Wisdom. Wisdom 2016 Server Setup 03/14/2018

Transcription

1 Wisdom Wisdom 2016 Server Setup 03/14/2018

2 Wisdom Fiserv Fiserv, Inc. or its affiliates. All rights reserved. This work is confidential and its use is strictly limited. Use is permitted only in accordance with the terms of the agreement under which it was furnished. Any other use, duplication, or dissemination without the prior written consent of Fiserv, Inc. or its affiliates is strictly prohibited. The information contained herein is subject to change without notice. Except as specified by the agreement under which the materials are furnished, Fiserv, Inc. and its affiliates do not accept any liabilities with respect to the information contained herein and is not responsible for any direct, indirect, special, consequential or exemplary damages resulting from the use of this information. No warranties, either express or implied, are granted or extended by this document. Fiserv is a registered trademark of Fiserv, Inc. Other brands and their products are trademarks or registered trademarks of their respective holders and should be noted as such. Wisdom 2016 Server Setup 03/14/2018 2

3 Wisdom Contents Fiserv Contents Server Setup... 6 Single Server Setup... 6 Two Server Setup... 6 Minimum Server and Workstation Requirements... 6 Wisdom.NET Domain User... 6 Preparation... 7 Microsoft Security Features... 7 Microsoft Windows Update... 7 Create Wisdom.NET Folder... 7 Install Files.zip... 7 Install Web Server (IIS)... 9 SQL Server 2016 Express Download & Run Install SQL Express Instance License Terms Global Rules Microsoft Update Product Updates, Install Setup Files and Install Rules Feature Selection Feature Rules Instance Configuration Server Configuration Database Engine Configuration Reporting Services Configuration Consent to Install Microsoft R Open Installation Progress Complete Install SQL Server Management Studio (SSMS) SQL Server Setup FILESTREAM Setup Enable TCP/IP Restart SQL Server Services FILESTREAM and CLR ENABLED Configuration Wisdom 2016 Server Setup 03/14/2018 3

4 Wisdom Contents Fiserv Wisdom.NET User Setup Create a Wisdom.NET User Assign Groups to Wisdom.NET User Add Wisdom.NET User Rights to Folder Properties Wisdom Web Service Setup Wisdom Web Service Folder Edit Web.config Change SERVERNAME Change Wisdom.NET User if Necessary Password Update Required Change Drive Letter if Necessary IIS Manager Add Application Pool Convert to Application Authentication Test Web Service IP Address Encrypt Wisdom.NET Password in Web.config Wisdom Database Setup Restore Wisdom Database Add Wisdom.NET User to SQL Security Add Wisdom.NET User to Wisdom Database Security Restore Wisdom Master Key Database Backup File Wisdom Database Update Setup Create a Custom Event Test Database Connection SQL Express Full SQL Update DBAutoUpdate.exe.config File Edit Server Name Edit Proxy Server Values if Necessary Edit TempUpdatePath Drive Letter if Necessary Create Wisdom DB Update Task Create Task Run Task Wisdom 2016 Server Setup 03/14/2018 4

5 Wisdom Contents Fiserv Create Wisdom Backup Task Create Task Edit DBBackup.ps Required Server Name Change Review next Four Parameters, Edit if Desired Edit $WisdomFolder Parameter if Necessary Edit Backup Folder Path ($BackupPath) if Desired Wisdom.NET Modify Rights on Backup Folder Properties Windows PowerShell Execution Policy RemoteSigned Run Task Run Backup Task Five Times to Validate Delete Function Master Key Database Encryption Change Master Key Password Create Master Key and Certificate Backup Files Validate Master Key and Certificate Backup Files Notify Wisdom Support Wisdom 2016 Server Setup 03/14/2018 5

6 Wisdom Server Setup Fiserv Server Setup This document contains the Wisdom server setup instructions for Microsoft s Windows Server 2016 Standard including installation and setup of Microsoft s SQL Server 2016 Express. Read this document thoroughly prior to starting the server setup. Any questions? Wisdom Support Representative Paul.Stahl@Fiserv.com. Single Server Setup The screenshots, descriptions and explanations contained herein are for a single server setup where the SQL Server and Web Server roles and features are installed on a single server. In other words, the SQL Service and the Web Service are both running on a single server. The single server setup as outline in this document includes the following instructions. Setup of a LOCAL User Wisdom.NET. Installation and Setup of Microsoft s Web Server (IIS). Installation and Setup of Microsoft s SQL Server 2016 Express. Creation of Two Scheduled Tasks a database backup task and a database update task. Two Server Setup Credit unions may use this document as a guide and set up the Wisdom software to run on two servers; a SQL Server and a Web Server. Carefully read the notes found in various sections of this document regarding two server setups. The Wisdom Web Service may be added to an existing Web Server at the credit union as long as the minimum server requirements are met. Follow the link below to view the minimum requirements. The Wisdom Database may be added to an existing SQL Server (Full or Express) at the credit union as long as the minimum server requirements are met. Follow the link below to view the minimum requirements. Minimum Server and Workstation Requirements Open Internet Explorer with the following link. Enter your WisdomUsers.com user and password to view document. Wisdom.NET Domain User The Wisdom.NET user may be created as a DOMAIN user via Active Directories (instead of a LOCAL user as described in this document) for either single server setups or two server setups. Wisdom 2016 Server Setup 03/14/2018 6

7 Wisdom Preparation Fiserv Preparation Log on the server as an Administrator. Logging on as a user without administrator rights may result in installation errors. Administrator rights are needed throughout the setup. Microsoft Security Features Consider turning off of the following Microsoft server features to ease the setup process there is no requirement that these features should be turned off. 1. To turn off User Account Control (UAC), go to Control Panel and view by Category. Click on System and Security. Click on Change User Account Control settings link. Next, slide bar down to Never notify. Activate this feature when the setup is complete if desired. 2. To turn off Windows SmartScreen, go to Control Panel and view by Category. Click on System and Security and then click on Security and Maintenance. Next, click on Change settings button and select Don t do anything (turn off Windows SmartScreen). Activate this feature when the setup is complete if desired. 3. To turn off Windows Firewall for private and public networks, go to Control Panel and view by Category. Click on System and Security and then click on Windows Firewall link. Next, select Turn off Windows Firewall for private and public networks. Activate this feature when the setup is complete if desired. 4. To turn off IE Enhanced Security Configuration for Administrators and Users, open Server Manager (Dashboard) and click on Local Server (top left). In the Server Manager Properties window on the right, click the On link for IE Enhanced Security Configuration. Next, select Off for both Administrators and Users. Activate this feature when the setup is complete if desired. Microsoft Windows Update 1. Run Windows Update! This step is required. 2. Go to Start>Settings>Update & security and click on Check for updates. 3. Install all updates and restart server. 4. Repeat the process until there are no updates pending. Create Wisdom.NET Folder Create a folder called Wisdom.NET on the C drive. The Wisdom.NET folder may be created on a data drive. However, since the setup files in the Wisdom.NET folder total less than 25 MBs it is not necessary to place the Wisdom.NET folder on a data drive due to limited space on the C drive. Note: If the Wisdom.NET folder is created on a data drive additional setup changes are required. There are notes found throughout this document to change the drive letter, in the various configuration files, from the C drive letter to the appropriate data drive letter. Install Files.zip The Install Files.zip was ed to the credit union. If needed, Paul.Stahl@Fiserv.com and request the Install Files.zip again. 1. Create a Wisdom.NET folder on the C drive and place the Install Files.zip in the folder as shown below. Wisdom 2016 Server Setup 03/14/2018 7

8 Wisdom Preparation Fiserv 2. Double click on the Install Files.zip to open it. 3. Highlight the seven files. 4. Right click and select Copy. 5. Now, go back to the Wisdom.NET folder and Paste. 6. The Wisdom.NET folder should have eight items and look like the screen below. Important: For two server setups the Wisdom.NET folder including the install files, should exist on the SQL Server and the Web Server. Copy the Wisdom.NET folder with install files to the other server. Wisdom 2016 Server Setup 03/14/2018 8

9 Wisdom Install Web Server (IIS) Fiserv Install Web Server (IIS) Install the Web Server roles and features as outlined in this section. Note: For credit unions adding the Wisdom Web Service to an existing Web Server at the credit union, run the server add roles and features as outlined in this section. Most of the features may already exist on the server; however, some specific features relating to Wisdom may need to be added. For two server setups add the Web Server roles and features on the Web Server instead of the SQL Server. All of the things to do in this section are done on the Web Server. Open Server Manager Dashboard and click on Add roles and features as shown below. Click the Next button in the Before You Begin window. Verify Role-based or feature-base installation is selected and then click Next. Wisdom 2016 Server Setup 03/14/2018 9

10 Wisdom Install Web Server (IIS) Fiserv Verify the server name is listed and then click Next. Check the Web Server (IIS) box and the Add Roles and Features Wizard window appears click the Add Features button and then click the Next button. Wisdom 2016 Server Setup 03/14/

11 Wisdom Install Web Server (IIS) Fiserv In the Features section, check the box for.net Framework 3.5 Features and then expand.net Framework 4.6 Features and check the ASP.NET 4.6 box. When ready, click Next. Click Next on this screen. Now in Role Services as shown below, check the following three boxes for Dynamic Content Compression and.net Extensibility 3.5 and.net Extensibility 4.6. Wisdom 2016 Server Setup 03/14/

12 Wisdom Install Web Server (IIS) Fiserv Still in the Role Services scroll and check the ASP.NET 3.5 box and when the Add Roles and Features Wizard window appears click the Add Features button. Now check the ASP.NET 4.6 box and then click Next. Wisdom 2016 Server Setup 03/14/

13 Wisdom Install Web Server (IIS) Fiserv Review the following list of roles and features. If there are any line items missing, click the Previous button and navigate to the appropriate section to add the missing role and/or feature. If the following warning message appears (in screenshot below) locate and mount the server operating system DVD. Next, click on the link Specify an alternate source path (at the bottom of the screenshot below) and enter the source path. For example, if the server operating system DVD was mounted on the D drive; enter the path as to d:\sources\sxs. When ready, click on the Install button. Wisdom 2016 Server Setup 03/14/

14 Wisdom Install Web Server (IIS) Fiserv Track the installation progress in the following window. Review installation results and confirm message: Installation succeeded on SERVERNAME. Close the Add Roles and Features Wizard when done. If you get message to restart the server do so Wisdom 2016 Server Setup 03/14/

15 Wisdom SQL Server 2016 Express Fiserv SQL Server 2016 Express Download the SQL Server 2016 Express installation program from Microsoft. The software is free. Note: If planning to add the Wisdom database to an existing SQL Server Instance (Full or Express), skip this section and go to the next section named SQL Server Setup. If planning to install a Full SQL instance, skip this section and go to the next section named SQL Server Setup. For two server setups download the SQL Server 2016 Express on the designated SQL Server instead of the Web Server. Download & Run 1. Open Internet Explorer and use URL below Click on the Download now button and then click Save. 3. Run SQLServer2016-SSEI-Expr Application. Wisdom 2016 Server Setup 03/14/

16 Wisdom SQL Server 2016 Express Fiserv 4. Click on Custom. 5. Click Install button. Wisdom 2016 Server Setup 03/14/

17 Wisdom SQL Server 2016 Express Fiserv 6. Note progress of installation. Install SQL Express Instance Click on the New SQL Server stand-alone installation or add features to an existing installation link. Wisdom 2016 Server Setup 03/14/

18 Wisdom SQL Server 2016 Express Fiserv The following window may appear briefly and close License Terms Check the box I accept the license terms and then click Next. Wisdom 2016 Server Setup 03/14/

19 Wisdom SQL Server 2016 Express Fiserv Global Rules Global Rules may appear quickly and move to next section without error. Click Show details should any errors appear. Fix errors if necessary and Re-run. Click Next when ready. Microsoft Update Check the box Use Microsoft Update to check for updates and then click Next. Wisdom 2016 Server Setup 03/14/

20 Wisdom SQL Server 2016 Express Fiserv Product Updates, Install Setup Files and Install Rules If no errors were found, the Product Updates and Install Setup Files sections appear quickly and move to Install Rules. If necessary, correct errors and rerun. When ready, click Next. Feature Selection Accept the defaults and click Next. Wisdom 2016 Server Setup 03/14/

21 Wisdom SQL Server 2016 Express Fiserv Feature Rules The window in this section may appear briefly, close and then move automatically to the Instance Configuration section. Fix any errors if necessary. Instance Configuration Accept the default SQLEXPRESS instance and then click the Next button. Server Configuration If there is an existing SQL instance on the server and the SQL Server 2016 Express installation is an additional SQL instance change the SQL Server Database Engine s Account Name below from NT Service\MSSQL$SQLEXPRESS to SYSTEM (NT AUTHORITY\SYSTEM); otherwise, do not change the default Account Name and continue. Next, click the Collation tab. Wisdom 2016 Server Setup 03/14/

22 Wisdom SQL Server 2016 Express Fiserv Validate Collation Database Engine Value The following line is the correct Collation Database Engine value and is also outlined in screenshot below. SQL_Latin1_General_CP1_CI_AS If the Collation is correct, click Next and continue to next section Database Engine Configuration. Note: Canadian Credit Unions usually have to change the default Collation Database Engine value. United States Credit Unions usually do not change the default Collation Database Engine value. Change Collation if Necessary To change the Collation Database Engine, click the Customize button as shown in screenshot above. Select the radio button for SQL collation, used for backwards compatibility as shown below and then scroll down and select the following value. When done with change, click OK. SQL_Latin1_General_CP1_CI_AS Wisdom 2016 Server Setup 03/14/

23 Wisdom SQL Server 2016 Express Fiserv Verify the Collation Database Engine setting in screenshot below and then click Next. Database Engine Configuration Select Mixed Mode and enter a credit union defined SQL Server System Administrator (sa) password twice as shown below. Important: Be sure to save your SQL (sa) user password in a safe place as part of your disaster recovery plan. Wisdom 2016 Server Setup 03/14/

24 Wisdom SQL Server 2016 Express Fiserv Change Data Directories if Desired Still in Database Engine Configuration now click the Data Directories tab. Servers with a data drives should change the Data Directories listed below to the appropriate data drive letter. Usually data drives on the server have more space available than the C drive. Change the drive letter C to the appropriate data drive letter. When done with edits to the Database Engine Configuration click Next. Reporting Services Configuration Select Install only and then click Next. Consent to Install Microsoft R Open In this section, click Accept and then click Next. Wisdom 2016 Server Setup 03/14/

25 Wisdom SQL Server 2016 Express Fiserv Installation Progress Monitor the installation This step may take some time. If you get the following error, click Retry. Still get error? Click Cancel to complete install. If you get the following message, restart the server. Click OK. Complete Review Status of each Feature. Fix errors if necessary. Close the SQL Server Complete window below. Wisdom 2016 Server Setup 03/14/

26 Wisdom SQL Server 2016 Express Fiserv Install SQL Server Management Studio (SSMS) Go back to SQL Server Installation Center and select Install SQL Server Management Tools. Click on Download SQL Server Management Studio (16.5.3) link below. Wisdom 2016 Server Setup 03/14/

27 Wisdom SQL Server 2016 Express Fiserv Run SSM-Setup-ENU. Click Run. Monitor install progress... This step takes a while to run Setup completed. Close window. Wisdom 2016 Server Setup 03/14/

28 Wisdom SQL Server Setup Fiserv SQL Server Setup Note: For two server setups do everything as outlined in this section on the SQL Server instead of the Web Server. All of the things to do in this section are done on the SQL Server. Run SQL Server Configuration Manager. FILESTREAM Setup FILESTREAM enables SQL Server-based applications to store unstructured data, such as documents and images. For example, the Wisdom app allows users to store image files of vendor invoices. Click on SQL Server Services in left window pane as shown in the screenshot below. Next, right click on SQL Server (SQLEXPRESS) in the right window pane and then select Properties. Note: Credit unions with Full SQL Server installed, see SQL Server (MSSQLSERVER) or equivalent instead of SQL Server (SQLEXPRESS). Wisdom 2016 Server Setup 03/14/

29 Wisdom SQL Server Setup Fiserv Go to the FILESTREAM tab and check all three boxes. Click Apply and then OK. Enable TCP/IP Expand SQL Server Network Configuration and highlight Protocols for SQLEXPRESS (left window pane). Right click on TCP/IP (in the right window pane) and select Enable. Note: Credit Unions with Full SQL Server installed, see Protocols for MSSQLSERVER or equivalent instead of Protocols for SQLEXPRESS. The SQL Service needs to be stopped and restarted. Click OK. Wisdom 2016 Server Setup 03/14/

30 Wisdom SQL Server Setup Fiserv Restart SQL Server Services Click on SQL Server Services (left window pane) and right click on SQL Server (SQLEXPRESS) in the right window pane and select Restart. Close the SQL Server Configuration Manager when the restart above has finished. FILESTREAM and CLR ENABLED Configuration Launch SQL Server 2016 Management Studio (SSMS). Note, the Server name format in screenshot below is SERVERNAME\SQLEXPRESS. Select Windows Authentication and click the Connect button. Note: Credit unions with a Full SQL Server instance installed usually show just the SERVERNAME without the extension \SQLEXPRESS. Wisdom 2016 Server Setup 03/14/

31 Wisdom SQL Server Setup Fiserv Do the following steps. 1. Click on New Query. 2. Note the database name is master. 3. Copy the following SQL transactions to the SQL query window. exec sp_configure filestream_access_level, 2 reconfigure exec sp_configure 'clr enabled', '1' reconfigure 4. Click Execute and verify the SQL message below. 5. Close SSMS and when prompted, do not save the queries click No. Wisdom 2016 Server Setup 03/14/

32 Wisdom Wisdom.NET User Setup Fiserv Wisdom.NET User Setup Create a Wisdom.NET User The Wisdom.NET user is used in the following setup areas. Wisdom Web Service SQL Server Database Security Wisdom SQL Database Security Wisdom SQL Database Update Task Wisdom SQL Database Backup Task This section provides instruction for creating a LOCAL Wisdom.NET user record. The Wisdom.NET user may be created as a DOMAIN user via Active Directories. Use the information in this section when setting up a DOMAIN Wisdom.NET user. Open Computer Management and expand Local Users and Groups. Next, right click on User folder and select New User. Enter the following information. User Name: Full Name: Description: Password: Wisdom.NET Wisdom.NET Controls Access to Web Service and Scheduled Tasks Enter a Credit Union Defined Password Confirm password: Enter a Credit Union Defined Password Important: Be sure to save your Wisdom.NET user password in a safe place as part of your disaster recovery plan. Wisdom 2016 Server Setup 03/14/

33 Wisdom Wisdom.NET User Setup Fiserv Uncheck the box User must change password at next logon and then check the box Password never expires. Next, click the Create button and then click the Close button to close the New User window. Assign Groups to Wisdom.NET User Right click on Wisdom.NET user and select Properties. Wisdom 2016 Server Setup 03/14/

34 zzz Wisdom Wisdom.NET User Setup Fiserv Select the Member Of tab and then click the Add button. In second window, click Advanced. Click the Find Now button and select the following groups. With DOMAIN users, the IIS_IUSRS group may not exist, instead, select IIS_WPG group. Click OK to close (and save) the Select Groups window. IIS_IUSRS SQLServer2005SQLBrowserUser$SERVERNAME Wisdom 2016 Server Setup 03/14/

35 Wisdom Wisdom.NET User Setup Fiserv Click OK again, to close (and save) the Select Groups window. Validate the three groups below and click Apply. Click OK and close Computer Management. Note: With DOMAIN users, the groups below may show as Domain Users and the IIS_WPG may show instead of IIS_IUSRS. Wisdom 2016 Server Setup 03/14/

36 Wisdom Wisdom.NET User Setup Fiserv Add Wisdom.NET User Rights to Folder Properties Add the Wisdom.NET User with Modify Rights to the Wisdom.NET Folder Properties. Open Windows Explorer and right click on the Wisdom.NET folder and then select Properties. Note: For two server setups update the Wisdom.NET Folder Properties on both the SQL Server and the Web Server. Click the Security tab and then click Edit. In the second window, click Add. In the third window, enter Wisdom.NET and then click on the Check Names button. You may have to change the Location (button above Check Names). Click OK to close (and save) the third window. Wisdom 2016 Server Setup 03/14/

37 Wisdom Wisdom.NET User Setup Fiserv Click Wisdow.NET to highlight it as shown below. Next, check the Modify box. Click Apply and then OK. Now back to the Wisdom.NET Properties, Security tab as shown below. Scroll and highlight Wisdom.NET and validate the Permissions for Wisdom.NET. Note Modify is now checked. When done, click OK. Wisdom 2016 Server Setup 03/14/

38 Wisdom Wisdom Web Service Setup Fiserv Wisdom Web Service Setup Wisdom Web Service Folder Open the Wisdom.NET folder and copy the WisdomWebService folder and then paste it to C:\inetpub\wwwroot folder as shown below. Note: For two server setups open the Wisdom.NET folder on the Web Server instead of the SQL Server. All of the things to do in this section are done on the Web Server. Edit Web.config Change SERVERNAME Open Notepad and Run as Administrator. In Notepad, do File>Open and browse to the folder C:\inetpub\wwwroot\WisdomWebService. Now change setting Text Documents (*.txt) to All Files (*.*). Double click on the Web.config file to open it. Wisdom 2016 Server Setup 03/14/

39 Wisdom Wisdom Web Service Setup Fiserv Do a Find on SERVERNAME and change it to the actual server name. Note: Credit unions adding the Wisdom database to a Full SQL instance enter the credit union server name or Full SQL instance name and omit the \SQLEXPRESS as shown in the following line. server=azphd001028; For credit unions installing SQLEXPRESS as directed in this document enter the actual credit union server name, followed by \SQLEXPRESS as shown in the following line. server=azphd001028\sqlexpress; Here s a screenshot of a SQL Express example, note the \SQLEXPRESS remains Change Wisdom.NET User if Necessary Credit unions that created the Wisdom.NET as a DOMAIN user, need to add the DOMAIN NAME with a back slash to the front of the Wisdom.NET user in the Web.config file. Do a Find on impersonate. The edit would look like the following. username="domainname\wisdom.net" The screenshot below shows Wisdom.NET as a LOCAL user. Wisdom 2016 Server Setup 03/14/

40 Wisdom Wisdom Web Service Setup Fiserv Password Update Required Change the Wisdom.NET user password. In screenshot below, remove PASSWORD and replace with the credit union defined password. Note: Later in the document are instructions to encrypt the Wisdom.NET password in the Web.config file. Change Drive Letter if Necessary For credit unions that created the Wisdom.NET folder on a data drive an additional edit to the Web.config file is required. Do a Find on TokenKeyPath and change the drive letter C to the appropriate data drive letter. When finished save the changes and close Notepad. Wisdom 2016 Server Setup 03/14/

41 Wisdom Wisdom Web Service Setup Fiserv IIS Manager Add Application Pool Launch Internet Information Services (IIS) Manager (Control Panel>Administrative Tools). Expand server name and select Application Pools. Right click and select Add Application Pool. Type or copy WisdomWebServerPool to the Name box. Accept other default values and then click OK. Wisdom 2016 Server Setup 03/14/

42 Wisdom Wisdom Web Service Setup Fiserv Convert to Application Expand Sites, expand Default Web Site and highlight WisdomWebService. Right click on WisdomWebService and then select Convert to Application. In the first window, click the Select button. In second window, select from the pull-down list the WisdomWebServerPool. Click OK on the second window. Click OK again to close the first window. Authentication Scroll and double click the IIS Authentication icon. Wisdom 2016 Server Setup 03/14/

43 Wisdom Wisdom Web Service Setup Fiserv Right click on ASP.NET Impersonation and then select Edit. In the first window, click Set. In the second window, enter Wisdom.NET user name password twice. When done, click OK and close both windows. Note: For credits unions with a DOMAIN Wisdom.NET user, enter the following for the user name. DOMAINNAME\Wisdom.NET The example below shows the LOCAL Wisdom.NET user setup. Close IIS Manager. Wisdom 2016 Server Setup 03/14/

44 Wisdom Wisdom Web Service Setup Fiserv Test Web Service Open Internet Explorer. Change the SERVERNAME in the following URL to the actual server name at the credit union. Paste the above URL to Internet Explorer and run it note POSITIVE message below. IP Address If unable to connect to server with test above via the URL using the SERVERNAME then change the SERVERNAME to the server IP Address. Re-run test. Some credit unions use the IP address instead of the server name in the URL. Encrypt Wisdom.NET Password in Web.config With a successful Test Web Service, encrypt (mask) Wisdom.NET user s password in the Web.config file. Open Command Prompt as Administrator and follow the steps below 1. Go to the following folder. CD C:\Windows\Microsoft.NET\Framework\v Enter the following command. aspnet_regiis -pe system.web/identity -app /WisdomWebService Note: Most credit unions have not changed the Default Web Site name during the Wisdom server setup. If the WisdomWebService was created under a credit union defined Web Site, use following command. aspnet_regiis -pe system.web/identity -app /WisdomWebService -site "Web Site Name" Wisdom 2016 Server Setup 03/14/

45 Wisdom Wisdom Database Setup Fiserv Wisdom Database Setup Note: For two server setups launch SQL Server Management Studio (SSMS) on the SQL Server instead of the Web Server. All of the things to do in this section are done on the SQL Server. Restore Wisdom Database Launch SQL Server Management Studio (SSMS) and change the Authentication to SQL Server Authentication. For credit unions that installed SQL Express as directed in this document, enter sa for the Login and the sa password that you defined earlier on page 23. Check Remember password box if desired. When ready, click the Connect button. Right click on Databases and select Restore Database. Wisdom 2016 Server Setup 03/14/

46 Wisdom Wisdom Database Setup Fiserv Select the Device radio button and then click the ellipsis button as shown below. In the second window, note File is the Backup media type and then click the Add button. In the third window, navigate to the Wisdom.NET folder and select the WisdomDB.bak file and then click OK to close the third window. Click OK again to close the second window. Wisdom 2016 Server Setup 03/14/

47 Wisdom Wisdom Database Setup Fiserv Note, the Source and Destination databases should be Wisdom. Check the Restore box if needed. Click Files (upper left corner in screenshot below) and then expand the Restore as column to review the Wisdom database files and path. Validate files and path and then click OK to start restore. Wisdom.mdf Wisdom_1.ldf Wisdom_2.WisdomImageFS Review the message below and then click OK when ready. Wisdom 2016 Server Setup 03/14/

48 Wisdom Wisdom Database Setup Fiserv Add Wisdom.NET User to SQL Security Expand Security folder, expand Logins. Right click on Logins and then select New Login. Click Search button in the Login New window. Enter Wisdom.NET in the box and click Check Names and then OK. Wisdom 2016 Server Setup 03/14/

49 Wisdom Wisdom Database Setup Fiserv In the General page, change the Default database to Wisdom and the Default language to English. Select Sever Roles page (left window pane) and check the sysadmin box and then click OK to close. Wisdom 2016 Server Setup 03/14/

50 Wisdom Wisdom Database Setup Fiserv Add Wisdom.NET User to Wisdom Database Security Expand Databases, Wisdom, and Security and then right click Users and select New User. Enter Wisdom.NET for the User Name. Next line, click the Ellipsis button to right of the Login name. In the second (Select Login) window, enter Wisdom.NET and click Check Names. In the third window, check the box for Wisdom.NET and then click OK to close the Multiple Objects Found window. Wisdom 2016 Server Setup 03/14/

51 Wisdom Wisdom Database Setup Fiserv Click OK again. Type in dbo for Default schema. Go to the Membership page and check the following four boxes and then click OK. Wisdom 2016 Server Setup 03/14/

52 Wisdom Wisdom Database Setup Fiserv Restore Wisdom Master Key Database Backup File The default Wisdom Master Key Database Password is needed in this section. If this password has not been ed to the credit union then using an address from the credit union send an to and request the Wisdom Master Key Database Password. For more information about this subject skip ahead and review topic Master Key Database Encryption. In the SQL Server Management Studio (SSMS) screenshot below, do the following steps. 1. Expand Databases. 2. Click on the Wisdom database to highlight it. 3. Click on New Query and note the database name is Wisdom. 4. In the SQL transaction below, enter the default Wisdom Master Key Database Password in the yellow highlighted area. 5. In the SQL transaction below, change if necessary, the drive letter c to the appropriate data drive letter where the Wisdom.NET folder exists. 6. After completing the changes, copy the entire SQL transaction to the SQL query window and then click Execute. 7. Note successful Message below after executing query. OPEN MASTER KEY DECRYPTION BY PASSWORD = 'replace with Wisdom Master Key Database Password'; RESTORE MASTER KEY FROM FILE = 'c:\wisdom.net\wisdomsqldbmasterkeybackuporig' DECRYPTION BY PASSWORD = 'replace with Wisdom Master Key Database Password' ENCRYPTION BY PASSWORD = 'replace with Wisdom Master Key Database Password'; 8. Close SQL Server Management Studio. Wisdom 2016 Server Setup 03/14/

53 Wisdom Wisdom Database Update Setup Fiserv Wisdom Database Update Setup Note: For two server setups open the C:\Wisdom.NET\WisdomAutoUpdate folder on the SQL Server instead of the Web Server. All of the things to do in this section are done on the SQL Server. Create a Custom Event Open a Command Prompt as Administrator and copy the following line and then paste it to Administrator: Command Prompt shown below and then press the Enter key. Note the SUCCESS message below and then close the Command Prompt. eventcreate /ID 1 /L APPLICATION /T INFORMATION /SO "Wisdom DB AutoUpdate" /D "Custom event source created!" Test Database Connection Navigate to the C:\Wisdom.NET\WisdomAutoUpdate folder. Run the TestConnect.exe program. Wisdom 2016 Server Setup 03/14/

54 Wisdom Wisdom Database Update Setup Fiserv SQL Express Credit unions with SQL Express install as directed by this document, change the SERVERNAME in the following line to the credit union server name. Copy the line and past to the Connection Tester window. Click the Test button and note Successful! message. server=servername\sqlexpress;initial Catalog=Wisdom;integrated security=true Full SQL Credit unions that added the Wisdom database to their existing Full SQL instance, change the SERVERNAME and omit the \SQLEXPRESS. Copy the line below and past to the Connection Tester window. Click the Test button and note Successful! Message. When done, close all windows. server=servername;initial Catalog=Wisdom; integrated security=true Update DBAutoUpdate.exe.config File. Back to the C:\Wisdom.NET\WisdomAutoUpdate folder and open DBAutoUpdate.exe.config file with Notepad. Wisdom 2016 Server Setup 03/14/

55 Wisdom Wisdom Database Update Setup Fiserv Edit Server Name SQL Express Do a find on the SERVERNAME. Credit unions that installed SQL Express as directed in this document, change the SERVERNAME in the to the actual server name at the credit union. See example below. Full SQL Credit unions that added the Wisdom database to their existing Full SQL instance, change the SERVERNAME in the DBAutoUpdate.exe.config file to the actual server name at the credit union and omit the \SQLEXPRESS extension. See example of the line item below. Server=AZPHD001028;Initial Catalog=Wisdom; and so forth Wisdom 2016 Server Setup 03/14/

56 Wisdom Wisdom Database Update Setup Fiserv Edit Proxy Server Values if Necessary If Internet Explorer on the credit union s server uses a proxy server, update the proxy settings below; otherwise, move to the next step Edit TempUpdatePath Drive Letter if Necessary. 1. Change the FALSE value to TRUE. 2. Change the value to the credit union s actual proxy server IP address. 3. Change the proxy server port 8080 value if necessary. 4. Enter the USER and PASSWORD if needed; otherwise, leave ProxyLoginID and ProxyPswd blank. Edit TempUpdatePath Drive Letter if Necessary At the bottom in the screenshot above, change the drive letter from C to a data drive letter if the Wisdom.NET folder was created on a data drive instead of the C drive. When done with the above edits, save and close Notepad. Wisdom 2016 Server Setup 03/14/

57 Wisdom Create Wisdom DB Update Task Fiserv Create Wisdom DB Update Task The Wisdom DB Update task runs daily at 1 AM and accesses the Wisdom Users website server ( This task compares the Wisdom database version on the credit union server to the latest database version offered by Wisdom. The task updates the Wisdom database as needed. Important: It is important to have the Wisdom database up-to-date as some database updates are pushed out without notice between published releases. Note: For two server setups create the scheduled task on the SQL Server instead of the Web Server. All of the things to do in this section are done on the SQL Server. Create Task Open Computer Management, expand Task Scheduler and right click on Task Scheduler Library and then select Create New Task. Enter Wisdom DB Update for the Name and Description. Select Run whether user is logged on or not and select Run with highest privileges. Check box Do not store password. Next, click on the Change User or Group button. Wisdom 2016 Server Setup 03/14/

58 Wisdom Create Wisdom DB Update Task Fiserv Enter Wisdom.NET as shown below and then click the Check Names button. Click OK to save. Click Triggers tab and then click New button. In the second window, select Daily, set time to 1:00:00 AM, check box for Stop task if it runs longer than set to 1 hour. Check Enable box. Click OK to save and close the New Trigger window. Wisdom 2016 Server Setup 03/14/

59 Wisdom Create Wisdom DB Update Task Fiserv Go to the Actions tab and click New. Click Browse and navigate to the C:\Wisdom.NET\WisdomAutoUpdate folder (it may be on a data drive) and select the program DBAutoUpdate.exe. Be careful to select the Application not the XML Configuration File. Click Open. Wisdom 2016 Server Setup 03/14/

60 Wisdom Create Wisdom DB Update Task Fiserv Click OK in New Action screen. Note: Again, validate the DBAutoUpdate.exe is showing in the screenshot below instead of the DBAutoUpdate.exe.config. Go to the Conditions tab and check the box Wake the computer to run this task. Wisdom 2016 Server Setup 03/14/

61 Wisdom Create Wisdom DB Update Task Fiserv Go to the Settings tab and check the box Run task as soon as possible after a scheduled start is missed and then click OK. Enter the Wisdom.NET user password and then click OK to save task. Wisdom 2016 Server Setup 03/14/

62 Wisdom Create Wisdom DB Update Task Fiserv Run Task Right click on Wisdom DB Update and select Run. Click Refresh and note Status changes from Ready to Running. Click Refresh until task finishes. Task usually completes in a few minutes. When task is done, the Status column shows Ready and the Last Run Result column shows The operation completed successfully. (0.0). However, the actual database updates may be incomplete. Expand Event Viewer, expand Windows Logs and click Application. Find Wisdom DB AutoUpdate in the Source column and double click on it. Scroll to view message Database is up-to-date this is a good message. The task is working properly. Otherwise, resolve any errors and rerun task. Wisdom 2016 Server Setup 03/14/

63 Wisdom Create Wisdom Backup Task Fiserv Create Wisdom Backup Task The Wisdom Backup task runs daily at 2 AM and creates a full, simple SQL database backup of the Wisdom database. The backup task parameters are defined in the DBBackup.ps1 file which is located in the Wisdom.NET folder. Important: In addition to the Wisdom Database Backup scheduled task, the credit union is responsible to copy the Wisdom database files to off-site storage media. Some credit unions with existing SQL backup media may deem creating the Wisdom Backup task as unnecessary and decide to skip the setup. Nearly all credit unions, do create this task in addition to their other SQL database backup media. For two server setups create the scheduled task on the SQL Server instead of the Web Server. All of the things to do in this section are done on the SQL Server. Create Task Open Computer Management, expand Task Scheduler and right click on Task Scheduler Library and select Create Task. Enter Wisdom Backup for the Name and Description. Select Run whether user is logged on or not and select Run with highest privileges. Check box Do not store password. Next, click on the Change User or Group button. Wisdom 2016 Server Setup 03/14/

64 Wisdom Create Wisdom Backup Task Fiserv Click on the Change User or Group button as shown in screenshot above (half way down and on the right). Enter Wisdom.NET as shown below and then click the Check Names button. Click OK to save. Click Triggers tab and then click the New button. In the second window, select Daily, set time to 2:00:00 AM, check box for Stop task if it runs longer than set to 1 hour. Check Enable box. Click OK to save and close the New Trigger window. Wisdom 2016 Server Setup 03/14/

65 Wisdom Create Wisdom Backup Task Fiserv Go to Actions tab and click the New button. In the New Action window, fill in the Program/script and the Add argument box with the following values, respectively. Change C drive to data drive if applicable. PowerShell.exe C:\Wisdom.Net\DBBackup.ps1 Click OK to save and close the New Action window. Click on the Conditions tab and check the box for Wake the computer to run this task. Wisdom 2016 Server Setup 03/14/

66 Wisdom Create Wisdom Backup Task Fiserv Go to Settings tab and check the box Run task as soon as possible after a scheduled start is missed. Click OK. Enter the Wisdom.NET user password and then click OK to save task. Edit DBBackup.ps1 Go to the Wisdom.NET folder. Open the DBBackup.ps1 file via Notepad to review the scheduled backup task parameters. Wisdom 2016 Server Setup 03/14/

67 Wisdom Create Wisdom Backup Task Fiserv Here s the DBBackup.ps1 file opened in Notepad. Required Server Name Change Change the $ServerName. For SQL Express enter actual server name in place of SERVERNAME. For Full SQL, enter actual server name in place of SERVERNAME and omit \SQLEXPRESS. Review next Four Parameters, Edit if Desired The $DatabaseName above is Wisdom. The $KeepThisMany value is the number of prior day Wisdom database backup files to save plus the current day. The default value is three. The task runs one time a day after four days and thereafter, only four backup files exist in this folder. The backup files are the four most recent days. Some credit unions change this value to save more backup files. Change this value if desired. The $BackupMask value of Wisdom*.bak means any filenames that begin with Wisdom and end with.bak are deleted. Files that do not conform to this naming convention are not deleted. The $DBCompression value may be changed to On for credit unions where the Wisdom database exists on a Full SQL instance. SQL Express does not support database compression. Edit $WisdomFolder Parameter if Necessary The $WisdomFolder value is the Wisdom.NET folder location. If the Wisdom.NET folder was set up on a data drive, change the C drive letter to the appropriate data drive letter. Edit Backup Folder Path ($BackupPath) if Desired The $BackupPath is the location of the Wisdom backup files. The $BackupPath value is the SQL Server 2016 Express default backup path. Change the C drive letter to the data drive letter if necessary. Create a Wisdom Backup folder and update the $BackupPath if desired. When changing the $BackupPath value, include the backslash at the end of the path. Here s a backup folder example D:\WisdomBackupFiles\ When the above edits have been completed, close Notepad and save the changes. Wisdom 2016 Server Setup 03/14/

68 Wisdom Create Wisdom Backup Task Fiserv Wisdom.NET Modify Rights on Backup Folder Properties Right click on Backup folder and select Properties as shown below. The default path follows. C:\Program Files\Microsoft SQL Server\MSSQL13.SQLEXPRESS Go to the Security tab, click Edit. In the second window, click Add. Wisdom 2016 Server Setup 03/14/

69 Wisdom Create Wisdom Backup Task Fiserv In the third window, enter Wisdom.NET and click Check Names. Note Wisdom.NET user and click OK to close third window. Highlight Wisdom.NET user and check the Modify box. Click Apply. Click OK to close the second window below. Note in the first window below that the Wisdom.NET user now has Modify rights. Click OK to close. Wisdom 2016 Server Setup 03/14/

70 Wisdom Create Wisdom Backup Task Fiserv Windows PowerShell Execution Policy RemoteSigned Set Windows PowerShell Execution Policy to RemoteSigned. Do a search on PowerShell and then Right click on the Windows PowerShell as shown below and then select Run as Administrator. 1. Copy the following cmdlet and paste it to the PowerShell window to view the execution policy. See screenshot below. get-executionpolicy 2. To set the execution policy to RemoteSigned use following cmdlet. set-executionpolicy RemoteSigned 3. Next enter Y. 4. Validate the execution policy is set to RemoteSigned do the following again. get-executionpolicy Wisdom 2016 Server Setup 03/14/

71 Wisdom Create Wisdom Backup Task Fiserv Run Task Back to Computer Management and Task Scheduler right click on Wisdom Backup and select Run. Review Status and Last Run Result. Even with a successful status in Task Scheduler, the backup file may not have been created. Go to the backup folder to view file. Here s the default $BackupPath in the DBBackup.ps1 file. C:\Program Files\Microsoft SQL Server\MSSQL13.SQLEXPRESS\MSSQL\Backup The backup file format is Wisdom_YYYY-MM-DD-hh-mm-ss.bak where Y is the year, M is the month, D is the day, h is the hour, m is the minute and s is the second of when the backup file was created. Run Backup Task Five Times to Validate Delete Function After running the backup task five times (assuming the $KeepThisMany parameter was not changed as described in a prior section Edit DBBackup.ps1), the oldest file should have been deleted only four files should exist in the backup folder. Again after running the backup task five or more times validate the most recent four files show in the backup folder. Wisdom 2016 Server Setup 03/14/

72 Wisdom Master Key Database Encryption Fiserv Master Key Database Encryption SQL Server uses encryption keys to help secure data, credentials, and connection information that is stored in the server database. Wisdom uses Microsoft s database encryption functionality. In this section create a Master Key backup file and a Certificate backup file as well as change the Master Key Database Password from the default password to a credit union defined password. Important: Store the Master Key backup file, the Certificate backup file and the Master Key Password to an offsite, secured location as part of the credit union s disaster recovery plan. The files and password are needed when restoring the Wisdom database to another server; otherwise, loss of data may result. Change Master Key Password The default Wisdom Master Key Database Password is needed in this section. If this password has not been ed to the credit union then using an address from the credit union send an to Paul.Stahl@Fiserv.com and request the default Wisdom Master Key Database Password. Open SQL Server Management Studio (SSMS). Expand Databases, highlight Wisdom and then click the New Query icon. Enter the default Wisdom Master Key Database password and a new credit union defined password in the highlighted area below. Copy the following lines and paste into the SQL Window. Click Execute and note successful message below. USE WISDOM; GO OPEN MASTER KEY DECRYPTION BY PASSWORD = 'replace with Wisdom Master Key Database Password'; ALTER MASTER KEY REGENERATE WITH ENCRYPTION BY PASSWORD = 'replace with new database password'; GO Wisdom 2016 Server Setup 03/14/

73 Wisdom Master Key Database Encryption Fiserv Create Master Key and Certificate Backup Files Still in SSMS, run the following SQL transaction to create the master key backup file and the certificate backup file in the C:\Wisdom.NET folder. In the highlighted area below enter the credit union defined Wisdom Master Key Database Password created in the prior step. In the SQL transaction below, change the C drive letter if the Wisdom.NET folder is on a data drive. There are two places to change the drive letter. Click New Query and copy the below SQL transaction and then paste it into the SQL Window. When ready, click Execute and note message. When done, close SSMS. USE WISDOM; GO BACKUP MASTER KEY TO FILE = 'C:\Wisdom.NET\WisdomSqlDbMasterKeyBackup' ENCRYPTION BY PASSWORD = 'replace with new database password'; BACKUP CERTIFICATE EncryptWisdomCert TO FILE = 'C:\Wisdom.NET\WisdomSqlDbCertBackup'; GO Validate Master Key and Certificate Backup Files Validate the master key backup file and the certificate backup file were written to the Wisdom.NET folder. Important: Store the Master Key backup file, the Certificate backup file and the Master Key Password to an offsite, secured location as part of the credit union s disaster recovery plan. The files and password are needed when restoring the Wisdom database to another server; otherwise, loss of data may result. After copying the Certificate backup file and the Master Key backup file to an off-site location including the Master Key Password delete the backup files from the Wisdom.NET folder. Wisdom 2016 Server Setup 03/14/

74 Wisdom Notify Wisdom Support Fiserv Notify Wisdom Support Notify to validate the setup and complete the final steps of the server setup. Wisdom 2016 Server Setup 03/14/