============================================================================================== Windows NT 4.0 Option Pack Sample Site - Exploration Air October 1997 ============================================================================================== **************************************** *** *** *** Please Read This Entire Document *** *** *** **************************************** ************ * Contents * ************ Overview Requirements Windows NT 4.0 Option Pack for Windows NT 4.0 Workstation Setup Using Exploration Air Behind the Scenes Release Notes ************ * Overview * ************ The Windows NT 4.0 Option Pack includes a sample Web site called Exploration Air -- a fictitious airline company. The purpose of this sample site is to demonstrate the use of the Windows NT 4.0 Option Pack to build rich and dynamic Web applications using a wide range of development tools. Please be aware that this sample site is for demonstration purposes only. Some of the practices and procedures found herein are not recommended for actual production sites. In addition, this site is not officially supported by Microsoft or any party therein. **************** * Requirements * **************** The Exploration Air sample site uses a variety of technologies found in the Windows NT 4.0 Option Pack. Some of these options are not included in the Typical install, such as the sample site. If you installed the Windows NT 4.0 Option Pack without some of these options, you can run setup again and add anything you are missing. To see all the features of Exploration Air, make sure you have all of the following installed: Required (a majority of the site will be non-functional if these components are not installed): * Microsoft Internet Explorer (IE) 4.0 (release version) * Microsoft SQL Server 6.5 SP3 * Microsoft Windows NT Option Pack with the following installed: + Microsoft Internet Information Server (IIS) 4.0 + Microsoft Data Access Components 1.5 + Microsoft Transaction Server + Microsoft Management Console Recommended (a small area of the site will be unavailable if these components are not installed): * Microsoft Windows NT Option Pack with the following installed: + Microsoft Internet Information Server (IIS) 4.0 SDK (under IIS | Documentation) - unable to view the Fun 'n' Games page + Certificate Server - unable to use Secure Sockets (HTTPS) for certain areas of the site unless you have a server certificate from a trusted authority such as Verisign, GTE etc. + Index Server - unable to search the site + Posting Acceptor Component (under Site Server Express 2.0) - unable to conduct a file upload to the sample site + Remote Data Service 1.5 (RDS) - unable to view RDS version of some pages in Benefits Optional: * Page Counter Component - unable to see the Page Counter on the default page (this component can be downloaded from the Microsoft home page: http://www.microsoft.com/iis) ************************************************************* * Windows NT 4.0 Option Pack for Windows NT 4.0 Workstation * ************************************************************* The Windows NT 4.0 Option Pack for Windows NT 4.0 Workstation also comes with the Exploration Air sample site. The sample site, however, requires some components that do not ship with Windows NT 4.0 Option Pack for Windows NT 4.0 Workstation. These components are: * Certificate Server - unable to use Secure Sockets (HTTPS) for certain areas of the site * Index Server - unable to search the site * Posting Acceptor Component - unable to conduct file upload to the sample site ********* * Setup * ********* Please follow these steps to setup the Exploration Air sample site. Required: 1) Run the BuildExAir.cmd file in the ...\IISSamples\ExAir\Source\SQL directory. This script builds the SQL Server database for the Exploration Air sample site. The syntax is: BuildExAir.cmd [-S:server] [-U:loginID] [-P:password] [-D:dir] where [server] is name of the server where SQL Server resides [login ID] is the SQL Server admin login (default is 'sa') [password] is the admin login password (default is no password) [dir] is the location of SQL Server (default is 'c:\mssql') Recommended: 2) If you have the IIS 4.0 SDK installed, copy the .class files from the Java Component Framework directory in the SDK (...\IISSamples\SDK\components\java\Framework) to the %SystemRoot%\Java\TrustLib\AspComp directory (you may have to create the AspComp directory). 3) If you have Microsoft Certificate Server installed, follow these steps to enable SSL for the Exploration Air sample site. * Before you begin, make sure Certificate Authority service is running + Open Control Panel | Services. + See that the Certificate Authority service has started. If not, start the service. * In order to use SSL, the server must first obtain a server certificate from the Certificate Authority. Begin by opening the Internet Service Manager in Start | Programs | Windows NT 4.0 Option Pack | Microsoft Internet Information Server. + Select Internet Information Server under the Console Root + Click Key Manager icon + Select the WWW service + Click Key | Create New Key - Select the button for "Automatically send the request to an online authority" - Enter Key Name and Password - Enter Organization and Organizational Unit - Enter in the Common Name for the fully qualified domain name as used for DNS lookups of your server (for example, "www.yourcorp.com") - Enter Country, State/Province, City/Locality - Click OK on the message that says the new key has been successfully created - On Server Bindings dialog for the web server - Click Add to display the Edit Bindings dialog - In the IP address field, choose "Any unassigned IP Address" - In the Port number field, choose "Any unassigned Port" - Click OK - Click OK on the Server Bindings dialog At this point, make sure the key is listed under the WWW service. If not, copy the key to the WWW service. - Right click over the key - Select Copy in the pop-up menu - Right click over "WWW" - Select Paste in the popup menu - Click OK on the dialog 'Server Bindings' for Web server + Close Key Manager - Commit your changes + Exit the Internet Service Manager + On the same machine, open Internet Explorer 4.0 and go to the Exploration Air default page -- http://localhost/IISSamples/ExAir/Default.asp + Go to "Get our Certificate" - On the Certificate Authority Certificate List page, select the certificate for the Certificate Authority - On the File Download dialog - Select "Open the file from its current location" - Click OK - On the New Site Certificate dialog - Ensure all the check boxes are checked - Click OK - On the Root Certificate Store dialog - Click Yes - Close Internet Explorer 4.0 + Open a command prompt - Change into the directory %SystemRoot%\system32\inetsrv - Run the command 'iisca' - Stop the World Wide Web Publishing Service using 'net stop iisadmin /y' This will stop all services running under IISAdmin. - Start the World Wide Web Publishing Service using 'net start w3svc' You can also start the other services that run under IISAdmin using the Internet Service Manager. * You can now enable SSL in the sample site. + Open Internet Explorer 4.0 and go to the Exploration Air home page. http://localhost/IISSamples/ExAir/Default.asp + Go to the "Site Admin" page - Choose "Require Secure Sockets (HTTPS) for Frequent Flyers" - Choose "Require Client Side Certificates for Business Partners" - Click Apply - Return to the Exploration Air home page At this point, SSL is enabled on the Exploration Air sample site. Clients that wish to connect to the Frequent Flyer Club should obtain the Certificate Authority's certificate before proceeding. In addition, clients that wish to access the Business Partners Only page must obtain a client certificate from a Certificate Authority that Exploration Air trusts (such as the one on the same server). Optional: 4) If you have downloaded the Page Counter component from the Microsoft Web site, register the DLL using the regsvr32 program. The component which comes from the Microsoft Web site has a PROGID of "IISSample." When using this component, make sure you that you use this name instead of "MSWC." ************************* * Using Exploration Air * ************************* Once you have completed the setup procedure, you can use IE 4.0 to begin viewing the site at: http:///IISSamples/ExAir/default.asp where is the name of the Web server where you have installed IIS 4.0 and the Exploration Air sample site or "localhost" if IIS 4.0 and the sample site are installed on the same computer as IE 4.0. Frequent Flyer Club =================== * When asked to join the Frequent Flyer Club, you can choose to join, or use an existing account for testing purposes. The existing account is: Account Number: 10001 Password: password * A client that wishes to access the Frequent Flyer Club when SSL is enabled must obtain the Certificate Authority's certificate. (NOTE: If this client, IE 4.0, is the same client used in the Setup procedure, this section is not necessary.) + In the Exploration Air home page, go to "Get our Certificate" - In the Certificate Authority Certificate List page, select the certificate for the Certificate Authority - On the File Download dialog - Select "Open the file from its current location" - Click OK - On the New Site Certificate dialog - Ensure all the check boxes are checked - Click OK - On the Root Certificate Store dialog - Click Yes - Click Back to return to ExAir/Default + Select Frequent Flyer At this point, you should be in the Frequent Flyer page and it should say that you are operating in a secure environment. * A client that wishes to access the Business Partners Only page when SSL is enabled must obtain a client certificate from the Certificate Authority for client authentication by the server. + Go to the Certificate Server enrollment page http:///CertSrv/CertEnroll/ceenroll.asp where is the name of the server on which Certificate Server is installed. - Enter information about your client site and click "Submit Request" - Download the newly generated certificate - Close all instances of Internet Explorer 4.0 - Open a new instance of Internet Explorer 4.0 and return to the Exploration Air home page - Go to the Business Partners Only page - You will be asked what certificate to use in accessing the site - Select the certificate you just downloaded and click OK. ********************* * Behind the Scenes * ********************* As the sample site uses a great deal of technology, it is worthwhile to understand what is happening during the installation process. 1) Microsoft Transaction Server Packages ---------------------------------------- Four packages are installed into Microsoft Transaction Server - ExAir, Flight, Benefit and TakeANumber. These are automatically installed when the Exploration Air sample site was installed during the Windows NT 4.0 Option Pack setup (if you chose to install the sample site). This is accomplished using the ExAirInstall.exe file located in the ...\IISSamples\ ExAir\bin directory. ExAirInstall calls Microsoft Transaction Server to register the packages. 2) IIS Settings --------------- IIS settings for ExAir are automatically setup by ExAirInstall.exe. This includes directory security, process isolation, etc. 3) Components Registered ------------------------ OneC++ COM components, ProdInfo.dll, is installed and registered using RegSvr32.exe. One Java COM component, HiddenWords.class, is installed and registered using JavaReg.exe. One final component, PermChk.dll, is also installed and registered using RegSrv32.exe. IMPORTANT NOTE: Some functions listed above are called automatically during the installation of the Windows NT 4.0 Option Pack. ***************** * Release Notes * ***************** Please refer to the Windows NT 4.0 Option Pack release notes for any additional issues.