LaserVault DMS10 Reference Guide

Transcription

1 LaserVault DMS10 Reference Guide Installation Contents Installation and Configuration... 2 LaserVault DMS Settings... 3 SQL Server Settings... 4 SMTP Server Options... 5 ActiveX Install Options... 6 Configuring IIS in Windows Server Launch Internet Information Services (IIS) Manager... 8 File System Security Permissions Document Paths... 18

2 Installation and Configuration The default installation path for LaserVault DMS is C:\LaserVault\LVDMS. This installation guide assumes the software was installed into that folder. Due to Microsoft UAC virtualization we no longer recommend installing under Program Files or Program Files (x86). After the installation is complete, launch the LVDMS Server Configuration program. This can be found on the Start menu under LaserVault DMS Suite. Copyright 2015 Electronic Storage Corporation

3 LaserVault DMS Settings Select the server root where the web applications will run from. By default, the installer creates a folder named C:\LaserVault\LVDMS\ServerRoot. We recommend using this path. For the WebTask URL, enter Enter an admin username and password to use when logging in to the server via the LVDMS Manager. Select In House for the software mode. If you wish to use IIS Authentication (Windows Integrated Authentication) check the Use IIS Authentication check box. This option is used when you want to automatically log in an end user using their Windows credentials or credentials negotiated by IIS and the browser. If you turn on this option, you should also disable anonymous authentication in IIS. You may select various password storage options. In most cases select AES Case Insensitive. This will store the password encrypted in the database. Copyright 2015 Electronic Storage Corporation info@laservault.com 3

4 SQL Server Settings Enter the server name or IP address and instance name of the Microsoft SQL server you wish to use. If using SQL authentication, enter the SQL user name and password to use to connect to the server. We recommend using SQL authentication. The account will need permission to create a database and tables. If you wish to use Windows authentication to connect to the database check the Use Windows Authentication check box. Be aware that using this option will cause the LVDMS applications to connect using the Windows account they are running under. The accounts or groups of which the account is a member will need to be given access in SQL server or the connection will fail. Enter a database name. We suggest using LVDMS. The database path tells SQL Server where to create the database files. This value defaults to the server root data folder on the local machine. If SQL Server is running on another machine you will need to specify an appropriate path that exists on that machine. Note: Be sure the service account that SQL server is running under has permissions to the database path or you will get an error when you click OK. Copyright 2015 Electronic Storage Corporation info@laservault.com 4

5 SMTP Server Options If you will be using workflow to send s, enter the SMTP server settings here. Enter the DNS name or IP address of the SMTP mail server. Enter port 25 for the standard SMTP port. If your mail server is configured to run on another port (not common) enter that port number. Enter the user name and password that will be used to connect to the SMTP server. Enter an address and name that will be shown in the From field of the . If your SMTP server is configured to require a certain type of authentication, select the option from the list, otherwise select Auto. If using SSL or TLS select that option from the SMTP Security Option drop down list. Copyright 2015 Electronic Storage Corporation info@laservault.com 5

6 ActiveX Install Options Under this section you can configure the server to use a Windows domain account to run ActiveX installs. This can help with permissions issues if the end user doesn t have authority to install programs on their computer. Enter a domain, user name, and password for the installer to attempt to use. Click OK to complete the server configuration. At this point the database and web application files will be created or updated. Copyright 2015 Electronic Storage Corporation info@laservault.com 6

7 Configuring IIS in Windows Server 2012 After the initial configuration is complete, the next step is to create two applications in IIS. Make sure you have the Web Server (IIS) role installed. Check the boxes for ASP.NET 4.5 and ASP under the Application Development section. Copyright 2015 Electronic Storage Corporation

8 Launch Internet Information Services (IIS) Manager Right click on Application Pools and select Add Application Pool. Enter LVDMSConfig for the name. For the.net CLR Version, select v For the Managed Pipeline Mode, select Integrated. Click OK. Create another application pool named LVDMSWeb with the same settings. For each application pool, go into Advanced Settings and set Enable 32-Bit Applications to True. You may also want to increase the Idle Time-out setting from 20 minutes to 120. This will keep your session from timing out too quickly. Copyright 2015 Electronic Storage Corporation

9 Select the web site under which you wish to add the applications. Right click and select Add Application. Copyright 2015 Electronic Storage Corporation

10 Enter LvDmsConfig for the alias and C:\LaserVault\LVDMS\ServerRoot\LvDmsConfig for the physical path. Select LVDMSConfig for the Application Pool. Right click on the website again and select Add Application. This time enter LvDmsWeb for the alias and C:\LaserVault\LVDMS\ServerRoot\LvDmsWeb for the physical path. Select the LVDMSWeb application pool. Upgrade Note: If upgrading from a prior version, remove the C:\LaserVault\LVDMS\ServerRoot\LVDMSWeb\WebTemp folder if it exists. The WebTemp folder has been moved out of the LVDMSWeb application folder to prevent application restarts when temporary folders get deleted. Adding the WebTemp application to IIS under LVDMSWeb and pointing it to the new location solves this problem. Right click on the LvDmsWeb application that you just created and select Add Application. Enter WebTemp for the Alias, and select the LVDMSWeb application pool. For the physical path enter C:\LaserVault\LVDMS\ServerRoot\Data\Temp\LVDMSWebTemp. Copyright 2015 Electronic Storage Corporation info@laservault.com 10

11 Click on the LvDmsWeb application in the left pane. Then double click the Default Document icon in the right pane under IIS. Copyright 2015 Electronic Storage Corporation

12 Move the default.aspx document up in the list so that it is above default.asp. Copyright 2015 Electronic Storage Corporation

13 Double click on the Session State icon in the ASP.NET section. Under the Cookie Settings section increase the time out from 20 minutes to 120 minutes. This will prevent sessions from timing out too quickly. Click the Apply button on the upper right of the screen to save the changes. You may also want to change this setting in the LVDMSConfig web application. Copyright 2015 Electronic Storage Corporation

14 From a command prompt or the Start/Run dialog, run MMC /32. This will launch the 32 bit MMC Snap in Console. In the console, select File, Add/Remove Snap In. Select Component Services in the left pane and click the Add button. Click OK. Copyright 2015 Electronic Storage Corporation info@laservault.com 14

15 In the tree on the left, expand Component Services/Computers/My Computer. Then click on DCOM Config. Find the LVDMSShell.Interface item in the list on the right. Right click that item and select Properties. Copyright 2015 Electronic Storage Corporation

16 On the Security tab under Launch and Activation Permissions, change the option from Use Default to Customize. Then click the Edit button. Copyright 2015 Electronic Storage Corporation

17 In the security screen, select Add and select IIS_IUSRS. Be sure to select the group from the local machine. Give the group Local Launch and Local Activation permissions. Copyright 2015 Electronic Storage Corporation

18 File System Security Permissions There are several folders where file system permission must be granted. If you are using Anonymous Authentication in IIS, then the web applications run under the IUSR account by default. You may specify a different account. If so, grant the permissions to the account you specified rather than IUSR. Use the IIS_IUSRS group to grant permission. This will give permissions to the appropriate application pool identities. Set permissions on the following paths: C:\LaserVault IIS_IUSRS - Read/Write/Modify NETWORK SERVICE - Read/Write/Modify Note 1: If you specified a different path for the database files, be sure to give NETWORK SERVICE Read/Write/Modify permissions to that path. Note 2: If you configured SQL Server to use an account other than NETWORK SERVICE you must give that account the appropriate permissions. C:\Windows\Temp IIS_IUSRS - Read/Write/Modify C:\Program Files(x86)\EscCommonFiles IIS_IUSRS Read Note: It may not be necessary to give IIS_IUSRS permission to this folder if the group Users already has permission Document Paths By default LVDMS builds the document paths in the server root data folder. It s possible to specify an alternative path. If you do, you must give Read/Write/Modify permissions to that path. If you have disabled Anonymous Authentication in IIS then each session in the web application runs in the security context of the end user. You may need to give the above permissions to the Windows built in group Authenticated Users. Copyright 2015 Electronic Storage Corporation info@laservault.com 18