<-- 

 Set PAGETITLE = Enkompass Installation and Getting Started
 
-->

• Troubleshooting Enkompass: Video | PDF

• Presentations from the 2009 cPanel Conference — These are the training slides and related materials presented at the 2009 cPanel Conference in Houston, Texas.

• Presentations from the 2009 cPanel Conference — These are the training slides and related materials presented at the 2009 cPanel Conference in Houston, Texas.

• Background Information for Installing Enkompass — Here you can find important information about designing your domain and licensing your Windows Server® and Enkompass software.
• Configuring Windows Server® 2008 for Enkompass — This document describes how to configure your operating system after you have installed it on your server.

• Download Now — The latest Enkompass installer can be downloaded from httpupdate.cpanel.net.

How-to guides for Enkompass administrators

These presentations were given at the 2009 cPanel Conference:

• Preparing Your Environment for Enkompass: Video | PDF
• Advanced Windows Technologies to Get the Most Out of Enkompass:

  <-- Video | -->

  PDF
• Interfacing with Enkompass:

  <-- Video | -->

  PDF | Visual Studio® project files
• Using Enkompass: Installing and setting up Enkompass—a quick overview: Video | PDF

• Download Now — The latest Enkompass installer can be downloaded from httpupdate.cpanel.net.

• Licenses for version 1.0 are available through cPanel Partners. Use the cPanel Partner Search to locate a cPanel Partner that offers Enkompass licenses.
• If you're currently running Enkompass RC0 and need to extend your test license for up to 30 days, you can do so by contacting cPanel's Customer Service department at cs@cpanel.net.

• Configuring Windows Server® 2008 for Enkompass — This document describes how to configure your operating system after you have installed it on your server.

• Presentations from the 2009 cPanel Conference — These are the training slides and related materials presented at the 2009 cPanel Conference in Houston, Texas.

• Background Information for Installing Enkompass — Here you can find important information about designing your domain and licensing your Windows Server® and Enkompass software.

• Download Now — The latest Enkompass installer can be downloaded from layer2.

Enkompass Installation Guide

• Background Information for Installing Enkompass — Here you can find important information about designing your domain and licensing your Windows Server® and Enkompass software.
• Configuring Windows Server 2008 — This document describes how to configure your operating system after you have installed it on your server.
• Installing and Configuring Enkompass — This document describes the process of installing and setting up Enkompass.
• Enkompass Startup Guide — Here you can learn how to log into the Enkompass Reseller Interface and set up websites, databases, mail accounts, and more.

1. Enter the name of the Administrative Account.

• • • Everyone — Allow read
    • Domain Admin — Allow Full Control
    • The account you created to install Enkompass with — Allow Full Control

• • • Everyone — Allow read
    • Domain Admin — Allow Full Control
    • Administrators — Allow Full Control
    • The account you created to install Enkompass with — Allow Full Control

Logging into the Reseller Interface

Standard web interface

Secure web interface

Managing servers

• • MySQl — version 5
  • MicrosoftSQL — 2005 or 2008
  • WebServer — Windows 2008 with IIS7
  • MailEnable — version 3.62, Standard, Professional or Enterprise
  • SmarterMail — version 5.5.3+, Lite, Professional or Enterprise

How IPs are used

Create reseller plans

Add plans

Copy plans

Accounts

Reseller Accounts

Languages

Languages belong to the Admin user and are available for all users once they are installed. Only the Admin user can add or remove languages.

Themes

Themes allow a reseller to customize the images on the Web Site Owner pages, adding the reseller's own branding. The reseller must log into the Web Site Owner interface to create and edit custom themes.

Note: The standard themes supplied with Enkompass cannot be edited. Copy one to a new custom theme before editing.

Once you have created a custom theme, you can use the Clone Theme menu in the Themes section of the Reseller Interface to copy it to another reseller.

Non-reseller or Web Site Owner accounts

Users who are not resellers can only log into Web Site Owner to manage their own web and FTP sites.

Creating an account

There are two options available for creating new accounts: the Create Account Wizard and the Create a New Account feature:

• The Create Account Wizard leads you through all the options for setting up a new account and is the only way to reserve a server for one website. There is a lot of help built into this wizard.
• Create a New Account is ideal for quickly setting up Web Site Owner accounts, but can be used for reseller accounts as well. Select the Create a New Account menu from the Account Functions section in the left pane of the Reseller Interface.

Domain Information

Enter the website's domain name (such as example.com), a username and password for the account holder to log in with, and an email address that will receive warnings and messages from Enkompass.

Resources

You can determine an account's access to resources either by assigning it a reseller plan, or by setting the resource limits manually. Every account is either inside a plan or out of a plan.

If a plan is edited, all the accounts using the plan are updated with the new limits. If possible, keep your accounts in a plan, so you don't have to update each account manually.

Settings

You can assign a dedicated IP address to a user’s website, or use the All Available IP feature to allow IIS to respond to a request for the website on any address, on any web server.

Select a language and theme for the Web Site Owner interface. If you are using secure HTTP or FTP, you must assign an IP address.

Give reseller privileges

Click on the checkbox to make this account a reseller; otherwise it will be a Web Site Owner. After this account is created, you will be taken to the pages in the Reseller Center to enable the privileges this reseller has.

Server Settings — Web Site Owners can have one mail server, one MySQL server, and one Microsoft SQL Server assigned to their account. Resellers can have multiple servers assigned to them, so they can distribute them to their users and resellers. To add additional servers to a reseller, go to the Reseller Center and choose the Assign Available Servers image.

Mail Server — Assign one of the available mail servers from the list. A user can have one mail server or none.

Database servers — Assign a MySQL and/or Microsoft SQL Server for the website to use. Each user can have none, one, or both types of SQL servers.

Create or cancel

Click on the Create button to create the new account. If you created a reseller, go to the Reseller Center and assign additional servers and privileges.

Web domains

The domain assigned to your account is your main domain name (such as example.com).

Subdomains

You can create subdomains under your main domain. These are addresses and web pages (such as support.example.com) that your users want to directly access.

Parked domains

The parked domains feature enters a synonym for your domain in the DNS server. This way, you can enter another domain name for your website. This domain name must be registered with a Domain Registry Provider before it will be publicly accessible.

Addon domains

Backups

System Backups

Enkompass comes with a scheduled service that can perform backups of the user files and the Enkompass settings on a periodic basis. You can configure the backup schedule and the sites to be backed up using the Configure Backup menu in the Backup section.

These backup sets are kept in the system backup folder and should be moved to a tape or backup server on a regular schedule. The Reseller and the Web Site Owner can restore accounts from this folder. The Enkompass settings are stored in XML files and are zipped together with the user’s files to form a backup set.

User backups

These backup sets are stored in the Web Site Owner’s area in the /Backup folder. The Web Site Owner can generate and restore from these backup sets.

Note: These backup sets should be downloaded to a remote computer using the File Manager to ensure you have an offsite copy to restore the site with.

Certificates

Websites

Websites are secured with a three-step process:

1. Generate a self-signed certificate or order a certificate from a Certificate Authority.
2. Install a certificate for a web site.
3. Bind the certificate to the IP address.

FTP Sites

• Generate a self-signed certificate and bind it to the FTP site.
• A reseller can secure the sites for any of his or her users. A Web Site Owner can do this only for his or her web and FTP sites.

Getting websites running with Enkompass

Website structure

• A folder is created for the user on the drive or server that was chosen during the Enkompass installation to hold the website.
• A IIS Virtual Directory is created pointing to the user’s folder.
• One app pool is created to run the website code. Addon domains and subdomains also run in this app pool.
• A default mail account was created using the MTA that was assigned to the reseller. (This will be either MailEnable or SmarterMail.)
• An entry is put into the IIS7 Shared Configuration File pointing to the web.config for the website.

Loading your site

File Manager: The Web Site Owner interface provides a File Manager which allows the user to upload web files to the website folder. Zipping up the files and uploading them is the easiest way to get them into the folder. After a file has been uploaded, it can be unzipped using the File Manager.

SQL Databases

Both Microsoft SQL Server and MySQL 5.1 are supported. Each has a separate set of icons in the Database section of the Web Site Owner Interface. A user can have access to only one MySQL and one MS SQL Server.

Creating databases

Use the menu items to create SQL databases in your web folder. This creates a blank database with the name you chose and the correct file permissions to run with your website. Use the File Manager to download the database to your work station. Configure the tables and fields with your favorite tool, if your website cannot do so. Upload the database back to the same location in order to use it.

Adding Users

Use the Manage Users feature to add database users and to set their access privileges. There are different privileges for Microsoft SQL and MySQL.

Mail

Adding accounts

A default mail account for each website was created when the account was created by the reseller. Use the Web Site Owner menu item Email Accounts to add additional email accounts and set the mailbox quotas.

Restart Websites

1. In the left pane of the Reseller Interface, click on the Manage Servers menu in the Server Configuration section.
2. Click on the Click here to add another Server link.
3. Enter the IP address of the server in your environment that you want Enkompass to control. * This is the primary address bound to the network card when you installed Windows Server 2008.
4. Enter a Designation for this server.
   • Choose a name that easily identifies this server to your users.
5. Select the server type from the list:
   • MySQl – version 5
   • MicrosoftSQL – 2005 or 2008
   • WebServer – Windows 2008 with IIS7
   • MailEnable – version 3.62, Standard, Professional or Enterprise
   • SmarterMail – version 5.5.3+, Lite, Professional or Enterprise
6. Enter the name of the Administrative Account
   • This account is needed for the mail and database servers, so that accounts can be created and edited.
7. Enter the Admin password that you set on the database or mail server.
   • This must be at least two characters long with 1 number and 1 letter.
8. Click the Save button.
9. Click the Install button to have Enkompass install the appropriate remote control services on the remote server.
   • This will take several minutes and you should wait for the installation to finish on each server.
10. Repeat these steps for all the remote servers in the Active Directory Domain that you want Enkompass to control.

How IPs are used

1. In the left pane of the Reseller Interface, click the Add a New IP Address menu in the IP Functions section.
2. Enter the IP Addresses that you want to make known to Enkompass.
   • Enkompass will scan the servers to see whether that IP address is assigned to a network card. If it is not in use, it will ask which server and network card you want to assign the IP to. (You can also do this in Manage Servers) IPs are assigned one of five states:
   • Unused — In the system but not assigned to any use.
   • Assigned — Assigned to a network card on a server.
   • Reserved for a reason — An IP you do not want used.
   • Reserved for a Reseller — An Assigned IP exclusively allocated to one reseller for use on his or her websites. Use the Reseller Center to allocate the IP.
   • Dedicated — An Assigned IP exclusively given to one account for use by its website. Use the Create Account Wizard to allocate the IP.

Create reseller plans

Add plans

Admin and resellers can create plans that can be applied to new accounts to quickly select limits and features offered to users.

You can create a selection of plans to offer to your customers (for example, $30, $60 and $100 a month) with varying limits and features. Simply assigning the plan to the user will set their limits.

Copy plans

Plans can be copied from one reseller account to another using the Copy Plans menu.

Services installed by Enkompass

• MySQL Controller Service — We provide an interface to communicate with the distributed MySQL Servers. This service is only installed on the Enkompass server.
• Enkompass Certificate Service — A service is installed on all servers allowing certificates to be installed and managed on all servers.

Firewalls

Make sure that the following ports are open among all servers in the AD Domain:

• 135
• 139
• 2095
• 2096
• 2097
• 2098
• 2099

The Enkompass server should also have the following ports open:

• 2082
• 2083
• 2086
• 2087

Installing Enkompass

1. Log into the Active Directory Server and run the Active Directory Users and Computer Manager.
2. Create a new account and add it to the Domain Administrators Group.
   • Don’t use the standard Administrators account.
3. Use this account to log into the server where Enkompass will be installed.
   • You may have to add this account to the administrators group on the local computer to get Remote Desktop to accept the login.
   • All the Enkompass services will run with the privileges of this account on all the servers in the Active Directory Domain.
4. Set up the UNC share to hold all the account and website data.
   • This must be an actual drive on a SAN, NAS or file server where Windows Disk Quota Manager Service can run.
   • Set up the share with these permissions:
     • Everyone – Allow read
     • Domain Admin – Allow Full Control
     • The account you created to install Enkompass with – Allow Full Control
5. Set up a shared folder that all the web servers can reach. Set up the share with these permissions:
   • • Everyone – Allow read
     • Domain Admin – Allow Full Control
     • Administrators - Allow Full Control
     • The account you created to install Enkompass with – Allow Full Control
6. Download the Enkompass Installation Set from www.cpssdemo.net using the FTP account and password we sent you.
7. Run the installer, read the End User License Agreement, and follow the instructions to complete the installation.
   • Here is a little help with the installer entries:
     • Destination Folder — the folder on the server where Enkompass will be installed.
     • Active Directory Domain — the name of your AD Domain is displayed for your records.
     • Enkompass Account name — the installer will create an account with all the correct privileges to install and manage Enkompass.
     • Enkompass account password — enter a strong password twice and make sure you remember it.
     • Administrator contact email — the administrator's email address, to which system messages will be sent.
     • Administrator contact pager number — does nothing right now.
     • Primary DNS Server — the IP of the Active Directory Server with the integrated DNS.
     • Volume or UNC Share Path — Enter a location to store the websites and accounts. Your IIS Virtual Directories will point here. This must be an actual drive on a SAN, NAS or file server where Windows Disk Quota Manager Service can run. You can use a UNC path such as \\192.168.99.201\e or a local drive such as C:. We highly recommend that you use a location that all the servers in the AD domain can quickly access and that it be a RAID drive.
     • Directory for Enkompass Accounts — the main directory for the web sites and accounts on the above Volume or UNC Share Path.
     • Destination directory for account backup — System backups are stored in folders on this drive so you can recover the accounts. This should be a different drive than the one where the accounts are stored.
     • Enkompass will set up IIS to use a shared configuration. Enter a UNC path that will be accessible to all the IIS servers — This share will contain the configuration files that IIS and Enkompass use to make the users' websites run on all the available IIS servers. This only needs to be a shared directory, not a shared drive.

Setting up with Reseller Interface (RI)

The Reseller Interface is used by administrators and resellers to control the web hosting environment.

You need to log into the Reseller Interface and set up the web hosting environment before you add accounts for Web Site Owners and their websites.

The reseller hierarchy

• Admin (and resellers with Admin privileges)
  • Languages
  • Remote Servers
  • IP Addresses
  • System Backups
  • Resellers
    • Privileges
    • Themes
    • Plans
    • WSO Users
      • Databases
      • FTP accounts
      • Certificates
      • Mail Accounts
      • Websites
      • User Backups

The Admin account

The Admin account is the most powerful account in the Administrator Interface.

• Admin is used to set up the system-wide resources in Enkompass and create the main reseller accounts.
• This account was created at installation and uses the password you specified during installation. (We recommend you use a secure password of at least 10 characters. You can enforce this by setting the password requirements in Microsoft Active Directory Group Policies.)

Logging into the Reseller Interface

Standard web interface

Point your browser to http://XXX.XXX.XXX.XXX:2086/login.aspx, where XXX.XXX.XXX.XXX is the address of server where you installed Enkompass.

Secure web interface

Point your browser to https://XXX.XXX.XXX.XXX:2087/login.aspx, where XXX.XXX.XXX.XXX is the address of server where you installed Enkompass.

Log in with a user name of Admin and the password you specified during installation.

Managing servers

This document briefly describes the steps you should take to get your hosting business set up with Enkompass. The installer will take care of some of these steps, but you should know how your domain must be set up in order to make the whole environment work efficiently.

When the Enkompass installation finishes, you need to register your mail, web, and database servers on the Manage Servers page of the Reseller Interface, and then set up your plans and reseller accounts.

Definitions

Admin: The user who owns the installation of Enkompass. Admin configures and allocates all the servers, languages, and mail reseller accounts in the web hosting environment. He or she can log into the Reseller Interface (formerly called WHM) on port 2086 (unsecured) or 2087 (secured). Admin creates the top-level resellers.

Reseller: Resellers are created by Admin. Resellers are allocated servers by Admin and can create their own branding themes. A reseller can create other resellers and allocate servers to the new reseller. Resellers granted Admin privileges have all the privileges of Admin, except that they cannot add languages or servers to the web hosting environment.

Web Site Owner: A user who owns a website, including its add-on, parked, and subdomains. They log into the Web Site Owner Interface (formerly called cPanel) at port 2082 (unsecured) or 2083 (secured) to manage their web sites.

Designing your active directory domain

Single server

Distributed system

• The core environment requires these two servers:

• • Active Directory Controller
    • Raid
    • Windows Server 2008 Standard
    • 2+ GB Memory

• • IIS7 Web Server for Enkompass
    • Windows Server 2008 Web
    • 2+ GB Memory

• Add these servers depending on your web hosting offerings:

• • IIS7 Web Servers for Web Sites
    • Windows Server 2008 Web
    • 2+ GB Memory

• • Server for SmarterMail 5.5.3+
    • Windows Server 2008 Web for SmarterMail Lite (POP only)
    • Windows Server 2008 STD for SmarterMail Pro or Enterprise (with IMAP and MAPI)
    • 2+ GB Memory
    • IIS7 Not Required

• • IIS7 Web Server for MailEnable 3.62+
    • Windows Server 2008 Web for MailEnable Standard (POP only)
    • Windows Server 2008 STD for MailEnable Pro or Enterprise (with IMAP)
    • 2+ GB Memory

• • Server for MySQL 5.1
    • Windows Server 2008 Web, Std
    • 2+ GB Memory
    • IIS7 Not Required

• • Server for Microsoft SQL Server 2005/ 2008
    • Windows Server 2008, STD, Dataserver, Enterprise
    • 4+ GB Memory

• A more ideal domain would also have:

• • A Backup Active Directory Controller
    • Raid 5
    • Windows Server 2008 Standard
    • 2-4 GB Memory

• • File Server to Hold the Web Sites IIS Virtual Directories
    • NAS
    • SAN
    • Windows Server 2008 Standard or Enterprise with RAID

Licensing

Microsoft

• Purchase regular processor licenses and a CAL for every user.
• Monthly rental through the Service Provider License Agreement (SPLA).
  • Unlimited number of users with a charge for each processor.
  • Pay for each authenticated user on each server.

Most hosting companies use the SPLA program to avoid the huge upfront costs of purchasing regular licenses, and the per processor SPLA to avoid having to keep track of authenticated users. The agreements and contracts are very complex and you need to contact Microsoft to have them help you with these issues.

Enkompass

• A license is required for each installation of Enkompass. This license will activate Enkompass and keep it running as long as the rental fee is paid. Enkompass must have Internet access to our licensing servers in order to stay activated. It will check the status of the license several times a day, and must contact the server within 48 hours to stay activated.

• This first license includes 100 users. A license is required for each user of Enkompass who logs in through the Reseller Interface or the Web Site Owner Interface. These licenses are rented in packages of 25 or 100 users. When the number of users exceeds the number of user licenses you are renting, you will not be able to create new accounts or subdomains. Existing Resellers and Web Site Owners will still be able to manage their accounts.

• Licenses only work in one Active Directory Domain. If you must rename your domain or reinstall Active Directory, please contact cPanel Customer Service to reactivate your licenses: https://tickets.cpanel.net/submit/index.cgi?reqtype=sales.

• When you are setting up your hosting environment, please keep in mind that the Active Directory Domain Controller will receive a lot of requests from Enkompass, and we expect Active Directory performance will slow above 10,000 users.

Installing Windows 2008

You will need to choose an appropriate edition of Windows Server 2008 for each of the servers in your hosting environment, and install it on each server.

Active Directory Domain Controller

1. The first server you should install is the Active Directory Domain Controller.
   • This must be installed on Windows Server 2008 Standard or Enterprise.
   • Carefully choose a name for your Active Directory Domain and for your Active Directory Server. It's very difficult to change these names after the installation of Active Directory.
2. Install Windows Server.
3. Use Server Manager to install the Active Directory Domain Services with a new forest.
   • You can make the forest either a Windows 2003 or Windows 2008 Domain.
4. Select the option to install Active Directory Integrated DNS.
5. You can install the rest of the servers in any order.

Backing up Active Directory

The reseller structure and privileges are stored in the Active Directory Domain Controller and should be backed up regularly. The Windows Server Backup Utility will back up Active Directory, but it must be installed with Server Manager before you can use it.

MailEnable Server

1. Obtain the install file for MailEnable 3.62 Standard from MailEnable's web site at http://www.mailenable.com/register.asp or the Enkompass Download Site.
2. Copy this to the servers that you want MailEnable to run on.
   • You can install MailEnable Standard on Windows Server 2008 Web Edition because it only uses POP.
   • You may also obtain MailEnable Pro or Enterprise, and install it in place of the Standard Edition. You will not be able to use Windows Server 2008 Web Edition with these editions, because they use IMAP, and Web Edition is only licensed for POP.
     • These editions of MailEnable come with a webmail client and need to have IIS installed on the mail server.
3. Join this computer to the Active Directory Domain after installing Windows Server and before installing MailEnable.

SmarterMail

• The install file for a special bundle version of SmarterMail 5.5.3 or greater is available on the Enkompass Download Site. SmarterTools has generously provided a Lite version of their SmarterMail 5 Standard Edition with unlimited domains.
• Enkompass prefers SmarterMail for your mail server. When this version detects that Enkompass is installed in the Active Directory Domain of the mail server, it will change to the Lite version with unlimited domains.
  • The Lite version of SmarterMail does not allow POP connections.
• This version of SmarterMail can be upgraded to the Professional or Enterprise Edition by purchasing a license from SmarterTools at https://www.smartertools.com/mgt/order/order.aspx.
  • You will not be able to use Windows Server 2008 Web Edition with the Professional or Enterprise editions because they both use IMAP or MAPI and the Web Edition is only licensed for POP.
• SmarterMail comes with its own webmail client and the Apache web server. It does not need to have IIS installed.
• Join the computer on which you plan to install SmarterMail to the Active Directory Domain after installing Windows Server and before installing SmarterMail.

Enkompass Server

1. Enkompass can be installed on Windows Server 2008 Web Edition, Standard, or Enterprise.
2. Join this computer to the Active Directory Domain after installing Windows Server and before installing Enkompass.

This server will run the Enkompass services, host the Reseller and Web Site Owner interfaces, and must have IIS7 installed with the following features:

• All Common HTTP Features
• Application Development
  • ASP.Net
  • .Net Extensibility
  • ISAPI Filters
  • ISAPI Extensions
  • Server Side Includes
• Health and Diagnostics
  • HTTP Logging
  • Request Monitor
• Security
  • Basic Authentication
  • Windows Authentication
  • URL Authorization
  • Request Filtering
  • IP and Domain Restrictions
• Performance
  • Static Content Compression
• Management Tools
  • IIS Management Console
  • IIS Management Scripts and Tools
  • Management Service
  • ALL IIS 6 Management Compatibility (If using MailEnable)

Important:

• Do not select the FTP publishing service that comes standard with Windows 2008. Enkompass needs the Microsoft New FTP Publishing Service, and our installer will install it during installation.
• Enkompass runs in a private copy of IIS7 that is not visible with the IIS Manager.

Web Servers

1. Use Windows Server 2008 Web Edition, Standard, or Enterprise.
2. Join this computer to the Active Directory Domain after installing Windows Server.
3. Do not install the FTP Publishing Service that comes with Windows Server 2008. It does not support secure FTP and Enkompass cannot control it.
   • You can Install the New FTP Publishing Service from Microsoft Downloads at http://www.microsoft.com/downloads, or Enkompass will install it when you add the server in Manage Servers and choose the Install button.

MySQL Servers

1. Use Windows Server 2008 Web Edition, Standard, or Enterprise.
2. Install MySQL 5.1 and start the service. The install file is available on the Enkompass Download site.
   • Enkompass will interface with the 32- or 64-bit editions of MySQL.
3. There must be a root account created so that Enkompass can control MySQL.
   • Record the account name and password. You will need to enter this in the Manage Servers page the Reseller Interface.
   • Also, make sure the root user has an access host for the IP of the Enkompass server.

Microsoft SQL 2008 Servers

1. Use Windows Server 2008 Web Edition, Standard, or Enterprise.
2. Obtain any of the editions of Microsoft SQL Server 2008 and install it.
3. You must create an Administrator account so that Enkompass can control SQL Server.
   • Record the account name and password. You will need to enter this in the Manage Servers page of the Reseller Interface.
   • We only support the default SQL instance; don’t use a named instance.

Services Installed by Enkompass

Services and the Administrator account are installed by the Enkompass Installer. This section is for reference.

• Admin account — Enkompass installs services on the server on which it runs, and on all the servers it must control. These services must run under an administrator account. Because the environment uses Active Directory, this account only needs to be created once. Normally, this account is named Admin and it is a member of DNSAdmins, SchemaAdmins, DomainAdmins and Cryptographic Operators.
• Enkompass WCF Service — This service provides the core functionality of Enkompass. It communicates with the Reseller and Web Site Owner Interfaces using Windows Communications Foundation. It is installed only on the Enkompass server.
• Mail Enable Controller Service
  • MailEnable — A service is installed on the MailEnable servers to allow Enkompass to administer the mail accounts.
• MySQL Controller Service

Getting Started with Enkompass for Microsoft Windows® 2008

This document briefly describes the steps you should take to get your hosting business set up with Enkompass (formerly cPanel Server Suite). The installer will take care of some of these steps but you should know how your domain must be set up to make the whole environment work efficiently. When the Enkompass installation finishes, you need to register your mail, web and database servers in the Manage Servers Page of Reseller Interface and then setup your plans and reseller accounts.

Definitions:

Admin – The user who owns the installation of Enkompass. Admin configures and allocates all the servers, languages and mail reseller accounts in the web hosting environment. He logs into the Administrator/Reseller Interface (formerly WHM) on port 2086 or 2087(secured). Admin creates the top-level resellers.

Reseller – Resellers are created by Admin. Resellers are allocated servers by Admin and can create their own branding themes. A reseller can create other resellers and allocate servers to the new reseller. Resellers granted Admin privileges have all the privileges of Admin except that they cannot add languages or servers to the web hosting environment.

Web Site Owner – User who owns a web site with their add-on, parked and subdomains. They log into the Web Site Owner Interface (formerly cPanel) at port 2082 or 2083(secured) to manage their web sites.

Web Hosting Environment – All the Web, Database and Mail servers in one Active Directory Domain that are controlled by one Enkompass server.

Designing Your Active Directory Domain Enkompass requires a Microsoft Active Directory Controller with Integrated DNS to operate. Active Directory is used to authenticate resellers, web site owners and IIS7 Shared Configurations.

Single Server It is possible to use one Microsoft Windows 2008 Server to host Enkompass and all of the Web hosting services that it controls. We use this structure when developing our code and demonstrating the product. However, this is not a desirable solution in the Windows world because of licensing expenses, performance issues, security issues and software conflicts.

Distributed System Enkompass was designed to control a Web Hosting environment where the Mail, Database, and Web Sites are distributed among servers optimized for each service. With this environment you can control your licensing costs and add performance as you need it. You can add multiple web servers, mail servers and data base servers as the work load increases.

Enkompass locates all the user files in one file path, preferably on a NAS or SAN. IIS7 Shared configuration is used so the web sites can run on any web server in the hosting environment. This system gives you load balancing and redundancy for your web sites.

The core environment requires these two servers: Active Directory Controller Raid Windows Server 2008 Standard 2+ GB Memory

IIS7 Web Server for Enkompass Windows Server 2008 Web 2+ GB Memory

Add these servers depending on your web hosting offerings:

IIS7 Web Servers for Web Sites Windows Server 2008 Web 2+ GB Memory

Server for SmarterMail 5.5.3+ Windows Server 2008 Web for SmarterMail Lite (POP only) Windows Server 2008 STD for SmarterMail Pro or Enterprise (with IMAP and MAPI) 2+ GB Memory IIS7 Not Required

IIS7 Web Server for MailEnable 3.62+ Windows Server 2008 Web for MailEnable Standard (POP only) Windows Server 2008 STD for MailEnable Pro or Enterprise (with IMAP) 2+ GB Memory

Server for MySQL 5.1 Windows Server 2008 Web, Std 2+ GB Memory IIS7 Not Required

Server for Microsoft SQL Server 2005/ 2008 Windows Server 2008, STD, Dataserver, Enterprise 4+ GB Memory

A more ideal domain would also have A Backup Active Directory Controller Raid 5 Windows Server 2008 Standard 2-4 GB Memory

File Server to Hold the Web Sites IIS Virtual Directories NAS SAN Windows Server 2008 Standard or Enterprise with RAID

Licensing Microsoft There are at least three ways to license the Windows 2008 Servers: Purchase regular processor licenses and a CAL for every user. Monthly rental through the Service Provider License Agreement (SPLA) Unlimited number of users with a charge for each processor Pay for each authenticated user on each server.

Most hosting companies use the SPLA program to avoid the huge upfront costs of purchasing regular licenses and the per processor SPLA to avoid having to keep track of authenticated users. The agreements and contracts are very complex and you need to contact Microsoft to have them help you with these issues.

Enkompass There is a license required for each installation of Enkompass. This license will activate Enkompass and keep it running as long as the rental fee is paid. Enkompass must have Internet access to our licensing servers to stay activated. It will check the status of the license several times a day and must contact the server within 48 hours to stay activated.

This first license includes 100 users. A license is required for each user of Enkompass who logs in through Reseller Interface or the Web Site Owner Interface. These licenses are rented in packages of 25 or 100 users. When the number of users exceeds the number of user licenses you are renting, you will not be able to create new accounts or sub-domains. Resellers and Web Site Owner’s will still be able to manage their accounts.

Licenses only work in one Active Directory Domain. If you must rename your domain or reinstall Active Directory, please contact cPanel Customer Service to reactivate your licenses at https://tickets.cpanel.net/submit/index.cgi?reqtype=sales.

When you are setting up your hosting environment please keep in mind that the Active Directory Domain Controller will receive a lot of requests from Enkompass and we expect Active Directory performance will slow above 10,000 users.

Installing Windows 2008 You will need to choose an appropriate edition of Windows Server 2008 for each of the servers in your hosting environment and install it on each server.

Active Directory Domain Controller The first server you should install is the Active Directory Domain Controller. This must be installed on Windows Server 2008 Standard or Enterprise. Carefully choose a name for your Active Directory Domain and for your Active Directory Server. It's very difficult to change these names after the installation of Active Directory. Install Windows Server and then use Server Manager to install the Active Directory Domain Services with a new forest. You can make the forest either a Windows 2003 or Windows 2008 Domain. Select the option to install Active Directory Integrated DNS. You can install the rest of the servers in any order.

Backing up Active Directory The reseller structure and privileges are stored in the Active Directory Domain Controller and should be backed up regularly. The Windows Server Backup Utility will backup Active Directory but it must be installed with Server Manager before you can use it.

MailEnable Server Obtain the install file for MailEnable 3.62 Standard from MailEnable's web site at http://www.mailenable.com/register.asp or the Enkompass Download Site. Copy this to the servers that you want MailEnable to run on. You can install MailEnable standard on Windows Server 2008 Web Edition because it only uses POP. You may also obtain MailEnable Pro or Enterprise and install it in place of the Standard Edition. You will not be able to use Windows Server 2008 Web Edition with these editions because they use IMAP and Web Edition is only licensed for POP. These editions of MailEnable come with a WebMail client and need to have IIS installed on the mail server. Join this computer to the Active Directory Domain after installing Windows Server and before installing MailEnable.

SmarterMail The install file for a special bundle version of SmarterMail 5.5.3 or greater is available on the Enkompass Download Site. SmarterTools has generously provided a Lite version of their SmarterMail 5 Standard Edition with unlimited domains. cPanel prefers SmarterMail for your mail server. When this version detects that Enkompass is installed in the Active Directory Domain of the mail server it will change to the Lite version with unlimited domains. This version can be upgraded to the Professional or Enterprise Editions by purchasing a license from SmarterTools at https://www.smartertools.com/mgt/order/order.aspx. You will not be able to use Windows Server 2008 Web Edition with the Professional or Enterprise editions because they both use IMAP or MAPI and the Web Edition is only licensed for POP. SmarterMail comes with its own WebMail client and Apache Web Server. It does not need to have IIS installed. Join this computer to the Active Directory Domain after installing Windows Server and before installing SmarterMail.

Enkompass Server Enkompass can be installed on Windows Server 2008 Web Edition, Standard or Enterprise. Join this computer to the Active Directory Domain after installing Windows Server and before installing Enkompass. This server will run the Enkompass services, host the Reseller and Web Site Owner interfaces and must have IIS7 installed with the following features: All Common HTTP Features Application Development ASP.Net .Net Extensibility ISAPI Filters ISAPI Extensions Server Side Includes Health and Diagnostics HTTP Logging Request Monitor Security Basic Authentication Windows Authentication URL Authorization Request Filtering IP and Domain Restrictions Performance Static Content Compression Management Tools IIS Management Console IIS Management Scripts and Tools Management Service ALL IIS 6 Management Compatibility (If using MailEnable) Do Not Select the FTP Publishing Service that comes standard with Windows 2008. Enkompass needs the Microsoft New FTP Publishing Service and our installer will install it during installation. Enkompass runs in a private copy of IIS7 that is not visible with the IIS Manager.

Web Servers Use Windows Server 2008 Web Edition, Standard or Enterprise. Join this computer to the Active Directory Domain after installing Windows Server. Do not install the FTP Publishing Service that comes with Windows Server 2008. It does not support secure FTP and Enkompass cannot control it. You can Install the New FTP Publishing Service from Microsoft Downloads at http://www.microsoft.com/downloads or Enkompass will install it when you add the server in Manage Servers and choose the install button.

MySQL Servers Use Windows Server 2008 Web Edition, Standard or Enterprise. Install MySQL 5.1 and start the service. The install file is available on the Enkompass Download site. ENKOMPASS will interface with the 32 or 64 bit editions of MySQL. There must be a root account created so Enkompass can control MySQL. Record the account name and password. You will need to enter this in the Manage Servers Page of WebHost Manager. Also make sure the root user has an access host for the IP of the Enkompass server.

Microsoft SQL 2008 Servers Use Windows Server 2008 Web Edition, Standard or Enterprise. Obtain any of the editions of Microsoft SQL Server 2008 and install it. There must be an Administrator account created so Enkompass can control SQL Server. Record the account name and password. You will need to enter this in the Manage Servers Page of WebHost Manager. We only support the default SQL instance; don’t use a named instance.

Services Installed by Enkompass Services and the administrator account are installed by the Enkompass Installer. This section is for reference. cPanelAdmin Account Enkompass installs services on the server it runs on and on all the servers it must control. These services must run under an administrator account. Because the environment uses Active Directory this account only needs to be created once. Normally this account is named cPanelAdmin and it is a member of DNSAdmins, SchemaAdmins, DomainAdmins and Cryptographic Operators. Enkompass WCF Service This service provides the core functionality of Enkompass. It communicates with the Reseller and Web Site Owner Interfaces with Windows Communications Foundation. It is installed only on the Enkompass server. Mail Enable Controller Service MailEnable A service is installed on the MailEnable Servers so Enkompass can administer the mail accounts. MySQL Controller Service We provide an interface to communicate with the distributed MySQL Servers. This service is only installed on the Enkompass server. Enkompass Certificate Service A service is installed on all the servers so that certificates can be installed and managed on all the servers.

Firewalls Make sure that the following ports are open between all servers in the AD Domain: 135,139, 2095, 2096, 2097, 2098 and 2099. The Enkompass Server should also have open ports 2082, 2083, 2086, and 2087.

Installing Enkompass Log into the Active Directory Server and run the Active Directory Users and Computer Manager. Create a new account and add it to the Domain Administrators Group. Don’t use the standard Administrators account. Use this account to log into the server where Enkompass will be installed. You may have to add this account to the administrators group on the local computer to get Remote Desktop to accept the login. All the Enkompass services will run with the privileges of this account on all the servers in the Active Directory Domain.

Set up the UNC share to hold all the account and web site data. This must be an actual drive on a SAN, NAS or file server where Windows Disk Quota Manager Service can run. Set up the share with these permissions: Everyone – Allow read Domain Admin – Allow Full Control The account you created to install Enkompass with – Allow Full Control

Set up a shared folder that all the web servers can reach. Set up the share with these permissions: Everyone – Allow read Domain Admin – Allow Full Control Administrators - Allow Full Control The account you created to install Enkompass with – Allow Full Control

Download the Enkompass Installation Set from www.cpssdemo.net using the FTP account and password we sent you. Run the installer, read the End User License Agreement and follow the instructions to complete the installation. Here is a little help with the installer entries:

Destination Folder – the folder on the server where Enkompass will be installed. Active Directory Domain –the name of your AD Domain is displayed for your records. Enkompass Account name – the installer will create an account with all the correct privileges to install and manage Enkompass. Enkompass account password - enter a strong password twice and make sure you remember it. Administrator contact email – the administrators email address where system messages will be sent. Administrator contact pager number - does nothing right now. Primary DNS Server – the IP of the Active Directory Server with the integrated DNS. Volume or UNC Share Path – Enter a location to store the web sites and accounts. Your IIS Virtual Directories will point here. This must be an actual drive on a SAN, NAS or file server where Windows Disk Quota Manager Service can run. You can use a UNC path such as \\192.168.99.201\e or a local drive such as C:. We highly recommend that you use a location that all the servers in the AD domain can quickly access and that it be a RAID drive. Directory for Enkompass Accounts – the main directory for the web sites and accounts on the above Volume or UNC Share Path. Destination directory for account backup - System backups are stored in folders on this drive so you can recover the accounts. This should be a different drive than the one where the accounts are stored. Enkompass will set up IIS to use a shared configuration. Enter a UNC path that will be accessible to all the IIS servers - this share will contain the configuration files that IIS and Enkompass use to make the users web sites run on all the available IIS servers. This only needs to be a shared directory, not a shared drive.

Setting Up with Reseller Interface (RI) The Administrator\Reseller web interface is used by administrators and resellers to control the web hosting environment. You need to log into the Administrator Interface and setup the web hosting environment before you add Web Site Owners and their web sites.

The Reseller Hierarchy

1.Admin and Resellers with Admin Privilege 1.Languages 2.Remote Servers 3.IP Addresses 4.System Backups 5.Resellers 1.Privileges 2.Themes 3.Plans 4.WSO Users 1.Databases 2.FTP accounts 3.Certificates 4.Mail Accounts 5.Web Sites 6.User Backups

The Admin Account The ADMIN account is the most powerful account in the Administrator Interface. ADMIN is used to setup the system wide resources in Enkompass and create the main reseller accounts. This account was created at installation and uses the password you specified during installation. We recommend you use a secure password of at least 10 characters. You can enforce this by setting the password requirements in Microsoft Active Directory Group Policies.

Logging into the Administrator Interface Standard Web Interface Point your browser to HTTP://XXX.XXX.XXX.XXX:2086/login.aspx, where XXX.XXX.XXX is the address of server where you installed Enkompass. Secure Web Interface Point your browser to HTTPs://XXX.XXX.XXX.XXX:2087/login.aspx, where XXX.XXX.XXX is the address of server where you installed Enkompass.

Log in with a user name of Admin and type the password you specified during installation.

Managing Servers Enkompass must know how to contact all the mail, database and web servers in the Active Directory Domain that you want it to control. In the left pane of the web page, click on the Manage Servers menu in the Server Configuration Section. Click on the link called Click here to add another Server. Enter the IP address of the server in your environment that you want Enkompass to control. This is the primary address bound to the network card when you installed Windows Server 2008. Enter a Designation for this server. Choose a name that easily identifies this server to your users. Select the server type from the list MySQl – version 5 MicrosoftSQL – 2005 or 2008 WebServer – Windows 2008 with IIS7 MailEnable – version 3.62, Standard, Professional or Enterprise SmarterMail – version 5.5.3+, Lite, Professional or Enterprise Enter the name of the Administrative Account This account is needed for the mail and database servers so that accounts can be created and edited. Enter the Administrative password that you set on the database or mail server. This must be at least two characters long with 1 number and 1 letter. Click the save button Click the Install button to have Enkompass install the appropriate remote control services on the remote server. This will take several minutes and you should wait for the install to finish on each server. Do these same steps for all the remote servers in the Active Directory Domain that you want Enkompass to control.

How IPs are used. In the left pane of the web page click on the Add a New IP Address menu in the IP Functions Section. Enter the IP Addresses that you want to make known to Enkompass. Enkompass will scan the servers to see if that IP address is assigned to a network card. If it is not in use, it will ask which server and network card you want to assign the IP to (You can also do this in Manage Servers). IP’s are in one of five states: Unused – in the system by not assigned to any use. Assigned – Assigned to a network card on a server. Reserved for a reason - an IP you do not want used. Reserved for a Reseller – an Assigned IP exclusively allocated to one reseller for use on their web sites. Use the Reseller Center to Allocate the IP. Dedicated – an Assigned IP exclusively given to one account for use by their web site. Use the Create Account Wizard to do this.

Create Reseller Plans Add Plans Admin and resellers can create plans that can be applied to new accounts to quickly select limits and features offered to users. You can create a selection of plans to offer to your customers such as $30, $60 and $100 a month with higher and higher limits and features. Simply assigning the plan to the user will set their limits. Copy Plans Plans can be copied from one reseller account to another with the Copy Plans menu.

Accounts

Reseller Accounts Resellers in Enkompass can be hierarchical with one reseller owning another and inheriting the owner’s limits. Admin will create the top level resellers and set their limits. Resellers can log in and create other reseller and user accounts and set limits that do not exceed their own limits.

Languages Languages belong to Admin and are available for all users once they are installed. Only Admin can add or remove languages.

Themes Themes allow a reseller to customize the images on the Web Site Owner pages to add their own branding. The reseller must log into the Web Site Owner interface to create and edit their custom themes. The standard themes supplied with Enkompass cannot be edited. Copy one to a new custom theme before editing.

Once you have created a custom theme you can use the Clone Theme menu in the Themes section of RI to copy it to another reseller.

Non-Reseller or Web Site Owner Accounts Any account that is not a reseller can only log into Web Site Owner to manage their own web and FTP site.

Creating an Account There are two account functions available for creating new accounts: The Create Account Wizard or Create a New Account.

The Create Account Wizard leads you through all the options for setting up a new account and is the only way to reserve a server for one web site. There is a lot of help built into this wizard and we won’t repeat that help.

Or

Create a New Account is ideal for quickly setting up Web Site Owner accounts but can be used for reseller accounts. Select the Create a New Account menu from the Account Functions section in the left pane of the main page. Domain Information Enter the web sites domain name (such as MyWebSite.com ), a username and password for the account holder to log in with and an email address to receive warnings and messages from Enkompass. Resources Select a reseller plan or set the resource limits manually. The account is either in a plan or out of a plan. If a plan is edited all the accounts using the plan are updated with the new limits. If possible, keep your accounts in a plan so you don't have to update each account manually. Settings You can assign a dedicated IP address to this user’s web site or use the All Available IP feature to allow IIS to respond to a request for the web site on any address on any web server. Select a language and theme for the Web Site Owner Web Pages. If you are using secure HTTP or FTP you must assign an IP address. Give Reseller Privileges Click on the check box to make this account a reseller, otherwise they are just a Web Site Owner. After this account is created you will be taken to the pages in the Reseller Center to enable the privileges this reseller has. Server Settings Web Site Owners can have one mail server, one MySQL server and one Microsoft SQL Server assigned to their account. Resellers can have multiple servers assigned to them so they can distribute them to their users and resellers. To add additional servers to a reseller go to the Reseller Center and choose the Assign Available Servers image. Mail Server Assign one of the available mail servers from the list. A user can have one mail server or none. Database servers Assign a MySQL and / or Microsoft SQL Server for the web site to use. Each user can have none, one or both types of SQL Servers. Create or Cancel Click on the Create button to create the new account. If you created a reseller go to the Reseller Center and assign additional servers and privileges.

Web Domains The domain assigned to your account is your main domain name (such as Aardvarks.com). Sub Domains You can create sub domains under your main domain. These are addresses and web pages (such as sales Aardvarks.com) that your users want to directly access. Parked Domains Park Domains enters a synonym for your domain in the DNS server. This way you can enter another domain name for your web site. This domain name must be registered with a Domain Registry Provider so the public can find it. Add on Domains This is a combination of parked and sub domains that allows you to host another unrelated web site on your existing web site. This can only be managed through the Web Site Owner Interface.

Backups System Backups Enkompass comes with a scheduled service to do backups of the user files and the Enkompass settings on a periodic basis. Configure the backup schedule and the sites to backup with the Configure Backup menu in the Backup section. These backup sets are kept in the system backup folder and should be moved to a tape or backup server on a regular schedule. The Reseller and the Web Site Owner can restore accounts from this folder. The Enkompass settings are stored in XML files and are zipped together with the user’s files to form a backup set. User backups These backup sets are stored in the Web Site Owner’s area in the /Backup folder. The Web Site Owner can generate and restore from these backup sets. These backups sets should be downloaded to a remote computer using the File Manager to ensure you have an offsite copy to restore the site with.

Certificates Web sites Web sites are secured with a three step process: 1. Generate a self signed certificate or order a certificate from a Certificate Authority. 2. Install a certificate for a web site. 3. Bind the certificate to the IP address.

FTP Sites 1. Generate a self signed certificate and bind it to the FTP site.

A reseller can secure the sites for any of their users. A Web Site Owner can do this only for their web and FTP site.

Getting Web Sites Running with Enkompass

Web Site Structure When an account is created by the reseller, a structure is put in place for hosting the account’s web site: A folder is created for the user on the drive or server that was chosen to hold the web site at the installation of Enkompass. A IIS Virtual Directory is created pointing to the user’s folder. One App Pool is created to run the web site code. Add on Domains and Sub Domains also run in this App pool. A default mail account was created using the MTA that was assigned to the reseller. Either MailEnable or SmarterMail. An entry is put in the IIS7 Shared Configuration File pointing to the web.config for the web site.

Loading your site File manager The Web Site Owner interface provides a File Manager which the user can use to upload their web files to the Web site Folder. Zipping up the files and uploading them is the easiest way to get them into the folder. After a file has been uploaded it can be unZipped using File Manager.

SQL Databases Both Microsoft SQL Server and MySQL 5.1 are supported. Each has a separate set of icons in the Database Section of the WebSite Owner Interface. A user can have access to only one MySQl and one MS SQL Server. Creating Use the menu items to create SQL databases in your web folder. This creates a blank database with the name you chose that has the correct file permissions to run with your web site. Use file manager to download the database to your work station. Configure the tables and fields with your favorite tool if your web site cannot do so. Upload the database back to the same location to use it. Adding Users Use the Manage Users pages to add database users and to set the access privileges the users will have. There are different privileges for Microsoft SQL and MySQL. Mail Adding accounts A default mail account for each web site was created when the account was created by the reseller. Use the Web Site Owner menu item Email Accounts to add additional email accounts and set the mailbox quotas.

Restart Web Sites The web site should automatically start when the first request for a page is received. To restart the site and all the sites belonging to sub-domains use the Restart Websites menu item.