Vision Desktop App Setup

• 

Desktop App Process Flow

Setup

1. Enable TLS1.2
2. Disable Enhanced IE Security
3. Disable RDS Compatibility
4. Open CMD with Administrative rights on the Vision Server and run the command; md “C:\ProgramData\Docman 10”
5. Download the SignalR settings file using the link below and save it in the newly created folder; C:\ProgramData\Docman 10 Download
6. Install the latest desktop app (substitute general for priority as required in the link below.)https://apps.docman.com/external/software/desktopapp/gp/general/DocmanDesktopServices.exe

Setting Up Port Bindings

Configuring Port Bindings (Option 1)

Allow the Desktop Application Service to setup the SSL port binding, this will require the System account to have access to NETSH and the private keys of the dts.docman10.com certificate. If it doesn’t have access to do this when the certificate is renewed you will need to rebind all the ports manually!

The service will automatically bind each port in between the lower and higher port range set in the SignalR_settings.json. You can monitor the progress in Event Viewer > Administrative Events > HttpEvent (source type). It will generate a warning for each port in the settings_signalr file you downloaded in step 2. By default this has a range from 8086 to 8125, the lower port must always start with 8086, otherwise the Desktop Application Service won’t initialise.

Once the Desktop Application Service completed the SignalR_settings.json will be updated with an additional property. If you ever need to rebind the ports to the SSL you can either remove this or set the value to false, then restart the Desktop Application Service.

“CertificateBindingsCheckPerformed”:true

Configuring Port Bindings (Option 2)

If the system account doesn’t have access to the private keys of the dts.docman10.com certificate or access to NETSH option 1 will fail and anyone that launches the desktop app will generate an error in Event Viewer because the SSL port binding and ACL won’t exist.

To resolved this do the following;

1. Login as a Local Administrator
2. Open MMC as Administrator and add the Certificate Snapin when prompted select the managed certificates for the ‘Computer Account’
3. Expand the Certificate store Personal > Certificate
4. Actions > All Tasks > Import > “C:\Program Files (x86)\PCTI Solutions Ltd\Docman Desktop App\dts_docman10_com.cer”
5. THIS HAS TO BE DONE BY CLOUDOPS AS IT REQURES A PASSWORD!
   Actions > All Tasks > Import > “C:\Program Files (x86)\PCTI Solutions Ltd\Docman Desktop App\dts_docman10_com.pfx”
6. Select dts.docman10.com then right click and go to All Tasks > Manage Private Keys…
7. Add all domain users in here with ‘Read’ permission and click apply, then Ok.
8. Open CMD as Administrator
9. Copy contents of this text file from your browser into the CMD you just opened. It will remove any partial config the Desktop Application Service attempted to configure and then applied ACL and SSL port binding for each port. (Link to CMD file)
10. Now close the Desktop App, reopen it and launch Docman 10.