Procedure 2: Installing the Configuration Storage server

  • Article

The Configuration Storage server stores the configuration information for all of the arrays in the enterprise. This procedure describes how to install the Configuration Storage server. Perform this procedure on the computer that you have designated as the Configuration Storage server, CS-1 in this walk-through.

Installing the Configuration Storage server

  1. On the Configuration Storage server (Main-Storage), log on to the domain as EnterpriseAdmin.

  2. Insert the ISA Server CD into the CD drive, or run ISAautorun.exe from the shared network drive.

  3. In Microsoft ISA Server Setup, click Install ISA Server.

  4. After the setup program prompts that it has completed determining the system configuration, on the Welcome page, click Next.

  5. If you accept the terms and conditions stated in the user license agreement, click I accept the terms in the license agreement, and then click Next.

  6. Type your customer information, and then click Next.

  7. On the Setup Scenarios page, select Install Configuration Storage server, and then click Next.

  8. On the Component Selection page, you can review the settings, and then click Next.

  9. On the Enterprise Installation Options page, select Create a new ISA Server enterprise, and then click Next.

    Cc302541.001eb839-02b7-42d4-a330-704ab917a0eb(en-us,TechNet.10).gif

  10. On the New Enterprise Warning page, click Next. This page warns you not to install more than one enterprise. Because you are creating a new enterprise, you can ignore the warning.

  11. On the Create a New Enterprise page, provide a name and description for the enterprise. In this walk-through, the enterprise will be called Fabrikam. You can provide a description of the enterprise (optional). Click Next.

  12. On the Enterprise Deployment Environment page, you have the option of installing a digital certificate to enable encrypted communication between the Configuration Storage server and the computer running ISA Server services. All communication between computers running ISA Server services and Configuration Storage servers in a single domain is encrypted. We recommend that you use this option when your computers running ISA Server services are in a workgroup, or are in a domain other than that in which the Configuration Storage server is located, and there is no trust relationship between the domains. In this walk-through, the Configuration Storage server and the computers running ISA Server services are in the same domain, so you can leave the default selection, I am deploying in a single domain or in domains with trust relationships. Click Next.

    Cc302541.e798310b-c8aa-458b-acb6-073d59eae52d(en-us,TechNet.10).gif

    Note

    If you choose I am deploying in a single domain or in domains with trust relationships, you can change to server certificate authentication anytime after installation, if your deployment needs change. To do so, obtain an exported server certificate and save it on the Configuration Storage server. Then, run the ISACertTool tool, available on the ISA Server Downloads Page (https://www.microsoft.com/).
    For information about installing ISA Server in a workgroup, including certificate installation instructions, see (https://www.microsoft.com/).

  13. On the Ready to Install the Program page, click Install to begin the installation.

  14. After the installation is complete, select Invoke ISA Management when the wizard closes, and then click Finish.

  15. In the ISA Server console, expand the Enterprise node, and expand the Enterprise Policies node. Note that there is one policy listed, the Default Policy. Click Default Policy and look at the rules in the details pane. There is one enterprise policy rule, a rule that denies all traffic, that is applied after array level rules. This rule ensures that unless access is specifically allowed, ISA Server denies it. Other than this enterprise policy rule, in the Default Policy, only array rules will apply.

  16. Click the Enterprise Networks node. The details pane displays the default enterprise networks. Note that there are no networks defined that are specific to the IP address ranges in your enterprise. You will define those in Procedure 4: Creating enterprise networks.

  17. Click the Arrays node. Note that this node is empty, because an array has not yet been created.

    Note

    You can manage the enterprise from the Configuration Storage server, from an array member, or from a remote management computer, if you are logged on with enterprise administrator credentials.
    The Configuration Storage server service runs under the network service account. If you install the Configuration Storage server on a domain controller, you must provide an account under which the service will run. For more information, see the product documentation.