1.2 Installing Prerequisite Software

This section provides information on installing the required ASP.NET, IIS, and .NET Framework software components. Because the packaging and distribution of these software components varies among different versions of the supported Windows Server platforms, procedures slightly. Use the indicated order of installation and setup.

1.2.1 Installing Prerequisite Software on Windows Server 2012 Systems

These procedures apply to Windows Server 2012 R2 (64-bit) and Windows Server 2012 (64-bit) systems. Differences, where applicable, are called out inline.

  1. Familiarize with System Requirements and General Guidelines.

  2. Use the Local User Administrator (LUA) account to log in to your intended PlateSpin Server host, then add the Web Server (IIS) role (Server Manager > Add Roles and Features Wizard > Server Roles) along with its nested role services and their sub-roles:

    • Web Server (IIS) (25 of 43 installed)

      • Web Server (19 of 34 installed)

        • Common HTTP Features (4 of 6 installed)

          • Default Document

          • Directory Browsing

          • HTTP Errors

          • Static Content

        • Health and Diagnostics (2 of 6 installed)

          • HTTP Logging

          • Request Monitor

        • Performance (1 of 2 installed)

          • Static Content Compression

        • Security (5 of 9 installed)

          • Requesting Filtering

          • Basic Authentication

          • IP and Domain Restrictions

          • URL Authorization

          • Windows Authentication

        • Application Development (7 of 11 installed)

          • .NET Extensibility 3.5

          • .NET Extensibility 4.5

          • Application Initialization

          • ASP.NET 3.5

          • ASP.NET 4.5

          • ISAPI Extensions

          • ISAPI Filters

        • Management Tools (6 of 7 installed)

          • IIS Management Console

          • IIS 6 Management Compatibility

            • IIS 6 Metabase Compatibility

            • IIS 6 Management Console

            • IIS 6 Scripting Tools

            • IIS 6 WMI Compatibility

          • IIS Management Scripts and Tools

  3. Add (Server Manager > Add Roles and Features Wizard > Features) the required features:

    • .NET Framework 3.5 Features (all)

    • NET Framework 4.5 Features (all)

    • Windows Process Activation Service (all)

    • XPS Viewer (all)

  4. On all 64-bit hosts (Windows Server 2012 x64 and Windows Server 2012 R2), ensure that IIS is configured to run in 32-bit mode. See Knowledgebase Article 7920915.

1.2.2 Installing Prerequisite Software on Windows Server 2008 Systems

These procedures apply to Windows Server 2008 (64-bit) and Windows Server 2008 R2 systems. Differences, where applicable, are called out inline.

  1. Familiarize with System Requirements and General Guidelines.

  2. Use the Local User Administrator (LUA) account to log in to your intended PlateSpin Server host, then add the Web Server (IIS) Role along with the following role services and their sub-roles (Server Manager > Roles > Add Role):

    — Common HTTP Features

    ASP .NET

    ----—.NET Extensibility

    ISAPI Extensions

    ISAPI Filters

    Security

    Management Tools

  3. (Conditional, Windows Server 2008 only) Download and install Microsoft .NET Framework 3.5 SP1.

  4. Add these .NET Framework Features along with all sub-items (Server Manager > Features > Add: Feature):

    • .NET Framework

    • XPS Viewer

    • WCF Activation along with its HTTP Activation and Non-HTTP Activation sub-items.

  5. Download and install the Microsoft .NET Framework 4 package.

  6. On 64-bit hosts (Windows Server 2008 x64 and Windows Server 2008 R2), ensure that IIS is configured to run in 32-bit mode. See Knowledgebase Article 7920915.

1.2.3 Enabling Support for FIPS-Compliant Data Encryption Algorithms (Optional)

PlateSpin Protect supports data encryption algorithms that are compliant with FIPS (Federal Information Processing Standards, Publication 140-2).

If compliance with FIPS is required, it must be enabled on the intended PlateSpin Server host prior to the installation of the PlateSpin Server. This is because PlateSpin Protect runs in FIPS-compliant mode only if it detects that its host operating system is running in FIPS-compliant mode.

NOTE:FIPS-compliant mode has a performance impact and might slow down the data transfer rate up to 30%.

To enable FIPS-compliant algorithms:

  1. Enable FIPS-compliant algorithms in the security options of your PlateSpin Server host’s local security policies:

    1. Run secpol.msc and browse to Local Policies > Security Options.

    2. Enable the System cryptography: Use FIPS compliant algorithms for encryption security option.

  2. Configure ASP.NET for FIPS support:

    1. Access the machine.config file located in the following directory of your PlateSpin Server host:

      ..Windows\Microsoft.Net\Framework\vX.X.XXXXX\Config
      
    2. Add the following under the <system.web> element:

      <machineKey validationKey="AutoGenerate,IsolateApps" decryptionKey="AutoGenerate,IsolateApps" validation="3DES" decryption="3DES"/>
      
  3. Save the machine.config file.