Who is this article for?

Administrators who want to learn about creating Application User Account

Administrative access to the web server is required.

This article will outline the process for setting up the webserver in relation to the installation, setup and configuration of MKinsight 11.1.

1. Understanding the prerequisites
2. Creating the Application Pool
3. Installing MKinsight web applications
   1. Creating Web applications
   2. Setting folder Security Permissions
4. Configuring Ideagen Internal Audit (Aura) Online Setup Web Application
   1. Configuring the Training account
   2. Configuring the Live account
5. Configure Global Settings
   1. Integrated authentication 
   2. Mail Server
6. Further Reading

1. Understanding the prerequisites

Make sure all the below points are implemented before continuing with the installation.

• Web Server computer is a member of the network domain. See Appendix 2.
• Windows Server 2012 or above.
• .NET Framework version v4.7.1 .
• Web server (IIS) role and features installed. See Appendix 2 for specific requirements.
• WCF Activation.
• Must activate HTTP Activation. See Appendix 3.
• Must have SSL certificate installed on IIS server and bound to the website where MKinsight web application will be installed.
• IIS Server can connect to the Database Server.

2. Creating the Application Pool

1. Run Internet Information Services (IIS) Manager on the web server computer.
2. Create an Application Pool named MKinsight_11_1.
3. Select .NET Framework version v4.0. 
4. Leave the other options shown in the Add dialog as the default value.
5. Click OK to add the application pool.

For more information about creating an IIS application pool open internet link: 

http://technet.microsoft.com/en-us/library/cc731784(v=ws.10).aspx

6. Right-click on PentanaMK_12_0 application pool and select Advanced Settings.
7. Change Load User Profile to True.
8. Change Identity to PentanaMK_user using the Custom account option.  

For more information about application pool identity open internet link:  http://technet.microsoft.com/en-us/library/cc771170(v=ws.10).aspx

3. Installing MKinsight web applications

Extract the contents of the MKinsight Online Components (MKinsight Server 10.1 Revision X) to the desired folder on the web server computer (e.g. C:\Inetpub\wwwroot\12_0).

Important Note: It is essential that the extracted files remain in the 12_0 folder.

3.1. Create Web applications

1. Using IIS Manager, right-click on 12_0 folder.
2. Choose Convert to Application. 
3. Select MKinsight 11.1 Application Pool.
4. Click OK.

5. Select the 12_0 folder and from the right-hand section and double-click Authentication.
6. Using the right-click menu, disable all listed authentication types, and then enable Anonymous Authentication.
7. Expand the 12_0 folder and select each sub-application listed in bold below.
8. Configure each item as required using a similar process as described above but noting the differences between each application.
9. After each Convert to Application step, the Add Application screen is shown. Accept the default options.
10. Click OK.

• Apps
  • Convert to Application
  • Enable Anonymous Authentication
  • Remove Windows Authentication
• Dataservices
  • Convert to Application
  • Enable Anonymous Authentication
  • Remove Windows Authentication
• ERM
  • Convert to Application
  • Enable Forms Authentication
  • Enable Anonymous Authentication
  • Remove Windows Authentication
• Ext
  • Convert to Application
  • Enable Forms Authentication
  • Enable Anonymous Authentication
  • Remove Windows Authentication
• Setup
  • Convert to Application
  • Enable Windows Authentication

11. Once complete, the icons in IIS manager will appear as shown in the screenshot.

3.2. Setting folder Security Permissions

1. Using Windows Explorer, go to the 12_0 folder, right-click and select Properties. 
2. Select the Security tab and click Edit.
3. Click Add, and select the MKinsight_User. 
4. Ensure the user has the permissions shown below.

5. Click OK on Permissions and Properties dialogs.
6. Select each of the folders listed below
7. Right-click and select Properties
8. Go to the Security tab.
9. Click Edit.
10. Select MKinsight_User and tick Modify from the Allow list.
11. Click OK on Permissions and Properties dialogs. 

• 12_0/Apps/temp
• 12_0/Bin/mki.config
• 12_0/DataServices/temp
• 12_0/ERM/Temp
• 12_0/Ext/Temp/12_0/Logs
• 12_0/overrides
• 12_0/plugins

4. Configure Ideagen Internal Audit (Aura) Online Setup Web Application 

Use Internet Explorer to navigate to the setup application from the web server computer. The IP address or server name in the URL is specific to the network configuration.
http://localhost or (IP address, server name)/12_0/setup/default.aspx

4.1. Configuring the Training account

1. Select account Training
2. Click Build
3. Configure the connection string for the training database:

• Network Location: The network name or IP address for the SQL Server computer. The optional instance name should be specified by using a backslash followed by the name.
• Database Name: MKinsight - Training (as appears in SQL Server Management Studio)

4. Tick Integrated authentication.
5. Click OK.
6. Select Test database to verify the connection is working.

7. Enter the Password for the Training account. This password will be required when the client installation is configured.
8. Click Save to store the settings.

4.2. Configuring the Live account

1. Select the Live account.
2. Click Build to configure the connection string for the live database.

• Network Location: the network name or IP address for the SQL Server computer. The optional instance name should be specified by using a backslash followed by the name.
• Database Name: MKinsight - Live (as appears in SQL Server Management Studio)

3. Tick Integrated authentication.
4. Click OK and Test database to verify the connection is working.
5. Enter the Password for the Live account. This password will be required when the client installation is configured.
6. It is recommended that the same password is used for both Live and Training accounts.
7. Click Save to store the settings.

5. Configure Global Settings 

5.1. Integrated authentication 

1. Click Add from Servers section:

2. Enter a Name to describe the active directory server details. This is the name that will appear on screen when adding users to Ideagen Internal Audit (Aura).
3. Enter the Domain Name for the domain controller using NETBIOS name format (the short name of the domain).
4. Complete the username and password boxes using the PentanaMK_user account (Optional).
5. Click Save.

Important Note: The password must never expire for the selected user.

6. Tick all the boxes below:

• Allow creation of active directory users
• Client software auto-login
• Allow client standard login on auto-login fail
• Online software auto-login
• Allow online standard login on auto-login fail

7. Scroll to the bottom of the page and click Save.

5.2. Mail Server

1. Configure your mail server using your company specific settings.
2. MKinsight uses the SMTP protocol to send e-mails.
3. The mail server must support the SMTP protocol and allow access to this feature by the IIS Web Server (Relay).
4. Click Save.

6. Further Reading

1. Creating Application User Account - Active Directory - Internal Audit MK v12
2. Upgrading and configuring the Databases in MS SQL Server - Active Directory - Internal Audit MK v12
3. Installing the Client - Active Directory- Internal Audit MK v12
4. Installing Client Add-ins - Active Directory - Internal Audit MK v12
5. Installing a custom logo - Active Directory - Internal Audit MK v12
6. Appendix 1 – Creating Standard Windows User - Active Directory - Internal Audit MK v12
7. Appendix 2 – Installation & configuration of Web Service (IIS) - Active Directory - Internal Audit MK v12
8. Appendix 3 – WCF Activation - Active Directory - Internal Audit MK v12
9. Appendix 4 – Self-signed SSL certificate - Active Directory - Internal Audit MK v12