Preparing to Install

This section describes the procedure for preparing to install iW Management Console in each operating system.
Windows Vista
Windows Server 2008
Windows 7
Windows Server 2008 R2
Windows 8
Windows Server 2012

Windows Vista

Confirming the Version of the Operating System

Before installing this software, confirm that Windows Vista has been updated to the latest version.
IMPORTANT
Regarding the service packs, apply the version described in "System Requirements."

Specifying the Computer Date and Time Settings

Specify the correct time zone and date and time settings for the computer in which to install iW Management Console.
1.
Select [Control Panel] → [Clock, Language, and Region] → [Date and Time] from the Start menu.
The [Date and Time] dialog box is displayed.
2.
Specify the correct time zone and date and time settings for the computer.
IMPORTANT
If you change the time zone or date and time settings of the computer after installing iW Management Console, iW Management Console will not operate correctly.

Checking the Installation Status of Components

Before installing iW Management Console, it is necessary to check whether the .NET Framework is installed. Perform the procedure below to check whether it is installed before proceeding to the procedure in "Operations Required Depending on Installation Status of Components."

Checking the Installation Status of the .NET Framework

1.
Select [Control Panel] → [Programs] → [Programs and Features] from the Start menu.
2.
Check whether .NET Framework is installed in [Uninstall or change a program].
If [Microsoft .NET Framework <Version>] is displayed in [Uninstall or change a program], .NET Framework is installed. For more information on the version of .NET Framework, see "System Requirements."

Operations Required Depending on Installation Status of Components

Perform the operations indicated below according to the installation status of IIS and the .NET Framework.
Installation Status
Required Operations
If the .NET Framework has not been installed
Specify the IIS settings. Proceed to "Enabling IIS."
If the .NET Framework has been installed
After specifying the IIS settings, associate IIS and the .NET Framework.
For information on setting IIS, see "Enabling IIS." For information on associating IIS and the .NET Framework, see "Setting Associations between IIS and .NET Framework."

Enabling IIS

In order to use IIS in Windows Vista, it is necessary to enable IIS.
1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Control Panel] → [Programs] → [Programs and Features] from the Start menu.
3.
In [Tasks] on the left, click [Turn Windows features on or off].
The [Windows Features] dialog box is displayed.
4.
Enable IIS.
If [Internet Information Services] is not filled
Click [Internet Information Services] to make it filled.
IMPORTANT
If you click [Internet Information Services], several other items are automatically selected. Do not deselect these items, as they are required to operate iW Management Console.
Double-click [Internet Information Services] → [Web Management Tools] → [IIS 6 Management Compatibility].
Select [IIS Metabase and IIS 6 configuration compatibility].
Double-click [World Wide Web Services] → [Application Development Features].
Select [ASP.NET].
IMPORTANT
If you select [ASP.NET], several other items are automatically selected. Do not deselect these items, as they are required to operate iW Management Console.
If [Internet Information Services] is filled:
Check whether the items are selected as indicated in the following screen:
If the selected items differ to that of the above screen, change them to match the above screen.
If items other than those indicated above are selected, it is not necessary to change them.
5.
Click [OK].

SSL (Secure Sockets Layer) Settings

This section describes the procedure for setting to use SSL communication with iW Management Console. This operation is not required if you do not want to use SSL communication with iW Management Console.

Regarding SSL

HTTPS is used as the communications protocol to encrypt data transmitted between IIS and the Web browser. HTTPS is a communications protocol that includes SSL (Secure Sockets Layer) data encryption.
To use HTTPS to encrypt transmitted data, it is necessary to install a server certificate. There are two types of server certificates: certificates not issued by a certificate authority (self-signed certificates), and certificates that are issued by a certificate authority.
For more information on setting SSL, see the following:
References:
Creating a Certificate Request File
Obtaining a Certificate
Installing a Certificate
Requesting SSL Communications
NOTE
Perform the following operations and settings on the computer in which you want to install iW Management Console.

Creating a Certificate Request File

To obtain a certificate, it is necessary to create a certificate request file and send it to a certificate authority.
This section describes the procedure for creating a certificate request file.
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Control Panel] → [System and Maintenance] → [Administrative Tools] → [Internet Information Services (IIS) Manager] from the Start menu.
When the dialog box for confirming to continue the operation is displayed, click [Continue].
3.
Double-click [Server Certificates].
4.
Click [Create Certificate Request] in [Actions].
The [Request Certificate] dialog box is displayed.
5.
Specify the geographical information.
Enter a name for the certificate in [Common name].
NOTE
Enter the DNS name or NetBIOS name of the server for [Common name]. Enter the common name specified here as the URL when accessing the server from a Web browser.
For example, if you specify "iwmc-server.organization.company.com" for the common name, enter "https://iwmc-server.organization.company.com" as the URL when accessing the server from a Web browser.
Enter the organization in [Organization] → enter the organizational unit in [Organizational unit].
Specify the city/locality in [City/locality].
Specify the state/province in [State/province].
Specify the country/region in [Country/Region].
Click [Next].
6.
Setting the Cryptographic service.
Select [Cryptographic service provider].
Select [Bit length].
Click [Next].
7.
Specify the file name for the certificate request.
Enter the full path to the location you want to save the certificate request file.
Click [Finish].
The certificate request is created.

Obtaining a Certificate

To obtain a certificate, it is necessary to create a certificate request file, send it to a certificate authority, and download the issued certificate.
Reference:
Creating a Certificate Request File
There are two types of certificates: certificates not authorized by a certificate authority (self-signed certificate), and certificates authorized by a certificate authority.
Obtaining a Self-Signed Certificate
To issue a certificate from a server computer set with a certificate service:
Install/set a certificate service on a server computer (Windows server operating system). For more information, see "Requesting/Issuing a Self-Signed Certificate."
To issue a certificate using the certificate issuing tool such as OpenSSL:
The procedure for issuing a certificate depends on the tool you are using. For more information, see the documentation/website for the tool you are using.
IMPORTANT
If you want to install a self-signed certificate, obtain a certificate encoded in Base 64.
Obtaining a Certificate Authorized by a Certificate Authority
The procedure for issuing a certificate differs according to the certificate authority. For more information, see the documentation/website for the certificate authority you are using.
NOTE
A payment is required to issue a certificate from a certificate authority.
Some certificate authorities may issue test certificates without requiring payment.

Installing a Certificate

The procedure for installing obtained certificate is as follows.
IMPORTANT
It is necessary to have an already-issued certificate before installing. For more information, see "Obtaining a Certificate."
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Control Panel] → [System and Maintenance] → [Administrative Tools] → [Internet Information Services (IIS) Manager] from the Start menu.
When the dialog box for confirming to continue the operation is displayed, click [Continue].
3.
Double-click [Server Certificates].
4.
Click [Complete Certificate Request] in [Actions].
5.
Import the issued certificate.
Select the issued certificate in [File name containing the certification authority's response].
Enter a friendly name in [Friendly name].
Click [OK].
6.
Enable communication with HTTPS in IIS settings.
Click [Default Web Site] for [Sites] in [Connections].
Select [Bindings] from [Edit Site] in [Actions].
Click [Add] in the [Site Bindings] dialog.
Select [https] from [Type] in the [Add Site Binding] dialog.
Select the friendly name specified in step 5 from [SSL certificate].
Click [OK].
NOTE
SSL communication is now possible. When installing iW Management Console (see "Installing iW Management Console"), you can select [Use SSL]. This enables you to perform SSL communications with pages that require security when using iW Management Console.
7.
Confirm that communications with HTTPS is enabled.
Start the Web browser on a client computer → enter the following URL.
https:// <IP address or FQDN of server computer> /
Example:
https://172.23.2.138/
https://iwmc-server.organization.company.com/
IMPORTANT
For the URL, enter the same address as the common name specified when creating the certificate request file. For example, if you specify "iwmc-server.organization.company.com" for the common name, enter "https://iwmc-server.organization.company.com" as the URL.
NOTE
An FQDN (fully qualified domain name) is a domain name that includes the domain name, sub-domain name, and host name, with nothing omitted.
Click [OK] when the message <Accessing Secured Page> is displayed.
Click [OK] when the message <Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the site's security certificate.> is displayed.
NOTE
If you are using a self-signed certificate, and not using a certificate authenticated by a certificate authority, the message <The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority.> is displayed.

Requesting SSL Communications

This section describes the procedure for setting to use only SSL communications with IIS.
IMPORTANT
If you specify these settings, SSL communications are always used. Only specify these settings if you want to force SSL communications.
If you force SSL communications, some of the plug-ins of iW Management Console may not operate correctly. For more information, see the instruction manual for each plug-in.
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Control Panel] → [System and Maintenance] → [Administrative Tools] → [Internet Information Services (IIS) Manager] from the Start menu.
When the dialog box for confirming to continue the operation is displayed, click [Continue].
3.
Specify the security settings in IIS.
Click [Default Web Site] for [Sites] in [Connections].
Double-click [SSL Settings].
4.
Specify the SSL settings.
Select [Require SSL].
Select [Ignore] in [Client certificates].
Click [Apply] in [Actions].
5.
Restart IIS.
Click [Default Web Site] for [Sites] in [Connections].
Click [Restart] in [Actions].
6.
Confirm that HTTP communications may not be possible.
Start the Web browser on a client computer → enter the following URL.
http:// <IP address or FQDN of server computer> /
Example:
http://172.23.2.138/
http://iwmc-server.organization.company.com/
NOTE
An FQDN (fully qualified domain name) is a domain name that includes the domain name, sub-domain name, and host name, with nothing omitted.
Confirm that the page cannot be displayed or that the message <The page you are trying to access is secured with Secure Sockets Layer (SSL).> is displayed.

Checking the Sleep Mode Settings of the Computer

The sleep mode is enabled in Windows Vista by default. If the server computer in which iW Management Console is installed enters the sleep mode, iW Management Console will not operate correctly.
1.
Check the sleep mode settings of the computer.
If the sleep mode is enabled, disable it.
For more information on disabling the function for entering the sleep mode, see the instruction manuals for Windows Vista.

Checking the Windows Firewall Settings

If you want to use iW Management Console with Windows Firewall enabled, confirm the following:
The status of the firewall service is [Started]
The Windows Firewall function is enabled

Checking the Status of the Firewall Service

1.
Select [Control Panel] → [System and Maintenance] → [Administrative Tools] → [Services] from the Start menu.
2.
Check whether [Started] is displayed in [Status] for [Windows Firewall].
If [Started] is not displayed, right-click [Windows Firewall] → select [Start].

Checking the Windows Firewall Function Settings

1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Control Panel] → [Security] → [Windows Firewall] from the Start menu.
3.
In the area on the left-hand, click [Turn Windows Firewall on or off].
4.
Check whether [On] is selected on the [General] sheet.
If [Off] is selected, select [On].
5.
Click [OK].

Windows Server 2008

Confirming the Version of the Operating System

Before installing this software, confirm that Windows Server 2008 has been updated to the latest version.
IMPORTANT
Regarding the service packs, apply the version described in "System Requirements."

Specifying the Computer Date and Time Settings

Specify the correct time zone and date and time settings for the computer in which to install iW Management Console.
1.
Select [Control Panel] → [Date and Time] from the Start menu.
The [Date and Time] dialog box is displayed.
2.
Specify the correct time zone and date and time settings for the computer.
IMPORTANT
If you change the time zone or date and time settings of the computer after installing iW Management Console, iW Management Console will not operate correctly.

Checking the Installation Status of Components

Before installing iW Management Console, it is necessary to check whether the .NET Framework is installed. Perform the procedure below to check whether it is installed before proceeding to the procedure in "Operations Required Depending on Installation Status of Components."

Checking the Installation Status of the .NET Framework

1.
Select [Control Panel] → [Programs] → [Programs and Features] from the Start menu.
2.
Check whether .NET Framework is installed in [Uninstall or change a program].
If [Microsoft .NET Framework <Version>] is displayed in [Uninstall or change a program], .NET Framework is installed. For more information on the version of .NET Framework, see "System Requirements."

Operations Required Depending on Installation Status of Components

Perform the operations indicated below according to the installation status of IIS and the .NET Framework.
Installation Status
Required Operations
If the .NET Framework has not been installed
Specify the IIS settings. Proceed to "Enabling IIS."
If the .NET Framework has been installed
After specifying the IIS settings, associate IIS and the .NET Framework.
For information on setting IIS, see "Enabling IIS." For information on associating IIS and the .NET Framework, see "Setting Associations between IIS and .NET Framework."

Enabling IIS

In order to use IIS in Windows Server 2008, it is necessary to enable IIS.
1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Administrative Tools] → [Server Manager] from the Start menu.
The [Server Manager] is displayed.
3.
Click [Add Roles] in [Roles Summary].
NOTE
If [Web Server (IIS)] is displayed in [Roles Summary], IIS is enabled. Refer to "Confirming the Role Services of IIS" and check the installation status of role services.
The [Add Roles Wizard] is displayed.
4.
Click [Next].
5.
Select [Web Server (IIS)] → click [Next].
If a dialog box to confirm whether to install the required features to Web Server (IIS) is displayed, click [Add Required Features].
6.
Click [Next].
7.
Select [ASP.NET] and [IIS6 Metabase Compatibility] → click [Next].
IMPORTANT
If you click [ASP.NET], a dialog box to confirm whether to add the required role services and features is displayed. Click [Add Required Role Services]. Do not deselect these items, as they are required to operate iW Management Console.
8.
Click [Install].
Installation starts.
9.
Click [Close].

Confirming the Role Services of IIS

Confirm whether the role services of IIS that are required to operate iW Management Console are installed.
1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Administrative Tools] → [Server Manager] from the Start menu.
The [Server Manager] is displayed.
3.
Click [Web Server (IIS)] in [Roles Summary].
4.
In [Role Services], confirm the installation status of role services is as indicated below:
If the required role services are not installed, add them.
5.
Click [Add Role Services].
The [Select Role Services] dialog box is displayed.
6.
Select the required role services → click [Next].
7.
Confirm the contents of the installation → click [Install].
Installation starts.
8.
Click [Close].
Check the installation status of role services again in [Server Manager].

SSL (Secure Sockets Layer) Settings

This section describes the procedure for setting to use SSL communication with iW Management Console. This operation is not required if you do not want to use SSL communication with iW Management Console.

Regarding SSL

HTTPS is used as the communications protocol to encrypt data transmitted between IIS and the Web browser. HTTPS is a communications protocol that includes SSL (Secure Sockets Layer) data encryption.
To use HTTPS to encrypt transmitted data, it is necessary to install a server certificate. There are two types of server certificates: certificates not issued by a certificate authority (self-signed certificates), and certificates that are issued by a certificate authority.
For more information on setting SSL, see the following:
References:
Creating a Certificate Request File
Obtaining a Certificate
Installing a Certificate
Requesting SSL Communications
NOTE
Perform the following operations and settings on the computer in which you want to install iW Management Console.

Creating a Certificate Request File

To obtain a certificate, it is necessary to create a certificate request file and send it to a certificate authority.
This section describes the procedure for creating a certificate request file.
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Administrative Tools] → [Internet Information Services (IIS) Manager] from the Start menu.
3.
In [Connections], click the localhost.
4.
Double-click [Server Certificates].
5.
Click [Create Certificate Request] in [Actions].
6.
Specify the geographical information.
Enter a name for the certificate in [Common name].
NOTE
Enter the DNS name or NetBIOS name of the server for [Common name]. Enter the common name specified here as the URL when accessing the server from a Web browser.
For example, if you specify "iwmc-server.organization.company.com" for the common name, enter "https://iwmc-server.organization.company.com" as the URL when accessing the server from a Web browser.
Enter the organization in [Organization] → enter the organizational unit in [Organizational unit].
Specify the city/locality in [City/locality].
Specify the state/province in [State/province].
Specify the country/region in [Country/Region].
Click [Next].
7.
Setting the Cryptographic service.
Select [Cryptographic service provider].
Select [Bit length].
Click [Next].
8.
Specify the file name for the certificate request.
Enter the full path to the location you want to save the certificate request file.
Click [Finish].
The certificate request is created.

Obtaining a Certificate

To obtain a certificate, it is necessary to create a certificate request file, send it to a certificate authority, and download the issued certificate.
Reference:
Creating a Certificate Request File
There are two types of certificates: certificates not authorized by a certificate authority (self-signed certificate), and certificates authorized by a certificate authority.
Obtaining a Self-Signed Certificate
To issue a certificate from a server computer set with a certificate service:
Install/set a certificate service on a server computer (Windows server operating system). For more information, see "Requesting/Issuing a Self-Signed Certificate."
To issue a certificate using the certificate issuing tool such as OpenSSL:
The procedure for issuing a certificate depends on the tool you are using. For more information, see the documentation/website for the tool you are using.
IMPORTANT
If you want to install a self-signed certificate, obtain a certificate encoded in Base 64.
Obtaining a Certificate Authorized by a Certificate Authority
The procedure for issuing a certificate differs according to the certificate authority. For more information, see the documentation/website for the certificate authority you are using.
NOTE
A payment is required to issue a certificate from a certificate authority.
Some certificate authorities may issue test certificates without requiring payment.

Installing a Certificate

The procedure for installing obtained certificate is as follows.
IMPORTANT
It is necessary to have an already-issued certificate before installing. For more information, see "Obtaining a Certificate."
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Administrative Tools] → [Internet Information Services (IIS) Manager] from the Start menu.
3.
In [Connections], click the localhost.
4.
Double-click [Server Certificates].
5.
Click [Complete Certificate Request] in [Actions].
6.
Import the issued certificate.
Select the issued certificate in [File name containing the certification authority's response].
Enter a friendly name in [Friendly name].
Click [OK].
7.
Enable communication with HTTPS in IIS settings.
Click [Default Web Site] for [Sites] in [Connections].
Select [Bindings] from [Edit Site] in [Actions].
Click [Add] in the [Site Bindings] dialog.
Select [https] from [Type] in the [Add Site Binding] dialog.
Select the friendly name specified in step 6 from [SSL certificate].
Click [OK].
NOTE
SSL communication is now possible. When installing iW Management Console (see "Installing iW Management Console"), you can select [Use SSL]. This enables you to perform SSL communications with pages that require security when using iW Management Console.
8.
Confirm that communications with HTTPS is enabled.
Start Web browser on a client computer → enter the following URL.
https:// <IP address or FQDN of server computer> /
Example:
https://172.23.2.138/
https://iwmc-server.organization.company.com/
IMPORTANT
For the URL, enter the same address as the common name specified when creating the certificate request file. For example, if you specify "iwmc-server.organization.company.com" for the common name, enter "https://iwmc-server.organization.company.com" as the URL.
NOTE
An FQDN (fully qualified domain name) is a domain name that includes the domain name, sub-domain name, and host name, with nothing omitted.
Click [OK] when the message <Accessing Secured Page> is displayed.
Click [OK] when the message <Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the site's security certificate.> is displayed.
NOTE
If you are using a self-signed certificate, and not using a certificate authenticated by a certificate authority, the message <The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority.> is displayed.

Requesting SSL Communications

This section describes the procedure for setting to use only SSL communications with IIS.
IMPORTANT
If you specify these settings, SSL communications are always used. Only specify these settings if you want to force SSL communications.
If you force SSL communications, some of the plug-ins of iW Management Console may not operate correctly. For more information, see the instruction manual for each plug-in.
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Administrative Tools] → [Internet Information Services (IIS) Manager] from the Start menu.
3.
Specify the security settings in IIS.
Click [Default Web Site] for [Sites] in [Connections].
Double-click [SSL Settings].
4.
Specify the SSL settings.
Select [Require SSL].
Select [Ignore] in [Client certificates].
Click [Apply] in [Actions].
5.
Restart IIS.
Click [Default Web Site] for [Sites] in [Connections].
Click [Restart] under [Manage Web Site] in [Actions].
6.
Confirm that HTTP communications may not be possible.
Start the Web browser on a client computer → enter the following URL.
http:// <IP address or FQDN of server computer> /
Example:
http://172.23.2.138/
http://iwmc-server.organization.company.com/
NOTE
An FQDN (fully qualified domain name) is a domain name that includes the domain name, sub-domain name, and host name, with nothing omitted.
Confirm that the page cannot be displayed or that the message <The page you are trying to access is secured with Secure Sockets Layer (SSL).> is displayed.

Checking the Windows Firewall Settings

If you want to use iW Management Console with Windows Firewall enabled, confirm the following:
The status of the firewall service is [Started]
The Windows Firewall function is enabled

Checking the Status of the Firewall Service

1.
Select [Administrative Tools] → [Services] from the Start menu.
2.
Check whether [Started] is displayed in [Status] for [Windows Firewall].
If [Started] is not displayed, right-click [Windows Firewall] and select [Start].

Checking the Windows Firewall Function Settings

1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Control Panel] → [Windows Firewall] from the Start menu.
3.
In the area on the left-hand, click [Turn Windows Firewall on or off].
4.
Check whether [On] is selected on the [General] sheet.
If [Off] is selected, select [On].
5.
Click [OK].

Windows 7

Confirming the Version of the Operating System

Before installing this software, confirm that Windows 7 has been updated to the latest version.
IMPORTANT
Regarding the service packs, apply the version described in "System Requirements."

Specifying the Computer Date and Time Settings

Specify the correct time zone and date and time settings for the computer in which to install iW Management Console.
1.
Select [Control Panel] → [Clock, Language, and Region] → [Date and Time] from the Start menu.
The [Date and Time] dialog box is displayed.
2.
Specify the correct time zone and date and time settings for the computer.
IMPORTANT
If you change the time zone or date and time settings of the computer after installing iW Management Console, iW Management Console will not operate correctly.

Checking the Installation Status of Components

Before installing iW Management Console, it is necessary to check whether the .NET Framework is enabled. Perform the procedure below to check whether it is enabled before proceeding to the procedure in "Operations Required Depending on Installation Status of Components."

Checking Whether the .NET Framework is Enabled

1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Control Panel] → [Programs] → [Programs and Features] from the Start menu.
3.
In [Tasks] on the left, click [Turn Windows features on or off].
The [Windows Features] dialog box is displayed.
4.
Check whether the [Microsoft .NET Framework <Version>] checkbox is filled.
If the [Microsoft .NET Framework <Version>] checkbox is filled, the .NET Framework is enabled.

Operations Required Depending on Installation Status of Components

Perform the operations indicated below according to the installation status of IIS and the .NET Framework.
Installation Status
Required Operations
If the .NET Framework is not enabled
Specify the IIS settings. Proceed to "Enabling IIS."
If the .NET Framework is enabled
After specifying the IIS settings, associate IIS and the .NET Framework.
For information on setting IIS, see "Enabling IIS." For information on associating IIS and the .NET Framework, see "Setting Associations between IIS and .NET Framework."

Enabling IIS

In order to use IIS in Windows 7, it is necessary to enable IIS.
1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Control Panel] → [Programs] → [Programs and Features] from the Start menu.
3.
In the area on the left-hand, click [Turn Windows features on or off].
The [Windows Features] dialog box is displayed.
4.
Enable IIS.
If [Internet Information Services] is not filled
Click [Internet Information Services] to make it filled.
IMPORTANT
If you click [Internet Information Services], several other items are automatically selected. Do not deselect these items, as they are required to operate iW Management Console.
Double-click [Internet Information Services] → [Web Management Tools] → [IIS 6 Management Compatibility].
Select [IIS Metabase and IIS 6 configuration compatibility].
Double-click [World Wide Web Services] → [Application Development Features].
Select [ASP.NET].
IMPORTANT
If you select [ASP.NET], several other items are automatically selected. Do not deselect these items, as they are required to operate iW Management Console.
If [Internet Information Services] is filled:
Check whether the items are selected as indicated in the following screen:
If the selected items differ to that of the above screen, change them to match the above screen.
If items other than those indicated above are selected, it is not necessary to change them.
5.
Click [OK].

SSL (Secure Sockets Layer) Settings

This section describes the procedure for setting to use SSL communication with iW Management Console. This operation is not required if you do not want to use SSL communication with iW Management Console.

Regarding SSL

HTTPS is used as the communications protocol to encrypt data transmitted between IIS and the Web browser. HTTPS is a communications protocol that includes SSL (Secure Sockets Layer) data encryption.
To use HTTPS to encrypt transmitted data, it is necessary to install a server certificate. There are two types of server certificates: certificates not issued by a certificate authority (self-signed certificates), and certificates that are issued by a certificate authority.
For more information on setting SSL, see the following:
References:
Creating a Certificate Request File
Obtaining a Certificate
Installing a Certificate
Requesting SSL Communications.
NOTE
Perform the following operations and settings on the computer in which you want to install iW Management Console.

Creating a Certificate Request File

To obtain a certificate, it is necessary to create a certificate request file and send it to a certificate authority.
This section describes the procedure for creating a certificate request file.
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Control Panel] → [System and Security] → [Administrative Tools] → [Internet Information Services (IIS) Manager] from the Start menu.
When the dialog box for confirming to continue the operation is displayed, click [Continue].
3.
Double-click [Server Certificates].
4.
Click [Create Certificate Request] in [Actions].
The [Request Certificate] dialog box is displayed.
5.
Specify the geographical information.
Enter a name for the certificate in [Common name].
NOTE
Enter the DNS name or NetBIOS name of the server for [Common name]. Enter the common name specified here as the URL when accessing the server from a Web browser.
For example, if you specify "iwmc-server.organization.company.com" for the common name, enter "https://iwmc-server.organization.company.com" as the URL when accessing the server from a Web browser.
Enter the organization in [Organization] → enter the organizational unit in [Organizational unit].
Specify the city/locality in [City/locality].
Specify the state/province in [State/province].
Specify the country/region in [Country/Region].
Click [Next].
6.
Setting the Cryptographic service.
Select [Cryptographic service provider].
Select [Bit length].
Click [Next].
7.
Specify the file name for the certificate request.
Enter the full path to the location you want to save the certificate request file.
Click [Finish].
The certificate request is created.

Obtaining a Certificate

To obtain a certificate, it is necessary to create a certificate request file, send it to a certificate authority, and download the issued certificate.
Reference:
Creating a Certificate Request File
There are two types of certificates: certificates not authorized by a certificate authority (self-signed certificate), and certificates authorized by a certificate authority.
Obtaining a Self-Signed Certificate
To issue a certificate from a server computer set with a certificate service:
Install/set a certificate service on a server computer (Windows server operating system). For more information, see "Requesting/Issuing a Self-Signed Certificate."
To issue a certificate using the certificate issuing tool such as OpenSSL:
The procedure for issuing a certificate depends on the tool you are using. For more information, see the documentation/website for the tool you are using.
IMPORTANT
If you want to install a self-signed certificate, obtain a certificate encoded in Base 64.
Obtaining a Certificate Authorized by a Certificate Authority
The procedure for issuing a certificate differs according to the certificate authority. For more information, see the documentation/website for the certificate authority you are using.
NOTE
A payment is required to issue a certificate from a certificate authority.
Some certificate authorities may issue test certificates without requiring payment.

Installing a Certificate

The procedure for installing obtained certificate is as follows.
IMPORTANT
It is necessary to have an already-issued certificate before installing. For more information, see "Obtaining a Certificate."
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Control Panel] → [System and Security] → [Administrative Tools] → [Internet Information Services (IIS) Manager] from the Start menu.
When the dialog box for confirming to continue the operation is displayed, click [Continue].
3.
Double-click [Server Certificates].
4.
Click [Complete Certificate Request] in [Actions].
5.
Import the issued certificate.
Select the issued certificate in [File name containing the certification authority's response].
Enter a friendly name in [Friendly name].
Click [OK].
6.
Enable communication with HTTPS in IIS settings.
Click [Default Web Site] for [Sites] in [Connections].
Select [Bindings] from [Edit Site] in [Actions].
Click [Add] in the [Site Bindings] dialog.
Select [https] from [Type] in the [Add Site Binding] dialog.
Select the friendly name specified in step 5 from [SSL certificate].
Click [OK].
NOTE
SSL communication is now possible. When installing iW Management Console (see "Installing iW Management Console"), you can select [Use SSL]. This enables you to perform SSL communications with pages that require security when using iW Management Console.
7.
Confirm that communications with HTTPS is enabled.
Start the Web browser on a client computer → enter the following URL.
https:// <IP address or FQDN of server computer> /
Example:
https://172.23.2.138/
https://iwmc-server.organization.company.com/
IMPORTANT
For the URL, enter the same address as the common name specified when creating the certificate request file. For example, if you specify "iwmc-server.organization.company.com" for the common name, enter "https://iwmc-server.organization.company.com" as the URL.
NOTE
An FQDN (fully qualified domain name) is a domain name that includes the domain name, sub-domain name, and host name, with nothing omitted.
Click [OK] when the message <Accessing Secured Page> is displayed.
Click [OK] when the message <Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the site's security certificate.> is displayed.
NOTE
If you are using a self-signed certificate, and not using a certificate authenticated by a certificate authority, the message <The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority.> is displayed.

Requesting SSL Communications

This section describes the procedure for setting to use only SSL communications with IIS.
IMPORTANT
If you specify these settings, SSL communications are always used. Only specify these settings if you want to force SSL communications.
If you force SSL communications, some of the plug-ins of iW Management Console may not operate correctly. For more information, see the instruction manual for each plug-in.
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Control Panel] → [System and Maintenance] → [Administrative Tools] → [Internet Information Services (IIS) Manager] from the Start menu.
When the dialog box for confirming to continue the operation is displayed, click [Continue].
3.
Specify the security settings in IIS.
Click [Default Web Site] for [Sites] in [Connections].
Double-click [SSL Settings].
4.
Specify the SSL settings.
Select [Require SSL].
Select [Ignore] in [Client certificates].
Click [Apply] in [Actions].
5.
Restart IIS.
Click [Default Web Site] for [Sites] in [Connections].
Click [Restart] in [Manage Web Site].
6.
Confirm that HTTP communications may not be possible.
Start the Web browser on a client computer → enter the following URL.
http:// <IP address or FQDN of server computer> /
Example:
http://172.23.2.138/
http://iwmc-server.organization.company.com/
NOTE
An FQDN (fully qualified domain name) is a domain name that includes the domain name, sub-domain name, and host name, with nothing omitted.
Confirm that the page cannot be displayed or that the message <The page you are trying to access is secured with Secure Sockets Layer (SSL).> is displayed.

Checking the Sleep Mode Settings of the Computer

The sleep mode is enabled in Windows 7 by default. If the server computer in which iW Management Console is installed enters the sleep mode, iW Management Console will not operate correctly.
1.
Check the sleep mode settings of the computer.
If the sleep mode is enabled, disable it.
For more information on disabling the function for entering the sleep mode, see the instruction manuals for Windows 7.

Checking the Windows Firewall Settings

If you want to use iW Management Console with Windows Firewall enabled, confirm the following:
The status of the firewall service is [Started]
The Windows Firewall function is enabled

Checking the Status of the Firewall Service

1.
Select [Control Panel] → [System and Security] → [Administrative Tools] → [Services] from the Start menu.
2.
Check whether [Started] is displayed in [Status] for [Windows Firewall].
If [Started] is not displayed, right-click [Windows Firewall] → select [Start].

Checking the Windows Firewall Function Settings

1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Control Panel] → [System and Security] → [Windows Firewall] from the Start menu.
3.
In the area on the left-hand, click [Turn Windows Firewall on or off].
4.
Check whether [Turn on Windows Firewall] is selected in [Home or work (private) network location settings] and [Public network location settings].
If [Turn off Windows Firewall (not recommended)] is selected, select [Turn on Windows Firewall].
5.
Click [OK].

Windows Server 2008 R2

Confirming the Version of the Operating System

Before installing this software, confirm that Windows Server 2008 R2 has been updated to the latest version.
IMPORTANT
Regarding the service packs, apply the version described in "System Requirements."

Specifying the Computer Date and Time Settings

Specify the correct time zone and date and time settings for the computer in which to install iW Management Console.
1.
Select [Control Panel] → [Clock, Language, and Region] → [Date and Time] from the Start menu.
The [Date and Time] dialog box is displayed.
2.
Specify the correct time zone and date and time settings for the computer.
IMPORTANT
If you change the time zone or date and time settings of the computer after installing iW Management Console, iW Management Console will not operate correctly.

Checking the Installation Status of Components

Before installing iW Management Console, it is necessary to check whether the .NET Framework is enabled. If you are not sure whether it is enabled, perform the procedure below to check whether it is enabled before proceeding to the procedure in "Operations Required Depending on Installation Status of Components."

Checking Whether the .NET Framework is Enabled

1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Administrative Tools] → [Server Manager] from the Start menu.
The [Server Manager] is displayed.
3.
Click [Features].
If [.NET Framework <Version>] is displayed in [Features Summary], the .NET Framework is enabled.

Operations Required Depending on Installation Status of Components

Perform the operations indicated below according to the installation status of IIS and the .NET Framework.
Installation Status
Required Operations
If the .NET Framework is not enabled
Specify the IIS settings. Proceed to "Enabling IIS."
If the .NET Framework is enabled
After specifying the IIS settings, associate IIS and the .NET Framework.
For information on setting IIS, see "Enabling IIS." For information on associating IIS and the .NET Framework, see "Setting Associations between IIS and .NET Framework."

Enabling IIS

In order to use IIS in Windows Sever 2008 R2, it is necessary to enable IIS.
1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Administrative Tools] → [Server Manager] from the Start menu.
The [Server Manager] is displayed.
3.
Click [Add Roles] in [Roles Summary].
NOTE
If [Web Server (IIS)] is displayed in [Roles Summary], IIS is enabled. Refer to "Confirming the Role Services of IIS" and check the installation status of role services.
The [Add Roles Wizard] is displayed.
4.
Click [Next].
5.
Select [Web Server (IIS)] → click [Next].
If a dialog box to confirm whether to install the required features to Web Server (IIS) is displayed, click [Add Required Role Services].
6.
Click [Next].
7.
Select [ASP.NET] and [IIS6 Metabase Compatibility] → click [Next].
IMPORTANT
If you click [ASP.NET], a dialog box to confirm whether to add the required role services and features is displayed. Click [Add Required Role Services]. Do not deselect these items, as they are required to operate iW Management Console.
8.
Click [Install].
Installation starts.
9.
Click [Close].

Confirming the Role Services of IIS

Confirm whether the role services of IIS that are required to operate iW Management Console are installed.
1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Administrative Tools] → [Server Manager] from the Start menu.
The [Server Manager] is displayed.
3.
Click [Web Server (IIS)] in [Roles Summary].
4.
In [Role Services], confirm the installation status of role services is as indicated below:
If the required role services are not installed, add them.
5.
Click [Add Role Services].
The [Add Role Services] dialog box is displayed.
6.
Select the required role services → click [Next].
7.
Confirm the contents of the installation → click [Install].
Installation starts.
8.
Click [Close].
Check the installation status of role services again in [Server Manager].

SSL (Secure Sockets Layer) Settings

This section describes the procedure for setting to use SSL communication with iW Management Console. This operation is not required if you do not want to use SSL communication with iW Management Console.

Regarding SSL

HTTPS is used as the communications protocol to encrypt data transmitted between IIS and the Web browser. HTTPS is a communications protocol that includes SSL (Secure Sockets Layer) data encryption.
To use HTTPS to encrypt transmitted data, it is necessary to install a server certificate. There are two types of server certificates: certificates not issued by a certificate authority (self-signed certificates), and certificates that are issued by a certificate authority.
For more information on setting SSL, see the following:
References:
Creating a Certificate Request File
Obtaining a Certificate
Installing a Certificate
Requesting SSL Communications
NOTE
Perform the following operations and settings on the computer in which you want to install iW Management Console.

Creating a Certificate Request File

To obtain a certificate, it is necessary to create a certificate request file and send it to a certificate authority.
This section describes the procedure for creating a certificate request file.
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Administrative Tools] → [Internet Information Services (IIS) Manager] from the Start menu.
3.
In [Connections], click the localhost.
4.
Double-click [Server Certificates].
5.
Click [Create Certificate Request] in [Actions].
6.
Specify the geographical information.
Enter a name for the certificate in [Common name].
NOTE
Enter the DNS name or NetBIOS name of the server for [Common name]. Enter the common name specified here as the URL when accessing the server from a Web browser.
For example, if you specify "iwmc-server.organization.company.com" for the common name, enter "https://iwmc-server.organization.company.com" as the URL when accessing the server from a Web browser.
Enter the organization in [Organization] → enter the organizational unit in [Organizational unit].
Specify the city/locality in [City/locality].
Specify the state/province in [State/province].
Specify the country/region in [Country/Region].
Click [Next].
7.
Setting the Cryptographic service.
Select [Cryptographic service provider].
Select [Bit length].
Click [Next].
8.
Specify the file name for the certificate request.
Enter the full path to the location you want to save the certificate request file.
Click [Finish].
The certificate request is created.

Obtaining a Certificate

To obtain a certificate, it is necessary to create a certificate request file, send it to a certificate authority, and download the issued certificate.
Reference:
Creating a Certificate Request File
There are two types of certificates: certificates not authorized by a certificate authority (self-signed certificate), and certificates authorized by a certificate authority.
Obtaining a Self-Signed Certificate
To issue a certificate from a server computer set with a certificate service:
Install/set a certificate service on a server computer (Windows server operating system). For more information, see "Requesting/Issuing a Self-Signed Certificate."
To issue a certificate using the certificate issuing tool such as OpenSSL:
The procedure for issuing a certificate depends on the tool you are using. For more information, see the documentation/website for the tool you are using.
IMPORTANT
If you want to install a self-signed certificate, obtain a certificate encoded in Base 64.
Obtaining a Certificate Authorized by a Certificate Authority
The procedure for issuing a certificate differs according to the certificate authority. For more information, see the documentation/website for the certificate authority you are using.
NOTE
A payment is required to issue a certificate from a certificate authority.
Some certificate authorities may issue test certificates without requiring payment.

Installing a Certificate

The procedure for installing obtained certificate is as follows.
IMPORTANT
It is necessary to have an already-issued certificate before installing. For more information, see "Obtaining a Certificate."
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Administrative Tools] → [Internet Information Services (IIS) Manager] from the Start menu.
3.
In [Connections], click the localhost.
4.
Double-click [Server Certificates].
5.
Click [Complete Certificate Request] in [Actions].
6.
Import the issued certificate.
Select the issued certificate in [File name containing the certification authority's response].
Enter a friendly name in [Friendly name].
Click [OK].
7.
Enable communication with HTTPS in IIS settings.
Click [Default Web Site] for [Sites] in [Connections].
Select [Bindings] from [Edit Site] in [Actions].
Click [Add] in the [Site Bindings] dialog.
Select [https] from [Type] in the [Add Site Binding] dialog.
Select the friendly name specified in step 6 from [SSL certificate].
Click [OK].
NOTE
SSL communication is now possible. When installing iW Management Console (see "Installing iW Management Console"), you can select [Use SSL]. This enables you to perform SSL communications with pages that require security when using iW Management Console.
8.
Confirm that communications with HTTPS is enabled.
Start Web browser on a client computer → enter the following URL.
https:// <IP address or FQDN of server computer> /
Example:
https://172.23.2.138/
https://iwmc-server.organization.company.com/
IMPORTANT
For the URL, enter the same address as the common name specified when creating the certificate request file. For example, if you specify "iwmc-server.organization.company.com" for the common name, enter "https://iwmc-server.organization.company.com" as the URL.
NOTE
An FQDN (fully qualified domain name) is a domain name that includes the domain name, sub-domain name, and host name, with nothing omitted.
Click [OK] when the message <Accessing Secured Page> is displayed.
Click [OK] when the message <Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the site's security certificate.> is displayed.
NOTE
If you are using a self-signed certificate, and not using a certificate authenticated by a certificate authority, the message <The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority.> is displayed.

Requesting SSL Communications

This section describes the procedure for setting to use only SSL communications with IIS.
IMPORTANT
If you specify these settings, SSL communications are always used. Only specify these settings if you want to force SSL communications.
If you force SSL communications, some of the plug-ins of iW Management Console may not operate correctly. For more information, see the instruction manual for each plug-in.
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Administrative Tools] → [Internet Information Services (IIS) Manager] from the Start menu.
3.
Specify the security settings in IIS.
Click [Default Web Site] for [Sites] in [Connections].
Double-click [SSL Settings].
4.
Specify the SSL settings.
Select [Require SSL].
Select [Ignore] in [Client certificates].
Click [Apply] in [Actions].
5.
Restart IIS.
Click [Default Web Site] for [Sites] in [Connections].
Click [Restart] under [Manage Web Site] in [Actions].
6.
Confirm that HTTP communications may not be possible.
Start the Web browser on a client computer → enter the following URL.
http:// <IP address or FQDN of server computer> /
Example:
http://172.23.2.138/
http://iwmc-server.organization.company.com/
NOTE
An FQDN (fully qualified domain name) is a domain name that includes the domain name, sub-domain name, and host name, with nothing omitted.
Confirm that the page cannot be displayed or that the message <The page you are trying to access is secured with Secure Sockets Layer (SSL).> is displayed.

Checking the Windows Firewall Settings

If you want to use iW Management Console with Windows Firewall enabled, confirm the following:
The status of the firewall service is [Started]
The Windows Firewall function is enabled

Checking the Status of the Firewall Service

1.
Select [Administrative Tools] → [Services] from the Start menu.
2.
Check whether [Started] is displayed in [Status] for [Windows Firewall].
If [Started] is not displayed, right-click [Windows Firewall] and select [Start].

Checking the Windows Firewall Function Settings

1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Control Panel] → [System and Security] → [Windows Firewall] from the Start menu.
3.
In the area on the left-hand, click [Turn Windows Firewall on or off].
4.
Check whether [Turn on Windows Firewall] is selected in [Home or work (private) network location settings] and [Public network location settings].
If [Turn off Windows Firewall (not recommended)] is selected, select [Turn on Windows Firewall].
5.
Click [OK].

Windows 8

Confirming the Version of the Operating System

Before installing this software, confirm that Windows 8 has been updated to the latest version.
IMPORTANT
Regarding the service packs, apply the version described in "System Requirements."

Specifying the Computer Date and Time Settings

Specify the correct time zone and date and time settings for the computer in which to install iW Management Console.
1.
Select [Date and Time] from [Control Panel].
The [Date and Time] dialog box is displayed.
2.
Specify the correct time zone and date and time settings for the computer.
IMPORTANT
If you change the time zone or date and time settings of the computer after installing iW Management Console, iW Management Console will not operate correctly.

Checking the Installation Status of Components

Before installing iW Management Console, it is necessary to check whether the .NET Framework is enabled. Perform the procedure below to check whether it is enabled before proceeding to the procedure in "Operations Required Depending on Installation Status of Components."

Checking Whether the .NET Framework is Enabled

1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Programs and Features] from [Control Panel].
3.
In [Tasks] on the left, click [Turn Windows features on or off].
The [Windows Features] dialog box is displayed.
4.
Check whether the .NET Framework checkbox is filled.
If the checkboxes for versions other than version 4.x are selected, the .NET Framework is enabled.

Operations Required Depending on Installation Status of Components

Perform the operations indicated below according to the installation status of the .NET Framework.
Installation Status
Required Operations
If the .NET Framework is not enabled
Specify the IIS settings. Proceed to "Confirming IIS Settings."
If the .NET Framework is enabled
After specifying the IIS settings, associate IIS and the .NET Framework.
For information on setting IIS, see "Confirming IIS Settings." For information on associating IIS and the .NET Framework, see "Setting Associations between IIS and .NET Framework."

Confirming IIS Settings

To install iW Management Console, it is necessary to enable IIS in the Windows settings.
1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Programs and Features] from [Control Panel].
3.
In the area on the left-hand, click [Turn Windows features on or off].
The [Windows Features] dialog box is displayed.
4.
Enable IIS.
If [Internet Information Services] is not filled
Click [Internet Information Services] to make it filled.
IMPORTANT
If you click [Internet Information Services], several other items are automatically selected. Do not deselect these items, as they are required to operate iW Management Console.
Double-click [Internet Information Services] → [Web Management Tools] → [IIS 6 Management Compatibility].
Select [IIS Metabase and IIS 6 configuration compatibility].
Double-click [World Wide Web Services] → [Application Development Features].
Select [ASP.NET 3.5].
IMPORTANT
If you select [ASP.NET 3.5], several other items are automatically selected. Do not deselect these items, as they are required to operate iW Management Console.
If [Internet Information Services] is filled:
Check whether the items are selected as indicated in the following screen:
If the selected items differ to that of the above screen, change them to match the above screen.
If items other than those indicated above are selected, it is not necessary to change them.
5.
Click [OK].
IMPORTANT
.NET Framework will be enabled when IIS is enabled. When IIS is enabled, the computer automatically connects to the Microsoft Web site. If you do not have access to the internet, this installation can be performed from the Windows 8 installation media. For more information, see the Microsoft support page.

SSL (Secure Sockets Layer) Settings

This section describes the procedure for setting to use SSL communication with iW Management Console. This operation is not required if you do not want to use SSL communication with iW Management Console.

Regarding SSL

HTTPS is used as the communications protocol to encrypt data transmitted between IIS and the Web browser. HTTPS is a communications protocol that includes SSL (Secure Sockets Layer) data encryption.
To use HTTPS to encrypt transmitted data, it is necessary to install a server certificate. There are two types of server certificates: certificates not issued by a certificate authority (self-signed certificates), and certificates that are issued by a certificate authority.
For more information on setting SSL, see the following:
References:
Creating a Certificate Request File
Obtaining a Certificate
Installing a Certificate
Requesting SSL Communications
NOTE
Perform the following operations and settings on the computer in which you want to install iW Management Console.

Creating a Certificate Request File

To obtain a certificate, it is necessary to create a certificate request file and send it to a certificate authority.
This section describes the procedure for creating a certificate request file.
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Administrative Tools] from [Control Panel].
Select [Internet Information Services (IIS) Manager].
When the dialog box for confirming to continue the operation is displayed, click [Continue].
3.
Double-click [Server Certificates].
4.
Click [Create Certificate Request] in [Actions].
The [Request Certificate] dialog box is displayed.
5.
Specify the geographical information.
Enter a name for the certificate in [Common name].
NOTE
Enter the DNS name or NetBIOS name of the server for [Common name]. Enter the common name specified here as the URL when accessing the server from a Web browser.
For example, if you specify "iwmc-server.organization.company.com" for the common name, enter "https://iwmc-server.organization.company.com" as the URL when accessing the server from a Web browser.
Enter the organization in [Organization] → enter the organizational unit in [Organizational unit].
Specify the city/locality in [City/locality].
Specify the state/province in [State/province].
Specify the country/region in [Country/region].
Click [Next].
6.
Setting the Cryptographic service.
Select [Cryptographic service provider].
Select [Bit length].
Click [Next].
7.
Specify the file name for the certificate request.
Enter the full path to the location you want to save the certificate request file.
Click [Finish].
The certificate request is created.

Obtaining a Certificate

To obtain a certificate, it is necessary to create a certificate request file, send it to a certificate authority, and download the issued certificate.
Reference:
Creating a Certificate Request File
There are two types of certificates: certificates not authorized by a certificate authority (self-signed certificate), and certificates authorized by a certificate authority.
Obtaining a Self-Signed Certificate
To issue a certificate from a server computer set with a certificate service:
Install/set a certificate service on a server computer (Windows server operating system). For more information, see "Requesting/Issuing a Self-Signed Certificate."
To issue a certificate using the certificate issuing tool such as OpenSSL:
The procedure for issuing a certificate depends on the tool you are using. For more information, see the documentation/website for the tool you are using.
IMPORTANT
If you want to install a self-signed certificate, obtain a certificate encoded in Base 64.
Obtaining a Certificate Authorized by a Certificate Authority
The procedure for issuing a certificate differs according to the certificate authority. For more information, see the documentation/website for the certificate authority you are using.
NOTE
A payment is required to issue a certificate from a certificate authority.
Some certificate authorities may issue test certificates without requiring payment.

Installing a Certificate

The procedure for installing obtained certificate is as follows.
IMPORTANT
It is necessary to have an already-issued certificate before installing. For more information, see "Obtaining a Certificate."
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Administrative Tools] from [Control Panel].
Select [Internet Information Services (IIS) Manager].
When the dialog box for confirming to continue the operation is displayed, click [Continue].
3.
Double-click [Server Certificates].
4.
Click [Complete Certificate Request] in [Actions].
5.
Import the issued certificate.
Select the issued certificate in [File name containing the certification authority's response].
Enter a friendly name in [Friendly name].
Click [OK].
The certificate is installed.
6.
Enable communication with HTTPS in IIS settings.
Click [Default Web Site] for [Sites] in [Connections].
Select [Bindings] from [Edit Site] in [Actions].
Click [Add] in the [Site Bindings] dialog.
Select [https] from [Type] in the [Add Site Binding] dialog.
Select the friendly name specified in step 5 from [SSL certificate].
Click [OK].
NOTE
SSL communication is now possible. When installing iW Management Console (see "Installing iW Management Console"), you can select [Use SSL]. This enables you to perform SSL communications with pages that require security when using iW Management Console.
7.
Confirm that communications with HTTPS is enabled.
Start Web browser on a client computer → enter the following URL.
https:// <IP address or FQDN of server computer> /
Example:
https://172.23.2.138/
https://iwmc-server.organization.company.com/
IMPORTANT
For the URL, enter the same address as the common name specified when creating the certificate request file. For example, if you specify "iwmc-server.organization.company.com" for the common name, enter "https://iwmc-server.organization.company.com" as the URL.
NOTE
An FQDN (fully qualified domain name) is a domain name that includes the domain name, sub-domain name, and host name, with nothing omitted.
Click [OK] when the message <Accessing Secured Page> is displayed.
Click [OK] when the message <Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the site's security certificate.> is displayed.
NOTE
If you are using a self-signed certificate, and not using a certificate authenticated by a certificate authority, the message <The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority.> is displayed.

Requesting SSL Communications

This section describes the procedure for setting to use only SSL communications with IIS.
IMPORTANT
If you specify these settings, SSL communications are always used. Only specify these settings if you want to force SSL communications.
If you force SSL communications, some of the plug-ins of iW Management Console may not operate correctly. For more information, see the instruction manual for each plug-in.
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Administrative Tools] from [Control Panel].
Select [Internet Information Services (IIS) Manager].
When the dialog box for confirming to continue the operation is displayed, click [Continue].
3.
Specify the security settings in IIS.
Click [Default Web Site] for [Sites] in [Connections].
Double-click [SSL Settings].
4.
Specify the SSL settings.
Select [Require SSL].
Select [Ignore] in [Client certificates].
Click [Apply] in [Actions].
5.
Restart IIS.
Click [Default Web Site] for [Sites] in [Connections].
Click [Restart] in [Manage Web Site].
6.
Confirm that HTTP communications may not be possible.
Start the Web browser on a client computer → enter the following URL.
http:// <IP address or FQDN of server computer> /
Example:
http://172.23.2.138/
http://iwmc-server.organization.company.com/
NOTE
An FQDN (fully qualified domain name) is a domain name that includes the domain name, sub-domain name, and host name, with nothing omitted.
Confirm that the page cannot be displayed or that the message <The page you are trying to access is secured with Secure Sockets Layer (SSL).> is displayed.

Checking the Sleep Mode Settings of the Computer

The sleep mode is enabled in Windows 8 by default. If the server computer in which iW Management Console is installed enters the sleep mode, iW Management Console will not operate correctly.
1.
Check the sleep mode settings of the computer.
If the sleep mode is enabled, disable it.
For more information on disabling the function for entering the sleep mode, see the instruction manuals for Windows 8.

Checking the Windows Firewall Settings

If you want to use iW Management Console with Windows Firewall enabled, confirm the following:
The status of the firewall service is [Running]
The Windows Firewall function is enabled

Checking the Status of the Firewall Service

1.
Display the administration screen for the services.
Select [Administrative Tools] from [Control Panel].
Select [Services].
2.
Check whether [Running] is displayed in [Status] for [Windows Firewall].
If [Running] is not displayed, right-click [Windows Firewall] → select [Start].

Checking the Windows Firewall Function Settings

1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Windows Firewall] from [Control Panel].
3.
In the area on the left-hand, click [Turn Windows Firewall on or off].
4.
Check whether [Turn on Windows Firewall] is selected in [Private network settings] and [Public network settings].
If [Turn off Windows Firewall (not recommended)] is selected, select [Turn on Windows Firewall].
5.
Click [OK].

Windows Server 2012

Confirming the Version of the Operating System

Before installing this software, confirm that Windows Server 2012 has been updated to the latest version.
IMPORTANT
Regarding the service packs, apply the version described in "System Requirements."

Specifying the Computer Date and Time Settings

Specify the correct time zone and date and time settings for the computer in which to install iW Management Console.
1.
Select [Date and Time] from [Control Panel].
The [Date and Time] dialog box is displayed.
2.
Specify the correct time zone and date and time settings for the computer.
IMPORTANT
If you change the time zone or date and time settings of the computer after installing iW Management Console, iW Management Console will not operate correctly.

Checking the Installation Status of Components

Before installing iW Management Console, it is necessary to check whether the .NET Framework is enabled. If you are not sure whether it is enabled, perform the procedure below to check whether it is enabled before proceeding to the procedure in "Operations Required Depending on Installation Status of Components."

Checking Whether the .NET Framework is Enabled

1.
Log on to the computer as a user with Administrator privileges.
2.
Execute [Server Manager].
The [Server Manager] is displayed.
3.
Click [Local Server] on the left side.
If [.NET Framework 3.5 (includes .NET 2.0 and 3.0)] is displayed in [ROLES AND FEATURES], the .NET Framework is enabled.

Operations Required Depending on Installation Status of Components

Perform the operations indicated below according to the installation status of the .NET Framework.
Installation Status
Required Operations
If the .NET Framework is not enabled
Specify the IIS settings. Proceed to "Confirming IIS Settings."
If the .NET Framework is enabled
After specifying the IIS settings, associate IIS and the .NET Framework.
For information on setting IIS, see "Confirming IIS Settings." For information on associating IIS and the .NET Framework, see "Setting Associations between IIS and .NET Framework."

Confirming IIS Settings

To install iW Management Console, it is necessary to enable IIS and set role services for IIS.
1.
Log on to the computer as a user with Administrator privileges.
2.
Execute [Server Manager].
The [Server Manager] is displayed.
3.
Select [Add Roles and Features] from the [Manage] menu on the upper-right.
NOTE
If [IIS] is displayed on the left side, IIS is enabled. Refer to "Confirming the Role Services of IIS" and check the installation status of role services.
The [Add Roles and Features Wizard] is displayed.
4.
Click [Next].
5.
Select [Role-based or feature-based installation] → click [Next].
6.
Select [Select a server from the server pool] → click [Next].
7.
Select [Web server (IIS)] → click [Next].
If a dialog box asking you to confirm whether to install required features for Web server (IIS) is displayed, click [Add Features].
8.
Click [Next] until [Role Service] is displayed.
9.
Select the following items → click [Next].
Double-click [Web Server] in the role services tree.
Double-click [Management Tools] - [IIS 6 Management Compatibility], and then select [IIS 6 Metabase Compatibility].
Double-click [Application Development] → select [ASP.NET 3.5].
IMPORTANT
If you click [ASP.NET 3.5], a dialog box to confirm whether to add the required role services and features is displayed. Click [Add Features]. .NET Framework is now enabled. Do not deselect these items, as they are required to operate iW Management Console.
Confirm that the selection status of the items is the same as that below.
If items other than the ones below are selected, you do not need to change the selection status of these items.
10.
Confirm the features to be added in [Confirm installation selections].
If .NET Framework has not been enabled, installing IIS will enable .NET Framework. Click [Specify an alternate source path], and specify the 'sources\sxs' folder in the Windows Server 2012 installation media.
11.
Click [Install].
Installation starts.
12.
Click [Close].

Confirming the Role Services of IIS

Confirm whether the role services of IIS that are required to operate iW Management Console are installed.
1.
Log on to the computer as a user with Administrator privileges.
2.
Execute [Server Manager].
The [Server Manager] is displayed.
3.
Click [IIS] on the left side.
4.
In [ROLES AND FEATURES], confirm that the installation status of role services is as indicated below.
If the required role services are not installed, add them.
5.
Click [Add Roles and Features] in [Tasks].
[Add Roles and Features Wizard] is displayed.
6.
Click [Next] until [Select server roles] is displayed.
7.
Select the features that to add, and click [Next] until [Confirm installation selections] is displayed.
8.
Confirm the features to be added in [Confirm installation selections].
If .NET Framework has not been enabled, installing IIS will enable .NET Framework. Click [Specify an alternate source path], and specify the 'sources\sxs' folder in the Windows Server 2012 installation media.
9.
Click [Install].
Installation starts.
10.
Click [Close].
Re-check the installation status of the role services in [Server Manager].

SSL (Secure Sockets Layer) Settings

This section describes the procedure for setting to use SSL communication with iW Management Console. This operation is not required if you do not want to use SSL communication with iW Management Console.

Regarding SSL

HTTPS is used as the communications protocol to encrypt data transmitted between IIS and the Web browser. HTTPS is a communications protocol that includes SSL (Secure Sockets Layer) data encryption.
To use HTTPS to encrypt transmitted data, it is necessary to install a server certificate. There are two types of server certificates: certificates not issued by a certificate authority (self-signed certificates), and certificates that are issued by a certificate authority.
For more information on setting SSL, see the following:
References:
Creating a Certificate Request File
Obtaining a Certificate
Installing a Certificate
Requesting SSL Communications
NOTE
Perform the following operations and settings on the computer in which you want to install iW Management Console.

Creating a Certificate Request File

To obtain a certificate, it is necessary to create a certificate request file and send it to a certificate authority.
This section describes the procedure for creating a certificate request file.
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Administrative Tools] from [Control Panel].
Select [Internet Information Services (IIS) Manager].
When the dialog box for confirming to continue the operation is displayed, click [Continue].
3.
In [Connections], click the localhost.
4.
Double-click [Server Certificates].
5.
Click [Create Certificate Request] in [Actions].
6.
Specify the geographical information.
Enter a name for the certificate in [Common name].
NOTE
Enter the DNS name or NetBIOS name of the server for [Common name]. Enter the common name specified here as the URL when accessing the server from a Web browser.
For example, if you specify "iwmc-server.organization.company.com" for the common name, enter "https://iwmc-server.organization.company.com" as the URL when accessing the server from a Web browser.
Enter the organization in [Organization] → enter the organizational unit in [Organizational unit].
Specify the city/locality in [City/locality].
Specify the state/province in [State/province].
Specify the country/region in [Country/Region].
Click [Next].
7.
Setting the Cryptographic service.
Select [Cryptographic service provider].
Select [Bit length].
Click [Next].
8.
Specify the file name for the certificate request.
Enter the full path to the location you want to save the certificate request file.
Click [Finish].
The certificate request is created.

Obtaining a Certificate

To obtain a certificate, it is necessary to create a certificate request file, send it to a certificate authority, and download the issued certificate.
Reference:
Creating a Certificate Request File
There are two types of certificates: certificates not authorized by a certificate authority (self-signed certificate), and certificates authorized by a certificate authority.
Obtaining a Self-Signed Certificate
To issue a certificate from a server computer set with a certificate service:
Install/set a certificate service on a server computer (Windows server operating system). For more information, see "Requesting/Issuing a Self-Signed Certificate."
To issue a certificate using the certificate issuing tool such as OpenSSL:
The procedure for issuing a certificate depends on the tool you are using. For more information, see the documentation/website for the tool you are using.
IMPORTANT
If you want to install a self-signed certificate, obtain a certificate encoded in Base 64.
Obtaining a Certificate Authorized by a Certificate Authority
The procedure for issuing a certificate differs according to the certificate authority. For more information, see the documentation/website for the certificate authority you are using.
NOTE
A payment is required to issue a certificate from a certificate authority.
Some certificate authorities may issue test certificates without requiring payment.

Installing a Certificate

The procedure for installing obtained certificate is as follows.
IMPORTANT
It is necessary to have an already-issued certificate before installing. For more information, see "Obtaining a Certificate."
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Administrative Tools] from [Control Panel].
Select [Internet Information Services (IIS) Manager].
When the dialog box for confirming to continue the operation is displayed, click [Continue].
3.
In [Connections], click the localhost.
4.
Double-click [Server Certificates].
5.
Click [Complete Certificate Request] in [Actions].
6.
Import the issued certificate.
Select the issued certificate in [File name containing the certification authority's response].
Enter a friendly name in [Friendly name].
Click [OK].
7.
Enable communication with HTTPS in IIS settings.
Click [Default Web Site] for [Sites] in [Connections].
Select [Bindings] from [Edit Site] in [Actions].
Click [Add] in the [Site Bindings] dialog.
Select [https] from [Type] in the [Add Site Binding] dialog.
Select the friendly name specified in step 6 from [SSL certificate].
Click [OK].
NOTE
SSL communication is now possible. When installing iW Management Console (see "Installing iW Management Console"), you can select [Use SSL]. This enables you to perform SSL communications with pages that require security when using iW Management Console.
8.
Confirm that communications with HTTPS is enabled.
Start Web browser on a client computer → enter the following URL.
https:// <IP address or FQDN of server computer> /
Example:
https://172.23.2.138/
https://iwmc-server.organization.company.com/
IMPORTANT
For the URL, enter the same address as the common name specified when creating the certificate request file. For example, if you specify "iwmc-server.organization.company.com" for the common name, enter "https://iwmc-server.organization.company.com" as the URL.
NOTE
An FQDN (fully qualified domain name) is a domain name that includes the domain name, sub-domain name, and host name, with nothing omitted.
Click [OK] when the message <Accessing Secured Page> is displayed.
Click [OK] when the message <Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the site's security certificate.> is displayed.
NOTE
If you are using a self-signed certificate, and not using a certificate authenticated by a certificate authority, the message <The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority.> is displayed.

Requesting SSL Communications

This section describes the procedure for setting to use only SSL communications with IIS.
IMPORTANT
If you specify these settings, SSL communications are always used. Only specify these settings if you want to force SSL communications.
If you force SSL communications, some of the plug-ins of iW Management Console may not operate correctly. For more information, see the instruction manual for each plug-in.
1.
Log on to the computer as a user with Administrator privileges.
2.
Display the IIS management screen.
Select [Administrative Tools] from [Control Panel].
Select [Internet Information Services (IIS) Manager].
When the dialog box for confirming to continue the operation is displayed, click [Continue].
3.
Specify the security settings in IIS.
Click [Default Web Site] for [Sites] in [Connections].
Double-click [SSL Settings].
4.
Specify the SSL settings.
Select [Require SSL].
Select [Ignore] in [Client certificates].
Click [Apply] in [Actions].
5.
Restart IIS.
Click [Default Web Site] for [Sites] in [Connections].
Click [Restart] under [Manage Web Site] in [Actions].
6.
Confirm that HTTP communications may not be possible.
Start the Web browser on a client computer → enter the following URL.
http:// <IP address or FQDN of server computer> /
Example:
http://172.23.2.138/
http://iwmc-server.organization.company.com/
NOTE
An FQDN (fully qualified domain name) is a domain name that includes the domain name, sub-domain name, and host name, with nothing omitted.
Confirm that the page cannot be displayed or that the message <The page you are trying to access is secured with Secure Sockets Layer (SSL).> is displayed.

Checking the Windows Firewall Settings

If you want to use iW Management Console with Windows Firewall enabled, confirm the following:
The status of the firewall service is [Running]
The Windows Firewall function is enabled

Checking the Status of the Firewall Service

1.
Display the administration screen for the services.
Select [Administrative Tools] from [Control Panel].
Select [Services].
2.
Check whether [Running] is displayed in [Status] for [Windows Firewall].
If [Running] is not displayed, right-click [Windows Firewall] and select [Start].

Checking the Windows Firewall Function Settings

1.
Log on to the computer as a user with Administrator privileges.
2.
Select [Windows Firewall] from [Control Panel].
3.
In the area on the left-hand, click [Turn Windows Firewall on or off].
4.
Check whether [Turn on Windows Firewall] is selected in [Private network settings] and [Public network settings].
If [Turn off Windows Firewall (not recommended)] is selected, select [Turn on Windows Firewall].
5.
Click [OK].