Who is this article for?

Administrators who want to learn about creating Application User Account

Administrative access to the web server is required.

This article will outline the process for setting up the webserver in relation to the installation, setup and configuration of Ideagen Internal Audit MK 12.0.

1. Understanding the prerequisites
2. Creating the Application Pool
3. Installing PentanaMK web applications
   1. Creating Web applications
   2. Setting folder Security Permissions
4. Configuring MKinsight Online Setup Web Application
   1. Configuring the Training account
   2. Configuring the Live account
   3. Configure Global Settings 
5. Further Reading

1. Understanding the prerequisites

Make sure all the below points are implemented before continuing with the installation.

• Web Server computer is a member of the network domain. See Appendix 2.
• Windows Server 2012 or above.
• .NET Framework version v4.7.1.
• Web server (IIS) role and features installed. See Appendix 2 for specific requirements.
• WCF Activation.
• Must activate HTTP Activation. See Appendix 3.
• Must have SSL certificate installed on IIS server and bound to the website where MKinsight web application will be installed.
• IIS Server can connect to the Database Server.

2. Creating the Application Pool

1. Run Internet Information Services (IIS) Manager on the web server computer.
2. Create an Application Pool named Ideagen Internal Audit (Aura).
3. Select .NET Framework version v4.0. 
4. Leave the other options shown in the Add dialog as the default value.
5. Click OK to add the application pool.

For more information about creating an IIS application pool open internet link: 

http://technet.microsoft.com/en-us/library/cc731784(v=ws.10).aspx

6. Right-click on Ideagen Internal Audit (Aura) application pool and select Advanced Settings.
7. Change Load User Profile to True.
8. Change Identity to PentanaMK_User using the Custom account option.  

For more information about application pool identity open internet link:  http://technet.microsoft.com/en-us/library/cc771170(v=ws.10).aspx

3. Installing PentanaMK web applications

Extract the contents of the Ideagen Internal Audit (Aura) Online Components (Ideagen Internal Audit (Aura) Server MK12.0 Update X) to the desired folder on the web server computer (e.g. C:\Inetpub\wwwroot\12_0).

Important Note: It is essential that the extracted files remain in the 12_0 folder.

3.1. Create Web applications

1. Using IIS Manager, right-click on 12_0 folder.
2. Choose Convert to Application. 
3. Select Ideagen Internal Audit (Aura) Application Pool.
4. Click OK.

5. Select the 12_0 folder and from the right-hand section and double-click Authentication.
6. Using the right-click menu, disable all listed authentication types, and then enable Anonymous Authentication.
7. Expand the 12_0 folder and select each sub-application listed in bold below.
8. Configure each item as required using a similar process as described above but noting the differences between each application.
9. After each Convert to Application step, the Add Application screen is shown. Accept the default options.
10. Click OK.

• Apps
  • Convert to Application
• Dataservices
  • Convert to Application
• ERM
  • Convert to Application
  • Enable Forms Authentication
• Ext
  • Convert to Application
  • Enable Forms Authentication
• Setup
  • Convert to Application
  • Enable Windows Authentication

11. Once complete, the icons in IIS manager will appear as shown in the screenshot.

3.2. Setting folder Security Permissions

1. Using Windows Explorer, go to the 12_0 folder, right-click and select Properties. 
2. Select the Security tab and click Edit.
3. Click Add, and select the MKinsight_User. 
4. Ensure the user has the permissions shown below.

5. Click OK on Permissions and Properties dialogs.
6. Select each of the folders listed below
7. Right-click and select Properties
8. Go to the Security tab.
9. Click Edit.
10. Select PentanaMK_User and tick Modify from the Allow list.
11. Click OK on Permissions and Properties dialogs. 

• 12_0/Apps/temp
• 12_0/Bin/mki.config
• 12_0/DataServices/temp
• 12_0/ERM/Temp
• 12_0/Ext/Temp o 11_1/Logs
• 12_0/overrides
• 12_0/plugins

4. Configure MKinsight Online Setup Web Application 

Use Internet Explorer to navigate to the setup application from the web server computer. The IP address or server name in the URL is specific to the network configuration.
http://localhost or (IP address, server name)/12_0/setup/default.aspx

4.1. Configuring the Training account

1. Select account Training
2. Click Build
3. Configure the connection string for the training database:

• Network Location: The network name or IP address for the SQL Server computer. The optional instance name should be specified by using a backslash followed by the name.
• Database Name: MKinsight - Training (as appears in SQL Server Management Studio)

4. Tick Integrated authentication.
5. Click OK.
6. Select Test database to verify the connection is working.

7. Enter the Password for the Training account. This password will be required when the client installation is configured.
8. Click Save to store the settings.

4.2. Configuring the Live account

1. Select the Live account.
2. Click Build to configure the connection string for the live database.

• Network Location: the network name or IP address for the SQL Server computer. The optional instance name should be specified by using a backslash followed by the name.
• Database Name: Ideagen Internal Audit (Aura) - Live (as appears in SQL Server Management Studio).

3. Tick Integrated authentication.
4. Click OK and Test database to verify the connection is working.
5. Enter the Password for the Live account. This password will be required when the client installation is configured.
6. It is recommended that the same password is used for both Live and Training accounts.
7. Click Save to store the settings.

4.3. Configure Global Settings 

1. Configure your mail server using your company specific settings.
2. MKinsight uses the SMTP protocol to send e-mails.
3. The mail server must support the SMTP protocol and allow access to this feature by the IIS Web Server (Relay).
4. Click Save.

5. Further Reading

1. Creating Application User Account - Standard Authentication - Ideagen Internal Audit MK 12.0
2. Configuring PentanaMK_User and Restoring Databases in MS SQL Server - Standard Authentication - Ideagen Internal Audit MK 12.0
3. Install Full Text Search - Standard Authentication - Ideagen Internal Audit MK 12.0
4. Installing the Client - Standard Authentication - Ideagen Internal Audit MK 12.0
5. Installing Client Add-ins - Standard Authentication - Ideagen Internal Audit MK 12.0
6. Installing a custom logo - Standard Authentication - Ideagen Internal Audit MK 12.0
7. Appendix 1 – Creating Standard Windows User - Standard Authentication - Ideagen Internal Audit MK 12.0
8. Appendix 2 – Installation & configuration of Web Service (IIS) - Standard Authentication - Ideagen Internal Audit MK 12.0
9. Appendix 3 – WCF Activation - Standard Authentication - Ideagen Internal Audit MK 12.0
10. Appendix 4 – Self-signed SSL certificate - Standard Authentication - Ideagen Internal Audit MK 12.0