Previous Topic: .NET Framework

Next Topic: Kerberos Authentication

Microsoft IIS

The host server must be running Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0 and 7.5

To check the installed version of ASP.NET, run the CA DLP Version Check utility, wgncheck.exe. Search the output for the Microsoft IIS section. When you check the IIS version, you also need to confirm that the ASP.NET Web Service extension is registered with IIS. If it is not, you must register it manually (see below).

Note also the special requirements for Windows Server 2008 and IIS extensions for machines running IIS 5.x (see below).

Registering IIS Extensions

iConsole application servers and front-end Web servers require IIS and various Web Service extensions provided with .NET Framework (the minimum versions are specified above). For this reason, we strongly recommend that you install, or enable, IIS on the host server before installing .NET Framework.

If this is not possible or practical, you can install .NET Framework before you install IIS, but you must then manually register the Web Service extensions before running the iConsole installation wizard:

To register the Web Service extensions

  1. On the target server, go to the following folder:

    %windir%\Microsoft.NET\Framework\v2.0.50727

  2. In this folder, run the following command:
    aspnet_regiis /i
    
  3. Restart the target server.
IIS must be running in 32-bit mode

iConsole servers cannot run if IIS is hosting other applications that require it to be in 64-bit mode.

IIS subcomponent 'SMTP Service' must be enabled

The IIS subcomponent, SMTP Service, must be running on the target server to allow the local machine to deliver SMTP emails, including audit emails sent by iConsole reviewers; see Set Up SMTP Email.

Special Requirements for Windows Server 2008

If you are running Windows Server 2008, you need to install various Web Server Role Services.

To install the required Web Server Role Services

  1. Log on to Windows Server 2008.
  2. Click Start and choose Server Manager.
  3. Browse to Roles > Web Server (IIS) and choose Add Role Services.
  4. In the Select Role Services screen, ensure that the following role services are installed:
    Web Server, Management Tools

    Choose all IIS 6 Management Compatibility items

    Web Server, Application Development

    Choose ASP.NET. All associated role services are installed automatically.

    Web Server, Common HTTP Features

    Choose Static Content.

    Web Server, Security

    Choose Windows Authentication.

Special Requirements for IIS 5.x

By default, IIS 5.x runs under the ASPNET user account. For security reasons, this account has minimal rights to run system processes. Therefore, if the target machine has IIS 5.x installed, you need to change this account to one with sufficient privileges—see below. You must do this before installing the iConsole!

Note: You do not need to change the default account for IIS version 6 and higher.

The following instructions ensure that the IIS 5.x process runs using the LocalSystem account, which has the system privileges required by the iConsole servers:

To change the ASPNET user account

  1. Edit the .NET Framework file, machine.config. You can find the file in this folder:

    %windir%\Microsoft.NET\Framework\v2.0.50727\CONFIG

  2. This file is in XML format. Locate the <processModel> tag and change the following entry from this:
    <processModel autoConfig="true"/>
    

    To this:

    <processModel autoConfig="true" userName="SYSTEM"/>
    

    Note: For IIS 5.x to use MAPI services on the application server, you must assign administrator rights to the local IWAM_<machinename> user; see 'Unable to download or forward original .msg file'.

More information:

Version Check Utility: Wgncheck.exe

Unable to Download or Forward Original .msg File