e-line - installation security

28
Installation manual E-Line CERTO IS A REGISTERERD TRADEMARK OF ELECTROMATIC GROUP SINT-NIKLAAS NV. MICROSOFT, WINDOWS EN WINDOWS NT ARE REGISTERERD TRADEMARKS OF THE MICROSOFT CORPORATION. ALL OTHER BRANDS AND PRODUCTNAMES ARE TRADEMARKS OR REGISTERERD NAMES AND ARE THE PROPERTY OF THEIR OWNERS

Upload: khalil-ardali

Post on 13-Jul-2016

229 views

Category:

Documents


3 download

DESCRIPTION

E Line or Line E may refer to: E-Line, the Ethernet Virtual Private Line data service defined by Metro Ethernet Forum; E-line (power line communication),

TRANSCRIPT

Page 1: E-line - Installation security

Installation manual E-Line

CERTO IS A REGISTERERD TRADEMARK OF ELECTROMATIC GROUP SINT-NIKLAAS NV. MICROSOFT, WINDOWS EN WINDOWS NT ARE REGISTERERD TRADEMARKS OF THE MICROSOFT CORPORATION. ALL OTHER BRANDS AND PRODUCTNAMES ARE TRADEMARKS OR REGISTERERD NAMES AND ARE THE PROPERTY OF THEIR OWNERS

Page 2: E-line - Installation security

1 Abstract This document describes the installation of the E-Line application. It only describes the necessary steps to ensure a good working E-Line, not the steps to install a secure IIS. When you have followed all the steps correctly, E-Line will work. We do not ensure the working of other websites on this configuration. All data used in the screenshots are fictitious. This means that all the names of domains, users and computers will not be the same as those you will see while installing E-Line. It is possible that some screenshots contain more or fewer names of users, websites, … .

2 Creating the E-Line folder Before you start configuring E-Line, you have to create a folder in which you will install E-Line. You have to create this folder within the directory chosen by the ‘WWW Service’. Normally this is “c:\Inetpub\wwwroot”.

Create the folder “Em” and within this folder the folder “E-Line” (c:\Inetpub\wwwroot\em\e-line)

Pagina 1 van 28

Page 3: E-line - Installation security

3 Creating a virtual directory in IIS

3.1 Starting the Microsoft Internet Information Server You can find the IIS when you type “%SYSTEMROOT%\System32\Inetsrv\iis.msc” at the run command window.

4 Starting the virtual directory wizard

Select the item “Default Web Site” and click on the right mouse button. Select New/“Virtual Directory”.

Pagina 2 van 28

Page 4: E-line - Installation security

4.1 Configuring the alias

Type the alias you want to use to gain access to this virtual directory. The alias is required for configuring the registry, please write down this alias for your reference. Choose “Next >”. We strongly recommend to use E-Line as virtual directory.

Pagina 3 van 28

Page 5: E-line - Installation security

4.2 Determining the directory

Type the name of the folder which has been created in step 1 or use Browse. Choose “Next >”.

Pagina 4 van 28

Page 6: E-line - Installation security

4.3 Determining access permissions in IIS

Check “Read” and “Run scripts”.

Click “Finish”. At this moment there should be a new virtual directory underneath the default website.

Pagina 5 van 28

Page 7: E-line - Installation security

4.4 Configuring the E-line virtual directory

4.4.1 Properties

Select the virtual directory and click on the right mouse button. Choose “Properties”.

Pagina 6 van 28

Page 8: E-line - Installation security

4.4.2 Settings Virtual directory – Application Settings

Make sure that the “Application Protection” is set to “High”.

Pagina 7 van 28

Page 9: E-line - Installation security

4.4.3 Document settings Select the tab “Documents” and remove everything except “default.asp”. If “default.asp” does not appear in the list, you can create it by clicking on “Add”.

4.4.4 Closing properties Choose “OK” and close the Internet Information Manager. The web application is active at this moment.

Pagina 8 van 28

Page 10: E-line - Installation security

5 Configuring the E-line directory

5.1 Copying of files Copy the content of the “e-line\Html” directory on the cd to the new virtual directory.

5.2 Properties Select the “E-line” directory and click on the right mouse button.

Select “Properties”.

Pagina 9 van 28

Page 11: E-line - Installation security

5.3 Permission settings Select the tab “Security”.

Click on “Add” to give to the new users privileges to the directory

Pagina 10 van 28

Page 12: E-line - Installation security

5.4 Adding users

Select the local domain of the server. You can change the server at “Look in” by clicking on the drop down list. Select the users “IUSR_SERVERNAME”, “IWAM_SERVERNAME” and click on “Add”.

Pagina 11 van 28

Page 13: E-line - Installation security

When both users are present click on “OK” so that you can grant their rights.

They need to have Read rights like in the above screenshot. You have to grant the rights to both users.

Pagina 12 van 28

Page 14: E-line - Installation security

6 Creating registry keys

6.1 Launching the registry editor Choose “Start” – “Run”.

Click on “OK”.

Pagina 13 van 28

Page 15: E-line - Installation security

Select the window “HKEY_LOCAL_MACHINE on Local Machine”. Select the key “SOFTWARE”.

6.2 Creating the necessary registry keys

Click on “Edit” – “Add Key” in the menu.

Pagina 14 van 28

Page 16: E-line - Installation security

At “Key Name” fill in “Electromatic” (not a variation on this key name). It is possible that this key already exists, in which case you don't need to create it any more. Click on “OK”. Select the new key and repeat the same procedure for the key “E-Line”. Select the new key “E-Line” and repeat the procedure to create a key with the name of the virtual directory. Normally this name is “E-Line”.

6.3 Creating the necessary values

Choose “Edit” – “Add Value”.

Pagina 15 van 28

Page 17: E-line - Installation security

At “Value Name” fill in “EmFiles”. At “Data Type” choose “REG_SZ”. Click on “OK”.

At “String” fill in the name of the folder that contains the data files of certo. For example “c:\em\certo\dbfs“. Click on “OK” and select the key “Software\Electromatic\E-Line”.

Pagina 16 van 28

Page 18: E-line - Installation security

7 Security settings in the registry

7.1 Launching permissions

Choose “Security” – “Permissions”.

Pagina 17 van 28

Page 19: E-line - Installation security

7.2 Adding users Choose “Add”.

Pagina 18 van 28

Page 20: E-line - Installation security

Select the local domain of the server. You can change the server at “Look in” by clicking on the drop down list. Select the users “IUSR_SERVERNAME”, “IWAM_SERVERNAME” and select “Add”. When both users are present click on “OK“ so that you can grant their rights

Pagina 19 van 28

Page 21: E-line - Installation security

Both users have to get “Full Control”. Close the Registry Editor.

Pagina 20 van 28

Page 22: E-line - Installation security

8 Security setting for the E-Line directory

If this directory does not exist, it has to be created and the three files have to be copied to that location. Copy the content of the directory “E-Line\dll\E-line”. Select “E-Line” and click on the right mouse button. Choose “Properties” and the tab “Security”.

Pagina 21 van 28

Page 23: E-line - Installation security

Choose “Add”.

Pagina 22 van 28

Page 24: E-line - Installation security

Select the local domain of the server. You can change the server at “Look in” by clicking on the drop down list. Select the users “IUSR_SERVERNAME”, “IWAM_SERVERNAME” and click on “Add”. When both users are present, click on “OK” so that you can grant their rights

Both users have to get read rights to the directory.

Pagina 23 van 28

Page 25: E-line - Installation security

9 Security setting for the Dbfs directory Select the folder “Dbfs” and click on the right mouse button so that you can select “Properties/Security”.

Choose “Add”.

Pagina 24 van 28

Page 26: E-line - Installation security

Add the “IWAM_SERVERNAME” and click on “OK”.

Pagina 25 van 28

Page 27: E-line - Installation security

Set the rights for the Iwam to “Full Control”.

10 Registering the E-line COM server

10.1 Launching the command prompt Choose “Start” – “Run” and type command or cmd. Which one depends on the operating system.

Click on “OK”.

Pagina 26 van 28

Page 28: E-line - Installation security

10.2 Registering the COM server

Navigate to the location of the “eline.dll”. Type “regsvr32 eline.dll”. Close the command window. Now your e-line website should be up and running. You can check this by surfing to “//”servername”/e-line”.

Pagina 27 van 28