Configuring IIS

Top  Previous  Next
Solution Installation > TSS Installation > Install TSS on a standard server > Install Operating System > Windows Server 2022

Overview

This section explains how to configure the Web server and Virtual Directory on Internet Information Services (IIS).

Configuring IPTWebSite in IIS

Proceed as follows:

•Create a folder "D:\IPTWebSite"
 

configure_iis_04

 

•Create a folder "D:\FTPRoot"

 

configure_iis_15

 

TableCornerTopLeftC

IPT_Empty

IPT_Empty

TableCornerTopRightC

IPT_Empty

Info_icon

FTPRoot is only the folder name, the FTP server/service is no longer installed or required.

The path name is kept for internal support
The system only points to this folder via the Virtual "conf" Directory configuration below which is accessed via HTTP/S

IPT_Empty

TableCornerBottomLeftC

IPT_Empty

IPT_Empty

TableCornerBottomRightC

 

•On the  Server Manager, open "Tools > Internet Information Services (IIS) Manager"

 

configure_iis_01

 

•Go to the folder Internet Information Services > {Computer name} (local computer) > Sites

•Right-click "Default Web Site" and select "Remove"

•Click "Yes" on the confirmation pop-up

 

configure_iis_05

 

Application Pool Configuration

 

Create a custom Application Pool to use with the TSS Web Sites

 

•Click on "Application Pools" and on the right hand side menu, click on "Add Application Pool.."

 

configure_iis_06

 

•Fill in the Name: "BTTrade"

•.NET CLR Version: ".NET CLR Version v4.0.30319"

•Managed pipeline mode: "Integrated"

•Then click on "OK"

 

configure_iis_07

 

•Highlight the new "BTTrade" Application Pool, then on the right side menu click on "Advanced Settings..."

 

configure_iis_08

 

•Ensure Identity field is: "ApplicationPoolIdentity"

•Change Idle-Timeout field (minutes) from 20 to "0".

 

configure_iis_09

 

•Restart the IIS Server, by clicking on the Computer Name in the left menu and then on the Right side menu click on "Restart"
There is no confirmation of the restart, but the Restart icon will briefly grey out. This is normal.

 

configure_iis_10

 

Configure directory access permissions for custom Application Pool (BTTrade)

 

We need to edit folder permissions on "D:\FTPRoot" and "D:\IPTWebSite" to provision the correct access rights for the custom Application Pool "BTTrade", created earlier.

This is due to the Application Pool being configured to use the "Identity = ApplicationPoolIdentiy"

 

TableCornerTopLeftA

IPT_Empty

IPT_Empty

TableCornerTopRightA

IPT_Empty

ImportantNote_Icon

Below steps show how to set the permission on the "D:\IPTWebSite" folder.

Repeat the exact same steps and set the same permission on the "D:\FTPRoot" folder

IPT_Empty

TableCornerBottomLeftA

IPT_Empty

IPT_Empty

TableCornerBottomRightA

 

•Open File Explorer and browse to "D:\" then Right Click on "D:\IPTWebSite" and select "Properties"

 

•Select the "Security" tab then Click on "Edit"

 

configure_iis_27

 

•Then Click "Add..."

 

configure_iis_28

 

•In the box type "IIS AppPool\BTTrade" then Click on "Check Names"

 

configure_iis_29

 

•Once successfully checked (without errors) the name shows "BTTrade", then Click on "OK"

 

configure_iis_30

 

•With "BTTrade" highlighted in the "Group or user names" section, Click to add the "Modify" Permission as seen below
Then Click on "Apply" and then "OK"

 

configure_iis_31

 

•Make sure to repeat all the above steps to set the same permission on the "D:\FTProot" folder

 

Configure IPTWebSite

•Right-click the node Sites and select "Add Website...".

 

configure_iis_11

 

•Enter site name: "IPTWebSite"

•Select: "D:\IPTWebSite" as physical path.

•Leave binding mode with default value.

•Click "Select" button for Application pool

 

configure_iis_12

 

•In the drop-down select "BTTrade" Application pool created earlier, then click on "OK"

 

configure_iis_13

 

•Once all items are correctly filled in, select "OK" to create the new site using the custom "BTTtrade" Application Pool

 

configure_iis_14

 

TableCornerTopLeftA

IPT_Empty

IPT_Empty

TableCornerTopRightA

IPT_Empty

ImportantNote_Icon

When creating the FTP folder (D:\FTPRoot), make sure the user NetworkService has read/write access to it and if planning to use the database backup scheduled task with Microsoft SQL Server, the SQL user must have the same rights.

IPT_Empty

TableCornerBottomLeftA

IPT_Empty

IPT_Empty

TableCornerBottomRightA

Configure HTTP(S) access via Virtual "conf" Directory

 

•In IIS Manager, Right click on "IPTWebSite" and select "Add Virtual Directory"

 

configure_iis_16

 

•Name the Virtual Directory "conf" and set the path to the FTPRoot folder "D:\FTPRoot" and click "OK"

 

configure_iis_17

 

•Click on the Virtual directory and then double click on "Mime Types"

 

configure_iis_18

 

•Click on "Add"

 

configure_iis_19

 

•Set the file name extension to ".cfg" and the MIME Type to "application/octet-stream" then click on "OK"

•Click again on "Add"

 

configure_iis_20

 

•Set the file name extension to ".mod" and the MIME Type to "application/octet-stream" then click on "OK"

•Click again on "Add"

 

configure_iis_21

 

•Set the file name extension to ".cramfs"and the MIME Type to "application/octet-stream" then click on "OK"

•Click again on "Add"

 

configure_iis_22

 

•Set the file name extension to ".jffs2" and the MIME Type to "application/octet-stream" then click on "OK"

•Click again on "Add"

 

configure_iis_23

 

•Set the file name extension to ".0_ROHS" and the MIME Type to "application/octet-stream" then click on "OK"

•Click again on "Add"

 

configure_iis_24

 

•Set the file name extension to ".9_ROHS" and the MIME Type to "application/octet-stream" then click on "OK"

•Click again on "Add"

 

configure_iis_25

 

It's now possible to access the FTPRoot through HTTP(S)

To Configure TLS on IIS

TableCornerTopLeftA

IPT_Empty

IPT_Empty

TableCornerTopRightA

IPT_Empty

ImportantNote_Icon

TLS is mandatory on the TSS

The system must be secured with certificates

IPT_Empty

TableCornerBottomLeftA

IPT_Empty

IPT_Empty

TableCornerBottomRightA

 

By default, IIS is not secured with certificates, and  uses the HTTP protocol.

 

To configure TLS on IIS, follow: Install Certificates