Aspera Faspex Admin Guide 3.5 Windows XP, 2003, 2008 Document Version: V1 2 Contents Contents Introduction...........................................................................................................................................5 Installation.............................................................................................................................................7 System Requirements.....................................................................................................................7 Faspex Upgrade Checklist..............................................................................................................7 First-time Installation.......................................................................................................................8 Upgrade Procedure.......................................................................................................................14 Securing your Faspex Server............................................................................................................18 Configuring the Firewall.................................................................................................................18 Securing your SSH Server............................................................................................................19 Configure a Secure Faspex...........................................................................................................24 Getting Started....................................................................................................................................27 Logging In......................................................................................................................................27 Account (Preferences)...................................................................................................................29 Configuring your Faspex Server.......................................................................................................35 Server Configuration Overview......................................................................................................35 Web Server....................................................................................................................................36 > Create an SSL Certificate (Apache)....................................................................................39 > Enable SSL (Apache)..........................................................................................................42 > Regenerate Self-Signed SSL Certificate (Apache).............................................................43 Transfer Server..............................................................................................................................43 > Setting up SSL for Faspex Nodes.......................................................................................50 Transfer Options............................................................................................................................53 Security..........................................................................................................................................56 Package Storage...........................................................................................................................62 Display Settings.............................................................................................................................62 Save/Restore.................................................................................................................................63 License..........................................................................................................................................64 Additional Faspex Configuration Options........................................................................................66 Contents 3 Packages.......................................................................................................................................66 Notifications...................................................................................................................................68 Authentication: Directory Service..................................................................................................77 Authentication: SAML....................................................................................................................89 Post-Processing............................................................................................................................91 Metadata........................................................................................................................................94 File Storage...................................................................................................................................99 Advanced Config Options............................................................................................................105 User Management.............................................................................................................................108 Creating a New Faspex User......................................................................................................108 Self-Registered Users.................................................................................................................112 Managing Faspex Users..............................................................................................................118 Workgroup and Dropbox Management...........................................................................................121 Create and Manage Workgroups................................................................................................121 Create and Manage Dropboxes..................................................................................................124 Add Users to Dropboxes and Workgroups..................................................................................129 Maintaining Faspex...........................................................................................................................134 Bandwidth Measurement.............................................................................................................134 Changing Package Directory.......................................................................................................134 Modify HTTP Server Settings......................................................................................................135 Customizing New-User-Account Form........................................................................................137 Configuring HTTP and HTTPS Fallback......................................................................................138 Log Files......................................................................................................................................141 Resetting Faspex Admin Password.............................................................................................142 Restarting Faspex.......................................................................................................................142 Restoring Faspex........................................................................................................................143 Sending and Receiving Packages...................................................................................................146 Sending Packages.......................................................................................................................146 Sending to a Workgroup or Dropbox...........................................................................................149 Receiving Packages....................................................................................................................151 4 Contents Inviting External Senders.............................................................................................................155 Appendix............................................................................................................................................157 Updating Aspera Service Account...............................................................................................157 Setting up a Remote Server........................................................................................................158 Note on Encryption at Rest..........................................................................................................163 User Authentication Options with AD..........................................................................................164 asctl Command Reference..........................................................................................................165 Uninstall.......................................................................................................................................173 Technical Support.............................................................................................................................175 Feedback............................................................................................................................................176 Legal Notice.......................................................................................................................................177 Introduction 5 Introduction Aspera Faspex Server is a file exchange application built upon Aspera Enterprise Server as a centralized transfer solution. With a web-based graphical user interface, Faspex Server offers more advanced management options for fasp high-speed transfer to match your organization's workflow. Faspex offers the following file-exchange and management features: Feature Description Web/Email-based Interface Simple web and email interface for exchanging files and directories. Package Forwarding Enable users to forward file packages on the server to others (without re-uploading). Permission Management Manage user permissions through workgroup/dropbox assignment or direct- configuration. Post-Processing Execute custom scripts after a transfer when certain conditions are met. Email Notification Create customizable email notifications of Faspex events (such as receiving a package). Directory Service Seamlessly integrate your organization’s Directory Service users and groups. The following diagram illustrates how Faspex Server handles file transfers: 1. End user accesses the Faspex website via a web browser. At this point, the Faspex Website triggers the Aspera Connect browser plugin. If the user has not already installed the browser plugin, the website will prompt the user automatically. 2. Faspex returns the server’s file list or an upload page based upon the end user’s request. 6 Introduction 3. When the end user selects a file for download or upload, transfer information is passed to the Aspera Connect browser plugin. 4. The Aspera Connect browser plugin establishes a connection with Enterprise Server and begins transferring file(s). Installation 7 Installation Prepare your system and install Aspera Faspex. System Requirements Prepare your system for Aspera Faspex. System Requirements for Aspera Faspex 3.5: • 4 GB RAM • Windows XP, 2003, 2008 • Aspera Enterprise Server v3.0+. • If your computer has an existing MySQL database installed, ensure that it is not running during the installation. • If your computer has an existing Apache HTTP server installed, ensure that it is not running during the installation. • If you are upgrading your existing Faspex Server, be sure to have your MySQL and svcAspera passwords accessible prior to the upgrade. For firewall requirements, please refer to the topic Configuring the Firewall on page 18. Faspex Upgrade Checklist Prerequisites for attempting to upgrade to a newer version of Faspex. IMPORTANT NOTE: If you are running your Aspera Enterprise Server on Isilon OneFS, do not upgrade to Faspex v3.0+! You should not upgrade until Aspera Enterprise Server 3.x is available on your Isilon OneFS platform . If you are Then, you must do the following to upgrade to Faspex v3.0+: currently running... Faspex v2.6.5+ You can upgrade directly to 3.0+ by following the instructions in the topic "Upgrade Procedure." Faspex v2.5.3 You can upgrade directly to 3.0+; however, you must install an updated license to upgrade (since the license format for Faspex v2.6.5+ has changed). To obtain the new, FREE license, please contact Aspera Technical Support. Once you have obtained your new license, you must copy it into the Faspex Server license directory and restart Faspex, as described in the topic License on page 64. Faspex v2.0.8 or You must first upgrade to 2.5.3 by following the upgrade instructions for this version. Please v2.0.10 contact Technical Support on page 175 if you do not have the requisite installer. 8 Installation If you are Then, you must do the following to upgrade to Faspex v3.0+: currently running... Faspex v1.6 - You must first upgrade to 2.0.8 or 2.0.10 by following the instructions for your specific Faspex v2.0.7 version. Please contact Technical Support on page 175 if you do not have the requisite installer. Older than v1.6 If your current installation of Faspex Server is older than version 1.6, please contact Technical Support on page 175 for assistance. Be sure to obtain your MySQL and svcAspera passwords before upgrading Faspex Server. You will need them during the installation process. First-time Installation Install Faspex Server on your system for the first time. Before beginning the installation process, you must be logged into your computer as an administrator (or domain administrator if you are in an Active Directory environment). During the installation process, you will set up the following key components: • Aspera Enterprise Server 3.0+ • Aspera Faspex Server 3.5+ WARNING: Due to incompatible common components, Aspera Console and Aspera Faspex Server 2.X+ CANNOT be installed on the same machine. Aspera does not support this combination. If you are running an older version of Faspex Server (pre-2.X) and Console on the same machine, please contact Aspera Technical Support to move one of the applications to another system. 1. Determine whether or not your Aspera Faspex Server will have a domain name Before continuing with the installation process, determine whether or not you will be configuring Faspex Server with a domain name. If your Faspex Server is configured to identify itself by IP address (rather than by domain name), then the URLs in your notification emails will contain an IP address (e.g. "https://10.0.0.1/aspera/faspex"). Some Web-based email services (e.g. Yahoo or Ymail, Hotmail, etc.) have been known to automatically flag emails containing IP address links as "Spam," and will move them to your Junk/Spam folder. For this reason, Aspera recommends creating a domain name for your Faspex Server. If you do not have a domain name immediately available, then you can initially configure Faspex with an IP address and then change it to use a domain name later. If you know that you will not be setting up a domain name, then make sure that users add your Faspex "From" email address (e.g. [email protected]) to their address book and/or contact list. Doing so typically "white- lists" the address so that emails from your Faspex Server are not automatically flagged and routed to your users' Junk/Spam boxes. Installation 9 CAUTION: Do not configure your Faspex server to use a domain name or hostname that contains underscore characters. Doing so could prevent you from logging into the server or cause other connectivity problems. Internet standards for domain names and hostnames do not support underscore characters. 2. Upgrade Windows Installer to version 4 or higher The Faspex installer requires Windows Installer version 4 or higher. You can download the latest version of Windows Installer and corresponding instructions from http://www.microsoft.com/downloads/details.aspx? FamilyId=5A58B56F-60B6-4412-95B9-54D056D6F9F4. 3. Download the requisite Aspera installers Download the Enterprise Server and Faspex Server installers from the following locations (note that you will be required to input your organization's Aspera login credentials to gain access): • Enterprise Server: http://asperasoft.com/en/downloads/1 • Faspex: http://asperasoft.com/en/downloads/6 If you need help determining your organization's access credentials, please contact Technical Support. 4. Install Aspera Enterprise Server and license. Follow the steps in the Enterprise Server 3.0+ or Connect Server v3.0+ Administrator's Guide to install your software and set up your license. Note that if you are installing Enterprise Server on a remote computer, then you do not need to install it locally. If you are not using a remote transfer server, then complete the installation of Enterprise Server on your local machine and go to the next step. Otherwise, install Enterprise Server on the remote computer and review the topic "Setting up your Remote Server" before going to the next step. 5. Secure your SSH server Keeping your data secure is critically important. As such, Aspera strongly encourages you to take additional steps in setting up and configuring your SSH server so that it is protected against common attacks. For detailed instructions on securing your SSH server, please refer to Securing your SSH Server on page 19 before continuing with your Faspex Server installation. 6. Install Faspex Server After downloading the Faspex Server installer, double-click it to begin the installation process. If your Windows Operating System has User Account Control (UAC) enabled, confirm or enter the administrator's password to allow the installer to make changes to your computer. After the license agreement screen, select your desired setup type. You may select Typical or Custom. Setup types are described below. Option Description Typical Install all required components, including the Faspex application, common files (Ruby and MySQL) and Faspex's MySQL database. 10 Installation Option Description Custom Select individual components to install; in which event, you may use your existing installation(s) of Ruby, MySQL or Faspex's MySQL database. If you selected the Custom setup type, identify which Faspex Server optional features you want to install.