WebView Installation Guide

WWeebbVViieeww IInnssttaallllaattiioonn GGuuiiddee

RReevviissiioonn 88 0022//0099//22000055

DocSTAR WebView Installation Guide

TTaabbllee ooff CCoonntteennttss IInnttrroodduuccttiioonn

SSeeccttiioonn 11:: DDooccSSTTAARR WWeebbVViieeww RReeqquuiirreemmeennttss && IInnssttaallllaattiioonn CCDD................................................................ 11 SSeeccttiioonn 22:: DDooccSSTTAARR WWeebbVViieeww IInnssttaallllaattiioonn .................................................................................................................................... 33

Step 1: Install DocSTAR WebView License on DocSTAR Host.............................. 4 Step 2: Verify that Internet Information Server (IIS) is enabled with proper settings ......................................................................................................................... 4 Step 3a: Install Microsoft IIS Security Lockdown Tool – For Windows 2000 Server Systems Only................................................................................................... 6 Step 3b: Install Microsoft URL Scan 2.5 Security Tool – For Windows 2003 Server Systems Only................................................................................................. 10 Step 4: Install DocSTAR WebView Software.......................................................... 12 Step 5: Install DocSTAR Digital Certificate (for SSL Communications).............. 15 Step 6: Final WebView Setup .................................................................................. 26 Step 7: Test DocSTAR WebView Installation on Host........................................... 29 Step 8: Configure Router Connections for DocSTAR WebView .......................... 32 Step 9: Test DocSTAR WebView remote clients.................................................... 34

AAppppeennddiixx AA:: WWeebbVViieeww AAddddiittiioonnss ttoo DDSSHHOOSSTT SSeerrvviiccee//DDeesskkttoopp .............................................................. 3355 AAppppeennddiixx BB:: TTrroouubblleesshhoooottiinngg IImmaaggee DDiissppllaayy IIssssuueess ................................................................................................ 3366

Step 1: Test Image Page for DocSTAR WebView remote clients......................... 36 Step 2: If images from C:\INETPUB\WWWROOT\DSWV do not display.............. 37 Step 3: If images from C:\DOCSTAR do not display ............................................. 37 Step 4: If either JPG or PNG images do not display ............................................. 37 Step 5: Verify settings and ensure shares can be viewed by clients .................. 37

AAppppeennddiixx CC:: AAlllloowwiinngg AAnnoonnyymmoouuss AAcccceessss ttoo DDooccSSTTAARR WWeebbVViieeww.................................................. 3399

DocSTAR WebView Installation Guide

IInnttrroodduuccttiioonn DocSTAR WebView is an optional software module that allows users to search for and view documents stored in a DocSTAR v3.x system using only a standard Internet Browser. It is now possible for clients using both Windows and Apple Macintosh environments to view DocSTAR documents. WebView is the Easy, Fast, Smart way to access documents remotely.

Conceptual Overview

Windows PC BasedInernet User

with Web Browser

Windows PC BasedInernet User

with Web Browser

Firewall

Internet

DocSTAR v3.0Departmental

or Enterprise Host

Macintosh BasedInternet User

with Web Browser

DocSTAR WebView Installation Guide Page1

SSeeccttiioonn 11:: DDooccSSTTAARR WWeebbVViieeww RReeqquuiirreemmeennttss && IInnssttaallllaattiioonn CCDD

This section will familiarize you with the minimum requirements to install DocSTAR WebView Software and the contents of the DocSTAR WebView Installation CD. The following listed DocSTAR Host System minimum requirements must be satisfied before DocSTAR WebView Software can be installed on the DocSTAR Host System. Please keep in mind, although the minimum requirements may be satisfied, performance may not be adequate. For this reason, there is a recommended specification (for better performance) next to the minimum requirement for hardware. Note: The installation of DocSTAR WebView should only be performed by DocSTAR v3.x Enterprise Certified Service Engineers. Important Note: When selecting a high-speed Internet connection (for the DocSTAR WebView Host) and Internet Service Provider, be sure that hosting a Web Server is allowed and the required port (port 80 for http and/or port 443 for SSL) is open for Internet requests.

DocSTAR Host System Requirements

Hardware Minimum Requirement Recommended Processor Pentium III based DocSTAR Host Pentium 4 based DocSTAR Host RAM 256 MB 512 MB (or higher) SVGA Monitor 32-bit Color

1024 x 768 Resolution 32-bit Color

1024 x 768 Resolution Hard Drive Space (for DocSTAR WebView software)

2 MB 2 MB

WAN/Internet Connection Bandwidth requirement may increase as the # of concurrent client connections increases

Business Cable, Business DSL, Dedicated Frame Relay, or T1 with

a Static IP Address

Dedicated Frame Relay, T1 or higher with a Static IP address

Software Minimum Requirement Recommended

Operating System MS Windows 2000 Server MS Windows 2000 Server Existing DocSTAR Software Version (Host)

DocSTAR Version 3.1 Build 24 Departmental or Enterprise

DocSTAR Version 3.1 Build 24 Departmental or Enterprise

Web Browser Client Requirements

Microsoft Windows Platform

Hardware Minimum Requirement Recommended Internet Connection

56k Dial Up Modem Connection Cable, DSL, Frame Relay, or T1

Software Minimum Requirement Recommended Operating System Windows 98 Windows 2000 Professional or

Server Microsoft Internet Explorer MS IE 5.5 or higher MS IE 6.0

Apple Macintosh Platform

Hardware Minimum Requirement Recommended Internet Connection

56k Dial Up Modem Connection Cable, DSL, Frame Relay, or T1

Software Minimum Requirement Recommended Operating System OS X OS X Microsoft Internet Explorer MS IE 5.0 or higher MS IE 5.0 or higher

*Notes:

Page 2 DocSTAR WebView Installation Guide

1) Testing on Apple Macintosh Platform was limited to an Apple iMac running OS X and Microsoft Internet Explorer version 5.0.

2) Some display problems were observed using Netscape Internet Browsers on the above platforms. We therefore do not recommend using Netscape Internet Browsers.

The DocSTAR WebView Installation CD The DocSTAR WebView Installation CD contains the following: iislockd.exe - Contains the Microsoft Internet Information Services (IIS) Security

Lockdown Tool installation program. This program is not used by the DocSTAR WebView setup program. This program should be run before installing WebView software.

SETUP.EXE - The DocSTAR WebView setup program. It also contains folders related to Barcode Cover Pages, Virtual Cover Sheets, and the DocSTAR Integration Agent. All of these folders are part of the Integration Agent module, which is sold separately and documented in its own Reference Guide.


SSeeccttiioonn 22:: DDooccSSTTAARR WWeebbVViieeww IInnssttaallllaattiioonn

This section will guide you through the installation of DocSTAR WebView software.

DocSTAR WebView Architecture

The diagram below provides a simplified graphical representation of the architecture of DocSTAR WebView.

Internet

Windows BasedInternet User

with Web Browser Dial-Up or High-SpeedInternet Connection

DSHOST Service/Desktop MS SQL Server/MSDE

File Shares

DocSTAR Departmental or Enterprise Host(MS Windows 2000 Server and Internet

Information Server (IIS))

MicrosoftInternet

InformationServer and

Active ServerPages

DSWeb.DLL

Firewall

Requestfrom clients

Response toclients

DSServer.DLL

Macintosh BasedInternet User

with Web Browser

Installation Steps Below is a list of the installation steps to be performed:

1. Install DocSTAR WebView License on DocSTAR Host 2. Verify that Internet Information Server (IIS) is enabled with proper settings 3. Install Microsoft IIS Security Lockdown Tool (or Microsoft URL Scan 2.5

depending on operating system type) 4. Install DocSTAR WebView Software 5. Install DocSTAR Digital Certificate (for SSL Communications) 6. Create Local User Account for remote access (if necessary) 7. Test DocSTAR WebView Installation on Host 8. Configure Router Connections for DocSTAR WebView 9. Test DocSTAR WebView remote clients

Note: Appendices A & B provide detailed information about installation files and modifications made to the DSHost Service/Desktop. *Important Note: In all of the following steps, you must be logged into the Windows 2000 Server DocSTAR Host as Administrator. This assures that you will have the necessary rights to perform the installation properly.


Step 1: Install DocSTAR WebView License on DocSTAR Host Purpose: This step enables the DocSTAR Host to communicate with DSWeb.DLL and the presence of the license also provides an indication to the DSHost Service/Desktop that virtual web shares must be established every time it starts, see Appendix A. DSWeb.DLL provides a link between the DSServer.DLL and the Active Server Page scripts which provide the internet client user interface.

With the DocSTAR WebView Certificate in hand, call DocSTAR Technical Support and add the DocSTAR WebView License (as well as any additional licenses necessary) to the Hardware Key on the DocSTAR Host System using the DocSTAR Administration Program.

Step 2: Verify that Internet Information Server (IIS) is enabled with proper settings Purpose: This step verifies that Internet Information Services are enabled and set properly in order to provide the Web Services necessary for the Active Server Pages to function properly, see Appendix A.

On Microsoft Windows 2000 Server, Internet Information Services (IIS) is enabled by default. If IIS has been disabled, it must be enabled again. Using the Control Panel\Add/Remove Programs select Add/Remove Windows Components and verify that Internet Information Services are enabled and verify that the options are set as shown in the following screens:


The details should be set as follows:

Scroll down to verify the rest of the settings, as shown below.


Step 3a: Install Microsoft IIS Security Lockdown Tool – For Windows 2000 Server Systems Only Purpose: This step installs the Microsoft IIS Security Lockdown Tool. This tool modifies the way IIS is configured and installs URLScan (a special Internet request filter) to provide better security for Web Servers. This helps prevent hackers, viruses, worms and other unwanted Internet traffic from attacking the Web Server. Important Note: Installation of the IIS Security Lockdown Tool is considered the minimum security measure required to provide a reasonably safe and secure DocSTAR Web Server Solution.

Insert the DocSTAR WebView CD into the CD-ROM drive and run iislockd.exe.

You should see the Welcome screen. If so, Click Next.


If you instead see the This Server Was Already Configured screen, the Internet Lockdown tool has already been installed. Click Cancel to exit the lockdown tool and continue with Step 4.

You will see the License Agreement screen. Select I agree and click Next.


You will see the Select Server Template screen. Select Dynamic Web Server (ASP enabled) and click Next. This Web Server Template will configure IIS with the optimum security options for a Dynamic Web Server that uses Active Server Pages (such as DocSTAR w/WebView).

You will see the URLScan screen. Make sure the checkbox is checked and click Next.


You will see the Ready to Apply Settings screen. Click Next.

You will see the Applying Security Settings screen. Click Next.


You will see the Completing the Internet Information Services Lockdown Wizard screen. Click Finish.

Step 3b: Install Microsoft URL Scan 2.5 Security Tool – For Windows 2003 Server Systems Only Purpose: This step installs the Microsoft URL Scan 2.5 Security Tool. When IIS is installed on Windows 2003 Server, it is automatically locked down, so the IIS Lockdown tool it not used. On Windows 2003 Server the updated URL Scan 2.5 Security Tool will modify the way IIS is configured and installs a special Internet request filter to provide better security for Web Servers. This helps prevent hackers, viruses, worms and other unwanted Internet traffic from attacking the Web Server. Important Note: Installation of the URL Scan 2.5 on Windows Server 2003 is considered the minimum security measure required to provide a reasonably safe and secure DocSTAR Web Server Solution.

Insert the DocSTAR WebView CD into the CD-ROM drive, open the Microsoft URL Scan 2.5 folder and run Setup.exe. You should see the End User License Agreement screen. If so, Click Yes.



The URL Scan 2.5 installation will run and the Completion Screen will be displayed next. Click OK to finish the installation.

Step 4: Install DocSTAR WebView Software Purpose: This step installs the DocSTAR WebView Software. The files installed and changes made to the DSHost Service/Desktop are outlined in Appendices A & B.

Insert the DocSTAR WebView CD into the CD-ROM drive and run SETUP.EXE.

You will see the Select DocSTAR Host screen. Enter the computer name of the DocSTAR Host and click Next.


You will see the Start Installation screen. Click Next.

You will see the Installation Complete screen. Click Finish.



Step 5: Install DocSTAR Digital Certificate (for SSL Communications) Purpose: This step installs the DocSTAR Digital Certificate for SSL communications. SSL (Secure Sockets Layer) provides an added level of security when accessing information over the Internet. Most Internet online banking and shopping transactions use SSL. SSL allows a web client and web server to set up encrypted communications between them, thereby making the communications much more secure. A Digital Certificate is necessary and used by IIS to identify itself to a web client and set up the SSL encryption scheme between them. DocSTAR WebView installs a DocSTAR generic, unsigned, and untrusted Digital Certificate for DocSTAR clients and the DocSTAR WebView Host to be able to communicate over the Internet using SSL (if desired and setup appropriately as will be shown later). Unsigned and untrusted Digital Certificates function just as signed and trusted certificates. The only difference between them is that signed and trusted Digital Certificates are generated by a Trusted Certificate Authority (such as VeriSign). Signed and trusted Digital Certificates can be obtained (for a fee) from a Trusted Certificate Authority and used in place of the generic Digital Certificate supplied by DocSTAR (if desired).

Install Certificate On Computer

Click Start, then Run, in the run dialog enter mmc and click OK. This will open an empty Management Console.

Load the Certificate Snap-in by clicking the Console menu item, then click Add/Remove Snap-in. This will open the Add/Remove snap-in dialog.


On the Standalone tab click the Add button to open the Add Standalone Snap-in dialog.

From the list select Certificates and click the Add button.


In the Certificates snap-in window, select the Computer account option and click Next.

In the Select Computer window, select the Local computer option and click Finish.


This will close the dialog and return to the Add/Remove Snap-In dialog. Click OK.


Expand the Certificates (Local Computer) snap-in and navigate to the Personal folder. Right click on Personal, select All Tasks, then select Import.

When the wizard starts, click Next and then click Browse. Select the DocSTAR folder which contains the DocSTAR sample SSL.PFX, and click Next.


The next dialog opened by the wizard will require you to enter a password. Enter docstar, leave the Mark the private key as exportable option unchecked and click Next.

After clicking Next, the Certificate Store dialog will be opened. This dialog requires you to select the certificate store you want to save the certificate to. Select Personal and click Next.


After clicking Next a summary screen will be displayed showing you all the details about the certificate you are installing. Click Finish. A message will appear that the import process is complete. Click OK.

You will now see the server certificate for your web server in the list of personal certificates. Close the Certificate Management Console by clicking the X in the upper right corner.

Install Certificate Into Internet Information Services

Right click on My Computer and select Manage. You will see the computer management screen. Open the Internet Information Services folder and right click on Default Web Site and select Properties.


You will see the Default Web Site Properties screen. Select the Directory Security tab.

You will see the Directory Security tab. Select the Server Certificate button from the Secure communications area.


You will see the Welcome to the Web Server Certificate Wizard screen. Click Next.

You will see the Server Certificate screen. Select Assign an existing certificate and click Next.


You will now see a screen the contents of your computers certificate store. Select the DocSTAR sample SSL certificate and click Next.


You will see the Imported Certificate Summary screen. Click Next.

You will see the Completing the Web Server Certificate Wizard screen. Click Finish.


Step 6: Final WebView Setup Purpose: In this step, the final WebView Setup is completed. A user account may be created for the remote client to use to login. This is only necessary if a user account(s) doesn’t already exist for this purpose. There can either be one user account used for all remote client logins or each remote client login can use its own login. Note: If the DocSTAR Host System is logging into a Domain, accounts that exist in the Domain can be used to login to the DocSTAR Host System.

Launch the DocSTAR Administration program. You will see the Administration Screen.

Click on the WebView button. You will see the WebView Setup screen. Set Authentication and IIS Log File parameters desired. Enter the name of the Windows NT/2000 Domain that will be the Default Logon Domain (if using Domain accounts to logon).


Click OK to accept the changes and exit the Administration program. To create a Local account to logon to DocSTAR through WebView:

Right-click on My Computer and select Manage. You will see the Computer Management screen. Right-click on Local Users and Groups\Users and select New User.


You will see the New User screen. You can choose to create one generic DocSTAR account (for all remote users) or create an individual account for each user that will be accessing remotely. Note: This step is not necessary if the DocSTAR host is logging into a Domain and each user, that will be accessing remotely through WebView, already has an account in the Domain that will be used to validate their remote access. Be careful when setting the user name and password, since they are case sensitive.


Step 7: Test DocSTAR WebView Installation on Host Purpose: In this step, the DocSTAR WebView installation will be tested locally using a web browser. The DocSTAR WebView software setup installs a default.htm test page to test the proper operation of DocSTAR WebView over http and/or SSL connections from a web browser. To test standard http communications:

Launch a web browser (such as Internet Explorer) and type in the following address (if the computer name of the DocSTAR Host is DocSTAR, if it is not then substitute the DocSTAR Host computer name). Press Enter.

If IIS and DocSTAR WebView are installed properly and running, you should see the Enter Network Password screen. Enter the user account information that was setup in Step 6. Click Next.

If IIS and DocSTAR WebView are installed properly, you should now see the main page displayed successfully as shown below.


To test SSL communications:

Launch a web browser (such as Internet Explorer) and type in the following address (if the computer name of the DocSTAR Host is DocSTAR, if it is not then substitute the DocSTAR Host computer name). Press Enter. Note: When communicating over SSL notice that https is used in the address instead of http.

If IIS and DocSTAR WebView are installed properly and running, you should see the Security Alert screen. This is a standard warning that the Server Digital Certificate is an unsigned and untrusted certificate. Click Yes.


If IIS and DocSTAR WebView are installed properly and running, you should see the Enter Network Password screen. Enter the user account information that was setup in Step 6. Click Next.


If IIS and DocSTAR WebView are installed properly for SSL communications, you should now see the test page displayed successfully as shown below. Note: When a successful SSL connection has been established there will be a picture of a lock in the bottom status bar.

Step 8: Configure Router Connections for DocSTAR WebView Purpose: In this step, information is presented to facilitate the proper setup of a router used to connect the DocSTAR WebView Host to the Internet. Due to the wide variety of routers and high-speed connections available, it is not possible to offer detailed instructions for configuring every make and model of router or type of connection and Internet Service Provider. It is highly recommended that these configuration settings be discussed with and setup by the customer’s Network Administrator. Important Note: Depending on the type of connection (at the DocSTAR WebView Host location) and the Service Agreement between the Internet Service Provider and the Customer, hosting a Web Server may be restricted or prohibited. In addition, the Internet Service Provider may elect to block port 80 for incoming requests (this will prevent Internet users from connecting to the DocSTAR WebView Host through standard http communication, however SSL (https) communications may still be functional). When selecting a high-speed Internet connection (for the DocSTAR WebView Host) and Internet Service Provider, be sure that hosting a Web Server is allowed and the required port (port 80 for http and/or port 443 for SSL) is open for Internet requests. First, obtain the Static IP Address of the Router on the WAN/Internet side (this is the IP Address that the Internet sees when communicating with the router). In some cases, there


may be multiple Static IP Addresses assigned to one router. If so, one must be selected for use with DocSTAR WebView. Record it below. Static IP Address of Router (WAN/Internet side): _____._____._____._____ Second, obtain the Static IP Address of the DocSTAR WebView Host on the LAN. Record it below. Static IP Address of DocSTAR WebView Host: _____._____._____._____ In order for the DocSTAR WebView Host to receive and respond to Internet requests the following ports need to be open for inbound and outbound communication. Note: You may choose to have the DocSTAR WebView Host receive and respond to standard http requests only, SSL https requests only, or both. For standard http communication: Port 80 must be open For SSL https communication: Port 443 must be open In addition, since the DocSTAR WebView Host cannot be addressed directly from the Internet, the following ports need to be forwarded to the DocSTAR WebView Host by the router. Note: This will configure the router to send all Internet Requests addressed to the Static IP Address of the router (WAN/Internet side) on these ports to the DocSTAR WebView Host. This is necessary for DocSTAR WebView to function properly. For standard http communication: Port 80 must be forwarded to the Static IP Address

of the DocSTAR WebView Host For SSL https communication: Port 443 must be forwarded to the Static IP

Address of the DocSTAR WebView Host As an example, the forwarding configuration of a sample LinkSys Router is shown below (the Static IP Address of the DocSTAR WebView Host in this example is 192.168.1.100):


Step 9: Test DocSTAR WebView remote clients Purpose: This is the final step in which remote clients will be tested. To test remote clients you will need to have the Static IP Address of the Router used with the DocSTAR WebView Host (or the Static IP Address selected for use with DocSTAR WebView). This was recorded in Step 8.

Using the Internet Browser on the remote client, you should now be able to

access DocSTAR remotely. If the DocSTAR WebView main page is not accessible, you may use the Internet Explorer test procedure outlined in Step 7 to verify that it has been set up properly. Note: If using test procedure from Step 7, substitute the DocSTAR Host Name ‘DOCSTAR’ with the Static IP Address of the router in the address bar.

or


AAppppeennddiixx AA:: WWeebbVViieeww AAddddiittiioonnss ttoo DDSSHHOOSSTT SSeerrvviiccee//DDeesskkttoopp The directory C:\inetpub\wwwroot\dswv is assigned the following properties:

Enable Default Doc: Yes (Allows a default.htm/asp file) Access Script: Yes (Allows .asp file execution)

Important Note: If any of the above IIS settings are manually reconfigured, the DSHOST Service/Desktop will reset them back to the settings shown above, the next time it is started


AAppppeennddiixx BB:: TTrroouubblleesshhoooottiinngg IImmaaggee DDiissppllaayy IIssssuueess Some IIS security settings can prevent the display of images to WebView clients. In order to diagnose these issues, a special test page has been included with DocSTAR WebView. Step 1: Test Image Page for DocSTAR WebView remote clients Purpose: To test remote clients you will need to have the Static IP Address of the Router used with the DocSTAR WebView Host (or the Static IP Address selected for use with DocSTAR WebView).

Using the Internet Browser on the remote client, access the WebView test page.

The test page displays sample images in both JPG and PNG format. Images are rendered from both the IIS WebView directory as well as the DocSTAR directory. This will test the security options in place and the ability of the current WebView client to access images in those directories.


Step 2: If images from C:\INETPUB\WWWROOT\DSWV do not display

Check the installation of DocSTAR on the host and the installation of DocSTAR WebView. Images from this directory should be visible regardless of the client access rights. The image type is a link to the image display form which can show more detailed information regarding the failure to display the image. Click on JPG IMAGE or PNG IMAGE to perform this test.

Step 3: If images from C:\DOCSTAR do not display

The current WebView user does not have the rights to access images in directories other than the IIS directory. This is an indication that the user may be running as an anonymous user but does not have sufficient rights to access image. If this is the case, see the following section to allow anonymous access. The top of the test page shows the user name which was authenticated to IIS and the authentication type. In the sample shown here, the logon user is spider and the authentication type is basic.

Step 4: If either JPG or PNG images do not display

The browser in use may not support the image type. Try installing the latest version of the browser. Most recent browsers support both JPG and PNG. PNG files are preferred, if available, because they provide better image quality at smaller image sizes which results in quicker downloads for typical document imaging files.

Step 5: Verify settings and ensure shares can be viewed by clients

At the bottom of the test page are several sections showing host settings and shares. It is important to verify the settings appear to be correct and manually test each share provided to ensure that users will be able to access files from them.


The URLSCAN section shows the status of the installation and also shows one of the critical settings, the AllowDotInPath. These settings are configured automatically during the setup, however if some items have been uninstalled and reinstalled, the order of installations may have changed some of these settings. The following sections list each drive used by the DocSTAR system and an attempt is made to locate a TIF file on each drive. The status of each drive, as viewed from the host, is displayed. If a TIF file can be located, it is provided as a link in both the LAN and Internet sections. Each share in the Internet section should be tested from a client to ensure that files can be accessed. Failure to access files may indicate security and/or configuration problems.


Appendix C: Allowing Anonymous Access to DocSTAR WebView For security reasons, anonymous internet users are not allowed access to DocSTAR WebView by default. The default settings require each user to authenticate themselves to the internet server before they are allowed access. In order to allow anonymous access to DocSTAR WebView, you must have a user account setup which will provide the necessary rights to access files. This account will then be used when each anonymous user connects. To allow anonymous users to access DocSTAR WebView follow the procedure below:

Right-click on My Computer and select Manage. You will see the Computer Management screen. Open Default Web Site , right click on dswv and select Properties.


You will see the dswv Properties screen. Select the Directory Security tab and click the Anonymous access and authentication control Edit button.

You will see the Authentication Methods screen. Check the Anonymous Access checkbox and then click the Account used for anonymous access edit button.


You will see the Anonymous User Account screen. Enter the username, uncheck the Allow IIS to control password checkbox, and enter the password. Then click OK to save the settings.

Documents

WebView Installation Guide