doc stricat

­­­­this document outlines the technical requirements of emanager in addition to installation and upgrade procedures vvvvv la luna la lunaaa in the electronic version of this document, there are hyperlinks describing detailed installation instructions and basic information from the product vendors these hyperlinks are listed explicitly in appendix a links /#appendix a links hello my boyyy technical requirements emanager overview the emanager deployment typically consists of two servers an application server to host the emanager website and a database server for the emanager database emanager also requires a port operator pc for each port emanager can be connected to other services hardware requirements the hardware requirements in this document are minimum requirements the actual expected transaction level and the distribution of load during the workday must be considered the hardware requirements in this document are minimum requirements the actual expected transaction level and the distribution of load during the workday must be considered large customers with loads that vary a lot, such as during large campaigns like black friday, need to consider whether to scale their system permanently for peak capacity or to scale up before periods with a high expected load customers should always consult with their own it operations team to choose the best type of hardware for their type of application and configuration when extensions to the site are made, the hardware should be monitored and upgraded if necessary, to meet the increased load the application and the database must be installed on separate servers aaaa for any and all third party programs, we refer to the requirements and recommendations for the individual products the servers must be reachable for emanager support a vpn connection must be set up between element logic and the customer please see appendix c /#appendix c preferred vpn solutions for recommended vpn solutions application server this server will host the emanager web site and integration services hardware (minimum) name requirement processor 2 4 ghz 64 bits with 4 cores ram 24 gb (ecc) disk space 200 gb network adapter 1 gbit/s software name required version operating system minimum windows server 2016 r2 recommended latest version of windows server with long term support operating system language english (us) internet information services (iis) 10 0 or greater net framework 4 8 net 7 0 powershell minimum 3 0 recommended 5 0 octopus tentacle 2 6 5 or greater browser recent version of google chrome must connect to emanager server on ports 80 and 443, and reach google js servers will be installed during deployment if not pre installed network access application/service settings rapid7 insightops (logentries) details /#rapid7 insightops logentries octopus details /#octopus database server the database server will host the database for emanager it is recommended to split the sql server binaries, the data files, and the log files on separate drives for better performance and reliability hardware (minimum) name requirement processor 2 4 ghz 64 bits with 4 cores ram 24 gb (ecc) disk space 500 gb software name requirement server os windows server 2016 or higher sql server microsoft sql server 2016 sp2 or higher, 2019 or 2022 sql server management studio same version as sql server or higher note the same sql server version must be used for test and production maintenance the customer is responsible for maintaining the sql server and databases this also includes maintenance of hardware and software on the server to secure the efficiency of the database and reduce the risk of data loss, plans for maintenance of the database must be in place the minimum required tasks to include in the maintenance plans are as follows full database backup transaction log backup cleaning up old database backups index and statistics maintenance database integrity check all maintenance plans must be configured with a notify task to a system administrator in case any of the tasks should fail to execute element logic can provide documentation describing maintenance recommendations, but implementation is the customer’s responsibility port operator pc this is the emanager client pc that is located by each autostore port hardware name requirement processor intel i3 or equivalent ram 4 gb disk space 128 gb graphics card intel hd/uhd or equivalent supporting directx 9 or higher monitor resolution 1920x1080/full hd or higher size minimum 21’’ is recommended keyboard type touch touch pad is recommended must support the regional characters desktop/full size with alphabetic characters and numerals software name requirement operating system windows 10 or later browser recent version of google chrome must connect to emanager server on ports 80 and 443, and reach google js servers software requirements internet information services (iis) when emanager is configured to use a network share or local disk for import/export, the user account for the emanager application pool in iis must have access to this file share/folder see link in appendix a /#appendix a links for how to install iis on windows server octopus octopus deploy is used by element logic to push deployments from the element logic deployment servers to the customer’s environment the tentacle is a service running on the customer’s test and production application server and makes it possible for octopus deploy to automate installation steps locally on that server there are two options octopus tentacle (polling) and listening tentacle we recommend octopus tentacle (polling) octopus tentacle (polling) initiates communication with the octopus deploy server, reducing the need for inbound firewall rules it is suitable for environments with strict security policies or limited network access listening tentacle offers a more efficient deployment process by establishing a direct communication channel with the octopus deploy server this requires inbound firewall rules to allow communication from the octopus deploy server to the tentacle it is suitable for environments with stable network connectivity rapid7 insightops (logentries) rapid7 insightops is used to aggregate logs generated by the emanager application for troubleshooting and monitoring by element logic support and r\&d insightops is an easy to use, self hosted log management and analytics service it does not require a local installation, but it need some ports and ip address to be opened in the firewall to be able to send log data to the insightops cloud service emanager uses ssl when communicating with insightops, so customers must open for tcp traffic on port 443 for host eu data logs insight rapid7 com for more information see this link tokn tcp https //docs rapid7 com/insightops/token tcp/ google charts emanager uses the google charts javascript library to create the charts on the activity progress dashboard this library requires access to internet to function correctly web browser emanager is developed to support google chrome web browser chrome must be installed on all terminals that will be used with emanager, both for servers and port terminals test environment test environment requirements a test environment is required hardware and software requirements for the test environment are the same as the minimum requirements described in this document the test environment must be properly isolated from the emanager production environment this is important to avoid confusing the test and production databases and to ensure activity in the test environment does not affect the performance of the production server in a test environment, the emanager database and the emanager application can be installed on the same server note the same sql server version must be used for test and production test environment availability the test environment must be available for integration testing with wms/erp systems re creating issues from the production system testing of configuration changes testing of new emanager versions prior to upgrades when not in use the test environment can be powered off or scaled down appendix a links title link installing iis 8 on windows server 2012 https //docs microsoft com/en us/iis/get started/whats new in iis 8/installing iis 8 on windows server 2012 https //docs microsoft com/en us/iis/get started/whats new in iis 8/installing iis 8 on windows server 2012 installing and configuring listening octopus tentacle https //octopus com/docs/infrastructure/windows targets/listening tentacles https //octopus com/docs/infrastructure/windows targets/listening tentacles installing and configuring polling octopus tentacle https //octopus com/docs/infrastructure/windows targets/polling tentacles https //octopus com/docs/infrastructure/windows targets/polling tentacles appendix b – firewall configuration source ip/hostname/ip range destination ip/ hostname/ip/url port number tcp/ udp description emanager app server eu data logs insight rapid7 com 443 tcp, udp rapid7 insight new data log endpoint https //eur02 safelinks protection outlook com/?url=https%3a%2f%2fdocs rapid7 com%2finsightops%2ftoken tcp%2f%23endpoints\&data=05%7c01%7c%7c796d810ec6a64cfeeb2508da6eca6fd2%7cdbaef1534a3e40cd83cbc5e2e1c6a48a%7c0%7c0%7c637944113005214506%7cunknown%7ctwfpbgzsb3d8eyjwijoimc4wljawmdailcjqijoiv2lumziilcjbtii6ik1hawwilcjxvci6mn0%3d%7c3000%7c%7c%7c\&sdata=0%2bel%2b0axc7bgon1qihc6z%2bcquozs8x62fsdho42zbdc%3d\&reserved=0 emanager app server eu js logs insight rapid7 com 443 tcp rapid7 insight js endpoint https //eur02 safelinks protection outlook com/?url=https%3a%2f%2fdocs rapid7 com%2finsightops%2fpixel tracker\&data=05%7c01%7c%7c796d810ec6a64cfeeb2508da6eca6fd2%7cdbaef1534a3e40cd83cbc5e2e1c6a48a%7c0%7c0%7c637944113005214506%7cunknown%7ctwfpbgzsb3d8eyjwijoimc4wljawmdailcjqijoiv2lumziilcjbtii6ik1hawwilcjxvci6mn0%3d%7c3000%7c%7c%7c\&sdata=vagkxxrpb8xizstw4mbhg2rbtn%2bsocns3grfabneixo%3d\&reserved=0 emanager app server api logentries com 443 tcp rapid7 insight old data log endpoint emanager app server https //www gstatic com/charts/ https //eur02 safelinks protection outlook com/?url=https%3a%2f%2fwww gstatic com%2fcharts%2f \&data=05%7c01%7c%7c796d810ec6a64cfeeb2508da6eca6fd2%7cdbaef1534a3e40cd83cbc5e2e1c6a48a%7c0%7c0%7c637944113005214506%7cunknown%7ctwfpbgzsb3d8eyjwijoimc4wljawmdailcjqijoiv2lumziilcjbtii6ik1hawwilcjxvci6mn0%3d%7c3000%7c%7c%7c\&sdata=btkjwgt%2bj7wzgxoyezsltf%2fnx2suy29j5wvqrna5kag%3d\&reserved=0 443 google charts api emanager app server autostore application server 80 tcp autostore http interface emanager app server autostore application server 443 tcp autostore http interface (https) emanager app server sql server 1433 tcp default instance running over tcp https //eur02 safelinks protection outlook com/?url=https%3a%2f%2fdocs microsoft com%2fen us%2fsql%2fsql server%2finstall%2fconfigure the windows firewall to allow sql server access%3fview%3dsql server ver15%23ports used by \&data=05%7c01%7c%7c796d810ec6a64cfeeb2508da6eca6fd2%7cdbaef1534a3e40cd83cbc5e2e1c6a48a%7c0%7c0%7c637944113005370735%7cunknown%7ctwfpbgzsb3d8eyjwijoimc4wljawmdailcjqijoiv2lumziilcjbtii6ik1hawwilcjxvci6mn0%3d%7c3000%7c%7c%7c\&sdata=zl4nzkrvwcqcyaetbnpchvs6oye%2bgxddnvvuxv%2ffose%3d\&reserved=0 emanager client emanager app server 80 tcp emanager client to server http communication emanager client emanager app server 443 tcp emanager client to server https communication octopus elementlogic no emanager app server 10933 tcp octopus listening tentacle https //eur02 safelinks protection outlook com/?url=https%3a%2f%2foctopus com%2fdocs%2finfrastructure%2fdeployment targets%2fwindows targets%2ftentacle communication\&data=05%7c01%7c%7c796d810ec6a64cfeeb2508da6eca6fd2%7cdbaef1534a3e40cd83cbc5e2e1c6a48a%7c0%7c0%7c637944113005214506%7cunknown%7ctwfpbgzsb3d8eyjwijoimc4wljawmdailcjqijoiv2lumziilcjbtii6ik1hawwilcjxvci6mn0%3d%7c3000%7c%7c%7c\&sdata=dsg6degawhktmlhl3ubchkohtcxb9fi0bvkzvs0zqri%3d\&reserved=0 emanager app server octopus elementlogic no 10943 tcp octopus polling tentacle https //eur02 safelinks protection outlook com/?url=https%3a%2f%2foctopus com%2fdocs%2finfrastructure%2fdeployment targets%2fwindows targets%2ftentacle communication\&data=05%7c01%7c%7c796d810ec6a64cfeeb2508da6eca6fd2%7cdbaef1534a3e40cd83cbc5e2e1c6a48a%7c0%7c0%7c637944113005214506%7cunknown%7ctwfpbgzsb3d8eyjwijoimc4wljawmdailcjqijoiv2lumziilcjbtii6ik1hawwilcjxvci6mn0%3d%7c3000%7c%7c%7c\&sdata=dsg6degawhktmlhl3ubchkohtcxb9fi0bvkzvs0zqri%3d\&reserved=0 appendix c – preferred vpn solutions solution pros cons site to site · reduced cost compared to other vpn solutions · element logic is only able to access the autostore and emanager servers, the network is securely isolated forticlient · easy to set up and use · strong encryption · support for two factor authentication no automatic update feature pulse secure · easy to add additional connections· can integrate with directory services like ad and ldap · support for two factor authentication, saml 2 0, pki, iam and digital certificates pulse connect secure provides a faster connection citrix vpn · well known · fast · easy to keep an overview over the connections · support for two factor authentication can require multiple launches change log version date author description 1 5 1 04 02 2021 ole kristian hagen · moved the network access section from database server to the application server section · updated the internal links in the network access table · renamed the “internet access” to “google charts” and moved it under “application server configuration” 1 6 0 01 03 2021 ole kristian hagen · added a section for hw and sw requirements for the port operator pc 1 6 1 01 03 2021 ole kristian hagen · updated error in port operator pc processor requirement 1 6 2 11 03 2021 ole kristian hagen · updated port operator pc – monitor – resolution to 1920x1080/full hd 1 6 3 18 03 2021 ole kristian hagen · changed link to octopus tentacle communication modes 1 6 4 27 01 2022 ole kristian hagen · changed info about firewall settings for application logging to rapid7 insightops 1 6 5 30 06 2023 stian buch larsen line brandt wethal · updated company logo · corrected misspellings · changed chapter numbering · updated 2 2 1 network port requirements diagram and moved the diagram to 2 1 overview · added net 7 as software requirement for application server · removed ole db requirement · updated sql server version · updated os version for port operator pc · moved google js from application server to port operator pc · changed information about octopus tentacle changed recommendation from using octopus listening tentacle to octopus tentacle (polling) and added information about the two options · removed information about rabbit mq (no longer a requirement) · added chapter test environment · added appendix b firewall configuration 1 6 6 26 10 2023 line brandt wethal · changed recommendations for how to make servers reachable for support, added appendix c · added requirement for application and database to be installed on separate servers · added chrome to the software requirements for the application server · specified that the sql server must be microsoft sql 1 6 7 12 12 2023 line brandt wethal · added section 2 2 2 3 maintenance · specified that ms sql server 2016 must be sp2 or higher 1 6 8 04 12 2025 jon arlov added required os language for application server pdf version