1. Select the Local Service option for RavenDB, and click Next.

   

   The RavenDB Server Configuration screen displays, where you can select the type of certificate to use for the RavenDB server.
2. Choose one of the following options.
   • Select the Self-Signed Certificate option to generate the certificate via the CMS instance installer process, and then complete the associated fields.

     

     Additional Information

     A self-signed certificate is a security certificate that is not signed by a certificate authority (CA); rather, it is signed by the same entity that it certifies.

     This option creates and registers the certificate on the system during the CMS instance installer process. The certificate authenticates the RavenDB instance and CMS instance. A self-signed certificate may be particularly useful for temporary or staging server scenarios.

     After you provide the RavenDB host name and port number on the RavenDB server, the Ingeniux CMS installation creates the self-signed certificate for you.

     Field	Description
     Server Certificate Password (optional)	Enter a server certificate password. Important If you enter a password in this field, password validation becomes required to access the server certificate.
     RavenDB Host	Enter the appropriate RavenDB host (e.g., raven.server.com or 127.0.0.1). The CMS instance name displays as the default. Note We recommend maintaining the CMS instance name. If you have multiple RavenDB services, maintaining the name helps you to clarify which RavenDB host associates with each CMS instance.
     Raven Server Port Number	Enter the filepath to the appropriate RavenDB instance port number. A wildcard character (*) will notify the system to check for and select an available port number. The system starts checking at 8080. If unavailable, the system runs a loop, incrementing the port number up by one until the system finds an available port number. This port check is performed on this screen and an available port is displayed.
     RavenDB Service Account drop-down list	Version Notes: CMS 10.5.114-10.6 Based on your CMS implementation, select one of the following drop-down list options: LocalService. This option is selected by default. In general, we recommend keeping this option selected. LocalSystem. If you use a Windows 2012/2012 R2 environment, then the installer requires you to select this option. Running the database service as LocalService will not provide adequate permissions to the certificate store required for RavenDB authentication. Select LocalSystem to bypass these conflicts when working with Windows 2012/2012 R2. Caution In CMS 10.5.94, the RavenDB Service Account drop-down list is unavailable. If you use a Windows 2012/2012 R2 environment with CMS 10.5.94, then Ingeniux CMS requires you to install CMS 10.5.114.

   • Select Manual Certificate to provide your own certificate, then complete the associated fields.

     

     Additional Information

     Rather than having the installation wizard create a self-signed certificate, you can provide a server certificate for your local RavenDB server, manually. This may be particularly useful if you require the certificate to be signed by a certification authority.

     Field	Description
     Certificate File Path	Enter the filepath to the appropriate certificate (.pfx file). Use the Browse button to navigate to the certificate in your system's File Explorer.
     Server Certificate File Password (optional)	This field is optional. Enter the password for the indicated server certificate file.
     RavenDB Host	Enter the appropriate RavenDB host URI (e.g., raven.server.com or 127.0.0.1). The CMS instance name displays as the default. Note We recommend maintaining the CMS instance name. If you have multiple RavenDB services, maintaining the name helps you to clarify which RavenDB host associates with each CMS instance.
     Raven Server Port Number	Enter the filepath to the appropriate RavenDB instance port number. A wildcard character (*) will notify the system to check for and select an available port number. The system starts checking at 8080. If in use, the installation wizard increments upwards to find the next available port. The wizard will automatically perform this check on this step and display an available port.
     RavenDB Service Account drop-down list	Version Notes: CMS 10.5.114-10.6 Based on your CMS implementation, select one of the following drop-down list options: LocalService. This option is selected by default. In general, we recommend keeping this option selected. LocalSystem. If you use a Windows 2012/2012 R2 environment, then the installer requires you to select this option. Running the database service as LocalService will not provide adequate permissions to the certificate store required for RavenDB authentication. Select LocalSystem to bypass these conflicts when working with Windows 2012/2012 R2. Caution In CMS 10.5.94, the RavenDB Service Account drop-down list is unavailable. If you use a Windows 2012/2012 R2 environment with CMS 10.5.94, then Ingeniux CMS requires you to install CMS 10.5.114.

3. Click Next.
   The RavenDB Client Configuration screen displays. Use this view to configure the client certificate settings.
4. Choose one of the following options.

   • Select the Default option to use a client certificate generated by the RavenDB server.

     The certificate file will be placed on disk and the CMS will reference this file for client authentication.

     If you choose a client certificate password, password validation becomes required to access the client certificate.

     

   • Select the Thumbprint option to use a client certificate already installed on your machine.

     The machine references the certificate from the Local Machine Store via thumbprint ID. Each certificate contains a thumbprint ID. The client certificate will not exist on disk if this option is used.

     

5. Click Next.

1. If you choose the External URI installation option for RavenDB, complete the associated fields.

   

   Field	Description
   RavenDB URI	Enter the appropriate external RavenDB instance URI.
   Client Certificate File Path (.pfx)	Enter the filepath to the appropriate client certificate (.pfx file).
   Client Certificate Password (optional)	Enter a client certificate password. Important If you enter a password in this field, password validation becomes required to access the client certificate.

2. Click Next.

Next Steps:

After configuring RavenDB and its security certificate for CMS 10.6 or CMS 10.5, return to the appropriate set of wizard instructions to complete the process.

• To complete the wizard for the Ingeniux CMS 10.5–10.6 installation, return to Creating CMS 10.5–10.6 Site Instances.
• To complete the wizard for the upgrade of an existing site to Ingeniux CMS 10.5–10.6, return to Upgrading to CMS 10.5–10.6.
• To complete the wizard for the replacement of an instance of an earlier CMS to Ingeniux CMS 10.5–10.6, return to Replacing Site Instances with CMS 10.5–10.6.
• To complete the wizard for the migration of Ingeniux CMS 8.x to CMS 10.5–10.6, return to Migrating from CMS 8.x to 10.5–10.6.