Sign Oklahoma Claim Safe

Document type sign claim oklahoma safe

in this video we're going to take a look at how to configure the secure store service in SharePoint Server 2010 now I'm going to start here on the domain controller because the first thing I need is an account to run the application pool for the secure storage service service application so I'm going to go to start Administrative Tools and Active Directory users and computers expand my domain node down to users right click new user and I'm just gonna call this secure store service use the same four user logon name password and of course I don't want to have to change the password at the next logon and in this case I'm going to choose password never expires now you can use an expiring password here if your organization has a requirement for that and SharePoint Server will actually handle changing the password on a schedule for you and we'll take a look at how to do that in a little bit but I'm going to choose password never expires click Next and click finish and you can see here's our secure store a service account the next thing we need to do is to register this in SharePoint Server as a managed account so I'm going to switch over to one of the application servers in my form and I'm in order to start all programs Microsoft SharePoint 2010 products and of course I want SharePoint 2010 central administration and here in central administration I want to go to security and click security and then under general security I want to click configure managed accounts and you can see I have a couple of managed accounts here I have the form admin account and I have also a generic application pool account and I want to click register manage accounts and I want to type the username and password of the account that I just created which is contoso secure store service and you can see down here there's an option for automatic password change so if I had selected an expiring password I could enable this and choose the appropriate parameters here to have SharePoint Server handle the changing of the password for me now in this case I'll leave this unselected because of course I chose the non-expiring password click OK here's the secures to a service account now as a managed account the next thing I need to do is to actually start the secure store service on one of the application servers in my form so I'm going to go back to the central administration home page and then under system settings manage services on server and you can see down to the bottom here here's the secure store service it is currently stopped and I need to start this on one of my application servers now you can see if I go up to server and I click Change server I have two application servers in my form I need to start the service on at least one of these servers now because this service is designed to store encrypted credentials depending on your needs you may want to isolate it as much as possible and have a specific application server that just runs the secure storage service you can also run it on multiple servers if you need to to scale it up in this case I'll choose app server to and I'll come down to the service and click start you can see it says starting here and if i refresh the page you can see it's now started the next step is to create a service application for secure store so again I'm going to go back to the central administration home page and then under application management I want to go down to manage service applications and then I'm going to go up to new secure Storace need to give it a name I'm just gonna call it secure store service type the name of the instance of sequel server where you want to store the secure store database and this is the database were encrypted credentials will be stored so again if you want the best possible security you may want to consider deploying this database to a different instance of sequel server than the rest of your sharepoint server farm you can also specify a failover server if you've configured single server mirroring it'll scroll down I want to create a new application pool I'm just going to call it secure store app pool and then I need to choose the account that's going to run the application pool and of course that's the Active Directory account that we just created and configured as a registered account here in sharepoint server that's contoso secure store service we also have an option for an audit log and this will record the various actions that the seacoast or service undertakes I'm going to leave this turned on this can be useful for troubleshooting authentication issues if you run into them click ok and it's successfully created the service application so I'll click OK again so here's our securest water service service application I'm going to click here and here's our Sakura story service configuration page and you can see before we can actually do anything with Sakura store we need to generate a new key and this is the key that will be used for encrypting our credentials so I'm going to click generate new key and confirm a passphrase and click OK at this point our secure service is ready to use the next step is to create target applications to define which credentials that you want to store and how you want to map them to various users and we'll be taking a look at how to work with target applications in another video you can leave feedback on this video or any of our Technic content by going to the TechNet topic and clicking the rating and feedback control at the top or bottom of the page or you can send feedback to doc di at Microsoft calm