LaserVault DMS10 Reference Guide Installation

LaserVault DMS10 Reference Guide
Installation
Contents
Installation and Configuration ............................................................................................................................ 2
LaserVault DMS Settings ..................................................................................................................................... 3
SQL Server Settings ............................................................................................................................................. 4
SMTP Server Options........................................................................................................................................... 5
ActiveX Install Options ........................................................................................................................................ 6
Configuring IIS in Windows Server 2012 ............................................................................................................. 7
Launch Internet Information Services (IIS) Manager .......................................................................................... 8
File System Security Permissions ...................................................................................................................... 18
Document Paths ................................................................................................................................................ 18
Installation and Configuration
The default installation path for LaserVault DMS is C:\LaserVault\LVDMS. This installation guide assumes
the software was installed into that folder. Due to Microsoft UAC virtualization we no longer recommend
installing under Program Files or Program Files (x86).
After the installation is complete, launch the LVDMS Server Configuration program. This can be found on the
Start menu under LaserVault DMS Suite.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
2
LaserVault DMS Settings
Select the server root where the web applications will run from. By default, the installer creates a folder
named C:\LaserVault\LVDMS\ServerRoot. We recommend using this path.
For the WebTask URL, enter http://[yourserver]/LVDmsWeb/W.aspx
Enter an admin username and password to use when logging in to the server via the LVDMS Manager.
Select In House for the software mode.
If you wish to use IIS Authentication (Windows Integrated Authentication) check the Use IIS Authentication
check box. This option is used when you want to automatically log in an end user using their Windows
credentials or credentials negotiated by IIS and the browser. If you turn on this option, you should also disable
anonymous authentication in IIS.
You may select various password storage options. In most cases select AES Case Insensitive. This will store the
password encrypted in the database.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
3
SQL Server Settings
Enter the server name or IP address and instance name of the Microsoft SQL server you wish to use.
If using SQL authentication, enter the SQL user name and password to use to connect to the server. We
recommend using SQL authentication. The account will need permission to create a database and tables.
If you wish to use Windows authentication to connect to the database check the Use Windows
Authentication check box. Be aware that using this option will cause the LVDMS applications to connect using
the Windows account they are running under. The accounts or groups of which the account is a member will
need to be given access in SQL server or the connection will fail.
Enter a database name. We suggest using LVDMS.
The database path tells SQL Server where to create the database files. This value defaults to the server root
data folder on the local machine. If SQL Server is running on another machine you will need to specify an
appropriate path that exists on that machine.
Note: Be sure the service account that SQL server is running under has permissions to the database path or
you will get an error when you click OK.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
4
SMTP Server Options
If you will be using workflow to send emails, enter the SMTP server settings here.
Enter the DNS name or IP address of the SMTP mail server. Enter port 25 for the standard SMTP port. If your
mail server is configured to run on another port (not common) enter that port number.
Enter the user name and password that will be used to connect to the SMTP server. Enter an email address
and name that will be shown in the From field of the email. If your SMTP server is configured to require a
certain type of authentication, select the option from the list, otherwise select Auto.
If using SSL or TLS select that option from the SMTP Security Option drop down list.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
5
ActiveX Install Options
Under this section you can configure the server to use a Windows domain account to run ActiveX installs. This
can help with permissions issues if the end user doesn’t have authority to install programs on their computer.
Enter a domain, user name, and password for the installer to attempt to use.
Click OK to complete the server configuration. At this point the database and web application files will be
created or updated.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
6
Configuring IIS in Windows Server 2012
After the initial configuration is complete, the next step is to create two applications in IIS.
Make sure you have the Web Server (IIS) role installed. Check the boxes for ASP.NET 4.5 and ASP under the
Application Development section.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
7
Launch Internet Information Services (IIS) Manager
Right click on Application Pools and select Add Application Pool. Enter LVDMSConfig for the name.
For the .NET CLR Version, select v4.0.30319
For the Managed Pipeline Mode, select Integrated.
Click OK.
Create another application pool named LVDMSWeb with the same settings.
For each application pool, go into Advanced Settings and set Enable 32-Bit Applications to True. You may also
want to increase the Idle Time-out setting from 20 minutes to 120. This will keep your session from timing out
too quickly.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
8
Select the web site under which you wish to add the applications. Right click and select Add Application.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
9
Enter LvDmsConfig for the alias and C:\LaserVault\LVDMS\ServerRoot\LvDmsConfig for the
physical path. Select LVDMSConfig for the Application Pool.
Right click on the website again and select Add Application. This time enter LvDmsWeb for the alias and
C:\LaserVault\LVDMS\ServerRoot\LvDmsWeb for the physical path. Select the LVDMSWeb application
pool.
Upgrade Note: If upgrading from a prior version, remove the
C:\LaserVault\LVDMS\ServerRoot\LVDMSWeb\WebTemp folder if it exists.
The WebTemp folder has been moved out of the LVDMSWeb application folder to prevent application restarts
when temporary folders get deleted. Adding the WebTemp application to IIS under LVDMSWeb and pointing
it to the new location solves this problem.
Right click on the LvDmsWeb application that you just created and select Add Application. Enter WebTemp for
the Alias, and select the LVDMSWeb application pool.
For the physical path enter C:\LaserVault\LVDMS\ServerRoot\Data\Temp\LVDMSWebTemp.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
10
Click on the LvDmsWeb application in the left pane. Then double click the Default Document icon in the right
pane under IIS.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
11
Move the default.aspx document up in the list so that it is above default.asp.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
12
Double click on the Session State icon in the ASP.NET section.
Under the Cookie Settings section increase the time out from 20 minutes to 120 minutes. This will prevent
sessions from timing out too quickly. Click the Apply button on the upper right of the screen to save the
changes.
You may also want to change this setting in the LVDMSConfig web application.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
13
From a command prompt or the Start/Run dialog, run MMC /32. This will launch the 32 bit MMC Snap in
Console.
In the console, select File, Add/Remove Snap In.
Select Component Services in the left pane and click the Add button. Click OK.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
14
In the tree on the left, expand Component Services/Computers/My Computer. Then click on DCOM Config.
Find the LVDMSShell.Interface item in the list on the right.
Right click that item and select Properties.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
15
On the Security tab under Launch and Activation Permissions, change the option from Use Default to
Customize. Then click the Edit button.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
16
In the security screen, select Add and select IIS_IUSRS. Be sure to select the group from the local machine.
Give the group Local Launch and Local Activation permissions.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
17
File System Security Permissions
There are several folders where file system permission must be granted. If you are using Anonymous
Authentication in IIS, then the web applications run under the IUSR account by default. You may specify a
different account. If so, grant the permissions to the account you specified rather than IUSR. Use the IIS_IUSRS
group to grant permission. This will give permissions to the appropriate application pool identities.
Set permissions on the following paths:
C:\LaserVault
IIS_IUSRS - Read/Write/Modify
NETWORK SERVICE - Read/Write/Modify
Note 1: If you specified a different path for the database files, be sure to give NETWORK SERVICE
Read/Write/Modify permissions to that path.
Note 2: If you configured SQL Server to use an account other than NETWORK SERVICE you must give that
account the appropriate permissions.
C:\Windows\Temp
IIS_IUSRS - Read/Write/Modify
C:\Program Files(x86)\EscCommonFiles
IIS_IUSRS – Read Note: It may not be necessary to give IIS_IUSRS permission to this folder if the group “Users”
already has permission
Document Paths
By default LVDMS builds the document paths in the server root data folder. It’s possible to specify an
alternative path. If you do, you must give Read/Write/Modify permissions to that path.
If you have disabled Anonymous Authentication in IIS then each session in the web application runs in the
security context of the end user. You may need to give the above permissions to the Windows built in group
Authenticated Users.
Copyright 2015 Electronic Storage Corporation • 918-664-7276 • 800-444-6283 • www.laservault.com • [email protected]
18