Installation Guide of FingaPass Gateway. Doc version v1.0

Transcription

1 Installation Guide of FingaPass Gateway Doc version v1.0 1

2 Prerequisites: - Windows 7 SP1, Windows 8, Windows Server 2008 SP2, Windows Server 2008 R2 SP1 - Administrator right of the computer - SAP user account with remote function call authorization - Network connection to SAP server - Network connection to iphone or ipod Touch device Steps: I. Install IIS II. Install.NET Framework III. Install SQL Server 2012 Express Local DB IV. Create folders for the installation V. Create Application Pool VI. Change IIS configuration file VII. Create IIS Web Sites VIII. Allow HTTP connection in Firewall IX. Extract the package X. Create Administrators Group XI. Gateway Settings and enter SAP connection parameter XII. Test the FingaPass Gateway and the connection to SAP XIII. Test the connection to SQL Local DB 2

3 Install IIS Windows 7: 1. Start Menu -> Control Panel -> Programs -> Programs and Features 2. Click Turn Windows features on or off 3. Select the feature Internet Information Services 4. Select the feature Internet Information Services -> World Wide Web Services -> Security -> Windows Authentication 5. Click OK. This will install the IIS and Windows Authentication Windows 8: 1. Search for Control Panel -> Open Control Panel -> Programs -> Programs and Features 2. Click Turn Windows features on or off 3. Select the feature Internet Information Services 4. Select the feature Internet Information Services -> World Wide Web Services -> Security -> Windows Authentication 5. Click OK. This will install the IIS and Windows Authentication Windows Server 2008: 1. Launch Server Manager -> Roles 2. If Web Server (IIS) is not an existing role of the server, click Add Roles 3. Select Web Server (IIS) 4. Select Web Server (IIS) -> Web Server -> Security -> Windows Authentication 5. Next and click Install 3

4 Check.NET Framework Windows 7 and Windows Server 2008: 1. Start Menu -> Control Panel -> Programs -> Programs and Features 2. Check if.net Framework is installed 3. If not, download and install the.net Framework from Microsoft Windows 8: 1. Search for Control Panel -> Open Control Panel -> Programs -> Programs and Features 2. Check if.net Framework is installed 3. If not, download and install the.net Framework from Microsoft 4

5 Install SQL Server 2012 Express Local DB 1. Download and install the SQL Server 2012 Express Local DB 2. Download "ENU\x64\SqlLocalDB.MSI" for 64-bit Windows, "ENU\x86\SqlLocaLDB.MSI" for 32- bit Windows. 5

6 Create folders for the installation 1. Launch a Windows Explorer 2. Go to folder C:\inetpub\wwwroot (Go to the root folder of your IIS server if you moved it to other folder) 3. Assuming you have 3 SAP instances: DEV, QA and PRD. Create a folder for each SAP instance - FingaPassDEV - FingaPassQA - FingaPassPRD 6

7 Create Application Pool 1. Start Menu -> Search for program "inetmgr" 2. Expand the tree under the computer name and select Application Pools 3. Click "Add Application Pool" on the right and enter the name "FingaPassAppPool" 4. Select.NET Framwork v " and click OK 5. Select newly created Application Pool. Click Advanced Settings on the right 6. Select "Identity" and click the button on its right 7

8 7. Select NetworkService from the dropdown and click OK 8. Click OK to save it 8

9 Change IIS configuration file 1. Launch a Command Prompt as Administrator from Start menu 2. Enter command "notepad c:\windows\system32\inetsrv\config\applicationhost.config" to launch the notepad with the IIS configuration file 3. Search for the parameter "setprofileenvironment" 4. Change the value to "true" and save the file 5. Restart Windows to enable the IIS configuration 9

10 Create IIS Web Sites 1. Start Menu -> Search for program "inetmgr" 2. Expand the tree under the computer name 3. Right click the folder FingaPassDEV under Default Web Site. Select Convert to Application 4. Click the Select button next to Application pool and choose FingaPassAppPool 5. Click OK to confirm 6. Double-click the Authentication icon 7. Select Windows Authentication and click "Enable" on the right 8. Repeat the above for the FingaPassQA and FingaPassPRD folders 10

11 Allow HTTP connection in Firewall 1. Start Menu -> Control Panel -> System and Security -> Windows Firewall 2. Click Advanced settings on the left 3. Select Inbound Rules on the left 4. Scroll to the bottom and select World Wide Web Services 5. Click Enable Rule on the right 11

12 Extract the package 1. Extract the FingaPass Gateway package to each of the folders created above 2. The folder look the below after extracting the package 12

13 3. Repeat the steps for the FingaPassQA and FingaPassPRD folders 13

14 Create Administrators Group Users belong to this group have the access right to add, remove and lock the ios devices. Depend on the network landscape of your company. The group can be a local group on the IIS server, a group of an Active Directory, or both. Local Group 1. Launch a Command Prompt from Start menu 2. Enter command "lusrmgr" to launch user manager 3. Select the node Groups 4. Right-click and Select New Group 5. Create a group "FingaPassAdmins" 6. Add users to the group (the user must have a password) Please consult your domain administrator for creating group in Active Directory 14

15 Gateway Settings and SAP connection parameters Gateway settings: 1. Open the file Web.config with a text editor (e.g. notepad) and maintain the 4 parameters: 2. If the administrators group is an Active Directory group, replace DOMAIN with your domain name 3. "InitPassword" is the initial password when you reset the password for user using "Reset Password" in the FingaPass App 4. CheckIdentity "true" mean FingaPass gateway will reject ios device that not listed in device setup "false" mean FingaPass gateway does not check the ios device ID. You don't need to create device in device setup 5. CheckSecret "true" mean FingaPass gateway will compare the secret word in the FingaPass App with the secret word in device setup "false" mean FingaPass gateway does not compare the secret word It is effective only when "CheckIdentity = true" 15

16 SAP connection parameters: 6. Maintain the values of the connection parameters with reference to the SAP Logon 7. Maintain the values of the user parameters with reference to the logon screen 16

17 8. Save the file Web.config 9. Repeat the steps for QA and PRD systems 17

18 Test the FingaPass Gateway and the connection to SAP 1. Restart 2. Launch Internet Explorer 3. Type the URL: 4. Click the "Test the Connection" button. 5. Enter username, password and click Test Connection button 18

19 Test the connection to SQL Local DB 1. Launch Internet Explorer 2. Type the URL: 3. Click "Device Setup" at the top bar 4. Logon with a user belong to the FingaPassAdmins group. (the user must have a password) 5. If an empty device list is showing, the connection to SQL Local DB is fine. 19

20 Test the connection from iphone/ipod Touch to FingaPass Gateway 1. Check the hostname or IP address of the computer running the Gateway 2. Launch the Safari on the iphone/ipod Touch 3. Type the URL: or IP address>/fingapassdev 4. Repeat the test for QA and PRD systems 20