RE:Anywhere for Remote Access Installation Guide

Transcription

1 RE:Anywhere for Remote Access Installation Guide

2 Blackbaud, Inc. This publication, or any part thereof, may not be reproduced or transmitted in any form or by any means, electronic, or mechanical, including photocopying, recording, storage in an information retrieval system, or otherwise, without the prior written permission of Blackbaud, Inc. The information in this manual has been carefully checked and is believed to be accurate. Blackbaud, Inc., assumes no responsibility for any inaccuracies, errors, or omissions in this manual. In no event will Blackbaud, Inc., be liable for direct, indirect, special, incidental, or consequential damages resulting from any defect or omission in this manual, even if advised of the possibility of damages. In the interest of continuing product development, Blackbaud, Inc., reserves the right to make improvements in this manual and the products it describes at any time, without notice or obligation. All Blackbaud product names appearing herein are trademarks or registered trademarks of Blackbaud, Inc. All other products and company names mentioned herein are trademarks of their respective holder. RE7Enterprise-WebInstall-2012

3 Contents WHAT IS IN THIS GUIDE? III INSTALLATION Frequently Used Terms Overview Considerations RE:Anywhere and Network Security Installing RE:Anywhere Additional Installation Steps for Windows Server POST-INSTALLATION Setting Up Correct Security Privileges Accessing and Logging into RE:Anywhere Navigating in RE:Anywhere RE:Anywhere and Installing ActiveX Controls Differences between The Raiser s Edge and RE:Anywhere Troubleshooting INDEX

4 chapter 3 What Is In This Guide? In the RE:Anywhere for Remote Access Installation Guide, you learn how to install and establish security for the Web version of The Raiser s Edge. Considerations on page 4 Installing RE:Anywhere on page 7 Setting Up Correct Security Privileges on page 28 Accessing and Logging into RE:Anywhere on page 38 RE:Anywhere and Installing ActiveX Controls on page 39 Troubleshooting on page 40 How Do I Use These Guides? The Raiser s Edge user guides contain examples, scenarios, procedures, graphics, and conceptual information. Side margins contain notes, tips, warnings, and space for you to write your own notes. To find help quickly and easily, you can access the Raiser s Edge documentation from several places. User Guides. You can access PDF versions of the guides by selecting Help, User Guides from the shell menu bar or by clicking Help on the Raiser s Edge bar in the program. You can also access the guides on our Web site at From the menu bar, select Support, User Guides. In a PDF, page numbers in the Table of Contents, Index, and all cross-references are hyperlinks. For example, click the page number by any heading or procedure on a Table of Contents page to go directly to that page. Help File. In addition to user guides, you can learn about The Raiser s Edge by accessing the help file in the program. Select Help, The Raiser s Edge Help Topics from the shell menu bar or press F1 on your keyboard from anywhere in the program. Narrow your search in the help file by enclosing your search in quotation marks on the Search tab. For example, instead of entering Load Defaults, enter Load Defaults. The help file searches for the complete phrase in quotes instead of individual words.

5 chapter 1 Installation Frequently Used Terms Overview Considerations Pre-Installation Installation Post-Installation RE:Anywhere and Network Security Accessing The Raiser s Edge for the Web Internet Intranet Firewall Issues Examples of Security Options RE:Anywhere and The Raiser s Edge Security Installing RE:Anywhere Additional Installation Steps for Windows Server Procedure Installing RE:Anywhere with a SQL Server database Installing RE:Anywhere with an Oracle database

6 2 C HAPTER RE:Anywhere for Remote Access expands your office beyond the boundaries of a building or campus. This powerful program gives you the ability to access your database from anywhere in the world hotel rooms, conference centers, or even your home. RE:Anywhere contains many of the features available in The Raiser s Edge. The information you can view and edit is structured similarly in both programs. We have taken advantage of recent advances in Web development tools, and the Web environment itself, to bring you a robust Web version of The Raiser s Edge. RE:Anywhere brings the power of the Internet to your organization. Frequently Used Terms These terms are used throughout this Installation Guide. Understanding some Internet terminology can be difficult; this section can help you decipher some of the terms. ASP. Short for Active Server Page, a specification for a dynamically created Web page with an.asp extension that contains either Visual Basic or JavaScript code. When a browser requests an ASP page, the Web server generates a page with HTML code and sends it back to the browser. ASP pages are similar to CGI scripts, but they enable Visual Basic programmers to work with familiar tools. ActiveX. ActiveX is a set of technologies enabling software components to communicate with each other in a networked environment, regardless of the programming language in which the components were created. It is used primarily to develop interactive content for the World Wide Web. Cache. Cache is computer memory with a very short access time. A computer uses it to store frequently used instructions or data. Most Web browsers have a cache setting that stores recently used objects (such as Web pages) for quick viewing. This cache is used primarily for your browser s Back button or on Web sites with the same images on multiple pages. Domain. A group of computers and devices on a network. Domain name. A name that identifies one or more computers on the network. Domain names are also used in Web addresses (see URL). For example, blackbaud.com is the domain name of our Web server located at Encrypted. The translation of data into a secret code. Encryption is the most effective way to achieve data security. FAT. Short for File Allocation Table. An operating system uses this table to locate files on a disk. Firewall. A system designed to prevent unauthorized access to or from a private network. Firewalls can be implemented in both hardware and software, or a combination of both. Firewalls are frequently used to prevent unauthorized Internet users from accessing private networks, especially Intranets, connected to the Internet. All messages entering or leaving the Intranet pass through the firewall, which examines each message and blocks those that do not meet the specified security criteria. FTP. Short for File Transfer Protocol, the protocol used on the Internet for sending files. HTML. Short for Hyper Text Markup Language, the authoring language used to create documents on the World Wide Web. IE. Short for Internet Explorer, Microsoft s Web browser that enables you to view Web pages. IIS. Short for Internet Information Server, Microsoft s software that turns regular Windows servers into Web servers. Internet. A global network connecting millions of computers. As of the year 2002, the Internet has almost 500 million users worldwide, and that number is growing rapidly. More than 100 countries are linked into exchanges of data, news, and opinions. Internet Service Provider. See ISP.

7 I NSTALLATION 3 InterNIC. A collaborative project between AT&T and Network Solutions, Inc. (NSI), supported by the National Science Foundation. The project currently offers the following four services to users of the Internet. InterNIC Directory and Database Services online white pages directory and directory of publicly accessible databases managed by AT&T. Registration Services domain name and IP address assignment managed by NSI. Support Services outreach, education, and information services for the Internet community managed by NSI. Net Scout Services online publications managed by NSI that summarize recent happenings of interest to Internet users. Intranet. A network within an organization accessible only by the organization's members, employees, or others with authorization. IP address. An identifier for a computer or device on a TCP/IP network. Networks using the TCP/IP protocol route messages based on the IP address of the destination. The format of an IP address is a 32-bit numeric address written as four numbers separated by periods. Each number can be zero to 255. For instance, could be an example of an IP address. IPX. Short for Internetwork Packet exchange, a networking protocol used by the Novell NetWare operating systems. ISP. Short for Internet Service Provider, a company that provides access to the Internet. NetBIOS. Short for Network Basic Input Output System, an application programming interface (API) that augments the DOS BIOS by adding special functions for local area networks (LANs). Almost all LANs for PCs are based on the NetBIOS. Some LAN manufacturers have even extended the NetBIOS, adding additional network capabilities. NTFS. Short for NT File System. Windows NT and Windows 2000 can use this system to help keep track of the files on the computer. NTFS provides more security control for the file system than FAT. Protocol. An agreed-upon format for transmitting data between two devices. The protocol determines the following: the type of error checking used data compression method (if any) how the sending device indicates it has finished sending a message how the receiving device indicates it has received a message TCP/IP. Short for Transmission Control Protocol/Internet Protocol, the suite of communications protocols used to connect hosts on the Internet. TCP/IP uses several protocols, the two main ones being TCP and IP. TCP/IP is the de facto standard for transmitting data over networks. Even network operation systems with their own protocols, such as NetWare, support TCP/IP. URL. Short for Uniform Resource Locator, the global address of documents and other resources on the World Wide Web. For example, the URL of Blackbaud s Web site is Username. A name used to gain access to a computer system. Usernames, and often passwords, are required in multi-user systems. In most such systems, users can choose their own usernames and passwords. Virtual directory. A directory name used in an address that corresponds to a physical directory on a Web server. Web browser. A software application used to locate and display Web pages. Microsoft Internet Explorer is a Web browser. Web server. A computer that delivers (serves up) Web pages. Every Web server has an IP address and possibly a domain name. Any computer can be turned into a Web server by installing Web server software and connecting the machine to the Internet.

8 4 C HAPTER WWW. Short for World Wide Web, a system of Internet servers that support specially formatted documents. The documents are formatted in a language called HTML (Hyper Text Markup Language) that supports links to other documents, as well as graphics, audio, and video files. This means you can jump from one document to another simply by clicking on hot spots. Not all Internet servers are part of the World Wide Web. Overview RE:Anywhere is designed to give you the power of The Raiser s Edge on the Web. It delivers data from your Raiser s Edge database to your users through a Web server. The data is then presented to a Web browser (Internet Explorer 5.x or 6) using Web pages and forms. Changes to data can be made on the forms and sent back to the Web server where the information is processed, stored, and saved in the database. A network connection ensures data is transferred successfully between the database, Web server, and browser. When using RE:Anywhere on the Internet, you should set up proper security to limit access to your database. Blackbaud does not accept any responsibility for incursion into your system. You should use knowledgeable technical staff or consulting services to determine your organization s security needs. For more information about security, see RE:Anywhere and Network Security on page 5 and chapter two, Post-Installation. Considerations Please read this entire guide before beginning the RE:Anywhere installation. When installing RE:Anywhere you should consider the following: Pre-Installation Warning: Hardware requirements are subject to change and updated as necessary. We recommend visiting for the most recent hardware requirements. Make sure your hardware meets the minimum processing speed and memory requirements. For more information about system requirements, see the hardware specifications document on our Web site at Additionally, RE:Anywhere requires a mouse to navigate some fields and screens and should be viewed on monitors with an 800 x 600 or higher resolution. Make sure you have a CD-ROM drive you can access from the Web server. Set up your Web server s Internet connection if you want to use RE:Anywhere to access your database from the Web. To set up your Internet connection, contact your local Internet Service Provider (ISP). Your ISP can also register your domain name. For the Web server, RE:Anywhere is developed to run on Microsoft s Internet Information Server (IIS), version 5 or 6. IIS 5 is included in Windows Windows Server 2003 includes IIS 6. If you are using Windows Server 2003, you must specify some additional settings in IIS after installation. For more information, see Additional Installation Steps for Windows Server 2003 on page 20. Set up a permanent connection between your Web server and Raiser s Edge database. Please read RE:Anywhere and Network Security on page 5 of this guide for important information in setting up and maintaining your Web environment. You must use separate database and Web servers. Install The Raiser s Edge 7 workstation components on your Web server and log into your Raiser s Edge database at least once before you install RE:Anywhere. For security reasons, we strongly recommend you install both The Raiser s Edge 7 and RE:Anywhere to directories on local drives formatted with the NTFS file system. This will allow you to tightly control secure access to the files on your Web server. FAT formatted hard disks are not secure.

9 I NSTALLATION 5 Install Microsoft Internet Explorer version 5.x or 6 on your Web server (if not already installed). For the workstation, Microsoft s Internet Explorer (IE), version 5.x or 6 is also required. IE version 5.x installs automatically with The Raiser s Edge 7. IE versions 5.x and 6 have been tested and certified by Blackbaud to work reliably with RE:Anywhere. Other browsers are not supported and may not display or operate correctly with RE:Anywhere. Plan your Web and network security. For more information about security, see RE:Anywhere and Network Security on page 5. If you want to preview reports on RE:Anywhere, you must install a printer driver to your Web server before you install RE:Anywhere. A printer does not have to be connected to the server, but the driver must be installed and designated as the default printer. This action must be performed under the Administrator account. Reports will still print at the user s computer, not at the Web server. If you use NTFS formatted drives, you should specify that the printer be shared. Installation Log in as Administrator. If you are performing a manual installation, know the names of your Raiser s Edge database and the server where it is located, or the name of your Oracle Service. If you do not know this information, contact your system administrator. You can also find this information in the Blackbaud Management Console. If you select the Use Deployment Information option during installation, the RE:Anywhere setup program automatically obtains this information from the Blackbaud Management Console. Know what server protocol you want to use to connect the Web server and the database server. We strongly recommend TCP/IP; however, the protocol you use depends on the protocol specified on the Raiser s Edge database server. If you do not know which protocol you are using, contact your system administrator. This information is also available on the Blackbaud Management Console when you click the Databases option. Post-Installation Change the Supervisor password in RE:Anywhere. Set up security. For more information about configuring security, see chapter two, Post-Installation. To create letters or directly from a constituent record you must specify some Internet Explorer security settings on client machines. Additionally, on client machines with Office XP, service pack 3 or greater must be installed. For more information, see Browser Settings for Creating Letters and from Constituent Records on page 36. RE:Anywhere and Network Security Note: For more information on SSL installation and configuration, consult your IIS documentation and the Microsoft and VeriSign Web sites. One of the most important decisions you have to make when planning the configuration of RE:Anywhere is how to allow secure access to your database from your Web server. With the variety of possible network configurations available, this becomes a complex issue with many solutions. No matter which security configuration you select, you should enable your IIS server to run Secure Socket Layer (SSL). SSL provides a level of encryption to all incoming and outgoing HTTP requests equal to that of an online banking or secure e-commerce site. SSL affords a level of safety while the information travels on the Internet. This section outlines basic issues to provide you with information you need to make decisions for your organization. We recommend you discuss these options with your Network Administrator, Firewall Vendor, or Internet Service Provider.

10 6 C HAPTER Accessing RE:Anywhere There are two possible options for accessing RE:Anywhere based on whether your users are physically located outside the organization and accessing the database through the Internet, or whether they are located inside it and accessing the database through an intranet. Intranet RE:Anywhere can run on a Web server within your organization accessible only to those logged onto your internal network. This method is secure, since all users have to be authenticated as valid users of your internal network before gaining access to RE:Anywhere, but it does not allow access to the program directly from your Web site. This solution requires users located outside your organization to dial into your network. This may not be feasible for a large number of simultaneous users, depending on your hardware available for such access. Internet RE:Anywhere can run on a Web server visible on the Internet through your ISP, allowing you to access the Web site from a browser through an Internet connection provided by an ISP (such as Earthlink or America Online). However, the Web server must be physically located on the same network as the Raiser s Edge database, it cannot be hosted by your ISP. With this method, others may be able to see your Web site but will be unable to log in without a Raiser s Edge for the Web login name and password. You should have a firewall in place to prohibit unauthorized access to your internal network through your organization s Internet connection. If such a firewall exists between the Web server and your internal network, then you must consider how you will allow access to your Raiser s Edge database from your Web server. This is discussed further in the following section, Firewall Issues. Firewall Issues If you plan to install RE:Anywhere on an Internet server, you need to consider where to place the database. Users within your organization probably access The Raiser s Edge database through The Raiser s Edge 7 desktop application. For this reason, your database most likely needs to be on your organization s network, behind the firewall. This is the safest place for your database and reduces the chances of unauthorized access. How do you allow the Web server to access the database through the firewall? You have more than one option or combination of options to accomplish this; you should consider all of them carefully. Your options depend on the make and model of your firewall software. Work with knowledgeable technical staff or consultants to determine your organization s needs. A Firewall vendor and Internet Service Provider may also have good suggestions. Listed below are a few possible options. Blackbaud does not accept any responsibility for incursion into your system. It is your organization s responsibility to ensure your system is secure. Work with a firewall security consultant to decide the best way to set up your system. Examples of Security Options Open a pinhole in your firewall. A pinhole is created by allowing access only through a particular port in your firewall. In the case of RE:Anywhere, you can allow database transactions to pass through the port assigned only to your database. Warning: If your Web server is communicating with your database through a firewall, be sure you do not configure your firewall to filter UDP packets. Adaptive Server Anywhere TCP/IP uses UDP packets to communicate. UDP is the default filter on most firewalls.

11 I NSTALLATION 7 Some firewalls have a feature known as packet filtering. This option permits specific IP addresses to have access through your firewall. All your internal computers have IP addresses within a pre-defined InterNIC range. Packet filtering allows computers with these pre-defined IP addresses to access internal machines (in our case, the database server) from the Web server through the firewall. A filter is added between the Web server and the Internet to prohibit access to the Web server unless a pre-defined address is used. Additionally, you can use Secure Socket Layer (SSL). SSL is a data security method available as part of your IIS program. SSL encrypts all data passing between the Web browser and the client. The data is secure while in transit through the firewall and decrypted once the client accesses it. RE:Anywhere and The Raiser s Edge Security RE:Anywhere is designed to respect the security settings you specify in Administration in The Raiser s Edge. Users of RE:Anywhere are granted or denied access to information based on your security settings in The Raiser s Edge. In The Raiser s Edge Enterprise, you can integrate Windows authentication so that users are able to access The Raiser s Edge through their Windows log in information without the need to enter a Raiser s Edge user name or password. To enable the use of integrated Windows authentication logins in RE:Anywhere, the IIS Virtual Directory containing the RE:Anywhere application must be configured to support a non-anonymous authentication mode. This enables the connecting user to be authenticated to an existing Windows domain account instead of through the anonymous account. Consult your IIS documentation for information about how to configure your virtual directory appropriately, and see the following Microsoft knowledgebase articles for additional information. Windows 2000: Windows Server 2003: Installing RE:Anywhere Warning: You should shut down your Web server before you begin installing RE:Anywhere. You must stop your Web server service when you install RE:Anywhere. If you do not, a screen appears during the installation process informing you that the installation program will shut down the Web server. If it shuts down the Web server service, the installation program automatically restarts it when RE:Anywhere installation is complete. When you install RE:Anywhere, the setup program performs several functions, including: Creating the directory of your choice on your hard drive in which to place RE:Anywhere files. Locating your pre-installed The Raiser s Edge 7 client program and adding additional program files to its subdirectories. Creating a number of subdirectories under RE:Anywhere installation directory. Creating a Virtual Directory (REWeb70) to RE:Anywhere installation directory and granting the anonymous user rights to read and execute the contents of the directory and the contents of all its subdirectories. Configuring the Virtual Directory to be an IIS Web Application Directory and marking it to run In-Process with IIS. Installing the Seagate Crystal Reports ActiveX and Java Smartviewers in a subdirectory of RE:Anywhere installation and creating a Virtual Directory (REWeb70Viewers) for them. Separate procedures are included for installing RE:Anywhere with SQL Server and Oracle databases. If you are using a SQL Server database, see Installing RE:Anywhere with a SQL Server database on page 8. If you are using an Oracle database, see Installing RE:Anywhere with an Oracle database on page 14.

12 8 C HAPTER Also, a few additional steps must be taken after you install RE:Anywhere on a Windows 2003 server. For more information about these steps, see Additional Installation Steps for Windows Server 2003 on page 20. Installing RE:Anywhere with a SQL Server database If you want to preview reports and mailings, you must install a local shared printer driver on your Web server before you install RE:Anywhere. 1. From your Web server, insert the Blackbaud CD into the CD-ROM drive. 2. From Windows, select Run from the Start button on the taskbar and type D:\REWEB\SETUP.EXE, where D is the location of (or complete path to) the CD-ROM drive. Setup begins. If you do not have any printer drivers installed on your Web server, a message appears. Warning: To preview reports and mailings, you must have a printer driver installed on your Web server before installing RE:Anywhere. If you use NTFS formatted drives, you must specify that the printer is shared. 3. To preview reports and mailings, you must have a local printer driver installed onto the Web server before you install RE:Anywhere. Click Yes to cancel the RE:Anywhere installation so you can install a printer driver on your Web server. The driver must be installed on the Administrator user name profile (the same user name you log in under to install RE:Anywhere). You must specify that the printer be shared. If you do not want to install a printer driver at this time, click No to continue. However, we strongly recommend you install a printer driver on your Web server before you install RE:Anywhere so you will be able to preview reports and mailings.

13 I NSTALLATION 9 The InstallShield Wizard screen appears. 4. Click Next. A screen with The Raiser s Edge for the Web license agreement appears. 5. If you accept the terms of the license agreement, click Yes. A status screen appears.

14 10 C HAPTER If the setup program determines that you have the proper Internet Server components installed on your Web server, a screen appears where you can select a configuration method. 6. To continue the installation, the RE:Anywhere setup program needs the server and database name of your Raiser s Edge 7 database server. If you want the setup program to access the Blackbaud Management Console and obtain this information, mark the Use Deployment Information option and proceed to the next step in this procedure. Warning: Certain security and firewall settings may prevent the RE:Anywhere setup program from accessing the Blackbaud Management Console. In these cases, you must use the Manually Enter Database Information configuration option. If you want to enter your server and database name manually, mark the Manually Enter Database Information option and proceed to step Click Next. The Deployment Output Location screen appears.

15 I NSTALLATION Browse to the directory on your network in which you created your deployment package with the Deployment Wizard in the Blackbaud Management Console. Proceed to step 11 of this procedure. 9. Click Next. If you selected the Manually Enter Database Information option, a screen appears where you can enter your server and database information. 10. Enter the name of the Server on which your database is located. Enter the name of your Database. The database name is assigned in the Blackbaud Management Console. If you are unsure of your Server or Database names, you can find them in the Blackbaud Management Console, or check with your database administrator. 11. Click Next. If the setup program detects more than one virtual Web site on your Web server, a screen appears so you can select the site to which you want to install the virtual directories for RE:Anywhere. If you have only one virtual Web site on your server, the installation defaults to that site and this screen does not appear. 12. In the Web Sites field, select the Web site to which you want to install the program.

16 12 C HAPTER 13. Click Next. A screen appears where you can select the destination for The Raiser s Edge for the Web files. 14. Specify the directory where you want to install the RE:Anywhere server application files. The default location is based on the location of the virtual Web site to which the program s virtual directories will be installed. Use Browse, if necessary, to select a new location. 15. Click Next to begin installing files and creating the virtual directory. A screen appears where you can select the program folder for RE:Anywhere. 16. Specify the name of the RE:Anywhere folder that will be created. The default is The Raiser s Edge For the Web 7. You can change the name or select an existing folder in the list.

17 I NSTALLATION Click Next. A status screen displays information about the installation process. When the installation is finished, the Setup Complete screen appears. 18. Before you can log into RE:Anywhere, you must restart your computer. Mark an option to indicate whether you want to restart your computer now or later. 19. Click Finish. Warning: We strongly recommend you set up security privileges for RE:Anywhere as soon as you finish the installation process. Follow the instructions in the Accessing and Logging into section of the Installation Guide to begin using RE:Anywhere. We strongly recommend setting up security privileges for RE:Anywhere as soon as you finish the installation process. See the following chapter of this book for more information about setting up security.

18 14 C HAPTER Installing RE:Anywhere with an Oracle database If you want to preview reports and mailings, you must install a local shared printer driver on your Web server before you install RE:Anywhere. 1. From your Web server, insert the Blackbaud CD into the CD-ROM drive. 2. From Windows, select Run from the Start button on the taskbar and type D:\REWEB\SETUP.EXE, where D is the location of (or complete path to) the CD-ROM drive. Setup begins. If you do not have any printer drivers installed on your Web server, a message appears. Warning: To preview reports and mailings, you must have a printer driver installed on your Web server before installing RE:Anywhere. If you use NTFS formatted drives, you must specify that the printer is shared. 3. To preview reports and mailings, you must have a local printer driver installed onto the Web server before you install RE:Anywhere. Click Yes to cancel the RE:Anywhere installation so you can install a printer driver on your Web server. The driver must be installed on the Administrator user name profile (the same user name you log in under to install RE:Anywhere). You must specify that the printer be shared. If you do not want to install a printer driver at this time, click No to continue. However, we strongly recommend you install a printer driver on your Web server before you install RE:Anywhere so you will be able to preview reports and mailings.

19 I NSTALLATION 15 The InstallShield Wizard screen appears. 4. Click Next. A screen with The Raiser s Edge for the Web license agreement appears. 5. If you accept the terms of the license agreement, click Yes. A status screen appears.

20 16 C HAPTER If the setup program determines that you have the proper Internet Server components installed on your Web server, a screen appears where you can select a configuration method. 6. To continue the installation, the RE:Anywhere setup program needs the Oracle Service name of your Raiser s Edge 7 database server. If you want the setup program to access the Blackbaud Management Console and obtain this information, mark the Use Deployment Information option. Warning: Certain security and firewall settings may prevent RE:Anywhere setup program from accessing the Blackbaud Management Console. In these cases, you must use the Manually Enter Database Information configuration option. If you want to enter the service name manually, mark the Manually Enter Database Information option and proceed to step Click Next. The Deployment Output Location screen appears.

21 I NSTALLATION Browse to the directory on your network in which you created your deployment package with the Deployment Wizard in the Blackbaud Management Console. Proceed to step 11 of this procedure. 9. Click Next. The Raiser s Edge 7 Database screen appears. 10. Enter your Oracle Service name. If you do not know your Oracle Service name, contact your system administrator. You can also find this information in the Blackbaud Management Console. From the console, click the Databases link. 11. Click Next. A screen appears where you can enter Server Protocol Options. 12. Select your server protocol: TCP/IP, NetBIOS, SPX, or IPX. This should be the same protocol used on your Raiser s Edge database server. 13. Click Next. If the setup program detects more than one virtual Web site on your Web server, a screen appears so you can select the site to which you want to install the virtual directories for The Raiser s Edge for the Web.

22 18 C HAPTER If you have only one virtual Web site on your server, this screen does not appear. 14. In the Web Sites field, select the Web site to which you want to install the program. 15. Click Next. A screen appears where you can select the destination for The Raiser s Edge for the Web files. 16. Specify the directory where you want to install the RE:Anywhere server application files. The default location is based on the location of the virtual Web site to which the program s virtual directories will be installed. Use Browse, if necessary, to select a new location.

23 I NSTALLATION Click Next to begin installing files and creating the virtual directory. A screen appears where you can select the program folder for RE:Anywhere. 18. Specify the name of the RE:Anywhere folder that will be created. The default is The Raiser s Edge For the Web 7. You can change the name or select an existing folder in the list. 19. Click Next. A status screen displays information about the installation process.

24 20 C HAPTER When the installation is finished, the Setup Complete screen appears. 20. Before you can log into RE:Anywhere, you must restart your computer. Mark an option to indicate whether you want to restart your computer now or later. 21. Click Finish. Warning: We strongly recommend you set up security privileges for RE:Anywhere as soon as you finish the installation process. Follow the instructions in the Accessing and Logging into section of the Installation Guide to begin using RE:Anywhere. We strongly recommend setting up security privileges for RE:Anywhere as soon as you finish the installation process. See the following chapter of this book for more information about setting up security. Additional Installation Steps for Windows Server 2003 To run RE:Anywhere on Windows Server 2003, you must perform several additional steps after the installation completes. You need to enable sub-authentication in IIS. Windows Server 2003 includes IIS 6. In earlier versions of IIS, by default you could use sub-authentication to manage passwords on anonymous accounts. IIS 6 does not enable sub-authentication by default. However, you can enable sub-authentication to manage passwords for anonymous accounts using the following steps: Register IISSubA.dll. Click Start, Run and enter the following command: rundll32.exe c:\windows\system32\iissuba.dll,registeriissuba Note that c:\windows is the default path for the Windows folder in Windows Server If your installation uses a different path, you must adjust the command accordingly.

25 I NSTALLATION 21 In IIS 6, run all worker processes using Anonymous authentication as LocalSystem. This means that on the Identity tab of the Application Pool used by RE:Anywhere, the LocalSystem setting must be selected.

26 22 C HAPTER In IIS 6, set the status of the Web Service Extension for Server Side Includes and Active Server Pages to Allowed. You must map the.fun file extension to the MIME type of application/x-javascript. This enables files containing client-side JavaScript functions to be downloaded and cached for better performance. Open My Computer and select Manage. Expand Services and Applications on the Computer Management tree view.

27 I NSTALLATION 23 Right-click on Internet Information Services (IIS) Manager and select Properties from the menu. Click MIME Types. A screen appears listing file extensions in alphabetical order.

28 24 C HAPTER Scroll through the list of extensions and look for the.fun extension. If it is in the list and mapped to the application/x-javascript MIME type, you need not do anything more. If the.fun extension does not appear in the list, click New. Enter.fun as the extension and application/x-javascript as the MIME type, and click OK. To preview reports and mailings, a new Application Pool needs to be added to IIS (based on the default pool). The Report Viewer application then needs to be set to use this pool. Open My Computer. Select Manage, Internet Information Services. Right-click on Application Pools and select New Pool.

29 I NSTALLATION 25 Specify a name and select to use existing pool as a template and choose DefaultAppPool. The identity of the new pool can be left at Network Service as long as DefaultAppPool is set to Local System. Under Web Sites, select ReWebRepView70, right-click and select Properties. Under Virtual Directory, Application Pool, select the new application pool created above. During installation the setup program automatically performs these functions: Sets the application-level metabase property AnonymousPasswordSync to True. Sets the application-level metabase property AspEnableParentPaths to True. Creates a script mapping for the.fun extension (client-side JavaScript include files). After enabling sub-authentication, adding the.fun extension, and adding a new application pool in IIS 6, you must specify security settings for RE:Anywhere. Establish the same settings detailed in Security Rights for Anonymous Users on page 33. Then, for Windows Server 2003 you must create an additional setting. If The Raiser s Edge is a network server installation, the BBREWeb7Group may need to be given read and write permissions for \Program Files\Common Files\Blackbaud (or its equivalent if you installed to another directory).

30 26 C HAPTER

31 chapter 2 Post-Installation Setting Up Correct Security Privileges Anonymous User Security Security Rights for Anonymous Users Additional Security Settings for RE:Anywhere Dashboards Setting Up a More Secure Site Without Anonymous Access Additional Security Settings for Oracle Databases Browser Settings for Creating Letters and from Constituent Records Accessing and Logging into RE:Anywhere Navigating in RE:Anywhere RE:Anywhere and Installing ActiveX Controls Differences between The Raiser s Edge 7 and RE:Anywhere Troubleshooting Procedures Setting anonymous user access permissions Specifying additional security settings for Oracle databases Setting up a more secure site without anonymous access Accessing and logging into RE:Anywhere Loading ActiveX features into RE:Anywhere Determining which account is used when a user logs into the Web server as an Anonymous user

32 28 C HAPTER Setting Up Correct Security Privileges Note: For information about how Raiser s Edge security settings affect RE:Anywhere, see RE:Anywhere and The Raiser s Edge Security on page 7. After installing RE:Anywhere, you need to set access privileges to some files from Windows Explorer. During installation, the setup program creates a user group called BBReweb7Group. The anonymous user is automatically added to this group. If you want to change the anonymous user, you can add the new user to BBReweb7Group and that user inherits all the security rights of the group. RE:Anywhere setup program defaults the Anonymous User to the same Anonymous User account used by IIS. Some additional security settings are needed to enable functions such as previewing reports and viewing query results with an Oracle database. For more information about these settings, see Additional Security Settings for Oracle Databases on page 36. In Windows 2000 and 2003, you can set up security for anonymous users, or you can set up a more secure site that does not use anonymous access. If you do not want to use anonymous access, you can disable it after the RE:Anywhere install. If you do so, make sure you follow the instructions in Setting up a more secure site without anonymous access on page 34 to grant appropriate privileges to users accessing RE:Anywhere. Anonymous User Security The following instructions assume you are operating your Web server with an Anonymous User account. The RE:Anywhere setup program automatically assigns the Anonymous User account to the BBReweb7Group user group. Therefore, by setting security privileges for this group, you set access rights for your anonymous users. The Anonymous User account is used by all Web browsers when accessing files on the Web server. File and directory security rights you grant to this account will be the rights for all individuals accessing your Web server while browsing RE:Anywhere. The Anonymous User account is created by the IIS installation. The account is typically a local Windows account on the server with the name IUSR_<machine name>. If you are not sure which user account is your anonymous user and you want to find out, see Determining which account is used when a user logs into the Web server as an Anonymous user on page 42.

33 POST-INSTALLATION 29 Setting anonymous user access permissions During installation, the BBReweb7Group is created and the Anonymous user account is automatically added to this user group. Therefore, you can set access permissions for anonymous users by establishing settings for the BBReweb7Group. You must establish security for several directories. This procedure shows how to establish access permissions for the REWeb70 directory, but you can apply similar steps for other directories. See the table on page 33 for a full list of the directories and corresponding security settings you need to establish. 1. Open Windows Explorer or My Computer and locate the directory where you installed RE:Anywhere. The default directory is based on the location of the virtual Web site to which you installed RE:Anywhere s virtual directories. 2. Select the REWeb70 folder. 3. Right-click and a shortcut menu appears. Select Properties.

34 30 C HAPTER 4. Select the Security tab on the REWeb70 Properties screen. 5. To add the Reweb7Group to this list and give the group read and execute rights to the REWeb70 directory, click Add. The Select Users, Computers, or Groups screen appears. 6. Select your Web server in the Look in field. The BBReweb7Group should list in the Name column. 7. Select the BBReweb7Group and click Add.

35 POST-INSTALLATION Click OK. The REWeb70 Properties screen appears. The BBReweb7Group appears in the Name box. Note: When you do not want a directory to inherit permissions from a parent folder, do one of two things. Either unmark the Allow inheritable permissions from parent to propagate this object checkbox or mark the opposite permission (Allow or Deny) to override the inherited permission. 9. To set permissions for the REWeb70 directory, mark the Allow checkbox in the Read & Execute and Read rows. The settings you establish here will vary according to the directory for which you are establishing security. Some subdirectories require you to set more advanced rights (such as Delete). See the table on page 33 for a full list of the directories and corresponding security settings you need to establish.

36 32 C HAPTER 10. To set advanced access rights for a directory, click Advanced. The Access Control Settings screen appears. When setting rights for the RE7 SysDB, RE7 DLL, RE7 RPT, and RE7 TLB directories, you must mark the Reset permissions on all child objects and enable propagation of inheritable permissions checkbox. See the table on page 33 for a full list of the directories and corresponding security settings you need to establish. 11. In the Permission Entries box, select the BBReweb7Group and click View/Edit. The Permission Entry screen appears. On the Permission Entry screen, you can mark checkboxes to allow other rights such as Delete.

37 POST-INSTALLATION 33 Note: Mark the Apply these permissions to objects and/or containers within this container only checkbox only when you set security for the RE7 and REWeb70 directories. When setting security for the REWeb70 and RE7 directories only, mark the Apply these permissions to objects and/or containers within this container only checkbox. For the other directories, leave the checkbox unmarked. 12. When you finish setting advanced rights, click OK. You return to the Access Control Settings screen. 13. Click OK. You return to the Properties screen. 14. Click OK. Repeat this procedure using the table on page 33 to assign appropriate rights to subdirectories for the BBReweb7Group. If you are using an Oracle database, also see Additional Security Settings for Oracle Databases on page 36. Security Rights for Anonymous Users Note: To run reports, the IWAM_<machine name> account must also have RWXD privileges in the REWeb70 subdirectory. IWAM_<machine name> is automatically added to the BBReweb7Group during installation. The following table shows the permissions you must set in various directories on the Web server for the BBReweb7Group. The permissions include Read (R), Read and Execute (X), and FULL rights. Set the permissions so that they propagate down to all subdirectories and files within the specified directory. Directory or File Directory Permission s File Permissio ns Example Description RE7 Directory RX RX C:\Program Files\Blackbaud\The Raiser's Edge Raiser s Edge 7 install. This setting is necessary to enable Dashboards RE7 SysDB Directory Program Files\Common Files\ System directory Program Files\Common Files\ Blackbaud directory FULL FULL C:\Program Files\Blackbaud\The Raiser's Edge\SYSDB RX RX C:\Program Files\ Common Files\ System RX RX C:\Program Files\ Common Files\ Blackbaud Subdirectory of The Raiser s Edge 7 install Contains ADO, MSADC, and OLE DB components Every directory above the REWeb70 install directory R R C:\ Needed to support FTP Exports from The Raiser s Edge 7 REWeb70 Directory and subdirectories FULL FULL C:\Inetpub\wwwroot\ REWEB70 Directory to which you installed RE:Anywhere