Using This Manual
The following formatting conventions are used in this manual to highlight important information:
Italicized text indicates a location, for example a particular Folder, Tab, or Window.
Bold text indicates a specific user action, such as clicking a button.
Red text and this symbol (!!) are used in Notes to bring attention to crucial information.
Acronyms
All acronyms used in this document are defined in the following table:
Acronym | Definition |
IIS | Internet Information Services |
PIV | Personal Identity Verification |
SSL | Secure Socket Layer |
Introduction
About This Manual
This manual is intended to assist eCASE Administrators with Personal Identity Verification (PIV) configuration. In this document you’ll find system requirements for the PIV server, as well as steps to configure your eCASE application for PIV.
Please contact support@Casepointtech.com if you need any more information, or if you encounter issues with this configuration.
System Requirements for PIV Server
The PIV server for eCASE must meet the following minimum requirements:
Windows 2016 Server with IIS 10 server
Install URL Rewrite and ARR IIS Modules. You can download these extensions from Microsoft web sites. Try these links: https://www.iis.net/downloads/microsoft/urlrewrite, https://www.microsoft.com/en-us/download/details.aspx?id=47333
Steps to Configure eCASE for PIV
Follow the steps in the subsections below to configure eCASE for PIV.
Take Database Backup
Follow the steps below to take a database backup:
Access the eCASE database server.
Open Microsoft SQL Server Management Studio.
Right-click the eCASE database and take a backup of the database.
Once the backup is complete, proceed to Section 2.2 to install the latest service pack. If the latest service pack is already applied, move to Step 2.3.
Install Latest Service Pack
Follow the steps below to install the latest Service Pack, if it is not already applied:
Access the application server where eCASE is installed as an Administrator.
Copy the eCASE v11.2.0 Latest Service Pack.
In the main root of the folder, run Hotfix.exe as an Administrator.
Provide the Backup location to take the backup of the files.
Click Apply.
Confirm that the eCASE database is backed up.
Run the installation wizard.
After the Hotfix is installed successfully, click OK.
Proceed to Step 3.
Install PIV Card Authentication Hotfix
Follow the steps below to install the PIV Card Authentication Hotfix:
Access the application server where eCASE is installed as an Administrator.
Add the following entries to the web.config file located in the eCASE installed directory: C:\Program Files\AINS eCase\eCase
<location path="Banner/Disclaimer.aspx">
<system.web>
<authorization>
<allow users="?" />
</authorization>
</system.web>
</location>
<location path="NoPIV.aspx">
<system.web>
<authorization>
<allow users="?" />
</authorization>
</system.web>
</location>
Next, run the eCASE Database Configuration Tool as an Administrator.
Under Application/Service, select eCASE.
Click Save.
Navigate to the Sign-on Mode tab.
Check the Two-Factor Authentication checkbox and provide the Subject from the SSL Certificate.
Click Save.
Install SLL Certification and Configure IIS (Single Server Option)
Follow the steps below to install the SSL certificate and configure IIS when using the option for a single server:
Install the Server Certificate into IIS and configure bindings for HTTPS on the eCASE Application Server.
Open the IIS and click SSL Settings.
Configure the settings as shown below:
Reset IIS.
Install SSL Certificate and Configure IIS (Two Servers Option)
Application Sever Installation
Install the Server Certificate into IIS and configure bindings for HTTPS on the eCASE Application Server.
Open the IIS and click SSL Settings.
Configure the settings as shown below.
Reset IIS.
PIV Server Installation
Install Server Certificate into IIS and configure bindings for HTTPS on PIV Server.
Open the IIS, and create a new web site with name URLRewrite with HTTPS binding.
Configure the SSL Settings and URL Rewrite rules as described in the following steps.
Configure the SSL Settings as shown below:
Add a Rewrite rule with Request Blocking template to abort application related traffic, except Images and Disclaimer.aspx.
Configure the URL blocking rules as shown below. Please make sure type, patterns, and Conditions and Action are configured as shown:
Add a Rewrite rule with Reverse Proxy template to rewrite the traffic to the application server.
Click Add Rule and enter the application server name to forward the request:
NOTE: The Request Blocking rule should be before Reverse Proxy rule. These rules will ensure only PIV requests are sent to the dedicated PIV server, and all application requests are sent to the eCASE Application server. The second server configuration provides the ability to monitor PIV server traffic and ignore the application traffic.
Set the Banner Page Location (Two Servers Option)
Run the following SQL query in the eCASE database with the proper PIV Server name to set to the banner page location:
Update EC_CONFIGURATION
SET CONFIG_VALUE='https://<pivservername>/eCase/Banner/Disclaimer.aspx' where CONFIG_KEY='BannerPage'