Steps

Check Java and set system wide environment variables

Make sure you have Java installed, JRE_HOME and JAVA_HOME set according to the Installation requirements.

Unpack the Software

Unzip the Zip archive into the C:\Program Files\Ubisecure folder.

• Right click on the file ubilogin-sso-8.x.x.xxxx.zip and choose Extract All…

• Enter the directory C:\Program Files\Ubisecure and click Next.

Modify the Configuration Template

Windows 2012: Open the command prompt using Run as Administrator mode. Administrative rights are required in order to install the required system services. See Figure 1.

Copy the configuration template to the C:\Program Files\Ubisecure\ubilogin-sso\ubilogin folder:

cd "C:\Program Files\Ubisecure\ubilogin-sso\ubilogin"
copy config\win32.config .

Open win32.config file in a text editor. Modify the public visible URL address of the Ubisecure SSO deployment, which is set with key uas.url. The installation is accessible from the local machine only if the value is left to localhost. The resulting line for uas.url might look like the following:

uas.url = https://sso.example.com:8443

Example of modified Accounting Service related settings:

accounting.url = https://manage.example.com
accounting.proxy.local.url = https://localhost:8442
accounting.datasource.url = jdbc:postgresql://databasehost:5432/accountingdb
accounting.datasource.username = accounting_user
accounting.datasource.password = Wsop%6deE65-_ftl+tY

Create the configuration files

Create the configuration files with the setup.cmd script:

cd "C:\Program Files\Ubisecure\ubilogin-sso\ubilogin"
.\setup.cmd

Install and prepare PostgreSQL

Since SSO version 8.4 with Accounting Service feature access to PostgreSQL database is required for the service to run. If you have already installed Ubisecure CustomerID you can use the existing PostgreSQL installation but you need to create a specific database for this purpose. The necessary tables are automatically created during the initial startup of the Accounting Service.

See PostgreSQL preparation on Windows for more information and steps to accomplish.

Configure Accounting Service

Before continuing with the installation which will start the Accounting Service you need to enter and save the secret key contents in the location referred by accounting.secret-key-location in win32.config. See Accounting Service security about the usage of the key for pseudonymisation.

You may also customise other Accounting Service configuration settings for your needs, which is recommended. See Accounting Service additional configuration about the properties to set.

Install and start Ubisecure Directory

Install ADAM or AD LDS as Ubisecure Directory according to your platform:

• On Windows 2008 R2 and Windows 2012, install AD LDS using Server Manager:
  Server Manager →  Roles → Add Roles → Next → Active Directory Lightweight Directory Services → Add Required Features
• On Windows 2016 R2 install AD LDS using Server Manager: Server Manager →  AddRoles and Features → Role-based or feature-based installation
   → Next → Select current server → Next → Active Directory Lightweight Directory Services
   → Add Required Features → Include Management Features → Select Features (no changes)
   → Next  → Confirmation → Install 
• On Windows 10 turn Active Directory Lightweight Directory Services feature on and configure UbisecureDirectory instance with Active Directory Lightweight Directory Services Setup Wizard - enter the same information as in C:\Program Files\Ubisecure\ubilogin-sso\ubilogin\ldap\adam\adaminstall.txt

Now run the adaminstall.cmd script to automatically configure ADAM or AD LDS and start it:

cd "C:\Program Files\Ubisecure\ubilogin-sso\ubilogin\ldap\adam"
.\adaminstall.cmd

Install and start Ubisecure SSO Tomcat and Accounting Service as Windows Services

Run the Tomcat install script to install the Ubisecure SSO Tomcat as a service. Since v. 8.4 also the Accounting Service shall be installed as such a service.

cd "C:\Program Files\Ubisecure\ubilogin-sso\ubilogin\config\tomcat"
.\install.cmd

The install script does the following:

1. Creates a self-signed SSL certificate for test purposes with the configured host name as the subject DN a.k.a owner.
2. Installs the applications in ubilogin/webapps for Ubisecure SSO Tomcat.
3. Installs Ubisecure SSO as a service.
4. Copies the Accounting Service configuration settings to /accounting/config directory.
5. Installs Accounting Service as a service.
6. Creates and configures a site named Accounting under System site with an OAuth 2.0 application named Accounting. This application is needed for the secured endpoints to access Accounting Service data. The application is allowed to a group named Accounting Users. The System Administrator user is by default added to this group but you can configure the users otherwise once Ubisecure SSO is running, see SSO Management UI Groups.
7. Starts Accounting Service
   1. On the first time the necessary database tables are created in your database.
   2. If you are doing the initial Accounting Service installation and the service does not start you may need to change the Accounting Service related settings in the win32.config file before continuing. see Change configuration settings during installation process in Windows. See also Troubleshooting Accounting Service.
8. Starts Ubisecure SSO

Continue on the page Installation finalization to verify that the installation was successful.