Configuring the Workflow Server and Subscriber on Different Computers

You can install the Workflow Server and the Workflow Subscriber on the same computer or on different computers. If you choose to install these two components on different computers, some additional configuration may be required, depending on the operating systems of the two computers.

Important: If you are installing the Workflow Server and Subscriber on different computers, you may need to provide domain authentication instead of using Local System Account when configuring the Workflow Subscriber.

If your Server and Subscriber are both on Windows Server 2008, Windows 7, Windows Server 2012, or Windows 8 operating systems

Configure your system to allow RPC calls between the two computers in one of the following ways:

• Option 1

Enable unauthenticated RPC calls by clearing Disable un-authenticated RPC calls in the Microsoft Message Queuing properties. More information. Show me how to do this.

1. Click the Windows Start button, and select Control Panel. (In Windows 8, select Settings from the Charms bar, and select Control Panel.)
2. Select Administrative Tools. (If you are running Windows 7, you may need to select System and Security and click Administrative Tools.)
3. Double-click Computer Management.
4. Expand the Services and Applications node.
5. Right-click Message Queuing and select Properties.
6. In the Server Security tab, clear Disable un-authenticated RPC calls.



Note: If you are using a computer that is running Windows 7 x86, select the Server Security tab that is in the same row as the Routing tab to find this option.



• Option 2

Select Enable workgroup support on the Workflow Server Port step of the Workflow Server Configuration Wizard.

• Option 3

Follow the steps below to enable authentication

1. Install MSMQ Active Directory Domain Services Integration on both the Workflow Server and Workflow Subscriber computers. Learn more about installing MSMQ components.

Note: If your Workflow Server and Workflow Subscriber are on computers running Windows 2008 or 2012, this option is named Directory Service Integration.



2. Open the Laserfiche.Workflow.Service.exe.config file located in <Install Directory>\Laserfiche Workflow 9 (i.e., C:\Program Files\Laserfiche\Laserfiche Workflow 9).
3. Find the 'queueBinding' element and change its security from None to Transport. Show me what this looks like.



Tip: You can open this file in Notepad (if you are running Notepad as an administrator) and use the Find feature to locate the relevant text.

4. Restart the Workflow Server.
5. Restart the Workflow Subscriber.

If your Workflow Subscriber is on a computer with an operating system that uses MSMQ version 3.0 (Windows Server 2003 or Windows XP) and your Workflow Server is on a computer with an operating system that runs MSMQ version 4.0 and above (Windows Server 2008, Windows Vista, Windows 7, Windows Server 2012, or Windows 8)

1. To enable authentication, you need to configure the MSMQ4 server to accept messages signed with weak algorithms by creating a new registry key named HKLM\SOFTWARE\Microsoft\MSMQ\Parameters\Security\WeakHashAlgorithms. Show me how to do this.
1. Go to C:\Windows.
2. Double-click the regedit application.
3. Expand the HKEY_LOCAL_MACHINE node.
4. Expand the SOFTWARE node.
5. Expand the Microsoft node.
6. Expand the MSMQ node.
7. Expand the Parameters node.
8. Select Security.
9. Right-click in the Details Pane, point to New, and select Key.
10. Name the key WeakHashAlgorithms.
2. Optional: Turn off select weak algorithms by creating DWORD values under the new key. The hexadecimal value 8001 turns of MD2 and the hexadecimal value 8002 turns off MD4. Show me how to do this.
1. Select the newly created WeakHashAlgorithms key.
2. Right-click in the Details Pane, and point to New.
3. Select DWORD (32-bit) Value.
4. Name the value to help you remember what it does. For example, "TurnOffMD4."
5. Right-click the value's name, and select Modify. Alternatively, double-click the value's name.
6. In the Edit DWORD (32-bit) Value dialog box, enter the value's data and ensure the correct base is selected.



7. Click OK.

3. Restart the MSMQ Service. Show me how to do this.
1. Click the Windows Start button on the computer the Workflow Server is installed on.
2. Select Control Panel. (In Windows 8, select Settings from the Charms bar, and select Control Panel.)
3. Click Administrative Tools. (If you are running Windows 7 or 8, you may need to select System and Security and click Administrative Tools.)
4. Double-click Services.
5. Under the Name column, select the Message Queuing service.
6. Click the Restart link to the left of the Name column.

Note: Learn more about this on the MSDN Blog.