Configuring the Web Server

Important: Ensure that the configuration files on each server share the same machineKey. This key uses encryption and needs to be the same on each Web Server to ensure proper key generation. For more information, see Configuring a Load Balancer for Archer.

Perform these steps in the Internet Information Services (IIS) manager, unless otherwise specified.

On this page

Task 1: Specify the account application pool identity

  1. In the IIS Manager, go to the Web Server > Application Pools.
  2. Right-click the application pool for Archer, and select Advanced Settings.
  3. In Identity under Process Model, click the Ellipsis (...) at ApplicationPoolIdentity.
  4. Click Custom Account, and click Set.
  5. Enter appropriate values for the following:
    • User Name
    • Password
    • Confirm Password
  6. Click OK, and then click OK again.
  7. Click OK.

Task 2: Assign the application pool

Note: When assigning the application pool, select the Archer website for your company. The website may reside on a virtual directory. These instructions reflect choosing the Default Web Site.

  1. In the IIS Manager, go to Web Server > Sites > Default Web Site > website, for example Archer.
  2. Right-click on website and select Manage Application > Advanced Settings.
  3. In the General section, click Application Pool and Ellipsis.
  4. In Application pool, select the applicable application pool, and click OK.
  5. Click OK.
  6. Go to Web Server > Application Pools.
  7. Right-click the applicable application pool > Advanced Settings.
  8. In the General section, select v4.0 for .NET CLR Version.
  9. Click OK.

Task 3: Verify application pool for the API

The API must run under or have the same configuration as the application pool of the website. Follow these steps to configure the application pool for the API, the Content API, as well as the Platform API:

  1. In the IIS Manager, go to Web Server > Sites > Default Web Site > website. For example, Archer.
  2. Expand the website node and go to the api node.
  3. Right-click on the node to configure and select Manage Application > Advanced Settings.
  4. In General, verify that the Application Pool is the same as the website.
  5. Do 1 of the following:
    • If the application pool matches the website, go to the Step 6.
    • If the application pool does not match the website, do the following:
      1. In Application Pool, click the Ellipsis ( ... ) button
      2. Select the application pool of the website, and click OK.
  6. Click OK.

Task 4: Reconfigure the company_files directory as a virtual directory that is mapped to the network share

Complete this task if your configuration has multiple Services Servers.

Configure the virtual directory for the company_files after the initial installation in a multiple-host configuration. You must reconfigure the company_files directory as a virtual directory that is mapped to the network share.

  1. On the network share, create the company_files directory and copy all directories from the local company_files folder to the newly created company_files folder. For example, Inetpub\wwwroot\Archer\company_files.
  2. Rename the original company_files directory to company_files.old.
  3. Set the share properties on the company_files directory to Modify/Change and Read/Write on both Sharing and Security permissions tabs of the domain account.
  4. In the IIS Manager, navigate to the Add Virtual Directory dialog box.
    1. Click Web Server >Sites > Default Web Site > Archer.
    2. Right-click on Archer website and select Add Virtual Directory.
  5. In Alias, enter company_files.
  6. In Physical Path, enter the path of the new created company_files on the network share, and click Connect as.
  7. Select Specific user, and click Set.
  8. In User name, enter the domain user account.
  9. In Password, enter the password of the domain user account.
  10. In Confirm password, re-enter the password of the domain user account. Click OK.
  11. Click OK.
  12. Click OK.

Task 5: Grant permissions to Archer directories

Complete this task if your configuration has multiple Services Servers.

Complete this task for all configurations for the Web Application on the network share. Begin at Internet Information Services (IIS) Manager.

Verify that the Identity has Modify privileges for the following folders:

The following table lists the folders.

Directory

Path

Notes

Windows\Temp

SYSTEMDRIVE%\WINDOWS\
Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files

 

company_files

designated path on the Web Server or network share

For the company_files, Log files, Search Index, and File Repository, use the actual path for your configuration.

For example, Inetpub\wwwroot\RSAarcher\company_files

Log Files

designated path on the Web Server or network share

For example, ..\Archer\LogFiles

File Repository

designated path on the Web Server or network share

For example, ..\Archer\FileRepository

Task 6: Reset IIS

  1. Go to Start > Run.

  2. In the Open field, enter:

    iisreset.exe

  3. Press Enter.

Task 7: Exclude folders from virus scanning (Recommended)

It is recommended that you routinely run virus scanning software on the deployed servers. However, virus scanning software can interpret data inserted or updated in Archer dependent directories as a virus or malware, for example, as with the Archer Threat Management solution.

  1. Disable virus scanning on the folders that contain the following files:

    • Windows\Microsoft.Net\Framework64
    • ArcherCompany Files
    • Archer Log Files
    • Archer Index
    • Archer File Repository

  2. Disable virus scanning on the Archer\Services\Workpoint\ folder in the Archer program files, to prevent server performance degradation with some anti-malware solutions.