Prior to beginning the process for a new installation, please ensure that the following list of requirements is implemented to ensure a smooth installation:
- Enable Access to https://services.akcelerant.com
- Network Access: Storage of Passwords and Credentials
- Create an Temenos Lifecycle Management Suite Service Account
- Obtain Requirements
- Obtain Installation Key(s)
- Validate the Version of the Temenos Lifecycle Management Suite
- Validate Hardware and Software Requirements
- Create an Temenos Customer Care Domain Account
- Verify ASP.NET v4.0.30319 is Allowed
- Verify the SQL Server is running in Mixed Mode
- WCF Services: HTTP Activation
- ODBC Driver 11 for SQL Server
Enable Access to https://services.akcelerant.com
This URL is used to communicate with the Temenos installation web services during the installation to validate the license key as well as log the details of the installation.
 |
This must be completed on all servers where a Lifecycle Management Suite installation is being run. |
- Ensure the server processing the installation has access.
- Allow unfiltered access and disable authentication to the site https://services.akcelerant.com on firewalls or proxy servers.
Network Access: Storage of Passwords and Credentials
|
This must be completed on the server where the Process component is being installed. |
Within the Local Group Policy Editor, navigate to Windows settings > Security Settings > Local Policies > Security Options, select the Network access: Do not allow storage of passwords and credentials for network authentication policy. Update this policy's local security setting from Enabled to Disabled.
 |
The Lifecycle Management Suite uses the Windows Task Scheduler to run an executable, which must be started whether a user is logged on to the server or not. The only way to force this process to run without being logged on is to store the credentials as part of the scheduled task. |
Create a Lifecycle Management Suite Service Account
The Lifecycle Management Suite requires a service account to run many components of the installation. This account can either be a domain account or a local account. Use a local account if installing all components of the Lifecycle Management Suite on the same server. A domain account is required for multi-server configurations to ensure a single user is able to authenticate on each configured server. The service account (local or domain) should be customized with the following:
- Properties
- User cannot change password
- Password never expires
- 24-hour per day network access
- Permissions
- Read/Write permissions to the Windows Temp directory (typically C:\Windows\Temp). The Lifecycle Management Suite uses COM Interoperability for some of its features. At runtime, the .NET Framework may create and execute files in the temp directory.
- Read/Write permissions to the Akcelerant share folder. Since the share folder is used to store several types of critical files, it is advised that full access is granted.
- Processes Configured to Run
- Anonymous requests in IIS (application pools)
- COM+ application (dlls)
- Scheduled tasks (daily processes)
- Database access (if using a trusted connection)
|
Within Local Security Policy > Local Policies > User Rights Assignments, ensure user (service account) is added to "Log on as a batch job" and "Log on as a service." |
|
Do not log into the web server with the Temenos service account when installing the Lifecycle Management Suite, as it results in the disruption of critical services when logging off the server. When running the installation, use another local admin account and follow the prompts to enter the Temenos service account. |
Obtain Requirements
The following requirements must be obtained for the install:
|
These items are needed in order to complete a successful installation. |
- The Servers where Lifecycle Management Suite Components are being installed.
- If the financial institution is using a multi-server setup, it should be determined where the features in the Choose Features to Install step of the installation should be installed.
|
Please contact Temenos if assistance is needed in determining where features should be installed. |
- Domain, Username and Password for the Temenos service account
|
Within Local Security Policy > Local Policies > User Rights Assignments, ensure user (service account) is added to "Log on as a batch job" and "Log on as a service." |
- The SQL user credentials the installation process uses to create the database.
|
The SQL account requires administrative rights (sysadmin) on the SQL server. |
- The SQL user credentials the Lifecycle Management Suite uses to connect to the database (client connection).
- Share Directory location.
- A directory must be created that is accessible to the web, process and application servers. The Lifecycle Management Suite stores various documents in this directory which grows over time. To accommodate this growth, the directory should not be created on a drive with limited space available. There are no naming requirements for this folder, but it must be accessible to all servers in the configuration with the same name. When prompted for the share folder path during installation, it is suggested that a UNC path be provided. For example: \\yourserver\sharename.
- Determine if Reporting Services is using SSL.
- Reporting Services Server (if applicable).
- Reporting Services Folder (if applicable).
Obtain Installation Key(s)
The installation key is unique to every organization. Each instance of the Lifecycle Management Suite being installed requires its own key. During the installation, a prompt requests the installation key. Once installed, the installation key is available on the Collaboration Portal, along with other details and options regarding the installation.
|
Please contact an Temenos Customer Care Representative to receive the institution’s installation key. |
|
If the installation key is not entered, an institution is unable to proceed with the installation.
|
Validate the Version of the Lifecycle Management Suite
The Lifecycle Management Suite release must be at minimum of 10.31.15.
Validate Hardware and Software Requirements
Validate that all hardware and software requirements are met.
- Please refer to the Supported Sortware document for more information on software requirements.
|
“Express” editions of SQL Server are not supported. |
Create an Temenos Customer Care Domain Account
After the installation has completed and throughout the term of the support agreement with Temenos, the assistance of Temenos Customer Care may be required to connect to servers and troubleshoot issues. At minimum, this account may require read-only access to the SQL Server, more specifically to the Lifecycle Management Suite database.
|
The Temenos service account should not be used for these connections to the server as it can cause critical failures in the Temenos application when the user logs off under that account. |
Institutions are able to grant access to an Temenos Customer Care Representative if they need to make changes to the database to correct issues. Click here for more information on the SQL database membership roles.
|
The role of ddladmin provides the support representative with the most flexibility and is the most common role granted. The role of db_datareader is the minimum role required for troubleshooting. |
Verify ASP.NET v4.0.30319 is Allowed
- Within IIS Manager, choose the correct connection and select ISAPI and CGI Restrictions.
- Update the ASP.NET v4.0.30319 active server pages to be "Allowed.
Verify the SQL Server is Running in Mixed Mode
|
SQL server must be run in mixed mode because the installer requires both SQL Server and Windows Authentication modes. |
- In SQL Server Management Studio Object Explorer, right-click on the server and select Properties.
- On the Security page under Server Authentication, select the new server authentication mode and click OK.
- In the SQL Server Management Studio dialog box, click OK to acknowledge the requirement to restart SQL Server.
- In Object Explorer, right-click on the server and select Restart. If SQL Server Agent is running, it must also be restarted.
WCF Services: HTTP Activation
Within Control Panel > All Control Panel Items > Programs and Features, select Turn Windows features on or off. Ensure the HTTP Activation check box is selected within .NET Framework 4.0 Advanced Services > WCF Services.
ODBC Driver 11 for SQL Server
The Installation of SQL Command Line Utilities fails if the ODBC Driver 11 for SQL Server is not previously installed. Please visit
https://www.microsoft.com/en-US/download/details.aspx?id=36434 to install the ODBC Driver.
