With the help of the Powershell script IISOneConnexxScript.ps1 , the required server roles and features are automatically installed.
Add the following server roles in the Server Manager under “Add roles and features”:
And under features:
In Windows Server 2008:
Installation packages are provided by Sevitec in the form of 7-zip archives. The following packages are required:
Copy the required installation package to the server in the directory <Drive>:\OneConnexx\Install kopieren.
Extract the contents of the installation package to <Drive>:\OneConnexx\Web entpacken.
Rename the file Web.config.sevitec to Web.config.
Right-click on the «Web» directory and choose Properties -> Security, Add IIS_IUSRS group with read & execute rights.
icacls C:\OneConnexx\Web /grant IIS_IUSRS:(OI)(CI)RX
Unter «Sites» -> right mouse button -> «Add Website…»
Click on the newly created site -> Authentication -> Windows Authentication = Enabled
Under ApplicationPools make sure that the newly created ApplicationPool «OneConnexxAdministration» has selected the version “v4.0” as “.NET CLR Version”.
So that the OneConnexx Windows service can be stopped / started by the web application, the user under which the IIS is running must be granted the appropriate authorization.
subinacl /service OneConnexx /grant=IIS_IUSRS=FThe web administration requires read access to the log files as well as to the add-ins DLLs in the shadow directory (to read the version).
For this purpose, the IIS_IUSRS user group is granted read access to the OneConnexx installation directory including all subdirectories. If several OneConnexx instances are installed, the authorization must be set individually for each directory.
icacls C:\OneConnexx\OneConnexxService /grant IIS_IUSRS:(OI)(CI)R
If the name or the connection string of the database is configured for a OneConnexx instance, this information is saved in a file «connection.config» in the directory %ProgramData%\Sevitec\OneConnexx:
mkdir "%ProgramData%\Sevitec\OneConnexx"
icacls %ProgramData%\Sevitec\OneConnexx /grant Users:(OI)(CI)RW
The web administration writes log files to the %ProgramData%\Sevitec\OneConnexx\WebAdmin.
The web administration reads a list of all installed OneConnexx instances from the directory %ProgramData%\Sevitec\OneConnexx\Installations.
If the name or the connection string of the database is configured for a OneConnexx instance, this information is saved in a file «connection.config» in the directory %ProgramData%\Sevitec\OneConnexx\WebAdmin.
The following settings can be made in the Web.config file (under <drive>:\OneConnex\Web).
Logging
By default, log files are written to the %ProgramData%\Sevitec\OneConnexx\WebAdmin directory. A new log file is created every day and the files from the last 7 days are archived. These settings can be changed in the <nlog> section. All possible settings are described at https://github.com/nlog/nlog/wiki .
Display language
The OneConnexx web administration is bilingual (German/English) and uses the browser language by default, or English if the browser language is not German or English. If the display language is to be set independently of the browser language, this can be specified in the <globalization> onfiguration element. The default setting is:
<globalization enableClientBasedCulture="true" uiCulture="auto" culture="auto" />
To permanently change the display language to English:
<globalization enableClientBasedCulture="true" uiCulture="en-gb" culture="en-gb" />
Permissions
Access to the web administration is controlled via «Windows Authentication», ie based on the registered Windows user. Who basically has access to the web administration is specified in the <authorization> section:
<authorization>
<allow roles="corp\OcxUsers" />
<deny users="*" />
</authorization>
With this example all members of the user group “OcxUsers” in the domain “corp” have access. Instead of a user group, individual users can also be specified (example: <allow users=”corp\jones” />).
Additional authorizations are controlled via a role concept. The roles are:
The Administrator role can be assigned to an individual Windows user or to a Windows user group in the Web.config . Multiple users or user groups can be specified separated by commas.
<add key="AdminRole" value="corp\OcxAdmins" />
Warning: If this parameter is not specified or is set to an empty string, the administrator role applies to all users.
The members of the configurator role can be edited directly on the Configuration page for each OneConnexx installation.
Users who are neither in the configurator nor in the administrator role, but generally have access to the web application, belong in the user role.
Deactivating functions
The “Configuration files” page in the main menu can be deactivated with the following entry:
<add key="Feature.ConfigFiles" value="false" />
The “Statistics” page in the main menu can be deactivated with the following entry:
<add key="Feature.Statistic" value="false" />
Standard texts for new alarms
The e-mail subject and text for newly created alarms can be specified with the following entries:
<add key="Alert.Subject.Default" value="Error on interface {interface} / {endpoint}" />
<add key="Alert.Body.Default" value="There was a problem with the interface {interface} and endpoint {endpoint}:<br/>{message}" />