Pular para o conteúdo principal

Rest PKI Core - Setup on Windows Server

To install an on-premises instance of Rest PKI Core on Windows Server, first download the binaries of the desired version. The latest version available is provided on the link below:


Rest PKI Core binaries package


Prerequisites​

  • Windows Server 2016 or later (any edition)
  • SQL Server 2014 or later (Standard edition or higher recommended)
  • PKI SDK license (in Base64 format)
  • Web PKI license (binary/Base64 format)

Database requirements​

  • Database with collation Latin1_General_100_CI_AI or Latin1_General_CI_AI
  • Credentials of a user with the db_owner role

If you need help preparing the database, see Preparing a database.

Installation​

  1. Install IIS

  2. Install the ASP.NET Core Runtime 10.0 Hosting Bundle (section ASP.NET Core Runtime, item Hosting Bundle under Windows)

  3. Create a folder for the IIS site. Example: C:\inetpub\Rest PKI Core

  4. Create a folder for logs. Example: C:\Logs

  5. Create the site on IIS

  6. On the corresponding application pool:

    • Select Basic Settings and set the .NET CLR version to No managed code

      No managed code

    • Select Advanced Settings and set Load User Profile to True

      Load user profile

  7. Extract the files of the binaries package to the site folder.

warning

The ASP.NET Core Hosting Bundle must be installed after IIS; otherwise, you may get the error 500.19 (0x8007000d) when running the site. If that is your case, run the Repair option of the Hosting Bundle installer.

Configuration​

  1. Create the folder C:\ProgramData\Lacuna Software\Rest PKI Core

  2. In the site folder, go to config-templates\linux and copy the appsettings.conf file to the folder you just created, renaming it to appsettings.ini as shown in the image

  3. Open C:\ProgramData\Lacuna Software\Rest PKI Core\appsettings.ini and fill in the settings as described in the file's comments, such as the database connection string ([ConnectionStrings]), the site URL ([General]) and the licenses ([PkiSuite])

  4. Add the blob storage section to appsettings.ini (see Blob storage configuration for other options):

    [BlobStorage]
    Type=FileSystem
    Path=C:\Path\To\Storage

  5. Save and close the file

Generating the encryption key and the password hash​

For the EncryptionKey setting of the [General] section, generate a 256-bit key used to encrypt sensitive data stored in the database. Run the following command in the site folder (C:\inetpub\Rest PKI Core):

dotnet Lacuna.RestPki.Site.dll -- gen-enc-key

For the RootPasswordHash setting of the [General] section, choose a strong password for root access to the management interface and compute its hash:

dotnet Lacuna.RestPki.Site.dll -- hash-root-pass

On IIS, start the site with the Start button on the right-hand panel.

View as Markdown