locked
IFD tool is failed on W2K3 R2 RRS feed

  • Question

  • I'm trying to setup IFD on a microsoft VPC running on windows server 2003 R2. The IFD tool only updated the <authentication strategy="ServiceProviderLicenseAgreement/"> from <authentication strategy="OnPremise/"> in the web.config file and the registry or the properties and values in the DeploymentProperties table were not done. Has anyone had this issue with IFD? Here's my IFD tool properties:

    IFD Tool Configuration:

    -Authentication Strategy: IFD + On Premise

    -Anonymous: ON

    -Key Encryption: ON

    -IFD CRM server's ip address and Subnet Mask: ServerInternalIPadd-255.255.0.0

    -IFD Domain Scheme: HTTP

    -IFD App Root Domain: contoso.com

    -IFD SDK Root Domain: contoso.com

    -AD Domain Scheme: HTTP

    -AD App Root Domain: crm-srv-01:80

    -AD SDK Root Doamin: crm-srv-01:80

    thanks alot for any help provided.

    Wednesday, October 28, 2009 3:04 AM

Answers

  • i have read this one. and the solution is not hard, just do it manually.

    Below is the steps:

    1) First, the easiest: Edit the web.config file, found on the CRM webserver, probably at C:\Program Files\Microsoft Dynamics CRM\CRMWeb. Within the file, find the line "authentication strategy=..." and change it to "authentication strategy="ServiceProviderLicenseAgreement". (IFD had done this for you rite?)


    2) On the CRM webserver, use the IIS Manager and open up the properties of the CRM website. Enable Anonymous Access to the website. Leave Integrated Authentication enabled as well.


    3) Within the registry of the CRM server, run regedit and navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM. Add a new string value, named IfdInternalNetworkAddress. The value of this key should be a local IP address, then a dash, then the subnet mask. Make sure there are NO SPACES before, after, or in the middle of the value. Example: 192.168.1.200-255.255.255.0 .


    4) To add the necessary values to the SQL database, start up SQL Management Studio and connect to the SQL Server running your CRM databases.
    a) In SQL Mgmt Studio, expand 'Databases'.
    b) Find the MSCRM_CONFIG database and expand it.
    c) Expand 'Tables'.
    d) Find the table called 'dbo.DeploymentProperties'.
    e) Right-click the DeploymentProperties table and select 'Open Table'. (NOTE: Changes made in the table are immediate. BE CAREFUL.)
    f) Look in this table for three records with a ColumnName beginning with 'Ifd'. IF THEY ARE MISSING, you need to add them, using the SQL Query Editor:
    g) Click on the 'New Query' button. When the query editor opens, verify the tab at the top-left of the editor is labelled with the name of the DeploymentProperties table.
    h) In the query editor, enter

    INSERT INTO DeploymentProperties (Id,ColumnName,NVarCharColumn) VALUES ('whatever value is in your other records','IfdRootDomainScheme','HTTP') /* change to HTTPS if you want */

    INSERT INTO DeploymentProperties (Id,ColumnName,NVarCharColumn) VALUES ('whatever value is in your other records','IfdSdkRootDomain','your Ifd Root domain')

    INSERT INTO DeploymentProperties (Id,ColumnName,NVarCharColumn) VALUES ('whatever value is in your other records','IfdWebApplicationRootDomain','your Ifd Web App Root Domain')


    Press the 'Execute Query' button, and the three records should be added to the DeploymentProperties table.

    Once all of the above is accomplished, your CRM system should be accessible from outside of your firewall.

    • Marked as answer by Jim Glass Jr Thursday, June 17, 2010 7:55 PM
    Wednesday, June 16, 2010 2:52 AM

All replies

  • Hi,

    A couple items to check:

    Make sure you download the latest version of the ifd tool:
    http://support.microsoft.com/kb/948779

    and copy it to the crm folder \ tools.

    If windows 2008, then right click and run as administrator.  Be sure to login wtih a user that is a crm admin and a sql server admin too.

    Alex Fagundes - www.PowerObjects.com
    Wednesday, October 28, 2009 3:18 AM
  • Here's the log happening behind the IFD tool:

    21:13:56|   Info| === IFD Tool started: 10/27/2009 9:13:56 PM ===
    21:14:05|   Info| Action {0} Succeeded| Get Internet Facing Deployment Network Address Action Value {0}
    21:14:07|   Info| Action Retrieve List of Organizations in Deployment Succeeded
    21:14:08|   Info| Action Retrieve Internet Facing Deployment Settings Succeeded
    21:15:26|   Info| Current Sku : OnPremise
    21:15:26|   Info| Update Web Config Authentication Strategy 5
    21:15:26|   Info| Action Update Web Config Authentication Strategy ServiceProviderLicenseAgreement Succeeded
    21:15:26|   Info| Action SetWebSiteSecurityAction Succeeded
    21:15:26|   Info| Action SetEndPointDirectorySecurityAction Succeeded
    21:19:55|   Info| === IFD Tool exiting: 10/27/2009 9:19:55 PM ===


    On that Microsoft VPC, it's on the contoso.com domain and I'm using administrator account to login. I'm sure it has admin privileges on both CRM and SQL. I also used the latest version of IFD tool. The IFD version is 4.0.0.0 4.0.0.0 on the About dialog.

    Many thanks.
    Wednesday, October 28, 2009 4:26 AM
  • I have the exact same problem on the same VPC as you mentioned. And there seems to be no answer in the world to resolve it.
    Friday, June 11, 2010 4:06 AM
  • i have read this one. and the solution is not hard, just do it manually.

    Below is the steps:

    1) First, the easiest: Edit the web.config file, found on the CRM webserver, probably at C:\Program Files\Microsoft Dynamics CRM\CRMWeb. Within the file, find the line "authentication strategy=..." and change it to "authentication strategy="ServiceProviderLicenseAgreement". (IFD had done this for you rite?)


    2) On the CRM webserver, use the IIS Manager and open up the properties of the CRM website. Enable Anonymous Access to the website. Leave Integrated Authentication enabled as well.


    3) Within the registry of the CRM server, run regedit and navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM. Add a new string value, named IfdInternalNetworkAddress. The value of this key should be a local IP address, then a dash, then the subnet mask. Make sure there are NO SPACES before, after, or in the middle of the value. Example: 192.168.1.200-255.255.255.0 .


    4) To add the necessary values to the SQL database, start up SQL Management Studio and connect to the SQL Server running your CRM databases.
    a) In SQL Mgmt Studio, expand 'Databases'.
    b) Find the MSCRM_CONFIG database and expand it.
    c) Expand 'Tables'.
    d) Find the table called 'dbo.DeploymentProperties'.
    e) Right-click the DeploymentProperties table and select 'Open Table'. (NOTE: Changes made in the table are immediate. BE CAREFUL.)
    f) Look in this table for three records with a ColumnName beginning with 'Ifd'. IF THEY ARE MISSING, you need to add them, using the SQL Query Editor:
    g) Click on the 'New Query' button. When the query editor opens, verify the tab at the top-left of the editor is labelled with the name of the DeploymentProperties table.
    h) In the query editor, enter

    INSERT INTO DeploymentProperties (Id,ColumnName,NVarCharColumn) VALUES ('whatever value is in your other records','IfdRootDomainScheme','HTTP') /* change to HTTPS if you want */

    INSERT INTO DeploymentProperties (Id,ColumnName,NVarCharColumn) VALUES ('whatever value is in your other records','IfdSdkRootDomain','your Ifd Root domain')

    INSERT INTO DeploymentProperties (Id,ColumnName,NVarCharColumn) VALUES ('whatever value is in your other records','IfdWebApplicationRootDomain','your Ifd Web App Root Domain')


    Press the 'Execute Query' button, and the three records should be added to the DeploymentProperties table.

    Once all of the above is accomplished, your CRM system should be accessible from outside of your firewall.

    • Marked as answer by Jim Glass Jr Thursday, June 17, 2010 7:55 PM
    Wednesday, June 16, 2010 2:52 AM