How to Import the Commerce Server Template into the Security Configuration Wizard

By using the Microsoft Windows Server Security Configuration Wizard (SCW) you can reduce the attack by customizing the security settings of server roles. Use it with the Microsoft Commerce Server 2009 R2 SCW template to provide additional security for your deployment. 

For complete documentation about the Security Configuration Wizard, see the Security Configuration Wizard at https://go.microsoft.com/fwlink/?LinkId=114098.

You must manually edit the file KBRegistration.xml in %windir%\security\msscw\kbs.

To import the Commerce Server template into SCW

  1. Open the file %windir%\security\msscw\kbs\KBRegistration.xml for editing with any text editor, such as Notepad.

  2. Create a new DynamicKB entry in this file for Commerce Server by creating the following element as a child of the SCWKBRegistration/Custom element:

    <DynamicKB Name="CommerceServer" FunctionName="CommerceServerKBFile" DLLPath="C:\Program Files\Microsoft Commerce Server 9.0\fwsetup.dll" />
    
  3. If you have installed Commerce Server 2009 R2 to a different drive and/or directory, you must specify the path to the 64-bit version of fwsetup.dll.

  4. Save the changes and close the KBRegistration.xml file.

    The following is an example of what the KBRegistration.xml file should look like after you register the Commerce Server 2009 R2 template:

    <?xml version="1.0" encoding="utf-16"?>
    <SCWKBRegistration  OSMajorVersion="6"
                        OSMinorVersion="1"
                        ServicePackMajorVersion="0"
                        ServicePackMinorVersion="0" >
        <Core>
            <KB Name="IndependentRoles"/>
            <KB Name="CoreServer"/>
        </Core>
        <Custom>
            <DynamicKB Name="CommerceServer" FunctionName="CommerceServerKBFile" DLLPath="C:\Program Files\Microsoft Commerce Server 9.0\fwsetup.dll" />
        </Custom>
    </SCWKBRegistration>
    

See Also

Other Resources

Securing the Deployment