Installing and Configuring Tachyon Prerequisites

Tachyon has a few prerequisites which need to be installed before the server components can be installed. The installer will install the server roles and features via PowerShell scripts, however there are a few other prereqs we need to account for.
In this lab, you will learn how to install and configure the server upon which we will install all the Tachyon components.

Create a DNS Alias

1. On 1ETRNDC logon as 1ETRN\administrator. Search for DNS from the Start page
2. Open DNS manager, expand 1ETRNDC> Forward Lookup Zones and select 1ETRN.LOCAL
3. Select the Action menu and select New Alias (CNAME)…
4. In the Alias name field, type TACHYON

5. In the Fully qualified domain name (FQDN) for target host, type 1ETRNAP.1ETRN.local
6. Click OK

7. Open a CMD prompt and run Ping tachyon. Validate that it resolves to 1etrnap.1etrn.local (10.0.0.4)

Create a web certificate for the Tachyon website

Each server that has Tachyon Server components installed requires its own Web Server certificate (except for a remote SQL Server). This certificate must be enrolled prior to installation of Tachyon on the server. In this task, we will create a web server template for use with Tachyon, and then enroll the Tachyon server with the certificate.

8. Log onto 1ETRNCM as 1ETRN\administrator
Make sure to type in 1ETRN\administrator. Just inputting administrator will cause you to log in as the local administrator on the server and you will not be able to create the certificate template.
9. From the start menu, launch Certification Authority
10. Expand 1ETRN-1ETRNCM-CA. navigate to Certificate Templates
11. Right-click on Certificate Templates and click Manage
12. Within the Certificate Templates Console, locate the Web Server template
13. Right-click on the Web Server template and select Duplicate Template
14. On the General tab, enter Tachyon Web Server as the Template display name
The display name of the template is not relevant, however in an environment where many different certificates are being used for different things, it is always prudent to name the templates in an easily identifiable manner.
15. On the Request Handling tab, check Allow private key to be exported
16. On the Security tab, click the Add button
17. Click the Object Types button, and check Computers
18. Type 1ETRNAP in the Enter the object names to select box and click the Check Names button
19. Ensure 1ETRNAP has resolved. Click Ok
20. Ensure 1ETRNAP has Read access. Check the Allow box for Enroll
21. Click OK to save the template. Validate that the Tachyon Web Server template now exists in the Certificate Templates Console
22. Close the Certificate Templates console and return to the Certificate Authority console
23. Right-click on Certificate Templates, and select New > Certificate Template to Issue
24. Select the Tachyon Web Server template and click OK
25. Validate that the Tachyon Web Server template is now visible in the Certificate Templates space
26. Close the CA console
27. Restart the server
Rebooting the server is not something required specifically for certificates and would not be a required step in a production environment. However, due to the boot sequence in Skytap, there is a chance when attempting to enrol the certificate on 1ETRNAP the process will fail due to the CA server being unavailable. We are going to reboot the server to avoid that possible error.

Requesting the Web Certificate on the Tachyon server

28. Restart 1ETRNAP
29. Log into 1ETRNAP as 1ETRN\AppInstaller
30. From the start menu, type Cer, and click on Manage computer certificates
31. In the Computer Certificates console, right-click on Personal and select All Tasks > Request New Certificate
32. In the Certificate Enrollment wizard, on the Before You Begin page, click Next
33. On the Select Certificate Enrollment Policy page, click Next
34. On the Request Certificates page, note that two certificates are available
You will see a warning under the Tachyon Web Server certificate. This certificate needs to be configured before it can be enrolled onto the personal certificate store.
35. Under the Tachyon Web Server certificate, click on the link in blue next to the warning symbol. This will open Certificate Properties
36. In the Subject name field, change the Type to Common name
37. Enter tachyon.1etrn.local in the Value box. Click the Add button
38. In the Alternate name field, change Type to DNS
39. Enter tachyon.1etrn.local in the Value field. Click the Add button
40. Enter 1ETRNAP.1etrn.local in the Value field. Click the Add button

41. On the General tab of the Certificate Properties, input Tachyon Web Certificate in the Friendly Name space
42. On the Private Key tab, expand Key options and ensure Make private key exportable is checked
43. Click OK to close the Certificate Properties
Note that the warning under the Tachyon Web Certificate is no more.
44. Select the Tachyon Web Server certificate and click Enroll. Once enrolled, click Finish
45. In the Certificates console, expand Personal > Certificates, and validate that the certificate has been added

Lab Summary

In this lab, we managed the manual prerequisites required to install Tachyon. We set up a DNS alias to be used by Tachyon internally and externally, and we created a copy of the web certificate template and enrolled it on our Tachyon server. In the next lab, we will see the installer manage the remaining prerequisites.

Next Page
Ex 2 - TCN Opr v5.0 - Installing Tachyon