Show Hide

 

Feedback

  • Contents
 

Configuring IC SOAP Listener to work with IC 4.0 and 2015 or later

The IC SOAP Listener install does not properly handle certificate mappings necessary for connecting to the IC 4.0 and 2015+ Notifier. This article describes the steps required to enable IC SOAP Listener to function in an CIC 4.0 or COC 2015+ environment when installed on a separate web server.

Perform these steps after the CIC SOAP Listener component is installed on the web server and patched to the latest SU level.

Update the IC User Configuration

  1. Navigate to C:\Program Files (x86)\Interactive Intelligence\SOAPListener\Filter directory.

  2. Edit the I3SOAPISAPIConfig.xml file.

  3. Update tag values, where:

    • ICSERVER is the name of the CIC server to which a connection should be made

    • ICUSERNAME is the name of a valid user account on the CIC server

    • ICPASSWORD is the password for CC user

  4. Save the file.

Update the Registry

  1. Open the registry by navigating to Start | Run | regedit.

  2. Select the HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Interactive Intelligence\Certificates registry key. If this key does not exist create it.

  3. Under this key there should be an entry named Path with type REG_SZ and a data value of C:\Program Files (x86)\Interactive Intelligence\Certificates. If this key does not exist create it.

  4. Right-click the HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Interactive Intelligence\Certificates key. Then select Permissions…​.

  5. Grant the NETWORK user Full Control access over this key.

    Use the NETWORK user not the NETWORK SERVICE user.

Update Environment Variables

  1. Right-click My Computer* and select *Properties.

  2. Select Advanced System Settings.

    • Click the Environment Variables button.

  3. Add a new System variable with a Variable name of ININ_Certificates. Set a Variable value of C:\Program Files (x86)\Interactive Intelligence\Certificates\<WEB SERVER NAME>_ININ_Certificates.xml where <WEB SERVER NAME> is the name of the web server the IC SOAP Listener component was installed on.Updating the Certificates Directory:

  4. Navigate to C:\Program Files (x86)\Interactive Intelligence.

  5. Right-click the Certificates folder and select Properties. If this folder does not exist create it.

  6. Select the Security tab

  7. Grant the NETWORK user Full Control over this directory

    Use the NETWORK user not the NETWORK SERVICE user.

  8. Restart the server.

  9. After the restart, use the command gensslcertsu -c <notifier> -f to generate certificates against each IC server the SOAP Listener will connect to.

Update IIS Settings

  1. Under ISAPI and CGI Restrictions, add a new entry, specifying the I3SOAPISAPIU.dll, and select "Allow extension path to execute".

  2. Under SoapListener web site, select Handler Mappings.

  3. Add a Module Mapping.

    • Request path: *.dll

    • Module: IsapiModule

    • Executable: browse to I3SOAPISAPIU.dll

    • Enable Execute under the Access tab in Request Restrictions

  4. Select the Application Pools tab, then select the app pool that the default website is configured under, then "Advanced Settings".

  5. For SoapListener, set 32-Bit Applications to True.

  6. Set Managed Pipeline Mode to Classic.

  7. Reboot the server.

Additional steps for switchover pairs

On each CIC server:

  1. Open regedit and navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Interactive Intelligence\Certificates. Right click on this registry key, and select Permissions. Click on the Add button, and enter NETWORK SERVICE for the user. Give this user Full Control to allow the user permissions to access the registry key.

  2. Open Windows Explorer.

  3. Navigate to the \I3\IC\Certificates directory.

  4. Select the <Machine Name>_ININ_Certificates.xml, <Machine Name>_PrivateKey.bin and <Machine Name>_PublicKey.bin files. Right click and then select Properties.

  5. Click on the Security tab. Then click Add. Enter NETWORK SERVICE for the user, and give Full Control to this user to allow proper file access to these files.

  6. Do the same for the \I3\IC\Certificates\Client\Remote_Client\<Notifier Name>\<Notifier Name>_TrustedCertificate.cer file.