimate, or Enterprise Edition Windows XP SP3 32-bit or 64-bit Professional Edition Server (allows client connections) Standalone workstation (on a domain or workgroup) Standalone workstation (on a domain or workgroup) Client (connects to a server) Client (connects to a server) 3. Install SQL Server. See Software Requirements on page 5 for supported versions. 4. Install Velocity as explained in Velocity Installation starting on page 23. 3

12 Velocity Version 3.5 SP1 Installation Guide Prerequisites Before installing Velocity, make sure your server, workstation, or client computer meets these requirements. Minimum Hardware Requirements For Velocity servers: Intel Xeon E GHz Turbo Quad Core/4T processor with 8MB cache (or equivalent) 4GB DDR3 SDRAM (1333MHz) 300GB 15K RPM SAS hard drive 16X DVD+/- RW drive Mouse Keyboard 20-inch LCD monitor 1GB video card Sound card/chip and speakers 1 Ethernet RJ-45 port For Velocity workstations or clients: Intel Core i7 Quad Core 3.4GHz processor with8mb cache (or equivalent) 4GB DDR3 SDRAM (1333MHz) 250GB 6.0Gb/s SATA hard drive 16X DVD+/- RW drive Mouse Keyboard 20-inch LCD monitor 1GB video card Sound card/chip and speakers 1 serial port 1 Ethernet RJ-45 port 4 Prerequisites

13 MAN Hint: More RAM, a faster processor, and a faster video card with more video RAM are recommended and will improve performance for most applications; it will also help ensure long-term compatibility with system expansion and upgrades to Velocity, the Windows operating system, and the SQL Server database. These system requirements are our estimation of what will be required for satisfactory performance; however, your particular needs may differ or exceed the requirements noted. Your specific needs are dependent on several factors including number of users on the system, applications running, connected devices, and level of usage. Therefore, please follow this general guideline: ensure you have enough processing power, RAM (including video card RAM), and hard disk space in your system to adequately address ALL your applications and services. Then, going forward, please ensure your system performance keeps up-to-date with any expanding requirements. Software Requirements Velocity version 3.5 installation DVD Microsoft Windows operating system Microsoft SQL Server database Prerequisites 5

14 Velocity Version 3.5 SP1 Installation Guide The following chart identifies the compatibility required between versions of the Windows operating system and the SQL Server database program: Velocity Mode Server (or Data) Standalone Workstation Operating System Windows Server 2008 R2 64-bit Standard or Enterprise Edition Windows 7 SP1 32-bit or 64-bit Professional, Ultimate, or Enterprise Edition Database SQL Server 2008 R2 64-bit Standard, Workgroup, or Enterprise Edition with SP1 SQL Server 2008 R2 64-bit Express (included on disk) SQL Server 2008 R2 Express (included on disk) Client Windows 7 SP1 32-bit or 64-bit Professional, Ultimate, or Enterprise Edition Windows XP SP3 32-bit or 64-bit Professional Edition Not applicable; connects to the Velocity Server for its database Velocity 3.5 SP1 does not support SQL Server 7.0, SQL Server 2000, SQL Server 2005, or MSDE. 6 Prerequisites

15 MAN After you have satisfied these prerequisites, install your selected operating system and Velocity, as required by your facility. Use the following diagram to help you during the installation process. Velocity Server Install Windows Server 2008 R2 Configure Windows Server 2008 R2 Install SQL Server 2008 R2 (optional) page 9 page 13 page 20 Velocity Standalone Workstation Install Windows Configure Windows 7 Install SQL Server Express page 16 page 19 Velocity Client Install Windows 7 or Windows XP Configure Windows 7 or Windows XP page 16 License Velocity Start Velocity Install Velocity Version 3.5 Install Service Pack (if needed) page 78 page 76 page 23 Prerequisites 7

16 Velocity Version 3.5 SP1 Installation Guide Installing the Operating System If you will be installing Velocity on a shared network, please consult your IT manager and dealer before continuing. This section covers the installation and initial configuration of: Windows Server 2008 R2 for a server with multiple clients, Windows 7 for clients and standalone workstations, or Windows XP Professional for clients only. We assume throughout this installation process that you are setting up your Windows operating system on a dedicated security network, because this is the arrangement most customers use. However, some customers need to install Velocity on a shared network. If this is the case, several of the assumptions made in the following sections do not apply. In general, use this flowchart to identify your options: Dedicated Network? Yes No Consult your dealer and your IT Manager Server with multiple clients Which Role for this PC? Standalone Workstation or Client Client only Install Windows Server 2008 R2 Install Windows 7 Install Windows XP Pro page 9 page 16 page 16 Is Velocity server also a domain controller? No Yes Install Windows Server 2008 R2 and configure as a domain controller starting on page 9 Install Windows Server 2008 R2 and configure as a Member server starting on page 9 Assign a static IP address for the Velocity Server (or Workstation) 8 Installing the Operating System

17 MAN Installing Windows Server 2008 R2 The quickest path to installing Windows Server 2008 R2 is to read the Quick Start and Getting Started guides that come with the Windows Server 2008 R2 software, as well as the release notes located in the root directory of the Windows Server 2008 R2 DVD. Follow the prompts that appear on the screen during the installation process. However, Windows Server 2008 R2 is a complex program and installing it correctly often requires knowledge not only of your computer, but also of the network it will control. For this reason, consider preparing yourself for any eventuality by purchasing one of the many books about Windows Server To install Windows Server 2008 R2: 1. Turn on your computer and insert the Windows Server 2008 R2 DVD into your DVD drive. 2. Restart the computer. To restart the computer, press Ctrl + Alt + Del, or turn it off once and then turn it on again. The DVD drive starts. 3. Press any key, booting the computer from the DVD. The computer boots up and setup loads from the DVD. The graphic interface appears. Your computer must be able to boot from the DVD to install the operating system. The computer boots into the new Windows boot screen. Installing the Operating System 9

18 Velocity Version 3.5 SP1 Installation Guide After a few moments, the Windows Server 2008 localization screen appears. 4. Perform the following operations: For this question: Do this: Windows Server localization Install Windows Do you want to enter your product key? Type your product key for activation License Terms Which type of installation do you want? Select a value for the Language and for the other options, then click Next. Click Install Now. Click Yes. Type the product key, then click Next. Check the I accept the license terms box, then click Next. Select Custom (Advanced). 10 Installing the Operating System

19 MAN For this question: Where do you want to install Windows? Installing Windows User s password must be changed. Password Your password has been changed Do this: Click to select the first disk (which is usually Disk 0), then click Next. This could take 20 minutes or more. After this task is finished, the installer automatically reboots the computer and the new desktop appears. Click OK. Enter and confirm a new password, then click OK. Note: Passwords must have at least eight alphanumeric characters. At least one of these must be a number, and the others must be a combination of uppercase and lowercase letters. Click OK. Installing the Operating System 11

20 Velocity Version 3.5 SP1 Installation Guide The first time you log onto the computer, Windows creates your profile and prepares your desktop. After this is complete, your desktop will load and the Initial Configuration Tasks wizard appears: 12 Installing the Operating System

21 MAN Use the Initial Configuration Tasks wizard to provide various information such as time zone, network configuration, and computer name. Be sure to perform these important configuration tasks: To: Do this: Velocity 3.5 servers and workstations require static IP addresses, to communicate with the DIGI*TRAC controllers. Set IP Address Change the computer name 1. Click Configure Networking. 2. Click the icon representing your network card. 3. Click Change Settings of this connection. 4. Click to highlight Internet Protocol Version 4, then click Properties. 5. Click the Use the following IP Address radio button. 6. Type in the appropriate IP address and subnet mask, then click OK. 7. Click Close. 8. Click in the upper right hand corner to close the window and return to the Initial Configuration Tasks wizard. 1. Click Provide Computer Name and Domain. 2. Click the Change button. 3. In the Computer Name text box, enter an appropriate computer name. An example of a computer name is VELOCITYSERVER. (The computer name must be 15 characters or less.) 4. Click OK twice, then click Close. 5. Click Restart Now. The computer reboots, and returns to the Initial Configuration Tasks wizard (after you login). Installing the Operating System 13

22 Velocity Version 3.5 SP1 Installation Guide Velocity 3.5 SP1 cannot recognize this computer as a domain controller without installation of these Active Directory domain services. To: Add Active Directory & DNS Do this: 1. Click Add Roles. 2. Click Next. 3. Click Active Directory Domain Services. 4. Click Add Required Features. 5. Make sure the Active Directory Domain Services box is checked. 6. Click Next twice. 7. Click Install. The wizard installs the necessary Active Directory files. This could take a few minutes. 8. Click Close. 9. Click the Windows PowerShell icon on the task bar:. The PowerShell screen appears. 10. Type dcpromo.exe and press Enter. The Active Directory Domain Services Installation wizard appears. 11. Click Next twice. 12. Click the Create a new domain in a new forest radio button, then click Next. 13. At the FQDN of the forest root domain text box, enter the fully qualified domain name of this server, and then click Next. 14. Accept the default NetBIOS name by clicking Next. 15. At the Forest functional level pick list, select Windows 2008 R2, then click Next. 16. Make sure the DNS server box is checked, then click Next. 14 Installing the Operating System

23 MAN To: Do this: 17. Click Yes. 18. Click Next. 19. In the Password and Confirm Password text boxes, type Hirsch123!, and then click Next twice. The domain services are installed and configured. This could take a few moments. 20. Click Finish, then click Restart Now. The computer reboots. When Windows returns, a screen like this appears: 6. Press CTRL + ALT + DEL to log in. The login screen appears. 7. Enter your password, then click OK. The Windows desktop now appears. If you are allowed to connect your computer to the Internet, we recommend that you install all relevant Windows updates at this time. Simply go to the Microsoft website, download all applicable updates, and then install them as required. Installing the Operating System 15

24 Velocity Version 3.5 SP1 Installation Guide Enabling Network Discovery Before installing Velocity on a client PC, you must enable network discovery on your server. This will enable your Velocity Clients to find and communicate with the Velocity Server. Network Discovery requires the following Windows services to be started (and their Startup Type set to Automatic): DNS Client, Function Discovery Resource Publication, SSDP Discovery, and UPnP Device Host. Appropriate ports must also be open on the Windows firewall to allow network discovery to take place. For more about this, refer to Configuring the Windows Firewall starting on page 72. To enable Network Discovery: 1. In Control Panel, open Network and Internet, click Network and Sharing Center, and then click Change advanced sharing settings. 2. Under the domain Network Discovery options, click Turn on network discovery. 3. Click Save Changes. Installing Windows 7 or Windows XP Professional You can use Windows 7 for running Velocity in either client or standalone workstation mode, or Windows XP Professional for running a Velocity client. If you are installing Windows XP, do not try to substitute the Windows XP Home Edition. The Home Edition doesn t work with Windows domains, and doesn t contain the advanced management and security features required to run Velocity. 16 Installing the Operating System

25 MAN The quickest path to installing either of these Windows operating systems is to read the Quick Start and Getting Started guides that come with the Windows package, as well as the release notes located in the root directory of the Windows DVD. 1. Follow the installation instructions provided by Microsoft. 2. After you have installed the appropriate operating system, you must specify the TCP/IP address for this computer, which includes the subnet mask and default gateway of the LAN on which the Velocity server resides. Select Internet Protocol (TCP/IP) then click the Properties button. Enter any needed values (for IP address, Subnet mask, Default gateway, and DNS servers). Installing the Operating System 17

26 Velocity Version 3.5 SP1 Installation Guide For information about which address and other values to specify, consult your IT supervisor. 3. Each of these Windows versions also requires the installation of a service pack: If you have installed Windows 7, download Service Pack 1 from the Microsoft Download Center and install it on this computer. If you have installed Windows XP Professional, you must download Windows XP Service Pack 3 from the Microsoft Download Center and install it on this computer. 4. After the reboot is completed, return to the Windows desktop. This is a good time to install your video, audio, and device drivers for this workstation or client, and to configure them. These drivers are usually contained on a Drivers and Utilities CD that comes with your system. Turning Off the Windows Firewall After you have installed the version of Windows you require, you must temporarily turn off the Windows Firewall before continuing with a Velocity Client/Server installation. (This is not necessary for a Velocity standalone Workstation installation.) This is necessary because there are times during the course of installing SQL Server or Velocity 3.5 SP1, when the firewall may conflict with various installation steps. To avoid a conflict condition, do this: 1. From Windows desktop, select Start Control Panel. The Control Panel appears. 2. Select Security Center. The Security Center appears. 3. Turn off the Firewall. You can turn the Firewall on after you have finished installing Velocity 3.5 SP1, assuming you have opened the appropriate ports. For more about this, refer to Configuring the Windows Firewall on page Installing the Operating System

27 MAN SQL Server Installation You can use SQL Server 2008 R2 Express which is installed automatically with Velocity 3.5 SP1. Before you take this step, refer to the next section which describes the limitations inherent in SQL Server 2008 R2 Express. If you will be installing the full version of SQL Server 2008, see Installing SQL Server 2008 R2 starting on page 20. Limitations of SQL Server 2008 R2 Express SQL Server 2008 R2 Express has some limitations; however, they are reasonable. The basic limitations are: 1GB of RAM. SQL Server 2008 R2 Express uses a maximum of 1 GB of RAM, even if more RAM is available. 10 GB per database. Each database can be a maximum of 10 GB in size. 1 CPU (including multiple cores). SQL Server 2008 Express only uses one CPU, even on a multi-processor computer. Basic reporting services. SQL Server Installation 19

28 Velocity Version 3.5 SP1 Installation Guide Installing SQL Server 2008 R2 If you require a full version of SQL Server 2008 R2, the installation instructions are provided below. (A run-time version, SQL Server 2008 R2 Express, is provided with the Velocity 3.5 SP1 installation.) To install SQL Server 2008 R2: 1. Insert the SQL Server 2008 R2 Installation DVD into your DVD drive. If your computer is set to auto-start, the installation program should begin automatically. If it doesn t, open Windows Explorer and navigate to the inserted DVD s root directory and select setup.exe. 2. Follow this procedure: From: Program Compatibility SQL Server Installation Center Product Key License Terms Setup Support Files Setup Support Rules Feature Selection Do this: Click Run Program. Click Installation in the left pane. Click the New installation... option in the right pane. Enter your product key and click Next. Check I accept... and click Next. Click OK. The Setup Support files are installed. Click Next. Select: Database Engine Services Client Tools Connectivity Client Tools Backward Compatibility SQL Server Books Online Management Tools Basic Management Tools Complete Click Next. 20 SQL Server Installation

29 MAN From: Instance Configuration Disk Space Requirement Do this: Enter the SQL Server network name. This is the name that will be available on the network for the clients. This varies depending on whether you select the default or a named instance. (By default, the instance name is Hirsch. Both the default instance name and instance ID are set as MSSQLSERVER. To use a non-default instance ID, select the Instance ID box and specify a value.) Click Next continue to with the installation. Make sure you have enough space on your local disks to install SQL Server 2008 R2, then click Next. SQL Server Installation 21

30 Velocity Version 3.5 SP1 Installation Guide If you need help, consult your IT department. From: Server Configuration Installation Configuration Rule Ready to Install Installation Progress Complete Do this: Click Use the Same Account For All Server Services. In the Use the Same Account For All Server Services dialog box, click on the Browse button. The Select User, Computer or Group window appears. In the Enter the object name to select text box, type the name of a Windows user. For example: Administrator. Click the Check Names button. The user name is displayed in the Enter the object name to select box. Click OK to return to the Use the Same Account For All Server Services dialog box. The Domain Name\Administrator is displayed in the Account Name drop-down box. In the Password text box, enter the password. Click OK to continue. Select Automatic as the Startup type to start the SQL Server Browser Service. Click Next to continue. Click Next. Click Install. The installer proceeds to install SQL Server. This could take more than 15 minutes. When it is finished, click Next. Click Finish. You are returned to the Windows Server desktop. 3. Download and install the latest SQL Server 2008 R2 service pack as required. 22 SQL Server Installation

31 MAN Velocity Installation Follow the instructions below to install Velocity 3.5 SP1. If you have Velocity 3.1 installed on your computer and want to upgrade to Velocity 3.5 SP1, refer to Upgrading Velocity starting on page 69. Preliminary Recommendations We recommend that before you install Velocity, you connect all the hardware devices you will need, including: Video capture card Enrollment station Modem CCTV Printers Then load any required printer drivers particularly for your badge and report printers. Set the default orientation for the badges you plan to print. Although it isn t required to do this before you install Velocity, it can save you time later during the configuration process. For more about these topics, refer to the user and installation guides for each of your devices. Installing IIS to Support the Velocity Web Console The Velocity Web Console (VWC) enables you to use Velocity through a remotely connected device on the same domain. The VWC provides much of a Velocity client computer s functionality without the need to install the client software. All the device needs is a web browser and access to the Velocity server or workstation, via either the Internet or a private network. For the Velocity 3.5 SP1 release, the VWC was tested using the Internet Explorer (version ) and the Firefox (version ) browsers. Velocity Installation 23

32 Velocity Version 3.5 SP1 Installation Guide Before you can install and use the VWC, you must first install Microsoft s Internet Information Services (IIS). For detailed instructions, see "Prerequisite: Installing IIS" in the Velocity Web Console Guide. The VWC is an optional feature. If your organization is not comfortable providing remote access to your access control system, do not install IIS or enable the VWC. 24 Velocity Installation

33 MAN Installing Velocity Besides providing the ability to upgrade a Velocity 3.1 installation to 3.5, the Velocity Installer provides installation options for the Server, Data, standalone Workstation, and Client roles. These options enable you to implement access control systems with varying degrees of complexity, to suit a variety of needs: If you have a small facility that only requires one client, you only need a single installation of Velocity on a standalone Workstation. If you have a larger facility that requires multiple clients, you need to first install a Velocity Server, and then install the Velocity Clients. If you wish to use a separate computer for the Velocity database, you need to first install the full version of SQL Server 2008 R2 on that computer, and then choose the Data installation option (on the Install Options screen during the Velocity 3.5 installation process) to install the Velocity database on that computer. Next you can install a Velocity Server, and then install the Velocity Clients. (Make sure that the SQL Browse service is running, so the Velocity Server and Velocity Client installations can locate the separate database server.) To install Velocity: 1. Make sure you are logged onto Windows as an administrator. If you are installing Velocity on Windows Server 2008 R2 as a domain server, you must log on as a qualified domain administrator. If you haven t already done this, perform these steps: a. From the Windows desktop, press Ctrl + Alt + Del. b. At the Log On to Windows dialog box, click the Options button. c. At the Log on to: pick list, select your domain name. d. In the User name field, enter a qualified administrator name. e. In the Password text field, type the appropriate password. f. Click OK. The Windows desktop reappears. 2. Insert the Velocity Installation DVD into your DVD drive. Velocity Installation 25

34 Velocity Version 3.5 SP1 Installation Guide 3. If your DVD is set to autorun, then skip to Step 4. If your DVD drive is not set to perform autorun, perform the following steps: From: Do this: Windows desktop Run dialog box Browse dialog box Run dialog box Velocity Installer screen Select Start Run. Click the Browse... button. Go to the DVD drive (usually D: or higher) and select the root directory. Select the program setup.exe. Click Open. The Velocity setup program and path appear. Click OK. Go to Step 4. The first Velocity Installer screen appears: 26 Velocity Installation

35 MAN Click Next. The installation procedure that follows varies according to which operating system and database manager you are using. If you are using SQL Server 2008 R2 on Windows Server 2008 R2, continue on to Installing Velocity on Windows Server 2008 R2 with SQL Server 2008 R2 on page 30. If you are planning to run Velocity on Windows 7 with SQL Server 2008 R2 or SQL Server 2008 R2 Express, go to Installing Velocity on Windows 7 or Windows XP SP3 on page 49. Velocity Installation 27

36 Velocity Version 3.5 SP1 Installation Guide The following diagrams illustrate the Velocity installation process: Insert Velocity Installation DVD Welcome SQL Server 2008 Prerequsites Yes Installed? No 1 Velocity EULA Installer detects Velocity 3.1? Yes Install Options for Upgrade No Select an option Full Install Upgrade Select an option Install Options No Upgrade to 3.5? Yes Server Workstation Data Client 3 2 Web Console Options Database Upgrade and Migration Application Network and Security Installation Finished System Inspection Velocity Updates SQL Server Options Installation Complete Install SQL Server 2008 R2 Express? No Velocity License Yes Database Installation (Location) Application Installation (Location) Prerequisite Gathering Complete Installing Prerequisites Application Installation Progress 28 Velocity Installation

37 MAN SQL Server 2005 Backward Compatibility Setup Wizard SQL Server Native Client Setup Wizard SQL Server 2008 Native Client Setup Wizard.NET Framework 3.5 Installed? No.NET Framework 3.5 SP1 Setup Yes Windows PowerShell 1.0 Wizard No Go to Velocity EULA Yes Windows Server 2008 R2? No Windows XP (Client)? Yes Windows XP Hotfix Wizard 2 Application Installation (Location) Prerequisite Gathering Complete Application Installation Progress Velocity License Installation Complete Installation Finished Velocity Updates 3 Attach Database Wizard System Inspection SQL Server Options Web Console Options Application Network and Security Installation Finished Velocity Updates Installation Complete Velocity License Installing Prerequisites Prerequisite Gathering Complete Velocity Installation 29

38 Velocity Version 3.5 SP1 Installation Guide Installing Velocity on Windows Server 2008 R2 with SQL Server 2008 R2 To install Velocity using Windows Server 2008 R2 with either SQL Server 2008 R2 or SQL Server 2008 R2 Express: 1. If SQL Server 2005 Backward Compatibility Setup Wizard has been run previously, go to Step 2. If the SQL Server 2005 Backward Compatibility Setup Wizard has not been previously run, it now appears. Follow these steps: At this screen: Microsoft SQL Server... to begin Welcome to... License Agreement Registration Information Feature Selection Ready to Install the Program Completing... Do this: Click OK. Click Next. Click the I accept the terms of the license agreement radio button, then click Next. Enter your name and the name of your organization in the appropriate text fields. When you're finished, click Next. If necessary, select the program features you require. In most cases, you will simply accept the default by clicking Next. Click Install. The backward compatibility program is installed. Click Finish. The Microsoft SQL Server Native Client Setup Wizard now appears. 30 Velocity Installation

39 MAN Follow these steps for installing the Microsoft SQL Server Native Client: At this screen: Welcome License Agreement Registration Information Feature Selection Ready to Install Completing... Do this: Click Next. Click to select the I accept the terms of the license agreement radio button, then click Next. Enter your name and organization in the appropriate text boxes, then click Next. Select the program features you want for this installation. In most cases, you will accept the default, then click Next. Click Install to start the installation. When the installation is completed, click Finish. The SQL Server 2008 Native Client setup wizard now appears. 3. Follow these steps for installing the SQL Server 2008 Native Client: At this screen: Welcome License Agreement Registration Information Do this: Click Next. Click to select the I accept the terms of the license agreement radio button, then click Next. Enter your name and organization in the appropriate text boxes, then click Next. Velocity Installation 31

40 Velocity Version 3.5 SP1 Installation Guide At this screen: Feature Selection Ready to Install Completing... Do this: Select the program features you want for this installation. In most cases, you will accept the default, then click Next. Click Install to start the installation. When the installation is completed, click Finish. If you get a message informing you that the installation cannot continue because some files are outdated, click Yes to update and reboot. After these files are updated, the installation should resume at the point where it left off. 4. Click Next. The Velocity End-User License Agreement (EULA) dialog box appears: If you want to study the terms of the agreement more closely, you can click the Print button and make a hard copy of the agreement. 5. Click the I agree... radio button, then click Next. 32 Velocity Installation

41 MAN The installer inspects your computer and determines which Velocity roles your computer is capable of performing. The Install Options screen appears. If your Velocity computer is not a member of a domain, the Workstation option is selected: No Domain Detected Velocity Installation 33

42 Velocity Version 3.5 SP1 Installation Guide If the installer detects that this computer is a member of a domain, it provides a broader range of options: Domain Detected 6. Select the Velocity role you need for this computer: Server Client Data Workstation This computer will serve as the Velocity server and a client. It will manage Velocity services for other clients, communications with controllers, and the Velocity database. This computer will serve as a client to the Velocity server, and will have access to the Velocity database (and the hardware). This computer will serve as a separate database server for the Velocity system. This computer will serve as both the Velocity server and the only client in a standalone security environment. (No other client connections are supported.) 34 Velocity Installation

43 MAN These installation options for the different Velocity roles enable you to implement access control systems with varying degrees of complexity, to suit a variety of needs: If you have a small facility that only requires one client, you only need a single installation of Velocity on a standalone Workstation. If you have a larger facility that requires multiple clients, you need to first install a Velocity Server, and then install the Velocity Clients. If you wish to use a separate computer for the Velocity database, you need to first install the full version of SQL Server 2008 R2 on that computer, and then choose the Data installation option (on the Install Options screen during the Velocity 3.5 installation process) to install the Velocity database on that computer. Next you can install a Velocity Server, and then install the Velocity Clients. (Make sure that the SQL Browse service is running, so the Velocity Server and Velocity Client installations can locate the separate database server.) 7. Depending on which option you selected in Step 6, follow these instructions: If you select: Server Do this: For the SQL Server location, either enter the path and directory of the SQL Server, or click the browse button to locate the SQL Server folder. Click Next. The Web Console Options page appears. Go to step 8 on page 38. Velocity Installation 35

44 Velocity Version 3.5 SP1 Installation Guide If you select: Client Do this: For the 'Velocity Server location', either: select the currently displayed Velocity server, pick another one from the drop-down list (if present), or click the browse button and in the resulting Network Neighborhood dialog box, select the computer, drive, and directory where the Velocity server resides. For the 'SQL Server location', either: accept the currently displayed SQL server, pick another one from the drop-down list, or click the browse button and in the resulting Network Neighborhood dialog box, select the computer, drive, and directory where the SQL Server resides. Click Next. The Application Installation screen appears. Go to step 18 on page Velocity Installation

45 MAN If you select: Data Do this: Click Next. The Attach Database Wizard welcome screen appears. Click Next. The EULA screen appears. Check the I Agree... box, then click Next. The System Inspection screen appears. Click Next. The SQL Server Options screen appears: Workstation Select the SQL Server instance you require, then click Next. The Web Console Options page appears. Go to step 8 on page 38. Click Next. The Web Console Options page appears. Go to step 8 on page 38. Velocity Installation 37

46 Velocity Version 3.5 SP1 Installation Guide The Web Console Options page appears: 8. Select one of these choices: Install Velocity Web Console click this radio button to install the web console. Installing this optional web console feature requires previous installation of Microsoft s Internet Information Services (IIS). For more about this, refer to Prerequisite: Installing IIS in the Velocity Web Console Guide. Do not perform the installation at this time click this radio button to skip the installation of the web console. You can install it later using the instructions in Installing the Velocity Web Console After Installing Velocity and IIS in the Velocity Web Console Guide. 9. When you ve made your selection, click Next. 38 Velocity Installation

47 MAN The Application Network and Security page appears: The Velocity installer detects whether this computer is a member of a domain server (Active Directory) or is a local server. The correct radio button should be selected automatically. Velocity Installation 39

48 Velocity Version 3.5 SP1 Installation Guide If this computer is a member of an Active Directory domain and the current installation is a server installation, the Application Network and Security page looks like this: 10. Perform one of these tasks: If this computer is a member of an Active Directory domain, select the Active Directory radio button, then in the pick list to the right, select the domain or organizational unit (OU) whose accounts Velocity can use. Only those domains and OUs currently defined for this network appear in this list. 40 Velocity Installation

49 MAN If you need to create custom user names and groups for this system, click the Advanced Authentication radio button. A screen like this appears: This is an advanced configuration strategy. If your internal security policies do not require you to change this information, then leave it at the default values. If you plan to use the default Velocity users and groups, go to Step 11. Velocity Installation 41

50 Velocity Version 3.5 SP1 Installation Guide It s normally a good idea to create a strong password for SQL Server because it deters unauthorized people from breaking into the Velocity database. For the Services Account, either enter a directory path and name for the new account, or click and navigate the Advanced Authentication dialog box to find an existing account. For the Users Group, either enter a directory path and name for the group you want, or click and navigate the Advanced Authentication dialog box to find an existing group name. If you select a custom group, you must select an existing domain name account as an operator and specify that this account possesses the security permissions as the default Velocity Services. For a more detailed explanation of setting up a custom service account and user group, refer to the Custom Active Directory User & Group Names Setup starting on page Enter a password in the first 'Password' text box and repeat it in the 'Confirm' text box. This is the password used for Velocity services. 12. Unless you require a different SQL Application Role password, accept the [Default] password at the second 'Password' and Confirm text boxes. If you change this password, you will need to enter the new password for each client for it to connect. 13. If there is only one network interface card in this host, go to Step 14. If this Velocity host includes more than one network interface card, at the Device Network pick list, select the device network to which this system is connected. 14. Click Next. If this is the Data installation, the Prerequisite Gathering Complete screen appears. Go to step 19 on page 45. If this is the Server or Workstation installation, the System Inspection screen appears. 15. Click Next. 42 Velocity Installation

51 MAN The SQL Server screen appears: 16. To confirm the option to Install a HIRSCH named instance of SQL Express on this computer, click Next. This will install SQL Server 2008 R2 Express on your computer. If you click the Create a named instance using the existing SQL server option and then click Next, the installer uses the currently installed version of SQL Server to manage Velocity s database. Velocity Installation 43

52 Velocity Version 3.5 SP1 Installation Guide The Database Installation screen appears: In general, it should not be necessary to change the default folder or volume designations for either the database or application files. Unless required, leave these at their default values. 17. To accept the default location, click Next. The Application Installation screen appears. 44 Velocity Installation

53 MAN To accept the default location, click Next. If you need to change the location of the Velocity program, enter a new path in the Folder text box, or click the Browse... button to select a new Velocity folder. The Prerequisite Gathering Complete screen appears. 19. Review the settings in the window to make sure the tasks are correct, and click Next. If you earlier specified that this computer will be used as a Velocity client, a prompt like this appears: 20. To skip the installation of SQL Server 2008 R2 Express on this computer, click Yes. If you want to install SQL Server 2008 R2 Express on this computer, click No. Velocity Installation 45

54 Velocity Version 3.5 SP1 Installation Guide Velocity prerequisites and program are installed. This can take a while to complete. When the installation is completed, a screen like this appears: 21. Do one of these: If you plan to acquire and license your copy of Velocity after the installation is completed, go to Step 22. If you have already acquired a License Key or are about to acquire one through Identive Group, click the Velocity License Manager button. Follow the instructions in Licensing Velocity on page 78 to license your copy of Velocity, then return to Step 22 of this procedure. 22. Click Next. 46 Velocity Installation

55 MAN The Installation Complete screen appears 23. Check the boxes you need on this screen: Auto-start each time Place Velocity icon Check this option if you want Velocity to automatically start each time you log onto Windows. This is a good idea if you plan to use this computer only for Velocity. If this is a multi-use computer, you might leave this option unchecked. Check this option to place a Velocity icon on your desktop. This enables an operator to quickly start Velocity without going through the Start menu. Velocity Installation 47

56 Velocity Version 3.5 SP1 Installation Guide Automatically start services now Never re-use PIN codes Never re-use MATCH card codes Check this option to start the Velocity services now. Check this option if you never want to reuse PIN codes. Note that if you have a large number of employees, you might need to recycle PIN codes, or risk running out. If you select this option, you can further specify that only those operators with override authority can reassign PIN codes. Check this option if you never want to reuse MATCH card codes. Although this option eliminates the possibility of an unauthorized person stealing and using a card, it requires a new card for each new person, which can be expensive. If you select this option, you can further specify that only those operators with override authority can reassign cards. 24. When you ve made your selections, click Close. After you close the installer, a message like this may appear: 25. Click OK. The Update for Velocity 3.5 screen appears. 26. Click Start. The installer will now apply the updates for Velocity Velocity Installation

57 MAN Installing Velocity on Windows 7 or Windows XP SP3 To install a Velocity workstation or client on Windows 7 using SQL Server 2008 R2 Express, or to install a Velocity client on Windows XP SP3, perform the following steps: 1. If the SQL Server 2005 Backward Compatibility Setup Wizard has been run previously, go to Step 2. If the SQL Server 2005 Backward Compatibility Setup Wizard has not been previously run, it now appears. Follow these steps: At this screen: Microsoft SQL Server... to begin Welcome to... License Agreement Registration Information Feature Selection Ready to Install the Program Completing... Do this: Click OK. Click Next. Click the I accept the terms of the license agreement radio button, then click Next. Enter your name and the name of your organization in the appropriate text fields. When you're finished, click Next. If necessary, select the program features you require. In most cases, you will simply accept the defaults by clicking Next. Click Install. The backward compatibility program is installed. Click Finish. If you have previously installed.net Frameworks or you are using Windows 7, go to Step 3. Velocity Installation 49

58 Velocity Version 3.5 SP1 Installation Guide 2. If the Microsoft SQL Server Native Client Setup Wizard has not been previously run, it now appears. Follow these steps: At this screen: Welcome License Agreement Registration Information Feature Selection Ready to Install Completing... Do this: Click Next. Click to select the I accept the terms of the license agreement radio button, then click Next. Enter your name and organization in the appropriate text boxes, then click Next. Select the program features you want for this installation. In most cases, you will accept the default, then click Next. Click Install to start the installation. When the installation is completed, click Finish. If the Microsoft SQL Server 2008 Native Client has been previously run, go to Step If the Microsoft SQL Server 2008 Native Client Setup Wizard has not been previously run, it now appears. Follow these steps: At this screen: Welcome License Agreement Registration Information Do this: Click Next. Click to select the I accept the terms of the license agreement radio button, then click Next. Enter your name and organization in the appropriate text boxes, then click Next. 50 Velocity Installation

59 MAN At this screen: Feature Selection Ready to Install Completing... Do this: Select the program features you want for this installation. In most cases, you will accept the defaults, then click Next. Click Install to start the installation. When the installation is completed, click Finish. If the installer detects that you need to install.net Frameworks 3.5 SP1, a dialog like this appears: If you are running Windows 7, or have previously installed a version of.net Frameworks, go to Step 5. Velocity on Windows XP usually requires the installation of this.net Frameworks 3.5 SP1 software. 4. To install Microsoft.NET Framework 3.5 SP1, follow these steps. At this screen: Velocity.NET... about to begin Welcome to Setup Download and Install Program Do this: Click OK. The.NET installer extracts the required files. Click the I have read and ACCEPT the terms of the License Agreement radio button, then click Install. The program is installed. Velocity Installation 51

60 Velocity Version 3.5 SP1 Installation Guide At this screen: Setup Complete Restart Do this: Click Exit. Click Restart Now. The computer restarts. A message appears indicating that the Windows installer 4.5 installation will begin. If Velocity is being installed on Windows 7, go to Step Click OK. The Hotfix for Windows XP appears. 6. To install the Windows XP hotfix, perform these steps: At this screen: Hotfix for Windows XP License Agreement KB v3 Setup Completing the Hotfix... Do this: Click Next. Click the I Agree radio button, then click Next. Click Continue. Click Finish. The computer restarts. The computer restarts. 7. Restart Setup.exe from the DVD, as described in Step 2 on page 25. The Velocity Installer s Welcome screen appears. 8. Click Next. A message appears informing you that the Microsoft Windows PowerShell 1.0 is about to begin. 9. Click OK. 52 Velocity Installation

61 MAN To install the Windows PowerShell, perform these steps: At this screen: Software Update Installation Wizard License Agreement Completing the Windows PowerShell... Do this: Click Next. Click the I Agree radio button, then click Next. Click Finish. The computer restarts. 11. Restart Setup.exe from the DVD, as described in Step 2 on page 25. The Velocity End-User License Agreement (EULA) dialog box appears: If you get a message informing you that the installation cannot continue because some files are outdated, click Yes to update and reboot. After these files are updated, the installation should resume at the point where it left off. If you want to study the terms of the agreement more closely, you can click the Print button and make a hard copy of the agreement. 12. Click the I agree... radio button, then click Next. The installer inspects your computer and determines which Velocity roles your computer is capable of performing. Velocity Installation 53

62 Velocity Version 3.5 SP1 Installation Guide The Install Options screen appears. If your Velocity computer is not a member of a domain, the Workstation option is selected: No Domain Detected 54 Velocity Installation

63 MAN If the installer detects that this computer is a member of a domain, it provides a broader range of options: Domain Detected 13. Select the computer role you need: Client Workstation This computer will serve as a client to the Velocity server, and will have access to the Velocity database (and the hardware). This computer will serve as both the Velocity server and the only client in a standalone security environment. (No other client connections are supported.) This option is not available for Windows XP. Velocity Installation 55

64 Velocity Version 3.5 SP1 Installation Guide 14. Depending on which option you selected in Step 13, follow these instructions: If you already have SQL Server 2008 R2 installed on your computer, Velocity detects and uses that SQL Server (instead of SQL Server 2008 R2 Express) for the Velocity database. If you select: Client Workstation Do this: For the 'Velocity Server location', either: select the currently displayed Velocity server, pick another one from the drop-down list (if present), or click the browse button and in the resulting Network Neighborhood dialog box, select the computer, drive, and directory where the Velocity server resides. For the 'SQL Server location', either: accept the currently displayed SQL server, pick another one from the drop-down list, or click the browse button and in the resulting Network Neighborhood dialog box, select the computer, drive, and directory where the SQL Server resides. Click Next. The Application Installation screen appears. Go to step 25 on page 64. If a full version of SQL Server 2008 R2 is installed on this computer, select it from the SQL Server instances pick list; otherwise, accept the default Express version. Click Next. Continue on to step 15 on page Velocity Installation

65 MAN The Web Console Options page appears: 15. Select one of these choices: Install Velocity Web Console click this radio button to install the web console. Installing this optional web console feature requires previous installation of Microsoft s Internet Information Services (IIS). For more about this, refer to Prerequisite: Installing IIS in the Velocity Web Console Guide. Do not perform the installation at this time click this radio button to skip the installation of the web console. You can install it later using the instructions in Installing the Velocity Web Console After Installing Velocity and IIS in the Velocity Web Console Guide. 16. When you ve made your selection, click Next. Velocity Installation 57

66 Velocity Version 3.5 SP1 Installation Guide The Application Network and Security page appears: The Velocity installer detects whether this computer is a member of a domain server (Active Directory) or is a local server. The correct radio button should be selected automatically. 58 Velocity Installation

67 MAN If this computer is a member of an Active Directory domain and the current installation is not a workstation installation, the Application Network and Security page looks like this: 17. Perform one of these tasks: If this computer is a member of an Active Directory domain, select the Active Directory radio button, then in the pick list to the right, select the domain or organizational unit (OU) whose accounts Velocity can use. Only those domains and OUs currently defined for this network appear in this list. Velocity Installation 59

68 Velocity Version 3.5 SP1 Installation Guide If you need to create custom user names and groups for this system, click the Advanced Authentication radio button. A screen like this appears: This is an advanced configuration strategy. If your internal security policies do not require you to change this name, then leave it at the default. If you plan to use the default Velocity users and groups, go to Step Velocity Installation

69 MAN It s normally a good idea to create a strong password for SQL Server because it deters unauthorized people from breaking into the Velocity database. For the Services Account, either enter a directory path and name for the new account, or click and navigate the Advanced Authentication dialog box to find an existing account. For the Users Group, either enter a directory path and name for the group you want, or click and navigate the Advanced Authentication dialog box to find an existing group name. If you select a custom group, you must select an existing domain name account as an operator and specify that this account possesses the security permissions as the default Velocity Services. For a more detailed explanation of setting up a custom service account and user group, refer to the Custom Active Directory User & Group Names Setup starting on page Enter a password in the first 'Password' text box and repeat it in the 'Confirm' text box. This is the password used for Velocity services. 19. Unless you require a different SQL Application Role password, accept the [Default] password at the second 'Password' and Confirm text boxes. If you change this password, you will need to enter the new password for each client for it to connect. 20. If there is only one network interface card in this host, go to Step 21. If this Velocity host includes more than one network interface card, at the Device Network pick list, select the device network to which this system is connected. 21. Click Next. If this is the Data installation, the Prerequisite Gathering Complete screen appears. Go to step 26 on page 65. If this is the Workstation installation, the System Inspection screen appears. 22. Click Next. Velocity Installation 61

70 Velocity Version 3.5 SP1 Installation Guide The SQL Server screen appears: 23. Click Next. The Create a named instance using the existing SQL server option is confirmed. 62 Velocity Installation

71 MAN If you do not yet have SQL Server 2008 R2 installed on this computer, the Database Installation screen appears: In general, it should not be necessary to change the default folder or volume designations for either the database or application files. Unless required, leave these at their default values. If you have already installed SQL Server 2008 R2, go to step 25 on page To accept the default location, click Next. Velocity Installation 63

72 Velocity Version 3.5 SP1 Installation Guide The Application Installation dialog box appears. 25. To accept the default location, click Next. If you need to change the location of the Velocity program, enter a new path in the Folder text box, or click the Browse... button to select a new Velocity folder. 64 Velocity Installation

73 MAN The Prerequisite Gathering Complete screen appears. 26. Review the settings in the window to make sure the tasks are correct, and click Next. If you earlier specified that this computer will be used as a Velocity client, a prompt like this appears: 27. To skip the installation of SQL Server 2008 R2 Express on this computer, click Yes. If you want to install SQL Server 2008 R2 Express on this computer, click No. Velocity prerequisites and program are installed. This can take a while to complete. Velocity Installation 65

74 Velocity Version 3.5 SP1 Installation Guide When the installation is completed, a screen like this appears: 28. Do one of these: If you plan to acquire and license your copy of Velocity after the installation is completed, go to Step 29. If you have already acquired a License Key or are about to acquire one through Identive Group, click the Velocity License Manager button. Follow the instructions in Licensing Velocity on page 78 to license your copy of Velocity, then return to Step 29 of this procedure. 29. Click Next. 66 Velocity Installation

75 MAN When the installation is completed, the Installation Complete screen appears 30. Check the boxes you need on this screen: Auto-start each time Place Velocity icon Check this option if you want Velocity to automatically start each time you log onto Windows. This is a good idea if you plan to use this computer only for Velocity. If this is a multi-use computer, you might leave this option unchecked. Check this option to place a Velocity icon on your desktop. This enables an operator to quickly start Velocity without going through the Start menu. Velocity Installation 67

76 Velocity Version 3.5 SP1 Installation Guide Automatically start services now Never re-use PIN codes Never re-use MATCH card codes Check this option to start the Velocity services now. Check this option if you never want to reuse PIN codes. Note that if you have a large number of employees, you might need to recycle PIN codes, or risk running out. If you select this option, you can further specify that only those operators with override authority can reassign PIN codes. Check this option if you never want to reuse MATCH card codes. Although this option eliminates the possibility of an unauthorized person stealing and using a card, it requires a new card for each new person, which can be expensive. If you select this option, you can further specify that only those operators with override authority can reassign cards. 31. When you ve made your selections, click Close. After you close the installer, a message like this may appear: 32. Click OK. The Update for Velocity 3.5 screen appears. 33. Click Start. The installer will now apply the updates for Velocity Velocity Installation

77 MAN Upgrading Velocity If you have an existing installation of Velocity 3.1 (KB630 or later) on your computer with SQL Server 2008 R2 or SQL Server 2008 R2 Express, you can upgrade Velocity instead of performing the clean install described previously in this guide. In general: If you are running: Velocity 3.1 (KB630) with Windows Server 2008 R2, Windows 7, or Windows XP Pro Velocity with Windows Server 2008 R2 and SQL Server 2008 You need to: Follow the instructions in Upgrading Velocity 3.1 to Velocity 3.5 SP1 starting on page 70. Perform a clean install. Refer to Velocity Installation on page 23. Preparing to Upgrade Before you start the upgrade process, you must perform these required steps: Backup your system before attempting any upgrade. Doing so enables you to get back to an earlier working state if a mistake is made somewhere in the upgrade process. If you are using SQL Express, make sure that the size of the Velocity database is less than half of the required maximum. If you have SQL Express 2005, the limit is 4 GB. If you have SQL Express 2008, the limit is 10 GB. Archiving older Alarms and Events is an effective way to reduce the size of your Velocity database. Make sure the available Hard Disk free space is at least twice the size of your Velocity database. This requirement applies regardless of whether you have an Express version of SQL or a full version. Make sure that you are logged in with an appropriate administrator account. You must be a Domain Administrator for a networked Domain account, or a Local Administrator account for a stand-alone workstation installation. Velocity Installation 69

78 Velocity Version 3.5 SP1 Installation Guide We recommend that you also perform these recommended steps: To avoid taking down a live system during the upgrade, you can backup and restore your system on a separate computer, and then perform the upgrade on that computer. If you decide to use this approach, you must perform some additional steps (including editing some tables in the Velocity database) which are documented in the SQL Database Manager > Restoring the Velocity Database to a Different Computer topic in the Velocity online help system. If you are upgrading from Velocity 3.1 KB640 to 3.5, you should upgrade to Velocity 3.5 SP1 because it includes the bug fixes, new features, and enhancements of 3.1 KB640. Upgrading Velocity 3.1 to Velocity 3.5 SP1 You must already have installed Velocity 3.1 KB630 or later to perform this upgrade. To upgrade from Velocity 3.1 to Velocity 3.5 SP1: 1. Insert the Velocity 3.5 SP1 DVD into your DVD drive. The Auto-start feature should automatically start the update wizard. If the update program does not auto-start, open Windows Explorer or the Run program, navigate to the DVD drive, and double click on Setup.exe. The Velocity Installer splash screen appears. 2. Follow these instructions: From: Do This: Velocity Installer End-User License Agreement Click Next. Click the I agree... radio button, then click Next. Install Options Accept the Upgrade to Velocity 3.5 radio button, then click Next. 70 Velocity Installation

79 MAN From: Web Console Options System Inspection Prerequisite Gathering Velocity License Installation Complete Do This: Click the Install Velocity Web Console radio button to install the Velocity Web Console, or click the Do not perform the installation at this time radio button to bypass this option for the time being. Then click Next. Before you can install the Web Console, you must first install IIS as explained in "Prerequisite: Installing IIS" in the Velocity Web Console Guide. Click Next. Click Next. The prerequisites are then installed. This could take several minutes. To license your copy of Velocity at this time, click the Velocity License Manager button. If you want to wait until later to license your copy, click Next. For more about using the License Manager, refer to Licensing Velocity starting on page 78. Click Close. When you open Velocity again, the new version of Velocity should appear. Velocity Installation 71

80 Velocity Version 3.5 SP1 Installation Guide Turning On the Windows Firewall After you have installed Velocity 3.5 SP1, you can turn the Windows Firewall ON and configure the firewall to accommodate access to the required SQL Server and Velocity ports. (This is required for a Velocity Client/Server installation, but is not necessary for a Velocity standalone Workstation installation.) If you are unfamiliar with firewall port configuration, contact your IT department for more information about doing this. In many circumstances, you will have to perform the following procedures: Configure the Windows Firewall Assign a TCP/IP port to the Velocity polling engine Assign a TCP/IP port to the SQL Server Database Engine Start an instance of SQL Server For more about these topics, refer to the following subsections. Configuring the Windows Firewall Windows Firewall helps prevent unauthorized access to computers in a network. By default, the Windows Firewall is turned ON after the operating system is installed. If a firewall is turned ON but it is not configured correctly, attempts by users to connect to SQL Server and Velocity are blocked. To access an instance of SQL Server which is behind a firewall, the database administrator needs to configure the firewall on the computer that is running SQL Server to allow users access. Opening ports in your firewall can leave your server exposed to malicious attacks. Make sure that you understand firewall systems before you open ports. 72 Velocity Installation

81 MAN The following procedures will guide you through the steps that you need to configure the Windows Firewall in Windows Server 2008 R2 to allow users access to SQL Server. 1. Click Start All Programs Administrative Tools Server Manager. The Server Manager appears. 2. In Server Manager, expand the Configurations tab and then expand Windows Firewall with Advanced Security. 3. Right-click Inbound Rules and click New Rule. The New Inbound Rule Wizard appears. 4. On the New Inbound Rule Wizard's Rule Type page, select the Port option to control connections for a TCP or UDP Port. Click Next to continue with the wizard. The Protocol and Ports page appears. 5. On the Protocol and Ports page, specify the protocols and ports to which this rule applies. Because SQL Server, when installed as a default instance, uses port 1433 as the default port, choose the TCP option and then specify a specific port number. Click Next to continue with the wizard. Registered Ports are those from 1024 through 49151, and Dynamic and/or Private Ports are those from through The registered ports number range should not be used for named SQL Server instances because a future conflict is possible. Consult your IT department for assistance regarding port assignment. 6. On the Action page, specify the action to be taken when a connection matches the conditions specified in this rule. In this case, choose Allow the connection and click Next. The Profile page appears. 7. On the Profile page, select Domain, and click Next. The Name page appears. Velocity Installation 73

82 Velocity Version 3.5 SP1 Installation Guide 8. Provide a meaningful name and description. For example: Name: SQL Server 2008 default Port 1433 Description (Optional): Enable SQL Server 2008 Default Port (1433) for user connectivity. 9. Click Finish to complete the wizard. After the wizard configuration is complete, you will be able to see the new rule available under Inbound Rules. 10. Repeat Steps 3 through 9 to set the UDP Port to Repeat Steps 3 through 9 to set the TCP Port to 2025, to enable connection from remote workstations. Assigning a TCP/IP Port Number to the SQL Server Database Engine If enabled, the default instance of the SQL Server database engine listens on TCP port Named instances of the SQL Server database engine are configured for dynamic ports, which means they select an available port when the SQL Server service is started. When connecting to a named instance through a firewall, configure the database engine to listen on a specific port so that the appropriate port can be opened in the firewall. To assign a TCP/IP port number to the SQL Server Database Engine, perform these steps: 1. From the Windows desktop, click Start All Programs Microsoft SQL Server 2008 Configuration Tools SQL Server Configuration Manager. The SQL Server Configuration Manager appears. 2. On the console pane, expand SQL Server Network Configuration then Protocols for <instance name>, and then double-click TCP/IP. The TCP/IP Properties dialog box appears. 3. Select the IP Addresses tab. 74 Velocity Installation

83 MAN Scroll down and find the IPAll. 5. In the IPAll box, select the TCP Port option and enter the port number on which you want this IP address to listen, then click OK. For example: enter 1433, then click OK. 6. Restart the SQL Server instance, as explained in Starting an Instance of SQL Server (from the SQL Server Configuration Manager) on page 75. Starting an Instance of SQL Server (from the SQL Server Configuration Manager) To stop or start an instance of SQL Server from the SQL Server Configuration Manager: 1. From the Windows desktop, click Start All Programs Microsoft SQL Server 2008 Configuration Tools SQL Server Configuration Manager. The SQL Server Configuration Manager appears. 2. In the console pane, expand SQL Server Services. 3. In the details pane, right-click the named instance of SQL Server then click Start. For example: SQL Server (MSSQLSERVER) A green arrow on the icon next to the server name and on the toolbar indicates that the server started successfully. 4. Click OK to close the SQL Server Configuration Manager. Velocity Installation 75

84 Velocity Version 3.5 SP1 Installation Guide Starting Velocity 1. If you have not already logged into Windows, start Windows now. The Log On screen appears. 2. Log onto Windows initially as Administrator or with the name of the person who installed Velocity. 3. Enter the administrator password specified when setting up the administrator for Windows (see page 11), then click OK. The Windows desktop appears. The Velocity Service Control Manager (SCM) icon appears in the desktop tray at the lower right corner of the screen. The appearance of the SCM icon indicates which services are currently running: This icon: Indicates: All services are running. A green arrow appears. The DIGI*TRAC Network Service is stopped. A red circle appears around a green arrow. The DIGI*TRAC Network Service and the Security Domain Service are stopped. A red square dot appears in place of the green arrow. Wait until the arrow turns green before proceeding. This can take 30 seconds or more after a reboot or manual restart. If the Velocity SCM does not start automatically, from the Windows desktop select Start All Programs Hirsch Electronics Velocity Service Control Manager. Services should start automatically on reboot. 4. Do one of these: From the Windows desktop, select Start Programs Hirsch Electronics Velocity Velocity. If you indicated during the installation that you wanted the Velocity shortcut icon to appear on the Windows desktop, you can double-click this icon now. 76 Starting Velocity

85 MAN The Velocity splash screen appears: For the first 30 days you can use Velocity with a demo license; however, each time you start Velocity you are reminded to license this copy. After the initial 30-day grace period, Velocity will display a reminder to license and will no longer open until you license it. For instructions about licensing Velocity, refer to Licensing Velocity starting on page 78. Starting Velocity 77

86 Velocity Version 3.5 SP1 Installation Guide Licensing Velocity There is only a 30-day grace period for Velocity: to run the application after that period, you must license your copy. The registration process is handled through the License Manager. After you purchase a copy of Velocity, Inside Sales sends you an order acknowledgement that contains a link. Clicking this link opens a web browser and takes you to the Customer License Portal (CLP). You cannot access the CLP without this link. Use this link to enter your Server ID as described in the following steps. There are two paths to licensing your copy of Velocity: During installation, on the Velocity License page After installation, through the Service Control Manager To license Velocity: 1. Do one of these: During installation, click the Velocity License Manager button on the Velocity License screen. After installation, right-click on the Velocity Service Control Manager icon (on the right side of the Windows desktop tray) and select the Velocity License Manager option from the pop-up menu. 78 Licensing Velocity

87 MAN The Velocity License Manager appears: 2. In the Add/Renew License field, paste or enter the license number you obtained from Identive Group. Note that a license number cannot be transferred to a different computer, because the licensing mechanism uses the unique machine ID. This license number is usually obtained when the software is purchased. However, if you do not already have a license, follow these steps to obtain one: a. Click the copy button to the right of the 'Server ID' field:. This copies the Server ID you see onto the Windows clipboard. b. Click the link in your order acknowledgement to open your browser. Licensing Velocity 79

88 Velocity Version 3.5 SP1 Installation Guide The CLP s Generate a Velocity license key screen appears: What s Next Your SEN number and all previously entered addresses are displayed. c. If required, enter any additional addresses in the Additional address text box. d. Paste the server ID number into the 'Server ID' field. e. Click Get License Key. Within a short time, Identive Group will return a license number to the addresses you specified on the form. f. Copy the entire license number from your message, and paste it into the Add/Renew License field in the Velocity License Manager. Make sure you select and copy the entire license number. 3. In the Velocity License Manager, click the Add/Renew button. The license is registered and displayed in the upper pane, including details about its support entitlement, Status, Date Purchased, and Expiration Date. The following two pages provide a flowchart of the most useful procedures for configuring and defining Velocity. (This flowchart is also found in the Velocity online help.) 80 What s Next

89 MAN View Help 1 Hardware DIGI*TRAC Configuration Add Ports Launch Event Viewer Set Console Preferences Assign Printers 2 Software Velocity Configuration Add Time Zones Advanced Configuration on next page Assign Alarm and RTN Options in Customization Manager Add Xbox (where needed) Assign Enrollment Station Add Holidays Select Alarm Viewer Properties Define Controllers Add Door Groups Assign Roles Define Doors Define User- Defined Fields in Enrollment Mgr. Enroll Operators Define Readers Select Rights and Permissions Define Relays Create Badge Layouts Yes Printing Badges? No Add Roles Define Inputs Add Credential Templates Configure Status Viewer Groups Define Expansion Relays Add / Enroll People Run Reports Define Expansion Inputs Capture Photos Print Badges Capture Signatures Add New Credentials to People What s Next 81

90 Velocity Version 3.5 SP1 Installation Guide (from the previous page) Writer 3 Advanced Control Functions Standard Control Zones 4 Advanced Credential Functions Function Groups 5 Maintenance and Troubleshooting Change System Code in Controllers Serial Port Writer Message Queue Writer Central Stations Master Control Zones Set Day / Use / Absentee Limits Schedule Tasks 6 Global Master Control Zones 2-Person Rule Archive Alarm and Event Logs Interfaces Configuration Controller Alarm Actions Anti-Passback Activate / Deactivate Credentials Add Port Command Sets Occupancy Controls Synchronize Controller Clocks Add Switchers Create Maps Tag and Alert Backup / Restore Database Triggers and Actions Add Maps / Graphics Download Firmware Update Define Cameras Link Maps / Graphics Diagnostic Window Assign Presets Place Icons on Maps Add DVR Use CCTV Viewer Custom Link Objects Use Video Explorer Trigger Action Manager 82 What s Next

91 MAN Custom Active Directory User & Group Names Setup Velocity by default uses specific Windows User Groups and User names for application and SQL authentication. The two Active Directory group names it uses are: Velocity Users and Velocity Services. There is also one Active Directory user: VelocityServices. Depending on the installation, this user and groups will either be in Active Directory on your domain controller, or they will be local to your Velocity server. Where the user and groups reside depends on whether: Velocity and SQL are installed on the same computer, or Velocity and SQL are installed on separate computers. When Velocity and SQL are installed on the same computer, the only group that is created on the domain controller is the Velocity Users group. The Velocity Services group and the VelocityServices user are local to the Velocity server. When Velocity and SQL are installed on separate computers, both groups and the user are all located on the domain controller. There are instances when you will not want to use the default Velocity Users group, Velocity Services group, or VelocityServices user names. Government organizations in particular often require the assignment of unique user group names for every unit or department within the organization. This procedure should be performed by an IT professional thoroughly familiar with the intricacies of SQL Server database management and Windows Active Directory. 83

92 Velocity Version 3.5 SP1 Installation Guide Customizing a user group and user names is accomplished in several stages: 1. Create a new custom users group to replace the Velocity Users group, then assign members to it on the domain controller (page 85). 2. Create a new user to replace the VelocityServices accounts (page 90). 3. Assign SQL Logins for the new users group (page 93). 4. Assign new users group permissions to Velocity (page 97). 5. Enable Velocity operators to use the new users group (page 100). 6. Define login rights for Velocity services (page 102). 7. Enable the new users group to use Velocity services (page 108). 8. Install this custom version of Velocity on all relevant clients. 9. Assign permissions to folders and files that the new custom service uses (page 113). The remainder of this guide explains this multi-step procedure. Hint: The purpose of custom user and groups is to replace the defaults. Making sure the new groups work before deleting the defaults is strongly recommended. Because every installation is different, make sure you review your existing default accounts to guarantee that the new accounts have equivalent rights and permissions. 84

93 MAN Creating a New Users Group and Assigning Members on the Domain This section explains how to create a new users group and assign members to it on the domain controller. To create a non-velocity named services group and assign users: 1. In Administrative Tools, select Computer Management. The Active Directory Users and Computers window appears: 2. Right-click the Users folder (in the left pane) and select New Group. Creating a New Users Group and Assigning Members on the Domain 85

94 Velocity Version 3.5 SP1 Installation Guide The New Object - Group dialog box appears: 3. Enter the name of the group you want to use (instead of the Velocity Users group), then click: Group scope: Global Group type: Security 86 Creating a New Users Group and Assigning Members on the Domain

95 MAN The dialog box now resembles this example: 4. Click OK. The new users group appears in the Users folder. 5. Right-click the new users group and select Properties, then click the Members tab. Creating a New Users Group and Assigning Members on the Domain 87

96 Velocity Version 3.5 SP1 Installation Guide The Members tab is displayed: 6. Click the Add button. The Select Users, Contacts, Service Accounts, or Groups dialog box appears: 7. Click Locations and select this domain server s location. 88 Creating a New Users Group and Assigning Members on the Domain

97 MAN Do one of these: Enter the name of the object you are seeking and click Check Names. If the name is correctly entered, the name is underlined. Click Advanced and in the Common Queues section, select a text string to find the required members. Click Find Now. All relevant users appear in the search results. Select one or more users. 9. Click OK twice. The new users group with associated users appears in the Users folder. Creating a New Users Group and Assigning Members on the Domain 89

98 Velocity Version 3.5 SP1 Installation Guide Creating a New Services Account This section explains how to create a new services account and assign permissions to it on the local Velocity server. To create a new services account on the local Velocity server: 1. Right-click on My Computer (or Computer) and select Manage. The Server Management screen appears. 2. Expand Configuration to reveal Local Users and Groups. 3. Right-click on Users and select New User. The New User dialog appears: 4. Enter the new user name and the password. 5. Make this user a member of the administrator group on the Velocity server (not a domain administrator). 6. Click Create, then click Close. 7. Right-click on the user you just created and select Properties. The Properties dialog appears. 8. Click on the Member of tab, then click the Add... button. 90 Creating a New Services Account

99 MAN The Select Users, Computers, Service Accounts, and Groups dialog appears: 9. Click Locations and specify the local server, then click OK. 10. For the Enter the object names to select field, do one of these: Enter Administrators and click Check Names. If the name is correctly entered, the name is underlined. Click OK twice. Creating a New Services Account 91

100 Velocity Version 3.5 SP1 Installation Guide Click Advanced... and in the Common Queues section, select a text string to find the administrators group. Click Find Now. All relevant groups appear in the Search results window. Select the user you require. Click OK twice. 92 Creating a New Services Account

101 MAN Assigning SQL Logins for the New Users Group This section explains how to assign the necessary SQL logins, from the computer on your system that contains SQL Server and the Velocity database. To assign a login for this new users group: 1. Open SQL Server. The Microsoft SQL Server Management Studio appears. 2. Expand the Security folder, then right-click the Login folder and select New Login... The Login - New dialog appears: 3. For the Login name, click Search. Assigning SQL Logins for the New Users Group 93

102 Velocity Version 3.5 SP1 Installation Guide The Select User or Group dialog box appears. 4. Click Object Types, select the Groups check box, and then click OK. 5. Click Locations and select the domain server where the newly defined users group resides, then click OK. 6. Do one of these: Enter the users group name you are seeking and click Check Names. If the name is correctly entered, the name is underlined. Click OK. 94 Assigning SQL Logins for the New Users Group

103 MAN Click Advanced and in the Common Queues section, select a text string to find the required group. Click Find Now. All relevant users groups appear in the Search results pane. Select the one you want. Click OK. The users group appears in the Login name field. 7. Click Server Roles in the left pane. The Server Roles page appears. Assigning SQL Logins for the New Users Group 95

104 Velocity Version 3.5 SP1 Installation Guide 8. Select the public and sysadmin check boxes, as shown in this example: 9. Click User Mapping in the left pane. The User Mappings page appears. 10. Select the Velocity check box in the top pane. 11. Click OK. 12. Click Create, then Close. 96 Assigning SQL Logins for the New Users Group

105 MAN Assigning the New Users Group Permissions to Velocity This section explains how to assign the new users group permissions to the Velocity directory. To assign the new users group permissions to Velocity: 1. On the Velocity server, open Windows Explorer. 2. From the Program Files (x86) folder, select Hirsch Electronics and then Velocity. 3. Right-click the Velocity folder and select Properties. The Velocity Properties dialog box appears. 4. Select the Security tab, then click Edit. 5. In the Permissions for Velocity dialog box, click Add. The Select Users, Computers, Service Accounts, and Groups dialog box appears. 6. If required, click Locations and select the domain server, then click OK. 7. At the Enter the object names to select dialog box, do one of these: Enter the users group name you are seeking and click Check Names. If the name is correctly entered, the name is underlined. Assigning the New Users Group Permissions to Velocity 97

106 Velocity Version 3.5 SP1 Installation Guide Click Advanced and in the Common Queues section, select a text string to find the required group. Click Find Now. All relevant users groups appear in the search results. Select the previously-defined users group. 8. Click OK. The Permissions for Velocity dialog box reappears, with the selected users group highlighted. 98 Assigning the New Users Group Permissions to Velocity

107 MAN In the Permissions area at the bottom of the page, select every Allow check box except for the Full control permission, as shown in this example: 10. Click OK. Assigning the New Users Group Permissions to Velocity 99

108 Velocity Version 3.5 SP1 Installation Guide Enabling Velocity Operators to Use the New Users Group This section explains how to enable Velocity operators to use the new users group. To enable Velocity operators to use the new users group: 1. At the Velocity server s desktop, right-click on the Velocity Service Control Manager icon in the tray and select Properties. The Velocity Settings dialog box appears. 2. Select the Advanced option in the left pane, then select the Custom Velocity Users Group Names check box: A warning message asks if you want to proceed. 3. Click Yes, then click OK twice. 4. Open Velocity. 5. From the Administrator pane, select Velocity Configuration then Operators. 100 Enabling Velocity Operators to Use the New Users Group

109 MAN Because you have ceded control for creating operators to Active Directory by selecting Custom Velocity User Group Names in the Velocity settings, you must use an existing operator previously created in Active Directory. 6. In the right pane, double-click an existing operator name. This operator name must already be resident in Active Directory. The Operator Properties dialog box appears. 7. In the Name box, enter a name for this operator. 8. In the Domain list, select the domain where the newly-defined users group resides. 9. Fill out all other fields and roles as required. 10. Click OK. 11. Add other operators to this domain as required. Enabling Velocity Operators to Use the New Users Group 101

110 Velocity Version 3.5 SP1 Installation Guide Defining SQL Login Rights for Velocity Services This section explains how to define SQL login rights for Velocity services. To define the SQL login rights for Velocity services: 1. From the computer on your system that contains SQL Server and the Velocity database, open SQL Server. The Microsoft SQL Server Management Studio appears. 2. Expand the Security folder, then right-click the Login folder and select New Login... The Login - New dialog box appears: 3. For the Login name, click Search. 102 Defining SQL Login Rights for Velocity Services

111 MAN The Select User or Group dialog box appears. 4. Click Object Types, select the Groups check box, and then click OK. 5. Click Locations and select the local Velocity account, then click OK. 6. Do one of these: Enter the users group name you are seeking and click Check Names. If the name is correctly entered, the name is underlined. Click OK. Defining SQL Login Rights for Velocity Services 103

112 Velocity Version 3.5 SP1 Installation Guide Click Advanced and in the Common Queues section, select a text string to find the required group. Click Find Now. All relevant users groups appear in the search results. Select the one you want. Click OK. The users group appears in the Login name field. 7. Click Server Roles in the left pane. The Server Roles page appears. 104 Defining SQL Login Rights for Velocity Services

113 MAN Select the dbcreator, public, and sysadmin check boxes, as shown in this example: 9. Click User Mapping in the left pane. The User Mappings page appears. 10. Select the Velocity and msdb check boxes in the top pane. Defining SQL Login Rights for Velocity Services 105

114 Velocity Version 3.5 SP1 Installation Guide 11. In the Database role membership pane, check these members: For Velocity: db_backupoperator and public, as shown in this example: 106 Defining SQL Login Rights for Velocity Services

115 MAN For msdb: public, SQLAgentOperatorRole, SQLAgentReaderRole, and SQLAgentUserRole, as shown in this example: 12. Click OK. 13. Click Create, then click Close. Defining SQL Login Rights for Velocity Services 107

116 Velocity Version 3.5 SP1 Installation Guide Enabling the New Users Group to Use Velocity Services This section explains how to enable the new users group to use Velocity services on the Velocity server. To enable the new users group to use Velocity services from the Velocity server: 1. Right-click My Computer (or Computer) and select Manage. The Server Manager appears. 2. Expand the Configuration object and highlight Services. The Services that are running on this computer appear: 108 Enabling the New Users Group to Use Velocity Services

117 MAN There should be five Velocity-specific services running on this computer: Velocity CCTV Service Velocity DigiTrac Network Service Velocity Extension Service Velocity Security Domain Service SQL Server (Hirsch) For each of these services, perform Steps 3 through 9. This procedure applies to installations where SQL Server 2008 R2 Express is being used, and might not apply to full installations of SQL Server Right-click on the service and select Properties. The Service Properties dialog box for the specific service appears, like in this example: 4. Click the Log On tab. Enabling the New Users Group to Use Velocity Services 109

118 Velocity Version 3.5 SP1 Installation Guide The Log On tab is displayed: 5. Click This account, then click Browse. The Select User dialog box appears: 6. For the Enter object name to select field, do one of these: Enter the user s name you created and click Check Names. If the name is correctly entered, the name is underlined. 110 Enabling the New Users Group to Use Velocity Services

119 MAN Click Advanced and in the Common Queues section, select a text string to find the required user. Click Find Now. All relevant users appear in the Search results pane. Select the new user. Only one user can start a service. You cannot define more than one user per service. 7. Click OK. 8. Enter and confirm the password for this account. 9. Click Apply. A message may appear for the first service. If it does, simply click OK to proceed. Enabling the New Users Group to Use Velocity Services 111

120 Velocity Version 3.5 SP1 Installation Guide 10. For each Velocity-related service, perform Steps 3 through 9 to make the same modification. 11. Return to the Server Manager Services page. 12. Stop and restart each of these five services, in the following order: SQL Server Velocity Security Domain Service Velocity DigiTrac Network Service Velocity Extension Service Velocity CCTV Service To stop each service, right-click on the service and select the Stop option. To restart each service, right-click on the stopped service and select the Start option. The services will now start with the new users group account. 112 Enabling the New Users Group to Use Velocity Services

121 MAN Checking File and Folder Permissions This section explains how to verify the permissions of the new account that starts the Velocity services. In particular, it enables access to the Velocity database archive files. To check that the relevant files and folders include the required permissions: 1. On the client computer, open Windows Explorer. 2. Expand the root drive (normally C:) to reveal Program Files then Microsoft SQL Server then MSSQL10.50.Hirsch then MSSQL then DATA. 3. Identify those folders and files that the custom users account will employ. For each one, perform Steps 4 through Right-click on a folder or file and select Properties. 5. In the Properties dialog, click the Security tab. Checking File and Folder Permissions 113

122 Velocity Version 3.5 SP1 Installation Guide A dialog box like this example appears: 6. Select to highlight each user and users group assigned to the custom users group. In the Permissions pane, inspect the permissions assigned to each user or group. All relevant entities should have all permissions except Full control checked. 7. If all permissions (except Full control ) are not checked, click Edit. 114 Checking File and Folder Permissions