Installing Identity Server

  • Article

 

Applies To: Windows Azure Pack

There are multiple steps to installing thinktecture Identity Server for use with Windows Azure Pack.

Installing Identity Server

To Install Identity Server for Use with Windows Azure Pack.

  1. Using the project created in Preparing the Identity Server Source Code Project, copy the published code to the location the website will run from. Typically this will be under \inetpub on a Windows Server 2012 computer running IIS. For example c:\inetpub\IdSrv.

  2. Identity Server stores configuration database files in the website folder App_Data. To Add Permissions for the App_Data folder perform the following steps:

    To Add Permission to the Website App_Data Folder

    1. Locate the folder App_Data in the location you copied the published website to in the previous step. For example c:\inetpub\IdSrv\App_Data

    2. Right-click the folder, select the Properties menu option and select the Security tab.

    3. Add NETWORK SERVICE to the users group and add Modify Permissions.

  3. Perform the following steps to create a new Application Pool:

    To Create a New Application Pool

    1. Open Internet Information Services (IIS) Manager and select the desired server. Then right-click Application Pools and select the Add Application Pool… link on the right.

    2. In the Add Application Pool dialog box add an Application Pool name of your choosing and leave the other values alone.

    3. Click OK to create the application pool.

    4. In IIS Manager, right-click the newly created pool in the Application Pools list and select Advanced Settings.

    5. In the Advanced Settings dialog box in the Process Model section, change the identity for the pool to NetworkService.

    6. Click OK to finish creating the application pool.

  4. A self-signed certificate is required. Perform the following steps to create it.

    To Create a Self-Signed Certificate

    1. Open IIS Manager, select the server name and double-click Server Certificates from the center pane.

    2. In the Actions pane, select Create Self-Signed Certificate.

    3. In the Create Self-Signed Certificate dialog box specify a friendly name for the certificate. For example, IdServCert. Leave the certificate store as Personal.

    4. Click OK to create the self-signed certificate.

  5. To allow access to the private key, perform the follow steps.

    To Allow Access to the Private Key

    1. Start the Command Prompt and type mmc to start the Microsoft Management Console.

    2. Select the File menu option and select Add or Remove Snap-in.

    3. In the Add or Removes Snap-ins dialog box select Certificates from the Available snap-ins: list and then click the Add button. The Certificates snap in dialog box will be displayed.

    4. In the Certificates snap-iin dialog box, select Computer account and then click the Next button.

    5. Select Local computer and then click the Finish button.

    6. Click OK to close the Add Remove Snap-ins dialog box. box

    7. In the mmc console select Certificates (Local Computer), Personal and then Certificates.

    8. In the center pane, right-click the newly created certificate, select All Tasks and then Manage Private Keys. The permissions for certificate private keys dialog box will be displayed.

    9. In the permissions dialog box, add NETWORK SERVICE to the Group or user names: section and give it read permissions in the Permissions for Network SERVICE section.

    10. Click OK to close the Permissions dialog box.

    11. Click OK to close the Microsoft Management Console.

  6. The final step is to create the Identity Server website

    To Create the Identity Server Website

    1. Open IIS Manager, select the host computer in the left pane, right-click the Sites folder and select Add Website.

    2. In the Add Website dialog box, enter the values for the Site name, Application Pool (created earlier in these steps) and the Physical Path to the Identity Server code (created earlier in these steps).

    3. Change the binding Type to https and select an available Port.

    4. In SSL certificate select the newly created certificate.

    5. Click OK to create the site.

See Also

Windows Azure Pack Third Party Identity Providers