Installing the Application Server

The MSI package includes the following optional parameters, for which the respectively used default values are specified below. These are used automatically if the corresponding parameter isn’t specifically configured during installation.

With the default settings, the application server is installed as follows:

This installs the application server to IIS under “MyWebSite\MyWebApp” (virtual directory) and physically to “c:\myinstalldir”. The application pool (IZYTRON.IQ.BackEnd Pool) (default) is set up with username “myapppooluser” and password “mypwd”, and is assigned to the website.

Attention!

The user designated for operative use must also always have access to the database with read and write authority, in so far as this user is not the dbo (database owner)!

– The application’s URL is laid out as follows:
https://<certificate path>/<application name>
The certificate path is the path which is specified in the general information for the certificate in IIS: (“General” tab, issued to: <certificate path> in the “Certificate” window).

– If “IZYTRON.IQ BackEnd ApplicationServer.msi” is executed directly by double-clicking, the application server is installed as “Default Web Site\IZYTRONIQ” with the “IZYTRON.IQ.BackEnd Pool” app pool and the following default app pool credentials: ApplicationPoolIdentity.
This user (ApplicationPool) probably doesn’t have any access to the database. A suitable user must be entered to this end (in the app pool’s “Advanced Settings” under “Identity”).

– The following URL can be opened in the browser in order to display the correct installation:
“https://localhost/IZYTRON.IQ/HandshakeRemoteService.svc” (if installed in this way).
In the event of correct installation, an information page is displayed.
https://<certificate path>/IZYTRON.IQ/HandshakeRemoteService.svc

Note

However, if https://localhost/IZYTRON.IQ/HandshakeRemoteService.svc is used as the URL, a certificate error is displayed as a rule in the browser because certificates are not typically issued via a certificate path including “localhost”.
The user must also assure that the certificate used for the application has been entered or saved to the web browser which is also used for the application. This also applies in the case of computers for which subsequent installation of an IZYTRONIQ Enterprise client is planned, if a self-signed certificate is involved.

If the page is not displayed, a standard IIS error message appears instead, which provides information concerning any possible installation errors.

– A valid certificate must be assigned to the page. Otherwise, the clients are unable to access the application server.
A corresponding binding with a certificate for this purpose must therefore be set up on the IZYTRONIQ backend server. When installing the IZYTRONIQ backend application service with the default parameters specified above, binding to the default website must take place in IIS (internet information services). See „Embedding an SSL Certificate“ for details.

In the Web.Config file, “serviceCertificate” must also be adapted for the tag’s lines (<serviceCertificate> findvalue=“localhost” x509FindType=“FindBySubjectName” storeLocation=“LocalMachine” storeName=“My”):

– The value for “findValue” must be set to the certificate’s fingerprint or thumbprint here. As shown in the figure above, the fingerprint or thumbprint can be taken from the certificate’s details, which in turn can be found in IIS under Server Certificates.
Enter the fingerprint in capital letters only without spaces, and without hidden special characters.

Example: <serviceCertificate findValue="1234567890ABCDEF1234567890" storeLocation="LocalMachine" storeName="My" x509FindType="FindByThumbprint" />

Attention!

The user of the application server’s application pool (in IIS) must be authorized to access the database. Corresponding rights (read and write) must be provided at the database side.