applicationPackaging created the topic: InstallAce FAQ
I want to setup InstallAce. How can I start?
Please refer to ReadMe file for detailed information on System Requirements, Configuration Settings and InstallAce components. ReadMe file shall be available under root folder of InstallAce Setup program.
Which components should I install on my machine?
Following are the separate InstallAce components that can be installed separately as per available license and user requirement.
* Client Tools:
1. Solution Designer: Application developer may use Solution Designer to package application components & build deployment package.
2. Installation Manager: Support team may use Installation Manager to load deployment package, configure pre-installation settings like environment binding etc. and run installation.
* Server Components:
1. Installation Service: Windows Service component run on target server in background made and create communication channel with Installation Manager
I have installed InstallAce. What are the minimum configuration requirements before I start using it?
Before you start using InstallAce, you shall verify default configuration settings in following configuraion files. You may find configuration files in the Application folder as you may have selected with setup program.
* Installer Service:: IAInstaller.exe.config
* Solution Designer:: SDesigner.exe.config
* Installation Manager:: IManager.exe.config
Please note that Installer Windows Service is not started just after installation and you shall start the Installer Service after verification of default application settings. To start the Installer Service please open the “Services” management console under “Administrative Tools” and start “InstallAce Installer” Windows Service.
How may I configure Server side User Authentication?
If ‘ValidateUserAccount’ setting is ‘true’ then Installer Service will validate all installation requests and access would be permitted only to the limited users as defined in the ‘AuthorizedUsersList’ section of the application configuration file. Installation Manager sends user’s domain name & username in encrypted form and Installer Service validate user credentials in accordance with the server side policy.
The user list is defined in following format:
Note: The domain name is optional to define but if defined then the (Installation Manager) user must be on the same domain.
How may I configure Server side Directory Permissions?
It is highly recommended to configure server side settings for directory permissions. By defining these settings you can ensure that InstallAce is not used by malicious users to modify sensitive server contents. if directory check is enabled then InstallAce will not allow running any such installation package that may modify contents of non-permitted folders.
If ‘RestrictInstallationToAllowedFoldersList’ setting is ‘true’ then Installer Service will monitor all installation requests and file access would be permitted only under the directory locations as defined in the ‘AllowedFoldersList’ section in application configuration file.
Similarly if ‘RestrictInstallationForDeniedFoldersList’ setting is ‘true’ then file copy would be denied under the directory locations as defined in the ‘DeniedFoldersList’ section. The directory list is defined in following format:
Please note that permissions are only applied to parent folders and same permissions are used for sub folders. Thus if you define ‘C:\’ in ‘DeniedFoldersList’ list then no file can be installed on C drive.
How can I restrict direct access to SQL Server and still allow running SQL Server tasks?
InstallAce need ConnectionString details to be defined for all Database Servers otherwise it cannot run SQL Server Tasks. The connection string can be defined in Solution Designer or by the Installation Manager. However if you don’t want to share User Name & Password with the InstallAce users then you may define the Connection String(s) in the ‘connectionStrings’ section of configuration file and just share the Connection String ‘Name’ with the InstallAce user. InstallAce will automatically detect the actual Connection String at run time and replace with the Connection String ‘Name’. Connection String is defined in ‘Name – connectionString’ format as following:
How can I define a timeframe to restrict installation for specific period?
You may use ‘RestrictWeekDays’ setting in the application configuration file to define days of week on that installation shall NOT be permitted.
What are other security settings available to manage controlled access?
You may configure following settings in the application configuration file:
1. AllowWindowsScriptExecution: Turn flag on/off to allow/deny VBScript & Power Shell Scripts execution on the server.
2. AllowIISConfigurationTask: Turn flag on/off to allow/deny executing IIS Server Tasks on the server.
3. AllowCustomFileAction: Turn flag on/off to allow/deny executing Custom File Action on the server.
- DevOps Certified Professionals (DCP)
- Site Reliability Engineering Certified Professionals (SRECP)
- Master in DevOps Engineering (MDE)
- DevSecOps Certified Professionals (DSOCP)
URL - https://www.devopsschool.com/certification/
My Linkedin - https://www.linkedin.com/in/rajeshkumarin
- Best AI tools for Software Engineers - November 4, 2024
- Installing Jupyter: Get up and running on your computer - November 2, 2024
- An Introduction of SymOps by SymOps.com - October 30, 2024
