SIMS Multi-user Installation Instructions

SIMS Multi-user Installation Instructions 2011 SIMS Software

TABLE OF CONTENTS REQUIREMENTS... 3 COMMON REQUIREMENTS... 3 DATABASE REQUIREMENTS... 3 SERVER REQUIREMENTS... 3 INSTALLING SIMS CLIENT... 5 OVERVIEW... 5 STEP BY STEP INSTALLATION... 5 INSTALLING SERVER PREREQUISITES... 9 MICROSOFT SQL SERVER EXPRESS EDITION... 9 DOWNLOAD THE INSTALLATION FILES... 10 SQL SERVER INSTALLATION... 10 SQL SERVER CONFIGURATION... 15 INTERNET INFORMATION SERVICES (IIS) INSTALLATION ON WINDOWS XP... 17 INTERNET INFORMATION SERVICES (IIS) INSTALLATION ON WINDOWS 2003... 18 INTERNET INFORMATION SERVICES (IIS) INSTALLATION ON WINDOWS VISTA... 20 ASP.NET REGISTRATION WITH IIS... 22 INSTALLING SIMS SERVER... 24 OVERVIEW... 24 STEP BY STEP INSTALLATION... 25 MANUAL DATABASE INSTALLATION... 29 MANUAL WEB SERVICE INSTALLATION... 29 LICENSING SIMS SERVER... 32 OVERVIEW... 32 STEP 1: OBTAIN NEW LICENSE FILE... 32 STEP 2: COPY LICENSE TO INSTALLATION FOLDER... 33 STEP 3: EXECUTE SIMS SERVER INSTALLER... 34 DEPLOYING SIMS CLIENT WITH CLICKONCE... 35 LDAP CONFIGURATION... 38 INTEGRATED AUTHENTICATION BETWEEN SQL SERVER AND IIS... 39 STEP 1 CREATE A COMMON ACTIVE DIRECTORY ACCOUNT... 39 STEP 2 WEB SERVER (IIS) FILE SYSTEM CONFIGURATION... 41 STEP 3 ASSIGN ASP.NET PERMISSIONS... 43 STEP 4 CREATE AN APPLICATION POOL WITH A CUSTOM IDENTITY... 43 STEP 5 - ASP.NET IMPERSONATION... 46 STEP 6 SQL SERVER CONFIGURATION... 47 STEP 7 - SIMS CONNECTION STRING CONFIGURATION... 51 2

Requirements Common Requirements The following items are required to run either SIMS Server or SIMS Client. These requirements are largely based on the requirements for Microsoft s.net Framework v3.5 SP1. Type Minimum Recommended CPU 400 Mhz 800 Mhz or faster Memory 128MB 256MB or above Hard Disk Space 300MB server / 340MB client 1GB Display 1024x768 resolution, 256 colors 1280x1024, 16-bit color Operating System Windows 2000 SP4, Windows XP SP2, Windows Server 2003 SP2, Windows 2008, Windows Vista, Windows 7 Windows Server 2003 or 2008 for SIMS Server Database Requirements If you don t already own Microsoft SQL Server, and you ll have less than 20 concurrent users, we recommend using Microsoft s free SQL Server 2005 Express Edition. The following items are required to run SQL Server 2005 Express: Type Minimum Recommended CPU 600 Mhz Pentium III 1Ghz or faster Memory 192MB 512MB or above Hard Disk Space 350MB for recommend installation 1GB for full installation Display 1024x768 resolution, 256 colors 1280x1024, 16-bit color Operating System Windows 2000 SP4, Windows XP SP2, Windows Server 2003 SP2, Windows 2008, Windows Vista, Windows 7 Windows Server 2003, Windows Server 2008, Windows Vista, Windows 7 Check here for additional information on the minimum requirements for SQL Server 2005 Express Edition: http://www.microsoft.com/sql/editions/express/sysreqs.mspx The SIMS database takes between 100MB and 300MB for more installations. Large databases (>200,000 rows per module) can take up to 3GB. Maximum database size is 16 terabytes. Check here for additional information on the maximum capacity specifications for SQL Server 2005: http://msdn2.microsoft.com/en-us/library/ms143432.aspx Server Requirements There are two main parts to SIMS Server: the web services and the database. You can install these parts on the same server or on multiple machines. The database requires Microsoft SQL Server 2005 or 2008. The web 3

services requires Microsoft Internet Information Server (IIS) version 5.1, 6.0, or 7.0. IIS is included with Windows although it may not be installed by default. The database (SQL Server) stores all the data. The web services contain the SIMS application logic and handle communication with SIMS clients. There is no longer a SIMS Server application running on your server. The web services, which contain the SIMS application logic, are only active when they receive client requests. This reduces the impact on your system when it s idle, which corrects a problem in earlier versions of SIMS. The following chapters help you configure your server before installing SIMS. Use these as a guide to confirm your configuration is correct. 4

Installing SIMS Client Overview The SIMS Client installer doesn t make any changes to your registry. It just copies the files and updates the.config files so they can connect to your server. Once installed, you can distribute the client by copying the C:\Program Files\SIMS Software\Client\ folder. The following operations take place during client installation: Installer copies files (140MB) to C:\Program Files\SIMS Software\Client\ Installer optionally copies video training files (305MB) to C:\Program Files\SIMS Software\Client\Documentation\ All.config files are updated with the connection information provided during installation A shortcut is created under Start / Program Files / SIMS Software A shortcut is created on your desktop Step by Step Installation Run the installer by clicking on the SIMS Client link on the CD autorun. Select Next. 5

You can change the default installation folder and select Next. Check this box to enable SSL encryption between the client and server. Checking this box does nothing more than change the connection string prefix from http:// to https://. Your IIS server must already be configured to support SSL. Check this box to copy all the SIMS training videos to your hard drive. This option takes approximately 305mb. You can view the movies from the SIMS CD if you choose not to install them on your hard drive. 6

You can change the default installation folder and click Next. You can select Disk Cost to view how much space will be used during installation. This value includes temporary space required during installation. It is not the final footprint on your hard drive. If you change the destination folder to a drive other than C:, the disk cost window may still show space required on C:. This is because of the way the Windows Installer package manages temporary files. Click Next to begin copying files. 7

The following screen will appear upon the successful installation of SIMS Client. 8

Installing Server Prerequisites Microsoft SQL Server Express Edition Microsoft placed the following restrictions on the free versions of SQL 2005 and 2008. Restriction Express Edition Standard Edition Database size 4 GB 16 TB RAM 1 GB OS maximum 2 SMP 1 1 4 Database Engine Tuning Wizard No Yes SQL Server Agent No Yes Active Directory Registration Yes Yes 1 Symmetric Multiprocessing (SMP) allows multiple CPUs to work together to improve performance. You can install MSDE and SQL Express on machines with dual or quad CPUs. However, they will only take advantage of the number of CPUs shown above. 2 Maximum is 4GB for Windows 2003 Standard, 64GB for Windows 2003 Enterprise, and 128GB for Windows 2003 Data Center. Check here for information on the different editions of SQL Server: http://www.microsoft.com/sql/prodinfo/features/compare-features.mspx 9

Download the Installation Files We recommend installing SQL Server 2005 Express Edition with Advanced Services. This version includes a GUI tool for managing SQL Server. You can download the installer here: http://go.microsoft.com/fwlink/?linkid=65109 SQL Server Installation 1) Run the installer (SQLEXPR_ADV.EXE) retrieved in the previous section. Read the license agreement and then click Next for the next three windows. 10

2) Uncheck the box labeled Hide advanced configuration options. Click Next. 3) We recommend the following configuration for most customers. In particular, make sure Management Studio Express and Connectivity Components are selected under Client Components. You may want to add Replication and Full-Text Search if you need those features. Click on the hard drive icon to the left of each service to bring up a configuration menu. 11

4) Select Default Instance unless you have other instances of SQL Server running on the same machine. 5) Make sure SQL Server and SQL Browser are checked and click Next. 12

6) Select Mixed Mode. Specify a password for the sa account. This is the password used during SIMS Server installation. 7) Leave the collation settings unchanged and click Next. 8) Uncheck Enable User Instances and click Next. 13

9) Click Next. 10) Click Next. 11) Select Finish. 14

SQL Server Configuration 1) You need to change the default SQL Server settings to allow remote connections. Select Start / Programs / Microsoft SQL Server 2005 / Configuration Tools / SQL Server Surface Area Configuration. 2) Select Surface Area Configuration for Services and Connections. 15

3) Select Remote Connections under MSSQLServer / Database Engine. Select Local and remote connections and Using both TCP/IP and named pipes. Click OK. 4) Close the Surface Area Configuration tool. Select Start / Programs / Administrator Tools / Computer Management. Select Services and Applications / Services. Right click on SQL Server (MSSQLSERVER) and select All Tasks / Restart. 16

Internet Information Services (IIS) Installation on Windows XP IIS is a free application included with Microsoft Windows. It allows SIMS Server to communicate with clients using a single TCP port. Using IIS lets SIMS take advantage of features like SSL encryption and clustering. It also makes it easier for SIMS traffic to pass through firewalls or over Virtual Private Connections (VPNs). IIS is included with Windows but it may not be installed or enabled by default. The following steps will ensure IIS is correctly installed and configured for SIMS Server. You may need your original Windows CD or DVD to complete these steps. NOTE: If you installed the Microsoft.NET Framework v2.0 before installing IIS, you must register the framework with IIS. See the task titled ASP.NET Registration with IIS for more information 1) Select Start / Settings / Control Panel. 2) Double click on Add or Remove Programs. 3) Select Add/Remove Windows Components. 4) Make sure Internet Information Services (IIS) is checked. 5) Highlight Internet Information Services (IIS) and select Details 17

6) Make sure you check at least Common Files, Internet Information Services Snap-In, and World Wide Web Service. 7) Select OK. Internet Information Services (IIS) Installation on Windows 2003 IIS is a free application included with Microsoft Windows. It allows SIMS Server to communicate with clients using a single TCP port. Using IIS lets SIMS take advantage of features like SSL encryption and clustering. It also makes it easier for SIMS traffic to pass through firewalls or over Virtual Private Connections (VPNs). IIS is included with Windows but it may not be installed or enabled by default. The following steps will ensure IIS is correctly installed and configured for SIMS Server. You may need your original Windows CD or DVD to complete these steps. NOTE: If you installed the Microsoft.NET Framework v2.0 before installing IIS, you must register the framework with IIS. See the task titled ASP.NET Registration with IIS for more information 1) Select Start / Settings / Control Panel. 2) Double click on Add or Remove Programs. 18

3) Select Add/Remove Windows Components. 4) Make sure Application Server is checked. 5) Highlight Application Server and select Details 19

6) Make sure you check at least Application Server Console, ASP.NET, and Internet Information Services (IIS). 7) Select OK. Internet Information Services (IIS) Installation on Windows Vista IIS is a free application included with Microsoft Windows. It allows SIMS Server to communicate with clients using a single TCP port. Using IIS lets SIMS take advantage of features like SSL encryption and clustering. It also makes it easier for SIMS traffic to pass through firewalls or over Virtual Private Connections (VPNs). IIS is included with Windows but it may not be installed or enabled by default. The following steps will ensure IIS is correctly installed and configured for SIMS Server. You may need your original Windows CD or DVD to complete these steps. NOTE: If you installed the Microsoft.NET Framework v2.0 before installing IIS, you must register the framework with IIS. See the task titled ASP.NET Registration with IIS for more information 1) Select Start / Settings / Control Panel. 2) Double click on Programs and Features. 20

3) Select Turn Windows features on or off. 4) Click on the + to expand Internet Information Services. 5) Check the box for Web Management Tools and World Wide Web Services. 6) Select OK. 21

ASP.NET Registration with IIS You may experience problems if you installed Microsoft.NET Framework v2.0 before you installed IIS. The following steps will ensure ASP.NET is correctly registered with IIS. The SIMS Server installer will check for this missing registration. It will also attempt to repair it with a call to aspnet_regiis. The following steps are only required if the installer reports that it cannot register ASP.NET. The steps are identical for Windows 2000, Windows Server 2003, Windows XP, and Windows Vista. 1) Select Start / Run and enter: cmd 2) Select OK. 3) Enter: cd\windows\microsoft.net\framework\v2.0.50727 22

4) Enter: aspnet_regiis i enable 5) Enter: iisreset 23

Installing SIMS Server Overview There are two parts to SIMS Server: the database and the web services. Both are installed using the same installer, which will present you with a dialog asking you which components to install. You can also install either part without using the standard MSI installer. Contact SIMS Software technical support for assistance with performing a manual installation. The database installation involves the following steps: Installer copies files (15MB) to C:\Program Files\SIMS Software\Database\ Installer either creates a new empty database, creates a new database with tutorial data, or upgrades an existing database. All log files generated during an upgrade will be placed in the ApexSQL subfolder. If using integrated authentication, installer adds the account running ASP.NET as db_owner in the SimsXml database. Otherwise installer adds the account name specified during installation as db_owner. The web service installation involves the following steps: Installer copies files (40MB) to C:\Program Files\SIMS Software\Web\ Installer copies license file (.LIC) to C:\Program Files\SIMS Software\Web\bin Installer sets the <LocalDatabaseConnectionString> key in each.config file in the above folder to the values provided during installation. Installer sets read-only NTFS permissions for ASP.NET account on C:\Program Files\SIMS Software\Web\ 24

Installer sets read-write NTFS permissions for ASP.NET account on the license file that was copied to the bin folder (above). This allows the product activation web page to save your key. You can change this back to read-only after activation. Installer creates a virtual directory called SimsWeb that points to C:\Program Files\SIMS Software\Web\ Installer confirms ASP.NET v2.0 is registered with IIS. Installer sets SimsWeb folder to use ASP.NET v2.0 in case multiple versions of the.net framework are installed. Installer opens the SIMS product activation web page. If this is a new installation you will be prompted for an activation key. For existing installations it will simply confirm that your license is still active. Step by Step Installation Run the installer by clicking on the SIMS Server link on the CD autorun: Select Next. 25

You can change the default installation folder and select Next. You can select Disk Cost to view how much space will be used during installation. This value does not include the size of your database. If you change the destination folder to a drive other than C:, the disk cost window may still show space required on C:. This is because of the way the Windows Installer package manages temporary files. At this stage files are being copied to the destination folder: 26

The SIMS Server Configuration dialog will appear within a few minutes. Check your taskbar at the bottom of your screen to make sure it s not hiding behind other windows. Check/uncheck the options for Install SIMS Web Services and Install SIMS Database depending on which components you want to install. Leave both checked if you re not sure which option you want. You must provide at least the sa password before the Test Configuration button will be enabled. After all tests pass, the OK button will become enabled. This reduces the chance that you ll have to re-run the installer to change configuration values. NOTE: If you installed SQL Server 2005 Express Edition with the default options, you must change the server address from (local) to.\sqlexpress to identify the correct instance name. You will receive a message in the event of an error: If you selected the web services option, the following dialog will appear upon a successful test: 27

If you selected the database option, the following dialog will appear upon a successful test: The following screen will appear upon the successful installation of SIMS Server. 28

Manual Database Installation The SIMS Server MSI installer is optional. The web service and database components can be configured manually. The first step is to obtain the files required for installation. Contact SIMS Software to obtain the manual database creation script for the latest version of SIMS Server. Load the SQL script into Microsoft SQL Server Management Studio. On lines 77, 88, and 91 you ll find the account name IBM\ASPNET. You must replace this value with the name of the account running ASP.NET on your server. If SQL and IIS are on the same machine, this will value will typically be MACHINENAME\ASPNET or NT AUTHORITY\NETWORK SERVICE. If you re using SQL authentication you can remove lines 72-92. Manual Web Service Installation The first step is to obtain the files required for installation. The easiest method is to perform a default administrative installation on a test PC: msiexec /a SIMSServerSetup.msi This will extract the required files into the default location of c:\program Files\SIMS Software\. Copy the files in the Web subfolder into your IIS publishing directory (default is c:\inetpub\wwwroot\). Rename the Web folder to SimsWeb. Double check the NTFS permissions on the SimsWeb folder and make sure your ASP.NET service account has read access to all files and subfolders. Open Windows Explorer and navigate to c:\inetpub\wwwroot\simsweb\bin and locate all the files with a.config extension. Open all the files in a text editor. We recommend using an editor with a search/replace capability that spans multiple files (such as TextPad at www.textpad.com). Perform a global search/replace on the LocalDatabaseConnString value and replace it with your own connection string. The following example connection string will connect to a local instance using integrated authentication: Data Source=(local);Initial Catalog=SimsXml;Integrated Security=SSPI; Open Computer Management. Expand Services and Applications / Internet Information Services / Web Sites. Select Default Web Site. Right click on SimsWeb and select Properties. 29

Set the properties on the Virtual Directory tab as follows: Select the ASP.NET tab and make sure the version is set to 2.0.50727: Select OK. 30

Load the following URL in Internet Explorer to confirm the web services are installed correctly: http://127.0.0.1/simsweb/common/dataservice.asmx The following page indicates the web services are installed correctly: The final step in configuring the web service component is installing and activating the license. This process is outlined in the following chapter. 31

Licensing SIMS Server Overview SIMS multi-user licensing takes place on your middle-tier server. This is the server running Microsoft Internet Information Services (IIS) which hosts the SIMS web services. Your database server and client machines are not directly involved in the licensing process. The multi-user licensing component has been replaced in v7.5 in order to comply with the Federal Information Processing Standard (FIPS). This publication defines cryptographic standards for software used by Federal agencies. The license upgrade also improves support for running SIMS on a virtual machine. You must obtain a new multi-user license from SIMS technical support prior to installing the v7.5 update. Licensing for the standalone and lite versions of SIMS are not affected by this change. Step 1: Obtain New License File License files used with SIMS v7.4 and earlier must be replaced prior to upgrading to v7.5. If you have not received a replacement license file, you can request one by contacting SIMS technical support at support@simssoftware.com. Your license file is tied to the fully qualified domain name (FQDN) of the machine hosting SIMS Server. If your database and web services are on different machines, the web services machine is the one involved in multiuser licensing. Users upgrading from a previous version can find the FQDN on the login dialog: 32

You can also find the FQDN by opening Control Panel / System on the server. Select the Computer Name tab and record the Full computer name displayed. Step 2: Copy License to Installation Folder Your v7.5 license file will have the extension sims.lic. You can copy this file directly into the default installation folder (C:\Program Files\SIMS Software\Web\bin), or place it in the same folder as the SIMS Server v7.5 installer prior to upgrading. The installer will detect the new license file and copy it to the destination folder automatically. 33

Step 3: Execute SIMS Server Installer The following dialog will appear during the installation process confirming the license details. 34

Deploying SIMS Client with ClickOnce ClickOnce is a technology from Microsoft that allows applications to be installed without the standard MSI installer. Users can install and run a ClickOnce application by opening a shortcut in Internet Explorer. Administrative rights are not required and updates are automatic. A ClickOnce deployment package contains the same files you ll find under C:\Program Files\SIMS Software\Client\. Each file is digitally signed by SIMS Software and has.deploy appended to the file name. Internet Explorer reads the SIMS.application file included in the package, which directs it to the latest set of files on your server. A ClickOnce deployment package is specific to each customer. The client connection strings and deployment location must be included in the configuration files before they re digitally signed. Contact SIMS technical support for assistance creating your own package. However, we strongly recommend you let us build the package for you. The first step is extracting the ClickOnce package provided by SIMS Software. The contents of the package are an application manifest (SIMS.application) and a folder containing the version number. 35

The only requirement for installing a ClickOnce application is Microsoft s.net Framework v3.5 SP1 and Internet Explorer. Start the installation process by navigating to the deployment URL: An application security warning will appear confirming the user s intent. 36

The publisher name, SIMS Software, is bold and underlined because the package is digitally signed. Clicking on the name displays details of the certificate: Select Install and the client will automatically start downloading: The client will start automatically when the download completes. A shortcut will be placed under Start / Program Files / SIMS Software. Updates deployed on your server will be pushed down to the clients at startup. 37

LDAP Configuration The first (and hardest) step to enabling LDAP authentication is getting the correct connection string. Try to copy the string from an existing application in your organization. It will resemble one of the two following strings: LDAP://dc=mydomain,dc=my,dc=company,dc=com LDAP://mydomain.my.company.com/dc=mydomain,dc=my,dc=company,dc=com NOTE: The LDAP prefix must be uppercase. Login to SIMS as a manager and select Utilities / System Customization. On the first tab you can input your default LDAP domain and your LDAP server connection string. Note that once you check Enable LDAP and close the Utilities module, you will only be able to login if LDAP authentication succeeds. You can manually disable this feature by opening the SimsConfiguration table in Query Analyzer or SQL Management Studio. Locate the row with a key of EnableLDAP and change the value from 1 to 0. The SIMS login page has an optional Domain dropdown list. This allows authentication against different Active Directory domains. You can specify up to 10 default LDAP servers by adding the following lines to the Sims.Common.dll.config file on the client. <add key="ldap_domain_0" value="some.server1.lmco.com" /> <add key="ldap_domain_9" value="some.server9.lmco.com" /> These must be in the <configuration> <appsettings> area of the config file. The key LDAP_Domain_0 is automatically selected at startup. 38

Integrated Authentication between SQL Server and IIS Integrated authentication is easy when both Internet Information Services (IIS) and SQL Server reside on the same machine. The ASP.NET process in IIS runs under the local account ASPNET (NETWORK SERVICE on Windows 2003). When SQL Server and IIS are on different machines, this scenario breaks down because SQL Server doesn't recognize the account under which ASP.NET is running. The solution is to create a common account in your Active Directory server. You can configure ASP.NET to run under the new account and SQL Server will be able to validate the credentials against Active Directory. We strongly recommend you complete your initial installation using SQL authentication. Enable integrated authentication only after you confirm the SIMS client can login successfully. This will make your installation process much easier by isolating the integrated security issues from the more common configuration problems. Step 1 Create a Common Active Directory Account The first step is to have your Active Directory administrator create an account that will be used for authentication between the IIS and SQL Server. 1. Login to your Active Directory domain controller. 2. Select Start / Programs / Administrative Tools / Active Directory Users and Computers. 3. Locate and expand the correct domain in the left panel. 4. Right click on the Users folder and select New / User. 39

5. Populate the user details and click Next. 6. Input a password and make sure the option User must change password at next logon is unchecked. 7. Click Next, then Finish. 8. Login to the machine hosting your web services (IIS). 40

Step 2 Web Server (IIS) File System Configuration The SIMS Server web services normally run under a system account called ASPNET or NETWORK SERVICE. Since this is a local machine account, SQL Server on another machine will not recognize it when a web service attempts to connect using integrated authentication. We can fix this by configuring the SIMS web services to run under the new Active Directory account created in the previous step. The new account will require certain file system permissions on your web server in order to execute ASP.NET. The following steps will assign these permissions. 1. Login to the machine hosting your web services (IIS). 2. Open Windows Explorer and locate the folder: %SystemRoot%\system32 3. Right click on system32 and select Properties. 4. Select the Security tab. 5. Click the Add button. 6. Enter the name of the account you created in the previous section. 7. Click the Check Names button to confirm your entry is correct. It will be underlined if the system recognized your input. 8. Click OK. 9. Check the Read & Execute, List Folder Contents, and Read properties under the Allow column. 10. Click OK. 11. Open Windows Explorer and locate the folder: %SystemRoot%\temp 12. Right click on temp and select Properties. 13. Select the Security tab. 14. Click the Add button. 15. Enter the name of the account you created in the previous section. 16. Click the Check Names button to confirm your entry is correct. It will be underlined if the system recognized your input. 17. Click OK. 41

18. Check the box Full Control under the Allow column. 19. Click OK. 20. Open Windows Explorer and locate the folder containing the SIMS web service files. The default location is: C:\Program Files\SIMS Software\Web 21. Right click on Web and select Properties. 22. Select the Security tab. 23. Click the Add button. 24. Enter the name of the account you created in the previous section. 25. Click the Check Names button to confirm your entry is correct. It will be underlined if the system recognized your input. 26. Click OK. 27. Check the Read & Execute, List Folder Contents, and Read properties under the Allow column. 28. Click the Advanced button. 29. Check the box labeled Replace permission entries on all child objects. 30. Click OK. 31. Click OK. 42

Step 3 Assign ASP.NET Permissions When you use a custom service account, the account needs appropriate permissions to access the IIS metabase and the file system folders that are used by ASP.NET. ASP.NET 2.0 provides the Aspnet_regiis.exe utility, which allows you to grant appropriate permissions. The following steps will grant the specified account (1) access to the IIS Metabase, and (2) write permission to the %windir%\microsoft.net\framework\v2.0.50727\temporary ASP.NET Files folder. 1. Login to the machine hosting your web services (IIS). 2. Open a command prompt by selecting Start / Run, input cmd, click OK. 3. Change to the ASP.NET folder by executing: cd\windows\microsoft.net\framework\v2.0.50727 4. Enter the following command: aspnet_regiis ga machinename\accountname where machinename is either the current machine name if the account is local, or the domain if the account originates in Active Directory. Replace accountname with the name of your account. Step 4 Create an Application Pool with a Custom Identity 1. Start Internet Information Services (IIS) Manager. 2. In the left pane, expand the local computer and then expand Application Pools. 3. Right-click the Application Pools node, click New, and then click Application Pool. 4. In the Add New Application Pool dialog box, type SimsWeb in the Application Pool ID text box. Leave the Use default settings for new application pool option selected, and click OK. 43

5. Right-click the new application pool. and click Properties. 6. Click the Identity tab. 7. In the Application pool identity section, click Configurable. 8. Enter your account name in the User name field. 9. Type the password for the account in the Password text box, and click Apply. 10. The Confirm Password dialog box appears. Type the password again, click OK, and then click OK again. 44

11. Return to Internet Information Services (IIS) Manager. 12. Expand Web Sites / Default Web Site. 13. Locate SimsWeb in the right panel. 14. Right click on SimsWeb and select Properties. 15. On the Virtual Directory tab, change Application pool to SimsWeb. 16. Click OK. 45

17. Step 5 - ASP.NET Impersonation The next step is configuring ASP.NET to run under your new account. 1. Locate your web.config file in the following folder: C:\Program Files\SIMS Software\Web 2. Open the file in a text editor. 3. Locate the <system.web> section under <configuration>. 4. Add or edit the <identity> key as follows: <configuration> <system.web> <identity impersonate= true username= DOMAIN\AccountName password= youraccountpassword /> </system.web> </configuration> NOTE: Property names are case sensitive. NOTE: Do not include the $ character in your password. 5. Save the file. 6. Locate your machine.config file in the following folder: C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG 7. Open the file in a text editor. 8. Locate the <system.web> section under <configuration>. 9. Add or edit the <processmodel> key as follows: <configuration> <system.web> <processmodel enable= true username= DOMAIN\AccountName password= youraccountpassword /> </system.web> </configuration> NOTE: Property names are case sensitive. NOTE: Do not include the $ character in your password. 46

10. Save the file. 11. Select Start / Run, type iisreset and click OK. 12. Open your web browser and load the following page: http://127.0.0.1/simsweb/common/dataservice.asmx 13. You should see a blue and white page listing web service names: 14. If you receive an error, please send the entire message to support@simssoftware.com. Step 6 SQL Server Configuration The next step is configuring Microsoft SQL Server to recognize your new shared account. The following instructions assume SQL Server 2005. 1. Login to the machine hosting SQL Server. 2. Launch Microsoft SQL Server Management Studio. 3. Change any required credentials on the login dialog and click Connect. 47

4. In the Object Explorer pane, expand your SQL Server instance, then expand Security / Logins. 5. Right click on Logins and select New Login. 6. Click the Search button. 7. Enter the name of your Active Directory account and click the Check Names button to confirm your entry is correct. It will be underlined if the system recognized your input. 8. Click OK. 9. Select the Windows authentication radio button. 10. Change the Default database from master to SimsXml. 48

49

11. Select the User Mapping page on the left. 12. Highlight SimsXml in the top pane. 13. Check db_owner in the bottom pane. 14. Click OK. 50

Step 7 - SIMS Connection String Configuration The final step is modifying the SIMS Server connection strings to instruct SIMS to use integrated security. Each module in SIMS has its own connection string. We recommend using a text editor such as TextPad (http://www.textpad.com/download/) that can modify all configuration files in a single step. 1. Login to the machine hosting SIMS Server. 2. Locate your web service installation folder. The default location is: C:\Program Files\SIMS Software\Web\bin 3. Sort the files by type so all the configuration files appear together. 4. Highlight all 18 configuration files. 5. Right click and select Open With / TextPad. 6. Highlight your existing LocalDatabaseConnString. 7. Select Search / Replace. 51

8. Enter the following into the Replace With box (replace (local) with the machine name of your SQL server if it s located on another machine): Data Source=(local);Initial Catalog=SimsXml;Integrated Security=SSPI; 9. Select a scope of All documents. 10. Click the Replace All button. 11. Click OK when prompted to confirm. 12. Select File / Save All. 13. Close TextPad. At this point you should be able to login using the SIMS Client. If you receive any error messages before the SIMS Client login prompt appears, try opening the following page in your web browser: http://127.0.0.1/simsweb/common/dataservice.asmx If your browser is not running on the same machine as SIMS Server, replace 127.0.0.1 with your server s IP address or network name. You should see a blue and white page listing SIMS web service names. If you receive an error, please send the entire message to support@simssoftware.com. 52