Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Multiexcerpt include
MultiExcerptNameInstallPhaseGraphic
PageWithExcerptInstalling

Summary

Excerpt

What you will need to prepare in advance of implementing the 1E Core app. Typically these are tasks that may take some time to organize, depending on how your organization works. A more complete checklist of tasks is provided in the Requirements page.

Installing Tachyon

For information on installing Tachyon please refer to Tachyon 5.0 - Implementing Tachyon.

Anchor
Disable Tachyon Two-factor Authentication
Disable Tachyon Two-factor Authentication
Disable Tachyon Two-factor Authentication

The 2FA feature must be disabled in Tachyon. The Tachyon 2FA feature prompts users for an authentication code for each instruction request, which is not supported by 1E Core. Selective use of the two-factor authentication feature for different Tachyon consumers is not currently available in Tachyon, therefore it must be completely disabled before 1E Core is used.

If you have not yet installed Tachyon, then do not enable the feature (it is disabled by default) when running Tachyon Setup.

If you have already installed Tachyon with 2FA enabled, then ask your Tachyon administrator to disable the feature by re-configuring the Tachyon Coordinator service.

Anchor
Check your Tachyon license
Check your Tachyon license
Check your Tachyon license

For the 1E Core app to work with Tachyon you need to have a suitable license with the ServiceNow consumer added to it. Without this, you will get authentication errors in the 1E Core app.


Advanced Panelboxes for Confluence
namegrey
titleOn this page:

Table of Contents
maxLevel3
minLevel2
indent20px
excludeSummary|On this page|In this section
separatornewline


If you have not yet installed Tachyon, then you will need to obtain a Tachyon license file, and check it as follows:

  1. Open your Tachyon.lic license file using Notepad.
  2. Confirm the following exist in the features section (there will also be other consumers in this section):
    1. Feature name="
ServiceNow-Integration
    1. TachyonPlatform" 
    2. Consumer name="1EServiceNowCore" enable="on" 
  1. If it is not there then you should contact SalesOps@1e.com to get an updated license file.

    Code Block
    	<Feature name="
ServiceNow-Integration
  1. TachyonPlatform">
    	...
    
  1. 		<Consumer name="1EServiceNowCore" enable="on"> </Consumer>
    	...
    	</Feature>


If you have already installed Tachyon, check your license as follows:

  1. Login to Tachyon as a Global Administrator, using the Settings app, and navigate to Configuration→License information page.
  2. Check that a feature with the name ServiceNow-Integration exists there. 
  3. If it is not there then you should contact SalesOps@1e.com to get your license enhanced.
  4. If your Tachyon system has access to the 1E Licensing service via the Internet, then your license will be updated automatically.

Image Modified

Configuring Tachyon

The following are required after installing Tachyon.

Enable Basic Authentication

All access to Tachyon by third-party applications goes through Tachyon's Consumer API. To allow the ServiceNow proxy user account to access Tachyon you must enable basic authentication on the Consumer API in IIS.

This is done in two steps:

  1. Ensure that the Basic Authentication role is installed for IIS.
  2. Enable Basic Authentication on the Consumer web application in the Tachyon website.

For convenience the following script is provided that ensures that the basic authentication role is installed, enabled and then applied to the Tachyon Consumer API:

Expand
titleView EnableBasicAuthentication.ps1 ...


Multiexcerpt
MultiExcerptNameInstallScriptIIS

Download...

Code Block
languagepowershell
titleEnable Basic Authentication using PowerShell
<# 1E Ltd Copyright 2019
    Disclaimer:
    Your use of this script is at your sole risk. This script is provided "as-is", without any warranty, whether express
    or implied, of accuracy, completeness, fitness for a particular purpose, title or non-infringement, and is not
    supported or guaranteed by 1E. 1E shall not be liable for any damages you may sustain by using this script, whether
    direct, indirect, special, incidental or consequential, even if it has been advised of the possibility of such damages.
#>


Import-Module ServerManager

Write-Host 'Install Basic Authentication'
Get-WindowsFeature | Out-file $PSScriptRoot\ServerManager-3.txt -Append
Install-WindowsFeature Web-Basic-Auth
Get-WindowsFeature | Out-file $PSScriptRoot\ServerManager-4.txt -Append

Write-Host ''
Write-Host 'Enable Basic Authentication'
Set-WebConfigurationProperty -filter "/system.webServer/security/authentication/BasicAuthentication" -name Enabled -value True -PSPath "IIS:\" -location "Tachyon/Consumer"
Write-Host 'Done'



If you prefer to run the steps by hand these are as follows:


1eolstart


1eli

Ensure that the Basic Authentication IIS role is installed on the server hosting the Tachyon website. If not add the role to the server.




1eolstart
startat2


1eli

Open Internet Information Services (IIS) Manager.


1eli

Before enabling Basic Authentication on the Tachyon Consumer API site you should confirm that it is configured to use HTTPS.

1eolstart


1eli

Navigate to the Sites→Tachyon→Consumer node.


1eli

Double-click on the SSL Settings feature.






1eolstart


1eolstart
startat3


1eli

Confirm that the Require SSL checkbox is checked.


1eli

Navigate back to the Sites→Tachyon→Consumer node.





1eolstart
startat3


1eli

Having checked that the site is configured to use HTTPS we can now enable Basic Authentication.

1eolstart


1eli

Double-click the Authentication feature.






1eolstart


1eolstart
startat2


1eli

Right-click on Basic Authentication and select the Enable option from the context menu.





1eolstart


1eolstart
startat3


1eli

The Basic Authentication Status should now be displaying Enabled.

When you do this an alert may appear that can safely be ignored.




Anchor
Add the ServiceNow consumer to Tachyon
Add the ServiceNow consumer to Tachyon
Add the ServiceNow consumer to Tachyon

The 1E Core app is a Tachyon consumer that interacts with Tachyon using the Rest services provided in the Tachyon API. The consumer for the 1E Core app is called 1EServiceNowCore, which must be added to Tachyon using the following steps after Tachyon is installed:

1eolstart


1eli

Login to Tachyon Settings app using a Tachyon user account that has at least the following administrator rights:

  • Consumer Administrators role.


1eli

Navigate to Configuration→Consumers.


1eli

Click on the Add+ button.




1eolstart
startat4


1eli

The new consumer should be configured with the default values, except for the following:

Parameter

Value

Name1EServiceNowCore
Consumer URLThis can be left blank.
Maximum simultaneous instructionsThis number should be more than the number of simultaneous WSA upgrades you expect to do in your organization while not excessive for your environment. In a demonstration or test lab where you expect to have many incomplete WSA upgrades initiated, this number can be quite large (for example, 1000).
Offload target URLThis can be left blank.
Offload timeout sectionsThis can be left blank.
Use Windows AuthenticationThis must be checked.
EnabledThis must be checked.



1eli

Click Add to save the new consumer.



Anchor
Editing the ServiceNow consumer workflow
Editing the ServiceNow consumer workflow
Editing the ServiceNow consumer workflow

The Tachyon consumer page does not allow you to specify the workflow for the 1E Core consumer. This must be done using SQL Server Management Studio. To do so:

  1. Open SQL Server Management Studio and connect to the SQL instance that hosts the TachyonMaster database.
  2. Open a New Query and paste the below SQL query - no edits are required.
  3. Execute the SQL query and confirm the 1EServiceNowCore setting is changed from NULL to:
     [{"ReferenceType":0,"InstructionWorkflow":[{"InstructionType":1,"Workflow":{"StateMachine":"State"}}]}]
  4. Close SQL Server Management Studio.


Code Block
languagesql
titleSQL script to configure 1EServiceNowCore setting
/* Script to change TachyonMaster Consumer setting */
USE [TachyonMaster]
GO
DECLARE @setting nvarchar(max), @oldvalue nvarchar(max), @newvalue nvarchar(max)
SET @setting = '1EServiceNowCore'
SET @newvalue = '[{"ReferenceType":0,"InstructionWorkflow":[{"InstructionType":1,"Workflow":{"StateMachine":"State"}}]}]'

SET @oldvalue = (SELECT [Workflow] FROM [dbo].[Consumer] WHERE [Name]= @setting)
 
UPDATE [dbo].[Consumer] SET [Workflow]=@newvalue WHERE [Name]=@setting
 
SELECT @setting AS 'Setting', @oldvalue AS 'Before', [Workflow] AS 'After' FROM [dbo].[Consumer]
WHERE [Name]=@setting
GO