Windows Server 2008 setup

InnoCielo products can be installed on Windows Server 2008 with the following limitations.

Vault incompatibility

Warning    Due to fundamental changes made in Windows Vista and Windows Server 2008, vaults are not compatible between Windows XP or Windows Server 2003 and Windows Vista or Windows Server 2008 and vice versa without serious side effects. For more information see "Vault incompatibility with Windows Vista and Windows Server 2008."

Visual C++ runtime files required

The following must be installed (either manually or by a different application) on Windows Server 2008 before installing InnoCielo products with the Windows Installer Package (MSI) setup programs. Otherwise, DLL files may fail to register.

Microsoft Visual C++ 2005 SP1 Redistributable Package

32-bit download:

http://www.microsoft.com/downloads/details.aspx?familyid=200B2FD9-AE1A-4A14-984D-389C36F85647&displaylang=en

64-bit download:

http://www.microsoft.com/downloads/details.aspx?familyid=EB4EBE2D-33C0-4A47-9DD4-B9A6D7BD44DA&displaylang=en

Note    On 64-bit systems, both downloads must be installed.

Microsoft Visual C++ 2008 SP1 Redistributable package

32-bit download:

http://www.microsoft.com/downloads/details.aspx?familyid=A5C84275-3B97-4AB7-A40D-3802B2AF5FC2&displaylang=en

64-bit download:

http://www.microsoft.com/downloads/details.aspx?familyid=BA9257CA-337F-4B40-8C14-157CFDFFEE4E&displaylang=en

User Account Control causes MSI setups to fail

For InnoCielo versions 2009a and prior, if User Account Control (UAC) is enabled in Windows Server 2008 and an InnoCielo MSI setup package is launched, many self registering DLLs will fail to register, rendering the installation unusable. Either reinstalling or executing a repair of the installation will not resolve the problem. At present, there are two known workarounds:

• Disable UAC during installation
• Run the Setup from a command prompt as an administrator

The standard (InstallShield) setup programs do not have this problem.

Note    A UAC prompt will be shown after clicking the Install button in the last setup wizard page.

Note    Upgrading from InnoCielo 2009a or prior versions to InnoCielo 2010 or later versions requires the complete removal of the prior version. If UAC is enabled, this can result in several error messages when DLLs cannot be unregistered.

Note    The /quiet and /qn parameters of msiexec do not work correctly with UAC enabled. After installation starts, no UAC prompt is shown and the installation will fail to register DLLs. As a workaround, use the /Passive parameter instead.

For more information, see the InnoCielo Administrator's Guide.

Web Access extension installation with IIS 7

Prior to this release, if the IIS 6 Management Compatibility feature of IIS 7 was not installed, the installation of the InnoCielo Web Access extension would fail. The feature had to be installed before installing Web Access. This has been fixed and IIS 6 Management Compatibility is not required.

Content indexing

When activating content indexing in Meridian Enterprise Administrator, the content index may not be created or the indexing process may not be properly scheduled. This is due to the change by Microsoft in Windows Server 2008 from the Indexing Service to Windows Search Service which is supported.

Web Access application pool

For information on configuring the application pool within which Web Access runs, see "Web Access application pool."

64-bit support

For information on installing 64-bit support, see "Meridian Enterprise 64-bit setup," "Web Access 64-bit support," and "64-bit support."

"Failed to get list of vaults on computer 'ServerName'. A security package specific error occurred."

This error can occur when attempting to open a vault that is hosted on a Windows 2008 R2 server from a Windows XP client computer. This error does not occur from a Window 7 client computer.

This error occurs because the user is not properly authenticated by the server as described in Error 80070721 Occurs When Instantiating a COM Component on a Remote Windows 2008 Server in MSDN.

To resolve this issue, we recommend that you implement one of the following solutions:

Solution 1

Configure a Service Principal Name (SPN) for the user as described in the previous linked article and in the setspn command description in the Windows Server 2008 Command-line Reference.

Run the following command on the Windows 2008 R2 server:

setspn -A http/<DomainName> <AccountName>

Solution 2

Allow the computer to be trusted for delegation as described in Allow a computer to be trusted for delegation in Microsoft TechNet. This solution may not be permitted by your organization's security policy. Consult a system administrator before implementing this solution.

Solution 3

Disable the default Server Message Block (SMB) 2.0 protocol used by Windows Server 2008 R2. BlueCielo software is compatible with SMB 1.0 and if you disable SMB 2.0, the software will not be affected.

To disable SMB 2.0:

1. Open the Registry Editor on the Windows Server 2008 computer.
2. Expand the registry tree to the following key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters

3. Add a new DWORD value with the name Smb2.
4. Set the value of Smb2 to 0 to disable SMB 2.0 or set it to 1 to renable SMB 2.0.
5. Reboot the server.