Browsium Ion 3.2 Administration Guide Bonding Browsers to Business www.browsium.com 1 Administration Guide This guide has been created for IT administrators to assist in installing, configuring, and deploying Browsium Ion. This is version of the guide is designed for use with Browsium Ion 3.2. For more information about Browsium, or to contact customer support, please visit http://www.browsium.com. Browsium Ion 3.2 Administration Guide (Revision 04212014) ©2014 Browsium Inc. 2 Table of Contents 1. Introduction .................................................................................................................................................................. 6 1.1. Browsium Ion Overview ................................................................................................................................... 7 1.2. Browsium Ion Explained................................................................................................................................... 8 1.2.1. Document Modes....................................................................................................................................... 8 1.2.2. Profiles ............................................................................................................................................................ 9 1.2.3. Rules ................................................................................................................................................................ 9 1.3. Ion Configuration Manager ......................................................................................................................... 10 1.4. Browsium Ion Integration with Internet Explorer ................................................................................ 11 2. Installation .................................................................................................................................................................. 13 2.1. Ion Components .............................................................................................................................................. 14 2.2. Software Requirements ................................................................................................................................. 15 2.3. Installing the Browsium Ion Client ............................................................................................................ 16 2.4. Installing Browsium Ion Configuration Manager ................................................................................ 19 2.5. Available Command Line Switches for the Installer ........................................................................... 24 2.5.1. Installation Options ................................................................................................................................ 24 2.5.2. Display Options ........................................................................................................................................ 24 2.5.3. Restart Options ........................................................................................................................................ 24 2.5.4. Logging Options ...................................................................................................................................... 25 2.5.5. Repair Options .......................................................................................................................................... 25 2.5.6. Command Line Installation Examples .............................................................................................. 26 2.6. Upgrading from Evaluation to Licensed Version ................................................................................. 26 3. Ion Configuration Manager Overview ............................................................................................................. 29 3.1. Menu Bar ............................................................................................................................................................ 30 Browsium Ion 3.2 Administration Guide (Revision 04212014) ©2014 Browsium Inc. 3 3.2. The Projects Node ........................................................................................................................................... 31 3.3. The Profile Node .............................................................................................................................................. 33 3.3.1. Rendering Mode Selection .................................................................................................................. 33 3.3.2. Profile Editor .............................................................................................................................................. 37 3.4. The Rules Manager Node............................................................................................................................. 51 3.4.1. Rule Editor .................................................................................................................................................. 53 3.5. The Project Settings Node ........................................................................................................................... 54 3.5.1. Listener Service Port ............................................................................................................................... 54 3.5.2. Load Configuration from Local Machine Only ............................................................................. 54 3.5.3. Load from File Name ............................................................................................................................. 55 3.5.4. Minimum Logging Level ....................................................................................................................... 55 3.5.5. Show Splash Screen on Start .............................................................................................................. 55 3.5.6. Clear Cache on Start ............................................................................................................................... 55 3.5.7. Invalid Certificate Handling ................................................................................................................. 56 3.6. The Tools Node ................................................................................................................................................ 57 3.6.1. Process Monitor ....................................................................................................................................... 57 3.6.2. Regex Builder ............................................................................................................................................ 57 4. Configuration Tutorial ........................................................................................................................................... 60 4.1. How to Create a Profile ................................................................................................................................. 61 4.2. How to Create a Rule ..................................................................................................................................... 64 4.3. How to Remove a Rule .................................................................................................................................. 68 4.4. Working With Custom Files, Registry Settings and ActiveX Controls ......................................... 70 4.4.1. Java Version Manager ........................................................................................................................... 75 5. Rule Writing Basics ................................................................................................................................................. 79 5.1. Recommendations for Writing Rules that Work Well ....................................................................... 79 5.2. Working with Web Application Assessment Tools ............................................................................. 80 5.3. Ion Rules Behavior .......................................................................................................................................... 80 5.4. Why Users Can’t Create Their Own Rules .............................................................................................. 81 6. Ion Deployment in the Enterprise ..................................................................................................................... 83 6.1. Enabling the Ion Client for Enterprise Deployment ........................................................................... 85 Browsium Ion 3.2 Administration Guide (Revision 04212014) ©2014 Browsium Inc. 4 6.1.1. Understanding the Add-on List Policy ............................................................................................ 85 6.1.2. Determining the GUID/CLSID of the Ion Client Add-On .......................................................... 87 6.2. Readying End User PCs to Use the Ion Client ...................................................................................... 89 6.3. Deploy Ion Configurations via the Flat File Method .......................................................................... 90 6.3.1. Save Project File (XML Flat File) ......................................................................................................... 90 6.3.2. Flat-file Deployment Option A: Single Registry Entry ............................................................... 93 6.3.3. Flat-file Deployment Option B: Reference Project ...................................................................... 94 6.4. Deploy Ion Configurations via Serialized Registry Keys ................................................................... 95 6.4.1. A Few Words About ADMX ................................................................................................................. 97 A. Troubleshooting ...................................................................................................................................................... 99 A.1. Ion Rule Fails To Engage .............................................................................................................................. 99 A.2. Correct Profile Does Not Load for a Web Site ................................................................................... 100 A.3. Ion Not Working Properly in IE6 or IE7 ................................................................................................ 101 Browsium Ion 3.2 Administration Guide (Revision 04212014) ©2014 Browsium Inc. 5 Section One Introduction In this section you will learn:  Why Browsium Ion is your one-stop Web Application Continuity framework  What components make up the Browsium Ion system  How you can seamlessly integrate Browsium Ion into your enterprise Browsium Ion 3.2 Administration Guide (Revision 04212014) ©2014 Browsium Inc. 6 1. Introduction Many organizations would like to upgrade to a modern version of Internet Explorer and Windows 7 or Windows 8, but can’t. That’s because they depend upon web applications which were designed for legacy versions of Internet Explorer. The various changes in layout, rendering, scripting and security designs in modern IE versions prohibit those applications from functioning properly without extensive and expensive modifications or upgrades. Browsium Ion (“Ion”) allows enterprises to upgrade to modern technologies like Windows 7 or Windows 8 and current Internet Explorer versions while maintaining compatibility with existing legacy web applications–all without changing a single line of server code. But Ion provides more than just legacy Internet Explorer compatibility for the web applications you are running today – it helps ensure Web Application Continuity as your business moves forward. Web Application Continuity provides solutions to manage, maintain, and operate your web applications regardless of the underlying browser lifecycle. Your web applications are built to serve the business for years, but the rate of browser innovation has accelerated to the point it outpaces the standard IT technology system lifecycle. Ion decouples the browser/web application dependencies that exist today, and enables your organization to deploy technologies when you want, without breaking existing line-of-business applications. More importantly, Ion is seamless to users, integrated into the browser and is more easily managed than virtualization solutions. Browsium Ion 3.2 Administration Guide (Revision 04212014) ©2014 Browsium Inc. 7 1.1. Browsium Ion Overview Ion delivers Web Application Continuity by delivering the ability to use and control multiple browser modes, fully customize the browsing environment, and rollback web plugin support to legacy versions all inside modern versions of Internet Explorer. Ion lets organizations enjoy the features and better security of the latest platforms and migrate their legacy Internet Explorer applications on their own timeframes and budgets. More importantly, Ion is a solution that makes sense. Ion makes sense to users because it’s seamless. It lets them work in the ways they’re used to, unlike virtualization approaches that require special training or hardware. In fact, many users never notice they’re using Ion. Ion certainly makes sense to IT administrators because it’s been designed with them in mind. Ion is easy to deploy and manage using the same tools and techniques they use for Internet Explorer. There’s no server component, so Ion works well for in-house and remote workers alike. With minimal overhead, and support for 32- and 64-bit versions of Windows, Ion runs everywhere IT administrators need it to. Finally, it’s isolated approach to running legacy browser settings greatly reduces attack surface when compared to running a legacy operating system and browser. With Ion integrated into your business, the security and functionality benefits of Windows 7, Windows 8, and a modern Internet Explorer are no longer out of reach. Browsium Ion 3.2 Administration Guide (Revision 04212014) ©2014 Browsium Inc. 8 1.2. Browsium Ion Explained Browsium Ion is markedly different from any other web application compatibility offerings, so to understand what Ion is, it’s easiest to start by identifying what it is not: Ion is not virtualization, it is not a repackaged standalone version of Internet Explorer, nor is it a solution that enables running multiple versions of the Internet Explorer browser on the same Windows installation. Installing Ion on your system does not modify the default system browser registry values or settings. Ion is controlled by a hierarchical system of Profiles and Rules, defined using the Ion Configuration Manager. Understanding this system is the key to understanding Ion. The Configuration Manager provides the configuration tool that allows Ion to sidestep compatibility issues by delivering different versions of rendering modes, registry settings and ActiveX controls to the web applications that need them. And with the custom ActiveX, File and Registry settings feature, you can manage browser extensions that are otherwise incompatible with a particular version or architecture of Windows or Internet Explorer. Ion works by managing the way your natively installed version of Internet Explorer renders content. When invoked automatically by a Rule, Ion ensures web applications load the needed version of an add-on, inject the proper JavaScript code, and carry forward legacy Internet Explorer environment and security settings – all without modifying the Windows and Internet Explorer installations or reducing the security posture of the system. Ion renders legacy web applications and content directly inside the Internet Explorer window, just like any other content in the browser. Ion is fully integrated with Internet Explorer settings and uses existing browser settings and file system setups so you only need to manage the exceptions. This approach requires fewer resources and makes administration easy. More specifically, Ion acts as a broker between the browser and the requested web content. Ion uses software isolation to display content and settings on an IT-controlled opt-in basis. In other words, Ion intervenes when – and only when – it is told to by IT administrators. 1.2.1. Document Modes Document modes are the foundation of how Ion is able to make legacy applications work. When a user requests a page that matches an Ion rule, Ion displays the content using an alternate document mode specified by that rule. The following document modes are available in Ion 3:  Default (let Internet Explorer choose)  Adaptive IE Quirks Mode (combination of IE Quirks Mode and IE7 Standards Mode)  Emulate IE7 Mode Browsium Ion 3.2 Administration Guide (Revision 04212014) ©2014 Browsium Inc. 9  Emulate IE8 Mode  Emulate IE9 Mode  Emulate IE10 Mode  IE Quirks Mode  IE Edge Mode  IE7 Standards Mode  IE8 Standards Mode  IE9 Standards Mode  IE10 Standards Mode 1.2.2. Profiles Profiles are groups of settings and browser configurations as well as the specific environment settings, options/values and add-ons required for your web application. Profiles let you specify the configuration and settings needed to run your web application properly, even if that configuration varies from the default IE installation or settings. By providing this type of ‘side by side’ rendering environment, Ion ensures web applications run as expected, even when the default system settings and applications are upgraded to the latest modern IE version. Profiles are easy to create and customize for your specific web application needs. To get started with Profiles, simply select the browser engine required for your web application and Ion will create a Profile using that browser engine and commonly required default settings. From there you can add Custom File associations (to fix issues like running multiple versions of Java inside Internet Explorer or load older CRM/ERP application controls), define HTTP Headers (to ensure web applications operate correctly), as well as a range of other options. While Profiles are highly customizable, they also inherit system settings that are not explicitly changed. This streamlines management by ensuring you don’t need to recreate every policy setting and control point; simply manage the ones you need to set for compatibility. Information on the specifics of each browser engine available in Ion can be found in the Profiles List section. 1.2.3. Rules Rules are actions triggered by a simple string or IP address match or more complex and granular regular expressions. Rules provide very granular control over the conditions which bring them into play, and can work broadly against entire zones or target specific elements on a page. See the Rules Manager section to learn more. Browsium Ion 3.2 Administration Guide (Revision 04212014) ©2014 Browsium Inc.