Windows Authentication

To use Integrated Windows Authentication, ensure you set up each of these features.

IIS Windows Authentication Features

To ensure your server box has the Windows Authentication for IIS features installed:

1. Click Start > Control Panel > Programs > Programs and Features.
2. On the left panel, click Turn Windows features on or off.
3. Navigate to Information Services > World Wide Web Services > Security and ensure that Windows is enabled.

HTTP and Non-HTTP Activation on Server

To ensure that the server box has the HTTP and Non-HTTP activation feature installed:

1. Click Start > Control Panel > Programs > Programs and Features.
2. On the left panel, click Turn Windows features on or off.
3. Navigate to Microsoft .NET Framework 3.5.1 and ensure that both Windows Communication Foundation HTTP Activation and Windows Communication Foundation Non-HTTP Activation are enabled.

Register ASP.NET with IIS

To re-register ASP.NET with IIS:

1. As an Administrator, click Start > Run and type cmd to open the CMD.exe command prompt.
2. Run the following command:

   %windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe -i

HTTP and NET.TCP Protocols on Web Application

To ensure that http and net.tcp protocols are enabled on the CDM web application (see Site Administration in Certent 365):

1. Click Start > All Programs > Administrative Tools > Internet Information Services (IIS) Manager.
2. Navigate to the Certent CDM application.
3. On the right panel, click Advanced Settings.
4. Under Behavior, ensure that http and net.tcp are both listed in the Enabled Protocols field.

Important: Ensure that port 808 (the default port) is opened for incoming connections.

SPN Identity Configuration

When the CDM application pool is configured with a service account, the following configuration must be performed to have XET Open, XBRL Cache Manager, and CORE Report Export functions working properly.

1. On the CDM client machine, the <add key="SpnIdentity" value="CDM/{0}" /> configuration key must be added in the AppSettings.config file, where {0} is the server name.

   For example, if you want to use a SpnIdentity like CDM/test.ibm.com, where test.ibm.com is the server name, you should add the key as follows: <add key="SpnIdentity" value="CDM/test.ibm.com" />.

2. In the Active Directory, create a SPN mapped on service account used for Certent CDM Server Application Pool Identity.

   For example, if service account name is cdmserviceaccount and CDM Server host name is test.ibm.com, the following command must be run in a command prompt with Active Directory administrative rights:

   setspn -A CDM/test.ibm.com cdmserviceaccount

   If LocalSystem account is used for Certent CDM Server Application Pool Identity, the following SPN must be created and mapped to Computer account:

   setspn -A CDM/test.ibm.com test