deploying ekran system v.6 installation check...4. in the features tree-view, select the internet...

Deploying Ekran System v.6.14

The following steps are required for successful installation of Ekran System. Please see detailed

instructions on deploying the system in the manual.

Step 1. Configure the computer where Management Tool will be installed.

1.1. Turn on the Internet Information Service (IIS) on your computer.

1.2. Install .NET Framework (4.5.2 or higher).

1.3. Configure the Internet Information Service.

1.4. Generate a self-signed certificate or import the purchased one.

1.5. Export a self-signed certificate and add it to Trusted Root Certification Authorities.

1.6. Set HTTPS binding for default web-site.

Step 2. Install the Server.

2.1. For PostgreSQL database, download and install PostgreSQL 10 or higher.

2.2. For MS SQL database, install the full edition of MS SQL Server 2008 or higher with standard

license or higher.

2.3. Install Universal C Runtime and Visual C++ Runtime (starting with Ekran System 5.5). Both

can be installed via the Microsoft Visual C++ 2015 Redistributable:

https://www.microsoft.com/en-gb/download/details.aspx?id=48145

The Universal C Runtime needs to be initially installed via update KB2999226:

https://support.microsoft.com/en-us/help/2999226/update-for-universal-c-runtime-in-

windows

2.4. If the Server is not installed on the same computer with the Management Tool, install .NET

Framework (4.5.2 or higher).

2.5. During installation, select the type of database (PostgreSQL or MS SQL) and define the

administrator’s password that will be used when opening the Management Tool.

2.6. Choose the folder for binary data storage.

2.7. If during Server installation Firewall was turned off, add Server executable to the list of

Firewall exceptions.

Step 3. Install the Management Tool.

3.1 If access to the Management Tool is performed from other computers, configure Firewall to

enable remote access to the Management Tool.

Step 4. Activate serial keys.

Step 5. If necessary, enable the Multi-tenant mode and unassign the necessary amount of the licenses to be granted to a new tenant.

Step 6. If the Clients are installed remotely on Windows operating system via the Management Tool,

configure the computer where the Clients will be installed.

6.1. Make sure shared folders are accessible on the remote computer. For workgroup

computers, simple file sharing must also be disabled.

https://www.microsoft.com/en-gb/download/details.aspx?id=48145

https://support.microsoft.com/en-us/help/2999226/update-for-universal-c-runtime-in-windows

https://support.microsoft.com/en-us/help/2999226/update-for-universal-c-runtime-in-windows

6.2. Make sure the Server and Remote Procedure Call (RPC) system services are running on the

target computer.

6.3. Configure Firewall on the target computer for remote Client installation.

Step 7. Install the Windows Clients.

7.1. Open the Management Tool: open the browser and enter https://<name of the computer or

IP on which the Management Tool is installed>/<URL address that has been specified during

the Management Tool installation> in the address line. For example, https://john-

pc/MyMonitoringSystem.

Log in as admin using the password set at the Server installation.

7.2. Install the Clients remotely from the Management Tool.

Step 8. Install the macOS Clients.






8.2. Download Client installation files from the Management Tool.

8.3. Install the Clients locally using the command line.

Step 9. Install the Linux Clients.






9.2. Download Client installation files from the Management Tool.

9.3. Install the Clients locally using the Linux command line.

Step 10. License the Clients.

Step 11. Install Tray Notifications application if necessary.

Appendices

Appendix 1. Turning on Internet Information Service (IIS)

Turning on IIS for Windows 8 and Windows 7

To turn on the Internet Information Service for Windows 8 and Windows 7, do the following:

1. Select Control Panel > Programs and Features (Program uninstallation).

2. Click the Turn Windows features on or off navigation link.

3. The Windows Features window opens.

4. In the features tree-view, select the Internet Information Services check box.

5. Click OK.

Turning on IIS for Windows Server 2008 R2

To turn on the Internet Information Service for Windows Server 2008 and Windows Server 2008 R2, do the following:

1. In the Start menu, select All Programs > Administrative Tools > Server Manager.

2. In the navigation pane, select Roles, and then click Add Roles.

3. The Add Roles Wizard opens.

4. On the Before You Begin page, click Next.

5. On the Server Roles page, select Web Server (IIS), click Next, and then go to the Role Services page to start configuring Web Server (IIS).

Turning on IIS for Windows Server 2012

The Internet Information Service can be turned on using the Windows PowerShell or Windows Server 2012 Server Manager.

To turn on the Internet Information Service for Windows Server 2012 using Windows PowerShell, do the following:

1. In the Start menu, select Windows PowerShell.

2. Enter the following command and click Enter:

Install-WindowsFeature -Name Web-Server, Web-Mgmt-Tools

To turn on the Internet Information Service for Windows Server 2012 using Server Manager, do the following:

1. In the Start menu, select Server Manager.

2. In the navigation pane, select Dashboard, then click Manage > Add roles and features.

3. The Add Roles and Features Wizard opens.

4. On the Before You Begin page, click Next.

5. On the Installation type page, select Role-based or feature-based installation, and then click Next.

6. On the Server Selection page, select Select a server from the server pool, select your server from Server Pool list, and then click Next.

7. On the Server Roles page, select Web Server (IIS), click Next and then click Add Features to start configuring Web Server (IIS).

Turning on IIS for Windows Server 2016

To turn on the Internet Information Service for Windows Server 2016, do the following:

1. In the Start menu, select Server Manager.

2. In the navigation pane, select Dashboard, then click Add roles and features.

3. The Add Roles and Features Wizard opens.

4. In the Add Roles and Features Wizard, on the Before You Begin page, click Next.

5. On the Select installation type page, select Role-based or feature-based installation, and then click Next.

6. On the Select destination server page, select Select a server from the server pool, select your server from Server Pool list, and then click Next.

7. On the Server server roles page, select Web Server (IIS), click Next, and then click Add Features to start configuring Web Server (IIS).

Appendix 2. Configuring Internet Information Service (IIS)

Windows 10 Make sure that all the following options are selected in the Windows Features

window and then click OK:

.NET Framework 4.6 Advanced Services;

Internet Information Services > Web Management Tools > IIS

Management Console;

Internet Information Services > World Wide Web Services >

Application Development Features > ASP.NET 3.5, ASP.NET 4.6,

and WebSocket Protocol.


Common HTTP Features > Static Content.

Windows 8 Make sure that all the following options are selected in the Windows Features window and then click OK:

.NET Framework 4.5 Advanced Services;


Management Console;


Application Development Features > ASP.NET 3.5, ASP.NET 4.5,

and WebSocket Protocol;



Windows 7 Make sure that all the following options are selected in the Windows Features window and then click OK:


Management Console;


Application Development Features > ASP.NET;



Windows Server 2016 1. In the Add Roles and Features Wizard window, on the Server Roles page, make sure that the Web Server (IIS) option is selected and then click

Next.

2. On the Features page, make sure that the following option is selected:

.NET Framework 4.6 Features > .NET Framework 4.6 and

ASP.NET 4.6

3. Click Next.

4. On the Web Server Role IIS page, click Next.

5. On the Role Services page, select the ASP.NET 4.6 option (under

Application Development).

6. Click Next and then click Add Features.

7. On the Role Services page, make sure that the following options are

selected:

Application Development >

.NET Extensibility 4.6

ASP.NET 4.6

ISAPI Extensions

ISAPI Filters

WebSocket Protocol

8. Click Next and then click Install.

9. After the end of installation, click Close.

Windows Server 2012 1. In the Add Roles and Features Wizard window, on the Server Roles

page, make sure that the Web Server (IIS) option is selected and then click Next.

2. On the Features page, make sure that the following option is selected:

.NET Framework 4.5 (Installed) > ASP.NET 4.5.

3. Click Next.

4. On the Web Server Role IIS page, click Next.

5. On the Role Services page, select the ASP.NET 4.5 option (under

Application Development).

6. Click Next and then click Add Features.

7. On the Role Services page, expand Application Development, and make

sure that the following options are selected:

.NET Extensibility 4.5

ISAPI Extensions

ISAPI Filters

WebSocket Protocol 8. Click Next and then click Install. 9. After the end of installation, click Close.

Windows Server 2008 1. In the Add Roles Wizard window, on the Role Services page, make

sure that the following options are selected:

Common HTTP Features > Static Content;

Application Development > ASP.NET. 2. Click Next and then click Add Required Role Services. 3. On the Role Services page, make sure that the following options are

selected:

Management Tools > IIS Management Console.

4. Click Next and then click Install.

5. After the end of installation, click Close.

Appendix 3. Using Certificates

Generating Self-Signed Certificate

To generate a self-signed certificate on the computer on which you will install the Management

Tool, do the following:

1. Go to the Start menu and open Administrative Tools > Internet Information Services (IIS)

Manager.

2. Click the server name in the Connections column on the left and double-click Server

Certificates.

3. The Server Certificates pane opens.

4. On the Actions pane (to the right), click Create Self-Signed Certificate.

5. The Create Self-Signed Certificate window opens.

6. Enter the name for a certificate in the Specify a friendly name for the certificate box and click OK.

7. The certificate is created.

Exporting Self-Signed Certificate

To export self-signed certificate, do the following:

1. In the Internet Information Service Manager, on the Server Certificates pane, select the generated certificate and click Export on the Actions pane or in the certificate context menu.

2. In the Export Certificate window, define the location and password for the certificate. Click OK.

3. The certificate is exported and can be added to the Trusted Root Certification Authorities.

Importing Trusted Certificate

To import a purchased certificate issued for the computer, do the following:

1. Open the Internet Information Service Manager:

For Windows 8 or Windows 7: Open Computer > Manage > Services and Applications > Internet Information Services (IIS) Manager.

For Windows Server 2012 or 2008: Press Windows+R, enter inetmgr in the Run window and then press Enter.

NOTE: Using the inetmgr command is a common way of opening the Internet

Information Service Manager for any version of the Windows operating system.

2. Click the main node in the Connections tree-view and then double-click the Server Certificates item under the IIS category.

3. The Server Certificates pane opens.

4. On the Actions pane (to the right), click Import.

5. In the Import Certificate window, click the Browse button to browse for the file of the purchased certificate and enter its password in the Password field.

6. Click OK.

7. The certificate is imported and displayed on the Server Certificates pane of the Internet Information Services (IIS) Manager.

Appendix 4. Adding Certificate to Trusted Root Certification Authorities

Before adding the self-signed certificate to the Trusted Root Certification Authorities, it should be

exported. For purchased certificates that were issued for your computer this procedure is not

needed.

To add the certificate to the Trusted Root Certification Authorities, do the following:

1. Press Windows+R, type mmc in the Run text box and press Enter.

2. In the opened User Account Control window, click Yes.

3. In the Console window, select File > Add/Remove Snap-in.

4. In the opened Add or Remove Snap-ins window, select Certificates > Add.

5. In the opened Certificates snap-in window, select Computer account and click Next.

6. In the opened Select Computer window, select Local computer: (the computer this console is running on) and click Finish.

7. In the Add or Remove Snap-ins window, click OK.

8. In the Console window, expand the Certificates (Local computer) node.

9. In the Certificates (Local computer) tree-view, find the Trusted Root Certification Authorities node.

10. In the right-click menu of the Trusted Root Certification Authorities node, select All Tasks > Import.

11. The Certificate Import Wizard opens.

12. On the Certificate Import Wizard Welcome page, click Next.

13. On the File to Import page, click Browse to find the certificate to be imported and then click Next.

14. On the Private key protection page, enter the certificate password and then click Next.

15. On the Certificate Store page, click Next.

16. On the last page of the Certificate Import Wizard, click Finish.

17. In the confirmation message, click OK.

18. The certificate is imported and is displayed in the Console window in the Certificates node. Please note that the Issued To field contains the name of the computer, on which the Management Tool will be installed in the format that will be used when opening the Management Tool.

19. Close the Console window.

Appendix 5. Setting HTTPS Binding for a Default Web-Site

To set HTTPS binding for a default web-site, do the following:

1. Open the Internet Information Service Manager:

For Windows 7 or Windows 8: Open Computer > Manage > Services and Applications > Internet Information Services (IIS) Manager.

For Windows Server 2008 or 2012: Press Windows+R, enter inetmgr in the Run window and then press Enter.

NOTE: Using the inetmgr command is a common way of opening the Internet

Information Service Manager for any version of the Windows operating system.

2. Expand the node with the name of the target computer in the central pane.

3. Expand the Sites node.

4. Select the Default Web Site.

NOTE: If there is no such site in the Internet Information Services (IIS) Manager of your

computer, you can select any other site (the name of the site does not matter).

5. Click the Bindings navigation link on the right.

6. The Site Bindings window opens.

7. If there is no binding of HTTPS type in the Site Bindings window, click Add.

8. The Edit Site Binding window opens.

9. In the Type box, select https.

10. Next to the SSL certificate drop-down list, click Select.

11. The Select Certificate window opens, where the list of existing certificates is displayed.

12. In the Select Certificate window, select the certificate generated for the Management Tool and then click OK.

13. In the Add Site Binding window, click OK.

14. In the Site Bindings window, click Close.

15. Now the Internet Information Service is fully adjusted and you can start installing the Management Tool.

Appendix 6. Adding Server Executable to Windows Firewall

Please note that Windows Firewall will be adjusted automatically if it is enabled during the

Server installation. If you use any other Firewall, it should be adjusted as well.

To add the Server executable to the Windows Firewall, do the following:

1. In the Control Panel, select System and Security > Windows Firewall.

2. In the Windows Firewall window, click Advanced settings.

3. In the Windows Firewall with Advanced Security window, right-click Inbound Rules and select New rule.

4. The New Inbound Rule Wizard opens.

5. On the Rule Type page, select Program and click Next.

6. On the Program page, select This program path, then click Browse and navigate to the Server executable. The default path is "C:\Program Files\Ekran System\Ekran System\Server\EkranServer.exe ". Click Next.

7. On the Action page, select Allow the connection and then click Next.

8. On the Profile page, select the profile of the network used for connecting remote computers and the Server. Click Next.

9. On the Name page, define the Name of the rule. Click Finish.

10. The rule is created for the Server application. By default, the rule allows any connections via all ports.

11. To define the protocol and ports, double-click the created rule. The Properties window opens.

12. In the Protocols and Ports tab, do the following:

In the Protocol Type list, select TCP.

In the Local port list, select Specific Ports. Type the following port numbers in the box below:

o 9447 (for the connection between the Server and the Clients)

o 22713 and 22714 (for the connection between the Server and the Management Tool)

o 22712 (for the connection between the Server and the Tray Notification Application)

13. Click Apply to save changes. Click OK.

14. Close the Windows Firewall window.

Appendix 7. Adjusting Computer for Remote Access

If you want to open the Management Tool from the computer different from the one where the

Management Tool is installed, you need to adjust Firewall settings to be able to access this

computer.

To adjust Firewall on the computer where the Management Tool is installed, do the following:

1. In the Control Panel, select System and Security > Windows Firewall.

2. In the Windows Firewall window, click Advanced settings.

3. In the Windows Firewall with Advanced Security window, right-click Inbound Rules and select New rule.

4. The New Inbound Rule Wizard opens.

5. On the Rule Type page, select Predefined and then select Secure World Wide Web Services (HTTPS) in the list. Click Next.

6. On the Predefined Rules page, select the World Wide Web Services (HTTPS Traffic-In) option. Click Next.

7. On the Action page, select Allow the connection. Click Finish.

8. The new inbound rule for Firewall is created.

Appendix 8. Activating Serial Keys Online

To activate purchased serial keys online, do the following:

1. Make sure you have an active Internet connection on the computer with the installed Server.

2. Log in to the Management Tool as admin using the password set at the Server installation.

3. Click the Serial Key Management navigation link to the left.

4. On the Serial Keys tab, click Activate keys online.

5. In the Serial Key Activation window, enter serial keys to be activated separating them with semicolons or paragraphs and click Activate.

6. The activated keys will appear on the Serial Key Management page.

7. The number of available licenses and the update & support period end date change.

Appendix 9. Moving Binary Data to Shared Folder

If necessary, you can store binary data received from Clients in the shared or local folder on your

computer. This might be necessary for storing large amounts of data.

This feature has the following limitations:

Shared Folders on mapped and mounted disks cannot be used for storing binary data.

After you select to store binary data in the shared folder instead of SQL database, the already existing screenshots will no longer be displayed (only metadata will be available for them). The newly received screenshots will be displayed.

You can move binary data to the shared folder manually or via the Server Tray application.

To change the database parameters via the Server Tray application, do the following:

1. Right-click the Server Tray icon in the notification area and select Database Parameters.

2. In the Database Parameters window, in the Metadata Storage group, define the following

parameters:

Select the type of database you want to use for storing data.

NOTE: The already existing data will not be migrated.

Define the Host Name or IP address of the SQL server.

Define the SQL Server user name and password in the corresponding fields. 3. In the Binary Data Storage group, select one of the following:

For small deployments, select the SQL Database option to store binary data received

from Clients in the SQL database. In this case, all data received during the

monitoring will be stored on the computer with the installed SQL Server.

For medium and large deployments, select the File System option to store binary data received from Clients in the shared or local folders, and then define the path to the required folder:

o The shared folder location must be defined as \\<computer IP>\<folder path> or \\<computer name>\<folder path> (e.g., \\admin-pc\SharedFolder).

o The local folder location must be defined as <folder path> (e.g., C:\BinaryDataFolder)

4. Click OK.

5. Restart the Ekran System Server service.

To move binary data to the shared folder, do the following:

1. Stop the Server by clicking Stop in the context menu of the Server icon in the notification area or find the EkranServer service in the Task Manager and click Stop.

2. In the Registry Editor window, click Edit > New > String value and add a new value:

Value type: String

Value name: StorageDirectory

Value data: Shared Folder location as \\<computer IP>\<folder path> or \\<computer name>\<folder path>

3. To access binary data in the shared folder on a different computer from your Server, do the

following:

Open Computer Management.

In the Computer Management window, open Services and Applications > Services.

In the Services pane, find the EkranServer service and select Properties in the context menu.

In the EkranServer Properties window navigate to the Log On tab.

In the Log On tab, select the This account option, specify the credentials for the EkranServer

service to start under, and click Apply. Make sure the user with the specified credentials has

administrator permissions or permissions to start/stop the EkranServer service on your

Server computer and read/write permissions for the shared folder on the different

computer.

Restart the service.

4. Start the EkranServer service to continue working with the program.

deploying ekran system v.6 installation check...4. in the features tree-view, select the internet...

Documents