Installing App Controller
Updated: June 1, 2015
Applies To: System Center 2012 - App Controller, System Center 2012 SP1 - App Controller, System Center 2012 R2 App Controller
This section provides step-by-step instructions for installing System Center 2012 - App Controller. After you install App Controller, see the section Configuring App Controller for instructions on how to configure App Controller.
To install the App Controller server, see the section How to Install the App Controller Server. To install the Windows PowerShell Module for App Controller, see the section How to Install the Windows PowerShell Module for App Controller.
The procedures in this section describe how to install System Center 2012 - App Controller server.
Before you begin the installation of App Controller server, ensure that you have a computer with a supported version of Microsoft SQL Server installed and running. If you require support for 4 byte Unicode strings, ensure before installing that the database collation is set to one of the _100_ collations; for example, Chinese_Simplified_Pinyin_100_. If you do not want to set the entire SQL Server database to have a _100_ collation, create an empty database for App Controller to use, and then set the collation sequence of that database to be one of the _100_ collations. A full list of _100_ collations is available from the Windows Collation Name topic in the Transact-SQL Reference on MSDN.
If there is a problem with Setup completing successfully, consult the log files that are located in the %LOCALAPPDATA%\AppController\Logs folder (for System Center 2012 - App Controller) or \ProgramData\AppControllerLogs (for App Controller in System Center 2012 SP1).
In order to install the App Controller server, you must be logged in as a domain user with membership in the local Administrators group, or equivalent, on the computer that you are configuring. This account must also have at least DBO permission on the database that will be used.
To install the App Controller server
On your installation media, right-click setup.exe, and then click Run as administrator.
Before beginning the installation of App Controller, close any open programs and ensure that there are no pending restarts on the computer. For example, if you have installed a server role by using Server Manager or have applied a security update, you may need to restart the computer and then log on to the computer with the same user account to finish the installation of the server role or the security update.
On the main setup page, click Install.
On the Product registration information page, provide the appropriate information and then click Next. Review the license terms, select the I have read, understood, and agree with the terms of the license agreement check box, and then click Next.
The computer on which you are installing the App Controller server will be checked to ensure that the appropriate hardware and software requirements are met. If a prerequisite is not met, a page will appear with information about which prerequisite has not been met and how to resolve the issue. If all prerequisites have been met, the Select the installation location page will appear.
For information about hardware and software requirements for App Controller, see System Requirements for System Center 2012 - App Controller.
On the Select the installation location page, use the default path or select a different installation path for the App Controller program files, and then click Next.
On the Configure services page, specify the account that will be used by App Controller services. You can configure App Controller services to use either the Network Service account or a domain account.
If you specify a domain account, it is strongly recommended that you create an account that is specifically designated to be used by App Controller services.
You can also configure the port that will be used by App Controller services.
This port is used for communication between App Controller services only. You do not need to configure the firewall on the computer running App Controller to allow access to this port.
On the Configure website page, specify the following:
IP address: Select an IP address from the IP address list or type an IP address that users can use to access this site.
Port: Type the port on which HTTP.sys must listen for requests made to this website. If you specify a port different from the default port (443 for HTTPS), clients must specify the port number in requests to the server or they will not connect to the Web site.
SSL certificate: Select whether you want App Controller Setup to generate a self-signed certificate or use a previously imported certificate for SSL.
To add or configure server certificates, use the Server Certificates feature in IIS Manager.
If you use a self-signed certificate, the certificate must be added to the Trusted Root Certification Authorities store of all computers that will access the App Controller website. Some browsers will fail to display App Controller if the certificate is not trusted. It is recommended that you use a certificate from a trusted certification authority instead of using a self-signed certificate.
The port that you assign during the installation of App Controller cannot be changed without uninstalling and reinstalling App Controller.
After you have configured the website binding to be used by the App Controller server, click Next.
On the Configure the database page, specify the following:
Server name: Type the name of the computer that is running SQL Server. If you are installing the App Controller server on the same computer that is running SQL Server, the Server name will be prepopulated with the name of the computer.
Port: Type the port to use for communication with the computer that is running SQL Server. By default, this value is not required and is therefore left blank.
Instance name: Select or type the name of the instance of SQL Server to use. There will be a short delay while the instance names are populated in the list. The list of available instances may not correspond to the Port specified above.
Database name: Type the name of the database to use. The account with which you are installing the App Controller server must have at least database owner (dbo) permissions in the specified database. If the specified database does not exist and the current user has the appropriate permissions, the App Controller setup wizard will create it for you. If you are performing a high availability installation, the second and subsequent server installs need to use the same database as the first server.
Only one App Controller database can be installed per SQL Server instance.
After you have configured the database to be used by the App Controller server, click Next.
On the Configure encryption key page, select the exported encryption key file and provide the appropriate password, and then click Next. These two values are specified when exporting the encryption key from an existing App Controller installation.
This screen will only appear when using an existing App Controller database. This is required if you are setting up a highly available deployment of App Controller. Use the Export-SCACAesKey cmdlet to export the encryption key. See Cmdlets in System Center 2012 - App Controller for more information on how to use cmdlets.
On the Help improve System Center 2012 - App Controller page, select whether or not you want to opt-in to the Customer Experience Improvement Program (CEIP) and use Microsoft Update, and then click Next.
If you have previously chosen to use Microsoft Update on this computer or it is enabled by Group Policy, the option may be disabled.
On the Confirm the settings page, review your selections and do one of the following:
Click Previous to change any selections.
Click Install to install the App Controller server.
After you click Install, the Installing components page appears and installation progress is displayed.
On the Setup completed successfully page, do one of the following:
To open the App Controller website when you close the setup wizard, ensure that the Start the App Controller website when Setup closes check box is selected.
If Setup is unable to complete, you are provided with a list showing which items could not be installed, along with links to the related log files. Review these logs for more information about where the Setup issue occurred. For additional information about Setup issues, see Troubleshooting System Center 2012 - App Controller and the Installation section of the Release Notes for System Center 2012 - App Controller.
By default, App Controller is enabled to prompt users to sign in by entering their Active Directory user name and password. The following procedures describe how to configure App Controller to use the user’s current Windows credentials to automatically sign on.
To verify or change the authentication method
Open IIS manager on the App Controller server.
Select the App Controller website.
Expand the website and select the /api node.
Enable Windows Integrated Authentication.
Disable Basic Authentication.
To turn on constrained delegation
Log on using an account that has OU Administrator privileges in Active Directory Domain Services. Ensure that this account is also granted the SeEnableDelegationPrivilege user right (for example, a domain administrator could run the command ntrights -u domain\user +r SeEnableDelegationPrivilege on a domain controller, where domain/user represent the domain and account name for the account).
In Active Directory Users and Computers, expand the App Controller Machine node.
Click the Delegation tab.
Select the Trust this computer for delegation to specified services only option.
Select the Use any authentication protocol option.
Click Add and then do one of the following:
If the VMM management server is running under the Local System account, enter the name of the VMM management server and select HOST, and then click OK.
If the VMM management server is running under a domain account, enter the name of domain account and select SCVMM, and then click OK.
Click Add, and select the Common Internet File System (CIFS) service.
Enter the name of the VMM management server, and then click OK.
Repeat Step 7 for each VMM Library Server and for each network file share added to App Controller.
Restart the App Controller management server.
The procedures in this section describe how to install the Windows PowerShell Module for App Controller.
Before you begin the installation of the Windows PowerShell Module for App Controller, ensure that you have a computer with a supported version of Windows PowerShell installed or enabled.
Membership in the local Administrators group, or equivalent, on the computer that you are configuring is the minimum requirement to complete this procedure.
To install the Windows PowerShell module for App Controller
On your installation media, right-click setup.exe, and then click Run as administrator.
On the main setup page, click Install Windows PowerShell module for App Controller.
On the End-User License Agreement page, review the license terms, select the I accept the terms in the License Agreement check box, and then click Next.
Click Install to install the Windows PowerShell Module for App Controller.
Verify the installation results and then click Finish.
You may prefer to install App Controller at the command prompt if you want to install App Controller without user intervention.
Use the Setup.exe program in the Installation folder of the product CD to install and uninstall App Controller at a command prompt. The following sections list the various parameters you can use with Setup.exe. Command-line parameters can be used in any order.
Uninstalling App Controller using the command line will always delete the database. If you need to retain the database, use the interactive UI.
The following table describes the parameters you can use with Setup.exe to install App Controller.
/help or /?
Displays the Help dialog box.
Specifies to install the product without displaying the user interface.
Runs Setup interactively if not specified.
Checks for product updates from Microsoft Update before starting Setup.
Does not check for updates if not specified.
Specifies the folder location for installing the App Controller binaries.
Uses %PROGRAMFILES%\Microsoft System Center 2012\App Controller if not specified.
Specifies the Microsoft product key supplied with your purchase of App Controller.
If not specified, App Controller will be in evaluation mode.
Specifies the account used to run App Controller processes.
Specifies the ServiceUsername account password.
Specifies the port used to run App Controller processes.
Uses port 18622 if not specified.
Specifies the IP address for the App Controller website binding.
Uses all unassigned IP addresses if not specified.
Specifies the port for the App Controller website binding.
Uses 443 if not specified.
Specifies the SSL certificate for the App Controller website binding.
Generates a self-signed certificate if not specified.
Specifies the Microsoft SQL Server name and instance where the App Controller database is to be installed.
Specifies the Microsoft SQL Server database name for the App Controller database.
Uses the name AppController if not specified.
Required only when using an existing database
Specifies the AES key used to encrypt and decrypt values in the App Controller database.
Required only when using an existing database
Specifies the password used to decrypt the AES key file.
Enables App Controller to send anonymous feedback to Microsoft as part of the Customer Experience Improvement Program.
Does not enroll in CEIP if not specified.
Configures the server to use Microsoft Update.
Does not enroll in Microsoft update if not specified.
Indicates that you have read, understood, and agree with the license terms.
Use the following code example to install App Controller:
Setup.exe /Silent /SelfUpdate true /InstallPath “C:\AppController” /ServiceUsername “CONTOSO\AppControllerSrvAcct” /ServicePassword “P4ssw0rd!” /ServicePort 18623 /IP 10.1.2.3 /Port 444 /SslCert 2d8bfddf59a4a51a2a5b6286c22473108395624d /SQL “CONTOSOSQLSRV,1434\Instance1” /SQLdb AppControllerDatabase /AesKeyFilePath “C:\backup\AppControllerAesKey” /AesKeyPassword “P4ssw0rd$” /CEIP /MU /acceptEula