Versions Compared
Key
- This line was added.
- This line was removed.
- Formatting was changed.
You have to fill in the necessary values in the During system deployment stage it is necessary to set up configuration files of each service at the system deployment stage. Configuration files of all system services reside are located in the root folder directory of IIS web applications (default path is %SystemDrive%\inetpub\wwwroot).
Info |
---|
Card Monitor service configuration files are located in %ProgramFiles%\Indeed CMAxidian CertiFlow\CardMonitor. |
Setup of configuration files is carried out using Indeed CM Setup Wizard. The latter runs automatically upon completion of Indeed CM Server Installation Wizard, if the corresponding checkbox is activated.
However, you also can run the Wizard manually at any time (Start - All Programs – Indeed Identity).
Image Removed
Scroll Pagebreak |
---|
Table 4 features the section of Setup Wizard, along with description of their parameters.
Configuration files are set up viaAxidian CertiFlow Configuration Wizard, a component which is installed separately.
Tip |
---|
System requirements for Axidian CertiFlow Configuration Wizard are the same as for Axidian CertiFlow server. |
Installing Axidian CertiFlow Configuration Wizard
Run the AxidianCertiFlow.Wizard-<version number>.x64.en-us.msi from Axidian CertiFlow installation package and follow the wizard instructions to complete the installation.
Note |
---|
For security reasons, we recommend that you disable the Axidian CertiFlow Configuration Wizard after you complete the system configuration:
|
Authentication in Axidian CertiFlow Configuration Wizard
Use a temporary authentication code to access Axidian CertiFlow Configuration Wizard. The authentication code is generated when you start the IIS Axidian CertiFlow Wizard application pool. The code is saved in the wizard_authentication_code.txt file in logs subfolder (C:\inetpub\wwwroot\cm\wizard\logs).
Open wizard_authentication_code.txt and copy the authentication code.
Code Block title Example: 2023-09-20 09:40:06.1557|AuthenticationCode: "YoQZdL2mJC4pYmKJmC7YT8mXDv3FPj2v"
Open https://<FQDN name of the server>/cm/wizard page in your browser.Enter the authentication code and log in.
Scroll Pagebreak |
---|
Configuring the system
Here are the Axidian CertiFlow Configuration Wizard parameters:
Table 4 – Indeed CM Setup Wizard sections and their description.Section | Description | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Before starting work | This contains information about the Axidian CertiFlow Setup Wizard purpose and features of Indeed CM Setup Wizard. | ||||||||||
Restore configuration | This allows to load Uploading a backup copy of Indeed CM Axidian CertiFlow configuration. | ||||||||||
System features
| Configuration of internal parameters of Indeed CM Configuring internal settings for Axidian CertiFlow web applications: Management Console
Self-Service
Event Log:
Microsoft CA: Configure settings for working with Microsoft Certification Authority. AirKey AirCard Enterprise: Configuring Configure integration with Indeed AirKey Axidian AirCard Enterprise virtual smart card server. Client Agent: Configuring Indeed CM Client Configure Axidian CertiFlow Agent. | ||||||||||
User Users catalog
| Definition of the system user catalog. Definition user attributes when changing which requires a certificate update.Information about users catalog and user attributes . The list of tracked user attributes in the settings of Microsoft CA certificate templates settings includes the following attributes by default:
| ||||||||||
Access control
| Defining access settings to system services. Specify Definition an account to initially configure user privileges in the Roles section of Indeed CM Axidian CertiFlow Management Console.
| ||||||||||
Database Active Directory
| Definition of system Information about the system's data storage and encryption algorithm. | ||||||||||
Card Monitor service | The Card Monitor service is intended for control of controls smart card usage. The service performsOperations:
– Card issuance approval/rejection – Approval or rejection of renewal for certificates on card – Card replacement approval/rejection – Change of policy applied to user Warning |
For the Card Monitor service to work correctlyproperly, create a service role (say, with an account for Card Monitor service) in Roles section , include an account in it, on behalf of which Card Monitor will work with and define the flowing following privileges for named the role:
| |||||||||
ConfirmationThis | contains combined information on settings Summary of all | ||||||||||
Results | This displays the Wizard progress in writing the defined values to configuration files of Indeed CM services. |
When installed Indeed CM Server for the first time, set up the required parameters and make a backup copy of those (option Backup current configuration settings in the Confirmation section).
The backup copy of Indeed CM settings contains all the parameters defined for all services during installation, as well as encryption key and algorithm. To use the backup to deploy new Indeed CM servers, specify it in the Restore configuration section of Setup Wizard.
Warning |
---|
The backup also contains the data of service accounts (the one for user directory and for data storage), encryption key and algorithm. Be sure to store the backup copy file in a safe place. |
Configuration Wizard settings. After you click Apply, the specified values for all settings will be saved in configuration files for all applications and stored in the C:\inetpub\wwwroot\cm\wizard\configs folder. | |||
Results | Information about saving the specified values to the service configuration files. You can upload the configuration files to an archive (Save configuration files option) to transfer and apply the settings to the system server. When installing Axidian CertiFlow for the first time, save a copy of your configuration settings (Backup current configuration settings option). To deploy new system servers, upload the backup file in Restore configuration section of the wizard.
|
Applying configuration files to the CertiFlow server
Apply the configuration files to the CertiFlow server:
- Run PowerShell as administrator and go to C:\inetpub\wwwroot\cm\wizard\configs.
Run the PowerShell script deploy_configuration.ps1:
.\deploy_configuration.ps1
- Specify the password of the account that is used to launch the Card Monitor service.
Tip |
---|
We recommend that you specify a local account that is used to launch the rest of the CertiFlow web applications. |
Divbox | |
---|---|
|