Installing SEI in HTTPS

Uninstalling any previous version (if required)

If you already have installed SEI, you will have to uninstall it.

1. Go to Control Panel > Programs > Programs and Features.
2. Select Sage Enterprise Intelligence and click Uninstall.
3. Follow the wizard to remove the software.

Binding the Central Point Configurator

1. Press the Windows key + R to open the Run window.
2. Enter inetmgr and press the Enter key.
3. On the left pane, click the little arrow to expand the connection.
4. In the Sites tab, right-click CPConfigurator and select Edit Bindings...
5. In the Site Bindings window, click Add...
6. In the Type drop-down list, select https.
   Note

   By default, the port number for https connection is 443. Leave it to the default value.

7. In the Host name field, enter webcp.*domain name from the certificate* if it's a wildcard certificate otherwise the Host name must be the same as one of the name(s) within the authorized list (refer to Installing SEI in HTTPS for more details).
8. In the SSL certificate drop-down list, select the certificate you installed earlier and OK.

9. Back to the Site Bindings window, select the http line ad click Remove.
   

   

10. Click OK to confirm and then Close.

Binding the Certificate

1. Press the Windows key + R to open the Run window.
2. Enter powershell and press the Enter key.
3. Copy and paste this command and press the Enter key:
   

   Get-ChildItem -path cert:\LocalMachine\My 

4. Copy the Thumbprint of your certificate (it's the first line) and paste it to a notepad.
   

   

5. Back to the PowerShell window, copy and paste this command and press the Enter key:
   

   netsh http add urlacl url=https://+:4504/ user="EVERYONE"

6. Copy and paste this command to a notepad (the same notepad where you put the thumbprint):
   

   netsh http add sslcert ipport=0.0.0.0:4504 certhash=afabc3fe7f3eb1ce420ba02065e57f74652d631 appid={00000000-0000-0000-0000-000000000000}

7. Replace the value of the certhash ("afabc...31) with the Thumbprint ('7EC...A9 in this case).
8. In the PowerShell window, enter netsh then press the Enter key.
9. Enter http then press the Enter key.

10. Paste the rest of the command line ( add sslcert... 0}) and press the Enter key.
    

    

    Note

    You need to break this command line like this otherwise it won't work like shown in the screen capture below.
    

    

Installing SEI

1. Run the application SEI - Server - Win64.exe and click Next.

2. For the question Do you want to specify a user account for the Services, select Yes and click Next.
   

   

3. For the BI Service User Account, enter the credentials of the local administrator and click Next.
4. In the Path field for the Central Point Configuration, enter the address where is located the Central Point folder.
5. In the Name field, enter the name you want and click Next.
6. In the BI Server Address field, enter one of the name authorized by the certificate or specify a name while using the domain provided by the certificate if the certificate is a Wildcard type (refer to Installing SEI in HTTPS for more details).
7. In the Application Port, reuse the same port that was reserved for the BI Service during the preivous installation (refer to Uninstalling any previous version (if required)
   Note

   By default, the port number is 4504.

8. Select Secure and click Next.
   

   

9. In the Web Client Port field, leave it to 81 (as the port 443 is already used by the Central Point Configurator.)
10. For the BI Distribution Configuration, enter the credentials of the local administrator and click Next.
11. Click Install.
    Note

    If you receive the error below:
    

    

    1. Open the Task Manager (Ctrl+Alt+Del keys) and go to the Details tab.
    2. Select BI Service.NetInstaller... in the list and click End task.
    3. Click End process to confirm.
    4. Back to the error message box, click Retry.

12. Click Finish.

Binding the Web Client

1. Press the Windows key + R to open the Run window.
2. Enter inetmgr and press the Enter key.
3. On the left pane, click the little arrow to expand the connection.
4. In the Sites tab, right-click Web Client and select Edit Bindings...
5. In the Site Bindings window, click Add...
6. In the Type drop-down list, select https.
7. Leave the port number to 443.
8. In the Host name field, enter the name that will be used to get access to SEI (it can be SEI.*domain name from the certificate* if it's a wildcard certificate otherwise the Host name must be the same as one of the name(s) within the authorized list (refer to Installing SEI in HTTPS for more details).
9. In the SSL certificate drop-down list, select the certificate you installed earlier and click OK.
10. Back to the Site Bindings window, select the http line ad click Remove.
    
11. Click OK to confirm and then Close.
12. Go to C:\Program Files\SEI\Sage Enterprise Intelligence\DistributionService\objDistribution\ and open the DistributionInstaller.exe.config file.
13. Look for the "<add key=WebAppUrl" tag and value.
    1. Add an "s" to http.
    2. Change the port number 81 to 443 and save.
14. You must also update your cookie management settings in order to complete the binding. For more information on that process, please see Cookie Management.

Updating Excel Add-In

As you apply some changes to secure the services (BI Services etc), you need to update the Excel Add-In in order to reuse it.

1. In the Login box, click the red cross icon to remove the selected Central Point.
   
   
2. Click the plus sign icon.
3. In the Add a Central Point window, in the Central Point Path field, enter the address where is located the Central Point folder.
4. In the Service Address field, enter the same name (address) that you use as Host name during the binding of the Web Client (refer to Binding the Web Client) and add :4504 (4504 = the port used for the BI Service in this case).
5. In the Web URL field, enter the same address you use for the Service Address field but instead of :4504, use :443.
6. Click Add.
7. Once the Central Point is added, sign in with your credentials and click Login.