Professional Documents
Culture Documents
Administration Guide
July 2011
www.actix.com
The content of this manual is provided for information only, is subject to change without
notice, and should not be construed as a commitment by Actix. Actix assumes no
responsibility or liability for any errors or inaccuracies that appear in this documentation.
Copyright © Actix 2011. All rights reserved. All trademarks are hereby acknowledged.
www.actix.com
Contents
1 ABOUT MINI ACTIVATION ..............................................................................5
1.1 TECHNICAL OVERVIEW ........................................................................................ 5
1.1.1 Local Activations ................................................................................................. 6
1.2 SECURITY CONSIDERATIONS ................................................................................. 6
1.2.1 Mini Activation server runs within your company‟s network ....................................... 6
1.2.2 Server Dongle ..................................................................................................... 6
1.2.3 Windows Domain Security Group ........................................................................... 6
1.3 MINI ACTIVATION PREREQUISITES .......................................................................... 7
www.actix.com
8 WINDOWS DOMAIN SECURITY GROUP ............................................................. 37
8.1 SELECT THE WINDOWS SECURITY GROUP ............................................................... 37
8.2 IDENTIFYING A USER‟S GROUP MEMBERSHIP ............................................................. 38
8.3 ASSOCIATING A WINDOWS DOMAIN SECURITY GROUP WITH AN ACTIVATION ...................... 38
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 About Mini Activation 5
Your user‟s Activation requests remain within your corporate network. These Activation
requests are referred to as Local Activations.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 About Mini Activation 6
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 About Mini Activation 7
Local Network
The Mini Activation server and the user PCs running the licensed products must be
connected on your company‟s network.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Setup overview 8
2 Setup overview
Installation of Mini Activation server comprises the following steps:
Selection of a suitable server machine, onto which the Mini Activation server will be
installed.
Installation of any required server prerequisite software.
Installation of Mini Activation Server software.
Commissioning of the Mini Activation Server.
User deployment.
Use the following checklist to confirm that you have performed each step in the correct order:
User deployment 6
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Identify and prepare a server 9
Activate your Mini Activation server, as part of commissioning the Mini Activation
server for use.
Fixed IP address
The server should be assigned a fixed IP address. Although the Mini Activation server will
work successfully with a dynamically assigned IP, a fixed IP is typically more resilient for a
server (a fixed IP avoids issues when a license client PC‟s DNS cache becomes out of
date).
Server is part of your corporate domain network
The server should be a regular member server of your corporate domain (and not a
domain controller). Avoid using a server which is just part of a workgroup (rather than on
your corporate domain).
If you use the optional Windows Domain Security Group feature of Mini Activation (see
section 8), your server is required to be a regular member server of your corporate domain
(and not a domain controller or a server which is just part of a workgroup).
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Identify and prepare a server 10
If you do not use the optional Windows Domain Security Group feature, the server is not
required to be on your domain, although Actix recommends the server is a regular
member server of your corporate domain. If you do install ActMini onto a server which is
part of a workgroup, the optional Windows Domain Security Group feature will not be able.
Server name
Use a simple server name. This will make it easier for your users to enter the server name
into the Activation Wizard. A complex or cryptic name is likely to result in typos when
entering the server name, so users will fail to access the Mini Activation server.
To check access to your server from your client machines, open a command
prompt on the client and enter „ping myserver’ (where myserver is the name of
the server hosting your Mini Activation server), as shown below:
The top line of output in the above example shows the IP address being resolved to the
192.168.219.24. Check that the IP number you obtain from your „ping myserver’
matches the IP address of your server.
The subsequent lines in the example above show „Request timed out’, so the client
network pings did not reach the server. In this case there could be a problem with your
network configuration, although it could be that server is configured to ignore ping
requests (due to security considerations). If you see this output, but you are sure that
your selected server is configured correctly, continue with the installation of the Mini
Activation. Once installed, check access from your clients, as detailed in section 5.2 Verify
Server status. If you encounter problems, please contact your IT department for
assistance.
The following example output shows a successful ping of the server from a client:
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Identify and prepare a server 11
If a server version of Windows is not available, the Mini Activation server can be installed
on the following Windows Desktop editions: Windows 7 (Ultimate, Professional or
Enterprise edition), Vista (Business, Enterprise or Ultimate edition) or Windows XP (SP2).
Optional Software
Mini Activation Server can collect usage data to record the Activations it serves. If usage
logging and reporting is required, the following software is also required:
All usage logging is stored in the database ActixActivation, which can be created and
configured for you as part of the Mini Activation Server setup. Alternatively, the database
can be created and configured manually by your DBA after the Mini Activation Server has
been installed (see section 7).
If you do not have an existing MS SQL Server, Actix recommends MS SQL 2008 R2
Express edition for use with Mini Activation server. Microsoft provides a free download of
MS SQL 2008 R2 Express from http://www.microsoft.com/express/Database. Select to
download and install “Database and Management Tools”. Typically a default install can be
undertaken by someone with basic system administration skills, although if you are unsure
about how to proceed, please request assistance from your IT department.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Identify and prepare a server 12
When installing Microsoft SQL for sole use by Mini Activation server, Actix recommends you
select “Mixed Mode Authentication” rather than just “Windows Integrated Authentication”,
to avoid needing your IT department to create a domain service account. When installing
for mixed mode authentication you will be prompted by the SQL Setup to set a password
for the SQL administrator account (called “sa”). Take note of this password, you will need
to enter the SQL server name, the SQL account name (“sa”), and this password, when
running the Mini Activation setup for it to automatically configure the usage database.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 13
4 Installing on a server
First configure IIS by following the instructions in the following section relating to your
operating system:
4.1 Installing on 32bit or 64bit (x64) Windows Server 2008
4.2 Installing on 32bit Windows Server 2003
4.3 Installing on Windows 7 or Windows Vista
4.4 Installing on 32bit Windows XP Professional
If you require usage logging also follow section 4.5 “Configure MS SQL for usage logging
and reporting”.
Once these operating system preparation steps are complete, install the Mini Activation
server as detailed in section 4.6.
Static Content
Default Document
ASP
Basic Authentication
Windows Authentication
Request Filtering
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 14
These web services are enabled by selecting the role services for the Web Server:
One IIS has been installed with the required roles; the Actix Mini Activation Server
software can be installed on the server.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 15
Optional 3rd party software: MS SQL Server 2005 Express edition or greater, if usage
logging is required.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 16
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 17
9 Select the options Active Server Pages and World Wide Web Service, and click
OK.
Once IIS has been installed with the required components; the Actix Mini Activation Server
software can be installed on the server.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 18
A Windows Server operating system should be used to host the Actix Activation Server,
rather than a Windows Desktop operating system such as Windows 7 or Windows Vista.
Although the installation can be undertaken on a Windows desktop operating system, it is
important to recognise that a desktop operating system might not give the required
reliability.
Windows components: Microsoft Internet Information Server – see below
Optional 3rd party software: MS SQL Server 2008 Express edition or greater, if usage
logging is required.
Static Content
Default Document
ASP
Basic Authentication
Windows Authentication
Request Filtering
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 19
These web services are enabled by selecting the features for Internet Information
Services:
Click OK to finish. You may now be prompted to install your Windows media.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 20
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 21
For Windows 7, go to Control Panel and select System and Security and select Allow a
program through Windows Firewall and enable “World Wide Web Services (HTTP)” as
an exception, as shown below:
Once IIS has been installed and the Windows firewall configured, the Actix Mini Activation
Server software can be installed on the server.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 22
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 23
4 Select World Wide Web Service, and click OK to finish the install. You may be
prompted to install your Windows media by the installation process.
Once IIS setup has completed, the Actix Mini Activation Server software can be installed
on the server.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 24
To enable usage logging and reporting, provide a suitable Microsoft SQL server (see
section 3.5) and then configure the database and Mini Activation server.
If you provide SQL server administrator credentials to the Mini Activation Setup, it can
undertake the configuration for you.
If you do not have SQL server administrator credentials, or if you wish to install Mini
Activation server without usage logging and at a later time enable usage logging, you can
configure the database manually; see section 7 for details.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 25
If other sites are also run on the same server they must be configured to not interfere with
the Actix Mini Activation server. An alternative port is possible although it needs a registry
variable to be configured on each client. The Host Header can be configured, as long as the
local DNS correctly resolves the name in all cases, and users enter the fully qualified name
into their Actix Activation Wizard.
The supplied USB dongle must be accessible whenever the Mini Activation server is
running.
The status will be shown for all the IIS related services on your server and so might not be
identical to the above example. The item to check is “World Wide Web Publishing ( W3SVC
) : Running”.
If the status is not „Running‟ or if an error is reported, check IIS has been installed as
detailed above, or seek assistance from your IT support. Only proceed on to the next
section once IIS is working successfully.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 26
4 You will then have a choice of a full installation, or to install just the Mini Activation
server without usage logging and reporting.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 27
5 If you select Complete, you will be prompted for details of your SQL server to
allow for its configuration by Setup. You will need to provide credentials for an SQL
administrator account (with create database privileges).
When entering the Server Name, you need to enter the full
SQL server instance name in the following format:
<server‟s network name>\<SQL instance name>
By default the instance name for MS SQL Express is
SQLExpress, so for example if your MS SQL Express server
is running on machine SqlServer1, the full name to enter
would be:
SqlServer1\SQLExpress
The account details entered will be used at Setup time to create and configure a
database on the server for usage logging by the Mini Activation server.
6 Click Test to verify access to your SQL server.
If the validation fails, please check the server name and account details and retry.
Once verified, click Next to continue.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Installing on a server 28
If you encounter problems verifying your SQL details, please ask for assistance
from your company‟s database expert. It‟s likely that your SQL server may be
locked down, or that access is being blocked by a firewall, or by SQL configuration.
You can also click Back and then select No Reporting to continue this installation
without usage logging, and at a later time manually enable usage logging (see
section 7).
7 The next screen is for detailing the account to be used to automatically renew the
Mini Activation Server licensing details each week. It ensures that license
updates/renewals are collected from Actix‟ public Activation Server and made
available to your Mini Activation server.
Select a user‟s account that has access to the local system and who has access to
the internet.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Commissioning the Mini Activation Server 29
After the initial Activation of your Mini Activation server it is able to respond to activation
requests from your User‟s PCs. This process of activating your Mini Activation server is also
used later to pick up any licensing updates (see section 5.4 New Product IDs).
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Commissioning the Mini Activation Server 30
4 Click Next.
5 Click Done to complete the Activation of
your Mini Activation server.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Commissioning the Mini Activation Server 31
This page details the Product ID managed by this Mini Activation Server, with the total
number of activations and the number in use / available. All active activations will be
shown, with details of when they expire and the UserRef provided at Activation time.
Once you have entered your desired changes click Save and then click Return to Status
Page to exit administration mode.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Commissioning the Mini Activation Server 32
Access to the Product ID will be restricted to just those users who have membership of the
specified domain security group. Please see section 8 for more details.
Once a domain group has been set, it cannot be edited. If you decide to
use this security feature, verify that all users who need access to the
Product ID are members of the associated Windows domain group.
From the Activation Server administration page (for how to access, see section 5.3) enter
Domain Security Groups for your Product IDs, and then click Save.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Commissioning the Mini Activation Server 33
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Initial user deployment 34
Individual users will subsequently need to run the Activation Wizard on their PCs,
entering your Mini Activation server‟s name.
Each user should be provided with the Concurrent Activation Licensing Guide.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Usage Logging 35
7 Usage Logging
The Mini Activation server can optionally record activation usage in an MS SQL database,
to provide activation usage reports showing who by and when an Activation was obtained.
To enable usage logging and reporting, either your MS SQL database needs to be manually
configured (for example by your company‟s IT department or DBA), or if you can provide
SQL administrator credentials the Mini Activation server Setup can automatically undertake
the required configuration.
SQL server full name (including both the sever name and SQL instance name).
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Usage Logging 36
Finally load the Mini Activation status page (see section 5.2) to cause the changes to be
loaded by the Activation server, and then navigate to the usage reports (see section 7.3)
to verify the usage configuration has been successful.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Windows Domain Security Group 37
There are two ways in which to use a Windows Domain Security Group to protect your
Product IDs:
Lock an Activation to provide access to all your users who validate on your
network.
In this case, choose a security group to which all your users belong. Typically each
company‟s Windows domain will have a group called “<mycompany>\Domain
Users” (where <mycompany> is replaced by your company‟s Windows Domain
name), for example: MyTelCo\Domain Users
To provide fine control over which users can access the Activation.
A Windows Security Group is used that contains only those users who require
access to the Activation; typically a Windows Security Group would be created just
for this purpose. The membership of the chosen Windows Security Group can be
managed using the standard Windows administration tools – your IT department
are likely to be involved in this operation.
By default your Product IDs are not associated with a Windows Domain Security Group. To
enable this security feature just associate Windows Domain Security Group(s) with your
Product ID(s), as detailed below.
You might not want to create a new Windows Security Group. In this case, Local Activation
will accept the <mycompany>\Domain Users group (eg “MyTelCo\Domain Users”),
which is the group of all users on your domain.
If your Mini Activation Server has multiple Product IDs (for example, if multiple products
have been purchased), you may choose to associate a different Windows Security Group
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Windows Domain Security Group 38
with each Product ID. This would allow control over which group members could activate
which Product IDs.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Frequently Asked Questions 39
Local Activation enables the Actix software product to be used for a short period –
typically one hour. At the end of this Activation period, if the Actix product remains
in use and can use your local network to communicate with the local license
server, it automatically renews the Activation period. If the product‟s Activation is
not renewed, the Activation license expires and becomes available for use on a
different machine.
When a license activation period ends, are users prompted to extend the license
or are they simply disconnected?
When close to the Mini Activation expiry time, the Activation will automatically
attempt to renew over the local network every 15 minutes without prompting the
user.
If the last Activation was automatic and the default Activation period of 1 hour is
being used, when the user closes the Actix application then the Activation will
become available for another user.
If a longer Activation period has been selected and the user closes the Actix
application, their Activation will be retained until its expiry.
When a license is returned to the pool, can it be immediately re-used? If not, how
long until the license becomes active again?
If a Mini Activation is not automatically renewed (for example, the user is not
connected to a local network), it expires after the default period (typically 1 hour)
or when the user closes the Actix application (see question above).
The Activation is not returned to a pool, but expires at the end of the period, hence
it cannot be „returned to the pool‟ before its expiry point. Once an Activation has
expired, it becomes available again.
Will users lose their licenses if they disconnect from the local network?
Users can work disconnected from the local network until the Activation expiry
time. If they are connected to the local network, the Activation is renewed
automatically.
They might want to do this if, for example, users expect to disconnect from the
local network for a long period. By requesting an extended Activation period (for
the duration they expect to work disconnected) they can avoid the Activation
expiring while they are disconnected. If the Activation expires, the user will need
to connect to the local network to request a renewal.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Frequently Asked Questions 40
With the default period of Activation the system automatically frees up Activations
if the Activation is not being used, allowing other users to obtain the Activation.
When a user obtains a long Activation period, they block that Activation from being
re-used by others until it expires at the end of that longer period. So although it is
useful for people who need to work disconnected from the local network, you are
likely to obtain higher license utilisation by users not requesting long Activations.
See section 5.3.3 for details of how to set the maximum Activation period.
Are licenses assigned to users according to user MAC or user-IP, or is it just one
license less out of the pool?
Mini Activations are assigned per user session for each machine. The user is based
on the user‟s login name, and the machine is based on a machine fingerprint from
the activation technology used by Actix. So if for example, a user obtained a
license on one PC, and before that license expired, the same user obtained a
license on another PC, that user would have two Mini Activations in total.
If, for example, there are 9 Activations, and 9 users are sharing them, then the
users should be able to work without any restrictions. If many more users want to
share them, the number of active users at any one time is limited to 9 Activations.
What happens if the files on the Mini Activation server containing Activation
information are corrupted or deleted?
All current Activations will continue until their designated expiry times, at which
point the individual Activation may be renewed or a longer expiry time requested.
What happens if someone removes the dongle on the Mini Activation server?
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Frequently Asked Questions 41
A client machine cannot Activate, the Activation Wizard on the client reports a
Communications Error, what do I do?
Typically this indicates a network connection issue from the client to the Mini
Activation server. To verify this is the case, check each of the items in the table
below, starting at the top row, and only proceed to the next if the expected
outcome is successful.
logon to the See expected output If the status page fails to load, it indicates
machine hosting in section 5.2 Verify a possible problem with the Actix Mini
the Mini Activation Server status Activation service, check:
server and open the 1) The IIS configuration (see the section
Mini Activation above for your OS for installation
server page by details of Microsoft‟s Internet
opening the URL Information Server).
http://127.0.0.1/ac
2) Installation of Mini Activation Server.
t in Internet
Explorer
logon to the Check the Mini If the status page fails to load using the
machine hosting Activation server server name, it indicates problems with
the Mini Activation status page loads resolving the DNS name of the server.
server and open the into the browser Check you have entered the server name
Mini Activation correctly. If this does not resolve the
server page by issue, seek assistance from your IT
opening the URL department.
http://myserver /act
in Internet Explorer
Where myserver is
the name of the
server hosting your
Mini Activation
server.
Examine the Mini Status page contains The Mini Activation server has failed to
Activation server “No dongle detected. detect its dongle.
page status (from Please attached the The server‟s dongle must be left attached
the previous step) dongle to the to the server for the Mini Activation server
Activation Server to operate.
and retry”
Reattach the dongle to the server.
<same as above> Status page contains The Mini Activation server has detected its
“No Product IDs dongle successfully.
found, please The Mini Activation server requires
reactivate this activating using the Actix global activation
Activation Server to server.
re-obtain the data
Follow the instructions in section 5.1
from Actix”
Activation of your Mini Activation server
<same as above> Status page contains The Mini Activation server is successfully
“Product IDs served configured to serve the Product IDs listed
by this server” on this status page.
Verify the Product ID being entered on the
client machine. Typically this condition is
due to a typo when entering the Product
ID on the client into the Activation Wizard.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Frequently Asked Questions 42
My client machines use a web Proxy, how do I configure access for them to the
Mini Activation server?
On the client machine, check the proxy configuration by using Internet Explorer to
open the URL http://yourServerName/act, where yourServerName is the name
of the server hosting your Mini Activation server.
See the FAQ item “A client machine cannot Activate, the Activation Wizard on the
client reports a Communications Error, what do I do?”
When entering a Domain Security group, I get the error message “validation
failed, please check the name“
Check that you have entered the name of the Windows Domain Security group,
and verify with your IT department it is the correct name to use.
Check that your server is still a valid member of your company‟s domain network
(See section 3.3 for more details).
Check you have logged onto your machine using your domain account name rather
than a local user account. It‟s likely that any local account is not a member of your
company‟s domain network.
If you are working remotely from your company‟s office, check that your machine
can access your company‟s network.
Use the „whoami.exe‟ tool (see section 0) to verify you are a member of the
required windows domain security group.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Frequently Asked Questions 43
Only users who are local Administrators on the Activation Server machine can
access the Mini Activation Server administration pages. How can I allow others
access to these pages?
An administrator familiar with XML can edit the actserver.xml configuration file
(“%ProgramFiles%\Actix\Activation Server\act\actserver.xml” (or on
64bit operating systems “%ProgramFiles(x86)%\Actix\Activation
Server\act\actserver.xml”), to change the protection to the Activation Server
admin pages. Editing this settings file should only be undertaken by a skilled
administrator; invalid changes could stop your activation server. Once edited,
reload your Activation Server status page to pick up changes to this file.
www.actix.com
Actix Mini Activation Server Administration Guide July 2011 Frequently Asked Questions 44
www.actix.com