Versions Compared

Version Old Version 40 New Version Current
Changes made by

Benjamin Löhrer (Unlicensed)

Gregory Bobst

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

...

...

Register / Index

Table of Contents

Einleitung

Go to Register / Index

Dieses Kapitel beschreibt die empfohlenen Systemanforderungen der CoreOne Suite Services. Für die Installationen der CoreOne Suite wird eine Server Infrastruktur vorausgesetzt, welche die in dieser Dokumentation beschriebenen Spezifikationen erfüllt. Die aufgeführte IT-Infrastruktur wird zum Zeitpunkt der Erstinstallation und für einen reibungslosen Betrieb vorausgesetzt.

Basis-Installationen / Vorkontrollen / Restriktionen

Go to Register / Index

Antivirus

Verschiedene Antivirenprogramme zeigen einen Einfluss auf die Performance der CoreOne Suite. Um dies zu vermeiden, müssen die Verzeichnisse, in denen die CoreOne Suite Software installiert ist (inkl. Unterverzeichnisse), vom RealScan und vom periodischen Scannen durch das Antivirenprogramm ausgeschlossen werden. Dies gilt natürlich auch für die Verzeichnisse der Datenbanken.

Virtuelle Server

Die CoreOne Suite kann auf virtuellen Servern installiert werden. Die Leistung der virtuellen Server muss jedoch gleichwertig den Spezifikationen der physischen Server sein. Da die CoreOne Suite, vor allem im Zusammenhang mit Provisionierungsaufgaben einen performanten Zugriff auf die Datenbank benötigt, ist ein schneller Zugriff auf die Festplatte(n) unumgänglich.

Datensicherung

Mit der Installation der CoreOne Suite wird durch die ITSENSE AG standardmässig eine Datensicherung, über die Windows Aufgabenplanung, eingerichtet. Auf einem lokalen Laufwerk des Servers wird einen Sicherungsdatei der Datenbank erzeugt. Wir empfehlen dringend, diese Sicherungsdatei täglich auf ein externes Netzlaufwerk oder einer externen Festplatte zu sichern.

Zertifikate

Für die sichere Kommunikation zwischen den CoreOne Web Services und den Endgeräten wird ein SSL-Zertifikat benötigt, welches mit den CoreOne Web Services übereinstimmt. Sind die  CoreOne Web Services und die CoreOne Application Services auf demselben System installiert, kann dasselbe Zertifikat verwendet werden.

Für jede Verbindung zwischen den CoreOne Application Services und den CoreOne System Connectors / CoreOne Secure Router wird pro Server ein eigenes Zertifikat benötigt, welches 'Server Authentication‘ und 'Client Authentication‘ unterstützt. Zusätzlich muss auf der Gegenseite das entsprechende Public-Zertifikat vorhanden sein.

Token Signierung (Optional) 

Für die Token Signierung wird ein Zertifikate benötigt, bei dem der Private Key exportiert werden kann.

Benutzerkonten

Um die CoreOne Suite ordnungsgemäss zu Betreiben, benötigt es mindestens ein Service Benutzerkonto das in den angebundenen Zielsystemen über ausreichende Berechtigungen verfügt. Das Service Benutzerkonto muss auf die Private-Keys der verwendeten Zertifikate berechtigt werden (MMC) und auf dem System über 'Logon As Service' Rechte verfügen (GPEDIT) und in der lokalen Administratoren Gruppe Mitglied sein.

Systemanforderungen

CoreOne Suite "All-In-One"

Go to Register / Index

Die CoreOne Suite kann als "All-In-One" System installiert und genutzt werden. Hierbei werden alle Komponenten CoreOne Suite "Application Services" und CoreOne Suite "Web Services" auf dem selben Server installiert.

Hardware Anforderungen

  • 16 GB RAM 
  • 4 CPU mit 2.0 GHz 
  • C: Partition 100 GB (System)
  • D: Partition 250 GB (Datenbank)
  • X: Partition 100 GB (Datenbank Dumps für Backup)

Software Anforderungen

  • Windows 2008 R2 Server oder höher
  • .NET Framework 4.7 oder höher
  • Windows Features / Services
    • NET Framework 3.5 Features
      • Windows Communication Foundation HTTP Activation
      • Windows Communication Foundation Non-HTTP Activation
    • .NET Framework 4.6.1 Features oder höher
      • HTTP Activation
      • Message Quueing (MSMQ) Activation
      • Named Pipe Activation
      • TCP Activation
      • TCP Port Sharing
      • WCF Services
        • HTTP Activation
        • Message Quueing (MSMQ) Activation
        • Named Pipe Activation
        • TCP Activation
        • TCP Port Sharing 
    • Role Administration Tools
      • AD DS Tools
    • Web Server (IIS)
      • Basic Authentication
      • Windows Autentication
      • Common HTTP Features
      • Security
      • Application Development
      • ASP.NET 4.6

Powershell Command

Windows 2012 R2

Code Block
languagepowershell
Install-WindowsFeature RSAT, RSAT-AD-Powershell, RSAT-AD-Tools, RSAT-ADDS, RSAT-AD-AdminCenter, RSAT-ADDS-Tools, NET-Framework-Features, NET-Framework-Core, net-http-activation, net-non-http-activ, net-framework-45-features, net-http-activation, net-non-http-activ, net-framework-45-features, net-wcf-msmq-activation45, net-wcf-pipe-activation45, net-wcf-tcp-activation45, NET-WCF-TCP-PortSharing45, Powershell, powershell-v2, powershell-ise, WEB-Server, web-basic-auth, web-windows-auth, web-common-http, web-security, web-app-dev, web-asp-net, web-asp-net45 -Restart

Windows 2016

Die Powershell über Server Manager - Tools - Windows PowerShell aufrufen.

Code Block
languagepowershell
$features = @("RSAT", "RSAT-AD-Powershell", "RSAT-AD-Tools", "RSAT-ADDS", "RSAT-AD-AdminCenter", "RSAT-ADDS-Tools", "Powershell", "powershell-v2", "powershell-ise", "NET-Framework-Features", "NET-Framework-Core", "net-http-activation", "net-non-http-activ", "net-framework-45-features", "net-http-activation", "net-non-http-activ", "net-framework-45-features", "net-wcf-msmq-activation45", "net-wcf-pipe-activation45", "net-wcf-tcp-activation45", "NET-WCF-TCP-PortSharing45")

foreach($feature in $features)
{
    Install-WindowsFeature -Name $feature
}

Windows 2019

Das .NET 3.5 Framework muss anhand der folgenden Anleitung Windows Server 2019 - .NET 3.5 Features separat installiert werden, 

Die Powershell über Server Manager - Tools - Windows PowerShell aufrufen.

Code Block
languagepowershell
$features = @("Web-Server", "Web-WebServer", "Web-Common-Http", "Web-Default-Doc", "Web-Static-Content", "Web-Http-Redirect", "Web-Performance", "Web-Stat-Compression", "Web-Security", "Web-Filtering", "Web-Basic-Auth", "Web-Windows-Auth", "Web-App-Dev", "Web-Net-Ext45", "Web-AppInit", "Web-Asp-Net45", "Web-ISAPI-Ext", "Web-ISAPI-Filter", "Web-Mgmt-Tools", "Web-Mgmt-Console", "NET-Framework-45-Features", "NET-Framework-45-Core", "NET-Framework-45-ASPNET", "NET-WCF-Services45", "NET-WCF-HTTP-Activation45", "NET-WCF-MSMQ-Activation45", "NET-WCF-Pipe-Activation45", "NET-WCF-TCP-Activation45", "NET-WCF-TCP-PortSharing45", "WAS", "WAS-Process-Model", "Web-Mgmt-Tools", "Web-Mgmt-Console")

foreach($feature in $features)
{
Install-WindowsFeature -Name $feature
}

Optional:

AD Management Tools 

Code Block
languagepowershell
$features = @("RSAT", "RSAT-AD-Powershell", "RSAT-AD-Tools", "RSAT-ADDS", "RSAT-AD-AdminCenter", "RSAT-ADDS-Tools")

foreach($feature in $features)
{
    Install-WindowsFeature -Name $feature
}

Powershell

Code Block
languagepowershell
$features = @("PowerShellRoot", "PowerShell", "PowerShell-ISE")

foreach($feature in $features)
{
    Install-WindowsFeature -Name $feature
}

CoreOne Suite "Application Services"

Go to Register / Index

Auf dem CoreOne Application Services Server laufen sämtliche Services und Tasks. Er bildet das zentrale Herzstück der CoreOne Suite.

Hardware Anforderungen

  • 16 GB RAM 
  • 4 CPU mit 2.0 GHz 

  • C: Partition 100 GB (System)

  • D: Partition 250 GB (Datenbank)

  • X: Partition 100 GB (Datenbank Dumps für Backup)

Software Anforderungen

  • Windows 2008 R2 Server oder höher
  • .NET Framework 4.7 oder höher
  • Windows Features / Services
    • NET Framework 3.5 Features
      • Windows Communication Foundation HTTP Activation
      • Windows Communication Foundation Non-HTTP Activation
    • .NET Framework 4.6.1 Features oder höher
      • HTTP Activation
      • Message Quueing (MSMQ) Activation
      • Named Pipe Activation
      • TCP Activation
      • TCP Port Sharing
      • WCF Services
    • Role Administration Tools
      • AD DS Tools

Powershell Command

Windows 2012 R2

Code Block
languagepowershell
Install-WindowsFeature RSAT-AD-Powershell, RSAT-AD-Tools, RSAT-ADDS, RSAT-AD-AdminCenter, RSAT-ADDS-Tools, Powershell, powershell-v2, powershell-ise, NET-Framework-Features, NET-Framework-Core, net-http-activation, net-non-http-activ, net-framework-45-features, net-http-activation, net-non-http-activ, net-framework-45-features, net-wcf-msmq-activation45, net-wcf-pipe-activation45, net-wcf-tcp-activation45, NET-WCF-TCP-PortSharing45 -Restart

Windows 2016

Die Powershell über Server Manager - Tools - Windows PowerShell aufrufen.

Code Block
languagepowershell
$features = @("RSAT", "RSAT-AD-Powershell", "RSAT-AD-Tools", "RSAT-ADDS", "RSAT-AD-AdminCenter", "RSAT-ADDS-Tools", "Powershell", "powershell-v2", "powershell-ise", "NET-Framework-Features", "NET-Framework-Core", "net-http-activation", "net-non-http-activ", "net-framework-45-features", "net-http-activation", "net-non-http-activ", "net-framework-45-features", "net-wcf-msmq-activation45", "net-wcf-pipe-activation45", "net-wcf-tcp-activation45", "NET-WCF-TCP-PortSharing45","Powershell", "powershell-v2", "powershell-ise", "WEB-Server", "web-basic-auth", "web-windows-auth", "web-common-http", "web-security", "web-app-dev", "net-framework-features", "net-framework-core", "net-http-activation", "net-non-http-activ", "net-framework-45-features", "net-wcf-msmq-activation45", "net-wcf-pipe-activation45", "net-wcf-tcp-activation45", "NET-WCF-TCP-PortSharing45", "web-asp-net", "web-asp-net45", "RSAT")

foreach($feature in $features)
{
    Install-WindowsFeature -Name $feature
}

Windows 2019

Das .NET 3.5 Framework muss anhand der folgenden Anleitung Windows Server 2019 - .NET 3.5 Features separat installiert werden, 

Die Powershell über Server Manager - Tools - Windows PowerShell aufrufen.

Code Block
languagepowershell
$features = @("NET-Framework-45-Features", "NET-Framework-45-Core", "NET-Framework-45-ASPNET", "NET-WCF-Services45", "NET-WCF-HTTP-Activation45", "NET-WCF-MSMQ-Activation45", "NET-WCF-Pipe-Activation45", "NET-WCF-TCP-Activation45", "NET-WCF-TCP-PortSharing45", "WAS", "WAS-Process-Model")

foreach($feature in $features)
{
    Install-WindowsFeature -Name $feature
}

Optional:

AD Management Tools 

Code Block
languagepowershell
$features = @("RSAT", "RSAT-AD-Powershell", "RSAT-AD-Tools", "RSAT-ADDS", "RSAT-AD-AdminCenter", "RSAT-ADDS-Tools")

foreach($feature in $features)
{
    Install-WindowsFeature -Name $feature
}

Powershell

Code Block
languagepowershell
$features = @("PowerShellRoot", "PowerShell", "PowerShell-ISE")

foreach($feature in $features)
{
    Install-WindowsFeature -Name $feature
}

CoreOne Suite "Web Services"

Go to Register / Index

Auf dem CoreOne Web Services Server wird das Self-Service und Web-Portal gehostet. Es kann dediziert installiert sein.

Hardware Anforderungen

  • 8 GB RAM 
  • 2 CPU mit 2.0 GHz 

  • C: Partition 60 GB (System)

Software Anforderungen

  • Windows 2008 R2 Server oder höher
  • .NET Framework 4.7 oder höher
  • IIS 7 oder höher
  • Windows Features / Services
    • NET Framework 3.5 Features
      • Windows Communication Foundation HTTP Activation
      • Windows Communication Foundation Non-HTTP Activation
    • .NET Framework 4.6.1 Features oder höher
      • WCF Services
        • HTTP Activation
        • Message Quueing (MSMQ) Activation
        • Named Pipe Activation
        • TCP Activation
        • TCP Port Sharing 
    • Web Server (IIS)
      • Basic Authentication
      • Windows Autentication
      • Common HTTP Features
      • Security
      • Application Development

PowerShell Command

Windows 2012 R2

Code Block
Install-WindowsFeature Powershell, powershell-v2, powershell-ise, WEB-Server, web-basic-auth, web-windows-auth, web-common-http, web-security, web-app-dev, net-framework-features, net-framework-core, net-http-activation, net-non-http-activ, net-framework-45-features, net-wcf-msmq-activation45, net-wcf-pipe-activation45, net-wcf-tcp-activation45, NET-WCF-TCP-PortSharing45, web-asp-net, web-asp-net45, RSAT -Restart

Windows 2016

Code Block
$features = @("Powershell", "powershell-v2", "powershell-ise", "WEB-Server", "web-basic-auth", "web-windows-auth", "web-common-http", "web-security", "web-app-dev", "net-framework-features", "net-framework-core", "net-http-activation", "net-non-http-activ", "net-framework-45-features", "net-wcf-msmq-activation45", "net-wcf-pipe-activation45", "net-wcf-tcp-activation45", "NET-WCF-TCP-PortSharing45", "web-asp-net", "web-asp-net45", "RSAT")
 
foreach($feature in $features)
{
    Install-WindowsFeature -Name $feature
}

Windows 2019

Das .NET 3.5 Framework muss anhand der folgenden Anleitung Windows Server 2019 - .NET 3.5 Features separat installiert werden, 

Die Powershell über Server Manager - Tools - Windows PowerShell aufrufen.

Code Block
languagepowershell
$features = @("Web-Server", "Web-WebServer", "Web-Common-Http", "Web-Default-Doc", "Web-Static-Content", "Web-Http-Redirect", "Web-Performance", "Web-Stat-Compression", "Web-Security", "Web-Filtering", "Web-Basic-Auth", "Web-Windows-Auth", "Web-App-Dev", "Web-Net-Ext45", "Web-AppInit", "Web-Asp-Net45", "Web-ISAPI-Ext", "Web-ISAPI-Filter", "Web-Mgmt-Tools", "Web-Mgmt-Console", "NET-Framework-45-Features", "NET-Framework-45-Core", "NET-Framework-45-ASPNET", "NET-WCF-Services45", "NET-WCF-HTTP-Activation45", "NET-WCF-MSMQ-Activation45", "NET-WCF-Pipe-Activation45", "NET-WCF-TCP-Activation45", "NET-WCF-TCP-PortSharing45", "WAS", "WAS-Process-Model")

foreach($feature in $features)
{
    Install-WindowsFeature -Name $feature
}

CoreOne Suite "Secure Router"

Go to Register / Index

Der CoreOne Secure Router wird verwendet um eine sichere Kommunikation durch unterschiedliche Netzwerkzonen zu den CoreOne System Connector Server aufzubauen.

Hardware Anforderungen

  • 8 GB RAM
  • 2 CPU mit 2.0 GHz 
  • C: Partition 60 GB (System)

Software Anforderungen

  • Windows 2008 R2 Server oder höher
  • .NET Framework 4.6.1 oder höher

CoreOne Suite "System Connector"

Go to Register / Index

Der CoreOne System Connector Server wird verwendet um die Aktionen in entfernten Netzwerken auf ausgesuchte Zielsysteme auszuführen.

Hardware Anforderungen

  • 8 GB RAM
  • 2 CPU mit 2.0 GHz 
  • C: Partition 60 GB (System)

Software Anforderungen

  • Windows 2008 R2 Server oder höher
  • .NET Framework 4.6.1 oder höher
  • Windows Features / Services
    • NET Framework 3.5 Features
      • Windows Communication Foundation HTTP Activation
      • Windows Communication Foundation Non-HTTP Activation
    • .NET Framework 4.6.1 Features oder höher
      • WCF Services
        • HTTP Activation
        • Message Quueing (MSMQ) Activation
        • Named Pipe Activation
        • TCP Activation
        • TCP Port Sharing

Software Komponenten Plattform

Nachfolgende Softwarekomponenten sind unabhängig von der Art der CoreOne Suite Installation auf dem Windows Server zu installieren.

Vor der Installation sind die Windows notwendigen Roles & Features zu installieren!

...

  •  .NET Framework 4.8 oder neuer

...

  •  .NET Core Runtime & Hosting Bundle 2.2.5 oder neuer

...

  •  Microsoft Visual C++ 2015-2019 Redistributable x64

...

  •  Node.js

...

  •  OOXML SDK 2.5

...

Introduction

This page describes the recommended system requirements for the CoreOne Suite Services. A server infrastructure that meets the specifications described in this documentation is required for the installation of the CoreOne Suite. The IT infrastructure listed is required at the time of initial installation and for smooth operation

Basic-Installations / Preliminary controls/ Restrictions

Antivirus

Various antivirus programs show an influence on the performance of the CoreOne Suite. To avoid this, the directories in which the CoreOne Suite software is installed (Including subdirectories) must be excluded from RealScan and from periodic scanning by the anti-virus program. Of course this also applies to the directories of the databases.

Default Paths to exclude (incl. all sub-folders):

  • C:\Program Files\ITSENSE AG

  • C:\ProgramData\itsense

  • Program Files and ProgramData of the MySQL or MariaDB Service.

  • MySQL or MariaDB data directory (depending on the MySql distribution)

In addition CoreOne Suite related services should be excluded from the virus scan to improve the performance. The following Windows Services are relevant:

  • CoreOne Suite Service

  • CoreOne Workflow Service

  • MySQL or MariaDB Service

Virtual Server

The CoreOne Suite can be installed on virtual servers. However, the performance of the virtual servers must be equivalent to the specifications of the physical servers. Since the CoreOne Suite requires high-performance access to the databases, especially in connection with provisioning tasks, fast access to the hard disk(s) is essential. Due to this, we recommend Flash-Storage.

Data backup

With the installation of the CoreOne Suite, ITSENSE AG sets up a standard database backup via the windows task planning. A backup file of the database is created on a local drive on the server. We strongly recommend that you back up this backup file to an external network drive or external network hard drive on a daily basis. Some Configuration is also stored under the ProgramData-Folder. We recommend, to backup all servers on daily base.

Certificates

For secure communication between the CoreOne Web Services and the end devices, an SSL certificate is required that corresponds to the CoreOne Web Services. If the CoreOne Web Services and the CoreOne Application Services are installed on the same system, the certificate can be used. See also: System requirement Certificates

Token signing (Optional) 

A certificate with wich the private key can be exported is required for token signing. See also: System requirement Certificates

User accounts

In order to operate the CoreOne Suite properly, at least one service user account is required that has sufficient authorizations in the connected target systems. The service user account must be authorized to the private keys of the certificates used (MMC) and have “Logon as Service” rights on the system (GPEDIT) and be a member of the local administrators group.