Configuring SQL, IIS and services

The SQL Session database is separate from the iMIS database. It can be found on the web server or on another server if you use a web farm.

1. Depending on your system, run the command to add a special SQL Session database called ASPState to your SQL Server.

You might want to put this into a batch file with a .cmd extension and run it, or open a command prompt and paste it into the command line.

• 64-bit operating systems

"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_regsql" -S <server> -U <uid> -P <pwd> -ssadd -sstype p

• 32-bit operating systems

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql" -S <server> -U <uid> -P <pwd> -ssadd -sstype p

Replace <server> with your server name, <uid> with a valid SQL Server userID, and <pwd> with the appropriate password.

2. Open SQL Server Management Studio to see the new ASPState database.
3. If you are using trusted connections to connect to the server, change the ownership of the state database to sa, or equivalent user if sa is not being used, after creation. In SQL Server Management Studio run the following:

use ASPState
exec sp_changedbowner ‘sa’, ‘true’

4. If you are using SQL authentication, create a user and password for session state to use. At minimum, this user should have permissions to execute the stored procedures in the ASPState database.

📘 Note

If you want to set your session back to memory, use the following:

<sessionState mode="InProc" stateConnectionString="tcpip=127.0.0.1:42424" sqlConnectionString="data source=127.0.0.1;user id=sa;password=qa" cookieless="false" timeout="120"/>

If you would like to have a session longer or shorter than the default of 120 minutes, change the timeout value.

The iMIS database connection string is parsed by the iMIS Desktop Data Source Name (DSN) when the database gets built from the web.config file on the iMIS app server. For example, if you have server name (or IP) 1434 in the connection string, when the ODBC gets auto-created by the iMIS Desktop, it parses the connection string but sees the comma separating the database server from the port number, which is interpreted as the database name. The value after the comma is used as the database name in the ODBC; in this case, 1434, which is not the database name, but the SQL port number.

To fix this, create a SQL Alias on your iMIS SQL Server:

1. Go to SQL Server > SQL Server Configuration Manager > SQL Native Client Configuration > Aliases > New Alias.
2. Enter the following configurations:
   • Alias Name <serveralias>
   • Port No. <port>
   • Protocol TCP/IP
   • Server <servername>
3. Change the iMIS database connection string in the web.config file to use the SQL Alias name instead of "SQLSERVERNAME,Port#".

📘 Note

For more information on creating aliases, see Create or delete a server alias for use by a client.

Do the following to update the web.config files for SQL Server Sessions:

1. Replace the existing sessionState entry with one similar to below. Replace <server> with your server name, <uid>with a valid SQL Server userID, and <pwd> with the password:

<sessionState
mode="SQLServer"
sqlConnectionString="data source=<server>;user id=<uid>;password=<pwd>"
cookieless="false" timeout="120"/>

2. If using SSRS reports, add the trust entry into the system.web section:

</assemblies>
</compilation>
<trust legacyCasModel="true" level="Full"/>
<httpRuntime executionTimeout="3600" maxRequestLength="10240"

These configuration settings apply to all systems running IIS 7.5 or 8 (Windows Vista/7, Windows Server 2008 R2, and Windows Server 2012) where iMIS server components are installed.

The iMIS installer applies the setting for the application pool setting only. The iMIS installer does not verify that the application roles are installed. You can follow these procedures if you are configuring your system manually or want to implement IIS configuration tips.

Installs to the root of a website are no longer supported. If a previous install used the default website, you are required to enter a new virtual root name. Enter the name and click Next. The upgrade converts the default website to use the virtual root name you provided. See Redirecting to the virtual directory URL for information about redirecting the URL of your default website to the URL of the virtual directory.

TLS is a protocol layer placed between a reliable connection-oriented network protocol layer (TCP/IP) and an application protocol layer (HTTP).

Enabling TLS provides extra security for the site by encrypting information. This security is especially important at checkout, where users may enter credit card information.

An administrator can enable TLS for content item-based sites at the Content Record level. For any content record that contains a content item that you want to operate using TLS, enable the Content is secure (https://) property.

📘 Note

You can extend the timeout settings on an iMIS server to optimize it for testing and demo usage. Extending timeouts prevents problems that come from letting iMIS sit idle for long periods.

📘 Note

Do not set excessive timeouts (especially the session timeout) on production sites: idle sessions sitting for long periods can exhaust the server’s memory.

Many apparent iMIS problems are caused by timeout settings, both default session timeouts in iMIS-related web.config files and timeout settings in ASP.NET itself.

• Timeouts defined in each application’s web.config file:
  • The idle session timeout ends a user’s iMIS session after 20 minutes of inactivity.
  • The idle authentication ticket timeout defaults to 30 minutes, unless the Remember Me option (a checkbox on the login screen) is enabled.
• Timeouts for the ASP.NET application pool:
  • The Shutdown worker processes timeout kills idle processes after 20 minutes. If the iMIS server gets no request within 20 minutes, it restarts iMIS, and the application startup takes time.
  • The Recycle worker processes timeout forces a complete recycle (restart) every 1740 minutes (29 hours), even for non-idle worker processes.

🚧 Warning

Do not overdo the fix. Excessive timeouts worsen the performance and memory usage of your server, and disabling Application Pool recycling slows performance over time, as memory cannot be released by Task Manager’s w3wp.exe process, which is used by IIS to launch .NET application pool processes. Therefore, make changes carefully, and test their impacts.

iMIS application pools will recycle at a randomly generated time each day between 1:00 am and 3:00 am. Tasks that are scheduled during this time might be interrupted, and interrupted tasks cannot be recovered. You can edit the applicationHost.config file to reset this application pool recycle schedule. Do the following:

1. Open the applicationHost.config file for editing. The file can be found in the C:\Windows\System32\inetsrv\config directory.
2. Locate the following snippet of code:

<add name="AsiSchedulerPool" autoStart="true" enable32BitAppOnWin64="false" managedRuntimeVersion="v4.0" 
managedPipelineMode="Integrated" startMode="AlwaysRunning"> 
	<recycling> 
		<periodicRestart time="00:00:00"> 
			<schedule> 
				<add value="02:32:00" /> 
			</schedule> 
		</periodicRestart> 
	</recycling>

3. Add a new value for the <schedule> parameter. For example, if you wanted the application pool recycle to initiate at 1:15 am, change the <system> parameter value to the following:

<schedule>
	<add value="01:15:00" />
</schedule>

If your staff users need to run both administrative and staff views on the same workstation concurrently, then you need to create a separate Casual site (virtual directory) for them.

To enable Casual and Full access at the same time, you must separate the authentication cookies. This lets you open administrative and staff clients simultaneously for different license levels, without logins colliding.

Do the following to separate authentication cookies:

1. Create separate virtual directories for each view:
   1. Copy the ..\ASI\iMIS\Net folder to another location (such as ..\ASI\iMIS\Net2).
   2. In IIS Admin, create a new virtual directory (such as iMISCasual) and point it at the new folder.
2. Configure the sites to use different authentication cookie names:
   1. In each web.config file, locate the following section:

   <authentication mode="Forms">
   <forms name="Login"
   	loginUrl="~/AsiCommon/Controls/Shared/FormsAuthentication/Login.aspx" />
   </authentication>

   2. Change the name attribute’s value to be unique (such as LoginFull, LoginCasual, or LoginPublic) for each site, then save and close the files.
   3. Point your administrative view at one site, such as iMIS, and your browser at the other, such as iMISCasual, as needed.