Last Modified June 25, 2024
Introduction #
This guide covers the post-installation configuration steps for System Frontier. The configuration process ensures that all components are correctly set up and that the system functions smoothly. This document will guide you through accessing the web interface, configuring execution hosts, adding credentials, configuring domains, testing connections, and setting up script hosts.
Prerequisites #
Before you begin, ensure you have the following:
- A Windows 11 workstation on the domain.
- Integrated Windows Authentication enabled.
- System Frontier components installed: Database, Management, and Web.
Steps #
Accessing the Web Interface #
- Open your web browser on a Windows 11 workstation that is on the domain.
- Navigate to the System Frontier web interface.
- Since integrated Windows authentication is enabled, you should not be prompted for credentials.
Configuring the Execution Host #
- Go to the Settings section in the main menu.
- Select Execution Host.
- Enter the name of the server where the System Frontier Management Service is installed.
- Stick with the default port.
- Enter the certificate common name (CN). For example, use
System Frontier V2
. - Mark the Trusted checkbox to designate this as the primary host for syncing files with other execution hosts.
- Click Create.
Adding Credentials #
- Navigate to Secrets under Settings.
- Add a new credential by providing a friendly name, such as
SF Admin
. - Enter the domain and username (e.g.,
lab\SPCS
). - Enter the password.
- Select the execution host where these credentials will be used to execute tasks.
- Ensure that the credentials are configured to use one or more execution hosts.
Configuring the Domain #
- Go to the Domains section under Settings.
- Add a new domain configuration by entering the NetBIOS name (e.g.,
lab
). - Use SSL for secure connections.
- Enter the LDAP path, which can be either the IP address or the fully qualified name of the domain controller (e.g.,
lab.corp
). - Select the credentials to be used for connecting to this domain.
- Click Create.
Testing the Domain Connection #
- Navigate to Roles under Users and Roles.
- Create a new role and add members by selecting the newly configured domain.
- Search for a group using a wildcard (e.g.,
domain*
). - Ensure the search returns groups from the domain, confirming the connection and credentials are correct.
Configuring Script Hosts #
- Go to Script Hosts under Settings.
- Review the built-in script hosts, such as PowerShell 7, which are marked as native.
- If needed, add custom script hosts for specific execution requirements.
Updating the Administrator User #
- By default, the administrator user has a generic display name.
- Go to the user profile settings and change the display name to the actual name.
- This update will soon be automated to query from Active Directory.
Setting Time Zone and Display Name #
- Update the default Central Time Zone to the appropriate time zone.
- Refresh the site to see the updated display name.
Configuring ROI Blending Rate #
- Go to Settings and update the blending rate for ROI based on the average labor rate of your organization (e.g., $40/hour).
- This rate will be used for generating ROI reports and dashboards.
Setting Background System Job Credentials #
- Select the credentials for background system jobs.
- Use the default
SF Admin
account or a generic domain account. - These credentials are used for tasks like updating snapshots for ROI.
License Key #
- Go to the License section under Settings.
- Enter the license key provided during installation. If the subscription is renewed or changed, update the license key here.
- Set the log retention period to the desired number of days (default is 1095 days).
Notes #
#
Administrator Roles and Permissions #
- The built-in administrator role in System Frontier is extremely powerful. It’s essential to follow the principle of least privilege.
- Only the minimal necessary users should be added to the administrator role to maintain system integrity and security.
Adding Users and Roles #
- Initially, only the admin user can add more users and roles.
- Besides the built-in administrator role, there is an implicit “Everyone” role. Carefully assign roles to ensure proper access control.
Custom Script Hosts #
- Users can add custom script hosts for specific execution needs. This can be done through the Script Hosts section under Settings.