Install worker

Ensure you have followed "Plan for worker installation"

Download zervicepoint media

Zervicepoint media is accessible on our confluence page.

Please contact signup@zervicepoint.com to request media access if you don't already have access to the confluence page.

Setup signing certificates for Client Web Service

  • Download Token Signing Certificate to worker server and import to the personal store of the machine (LocalMachine\My).
  • Generate self-signed data signing certificate from worker server and upload to store

Download Token Signing Certificate

Go to the following url:

https://portal.zervicepoint.com:20000/StoreName

  • Download Token Signing Certificate from AdminWeb > Edit Store > Worker Authentication

Take a note of the thumbprint of the certificate as it will be used later for the installation.

downloadtokensigningcertificate

How to Install CWS Token Signing Certificate to LocalMachine\My

Example Example Example Example

Generate Data Signing Certificate

Run the following command in PowerShell (Run as administrator) in order to generate a self-signed certificate for data signing and then export the certificate to C:\Cert folder.

$StoreName = <"replace with StoreName">
$cert = New-SelfSignedCertificate -Provider "Microsoft Enhanced RSA and AES Cryptographic Provider" -Subject "CN=Client Web Service Data Signing - $($StoreName)" -CertStoreLocation "cert:\LocalMachine\My" -Type CodeSigningCert -KeySpec Signature -KeyLength 2048 -NotAfter (Get-date).AddYears(5)

New-Item -ItemType Directory -Path C:\Cert

Export-Certificate -Cert $cert -FilePath C:\Cert\$($cert.Thumbprint).cer -Type CERT

example

Take a note of the thumbprint of the certificate as it will be used later for the installation.

  • Upload data Signing Certificate to AdminWeb > Edit Store > Worker Authentication > Data signing Certificate > Upload certificate > Save

uploaddatasigningcertificate

Install Zervicepoint

On the worker node, run ZervicePointSetup.exe.

Example

Select Provisioning System, Client Web Service and Powershell maintenance module as features to install.

Example

  • Enter service account details. (This account runs the application pool)
  • Select website certificate for ClientWebService. (If it is not visible, make sure it is a valid SSL certificate and that it was imported before running the setup wizard)
  • Enter ClientWebService Token and Data signing certificate thumbprints.

Example

  • Hostname should be portal.zervicepoint.com
  • StoreName must be your StoreName
  • Client Web Service hostname (cws.example.com)
  • Port to use with Client Web Service (443 for HTTPS)
  • ServiceAccount (This account runs ProvisioningSystem and ProvisioningSystemInvenory services)
  • Set Key as Worker Authentication
  • Use WorkerKey as credentialname or enter a custom one.

Example

Select Key for API authentication and enter the URL https://portal.zervicepoint.com:30000/StoreName

Example

Generate Provisioning Key

  • Generate Provisioning Key AdminWeb > Edit Store > Worker Authentication > Generate Key > Save Key > Save

GenerateKey

SaveKey

Add ProvisioningKey to service account credential store

Run Powershell in the context of the service account(s).

click for tip on how to Run as another user

Shift-Click on the PowerShell window and click 'Run as a different user'

Example

Import-Module 'C:\Program Files\Zipper\ZervicePoint\Powershell\ZervicePoint.WebApi.PowerShell'

Set-ZPKeyCredential -Name WorkerKey -Key "<provisioning key>"

Start Services

Start-Service -Name ProvisioningSystem,ProvisioningSystemInventory

Check the event log "Zervicepoint" in Event Viewer and verify that there are no error messages.

Next steps