|
| 1 | +--- |
| 2 | + |
| 3 | +--- |
| 4 | +import Callout from '@choco-astro/components/Callout.astro'; |
| 5 | +import Xref from '@components/Xref.astro'; |
| 6 | +import TabsPane from '@choco-astro/components/tabs/TabsPane.astro'; |
| 7 | +import TabsPaneContainer from '@choco-astro/components/tabs/TabsPaneContainer.astro'; |
| 8 | +import TabsTabContainer from '@choco-astro/components/tabs/TabsTabContainer.astro'; |
| 9 | +import CentralManagementSecureConnectionStrings from '@components/docs/CentralManagementSecureConnectionStrings.mdx'; |
| 10 | +import CentralManagementDatabaseSetup from '@components/docs/CentralManagementDatabaseSetup.mdx'; |
| 11 | +import CentralManagementWebsiteSetup from '@components/docs/CentralManagementWebsiteSetup.mdx'; |
| 12 | +import CentralManagementServiceSetup from '@components/docs/CentralManagementServiceSetup.mdx'; |
| 13 | +import OrgGuideCcmDatabase from '@components/docs/OrgGuideCcmDatabase.mdx'; |
| 14 | +import OrgGuideCcmWeb from '@components/docs/OrgGuideCcmWeb.mdx'; |
| 15 | +import OrgGuideCcmService from '@components/docs/OrgGuideCcmService.mdx'; |
| 16 | +import OrgGuideCentralManagementIntro from '@components/docs/OrgGuideCentralManagementIntro.mdx' |
| 17 | +import DynamicCodeBlockInput from '@choco-astro/components/dynamicCodeBlock/DynamicCodeBlockInput.astro'; |
| 18 | +import DynamicCodeBlock from '@choco-astro/components/dynamicCodeBlock/DynamicCodeBlock.astro'; |
| 19 | +export const ccmInstall = [ |
| 20 | + { id: 'ccm-database', title: 'Chocolatey Cental Management Database', isActive: true }, |
| 21 | + { id: 'ccm-service', title: 'Chocolatey Central Management Service', updateAnchor: true }, |
| 22 | + { id: 'ccm-web', title: 'Chocolatey Central Management Website', updateAnchor: true } |
| 23 | +]; |
| 24 | + |
| 25 | +<OrgGuideCentralManagementIntro /> |
| 26 | + |
| 27 | +### Requirements |
| 28 | + |
| 29 | +To install and run Chocolatey Central Management, your server(s) must meet the following requirements: |
| 30 | + |
| 31 | +- Windows Server 2022 or later. |
| 32 | +- 4 CPU cores |
| 33 | +- 16 GB RAM |
| 34 | +- 100 GB+ of drive space for computer information and deployment messages processed by the Chocolatey Central Management Service. |
| 35 | + |
| 36 | +### Planning Your Installation |
| 37 | + |
| 38 | +Chocolatey Central Management can be installed on a single server or each component can be installed on separate servers. **All three components are required for a Chocolatey Central Management installation.** |
| 39 | + |
| 40 | +If you have Chocolatey for Business licenses for more than 1,000 endpoints, we recommended installing the components on separate servers. |
| 41 | +For 1,000 licenses or fewer, you can install all components on a single server, though we still recommend using a licensed version of SQL Server for the database component. |
| 42 | + |
| 43 | +<Callout type="warning" title="Before You Begin"> |
| 44 | + |
| 45 | +Before you can install the Chocolatey Central Management Database, you need to have a SQL Server Instance available. SQL Server Express is only recommended for testing and small environments (fewer than 1,000 endpoints). |
| 46 | +</Callout> |
| 47 | + |
| 48 | +### Environment Information |
| 49 | + |
| 50 | +| Variable | Value | Usage | |
| 51 | +| -------- | ----- | ----- | |
| 52 | +| Component | `Database`, `Service`, `Website` | The component(s) of Chocolatey Central Management to install on the current server. | |
| 53 | +| ServiceCredential | Varies | The credentials to use with the Chocolatey Management Service. If the account does not exist, it will be created. The user must have `Log on as a service` privilege. (Service and Web components only) | |
| 54 | +| ConnectionString | Varies | The connection string used to connect to the SQL database. | |
| 55 | +| IsOffline | True | If true, you will be required to provide the path to the zip file containing the internalized Chocolatey components required for installation. | |
| 56 | +| OfflineInstallationMedia | Varies | The path to the zip file containing the internalized Chocolatey components required for installation. This is only required if `IsOffline` is true. | |
| 57 | +| CertificateDnsName | <DynamicCodeBlockInput name="SslCertificateDnsName" defaultValue="Fabrikam.com" /> | The DNS name to use for the Chocolatey Management Service if using a wildcard certificate. (Service and Web components only) | |
| 58 | +| Thumbprint | <DynamicCodeBlockInput name="SslCertificateThumbprint" defaultValue="1234567890" /> | The thumbprint of the certificate to use for the Chocolatey Management Service. (Service and Web components only) | |
| 59 | + |
| 60 | +### Securing Chocolatey Central Management Communications |
| 61 | + |
| 62 | +By default, the install will create and use self-signed certificates for the Chocolatey Management Service and Web components. |
| 63 | +If you wish to use your own certificates, you can do so by providing the `Thumbprint` and `CertificateDnsName` parameters. |
| 64 | + |
| 65 | +<details> |
| 66 | +<summary><strong>You must install the certificate to the Local Machine \ Trusted People store when providing the Thumbprint. (click to expand)</strong></summary> |
| 67 | +<ul class="list-style-type-disc"> |
| 68 | +<li>Once you have your SSL certificate in a locatable directory, type `certlm.msc` in the Search bar of the Chocolatey server to open the Microsoft Management Console for Certificates on the local machine.</li> |
| 69 | +<li>Right-click the `Trusted People` store and select `All Tasks > Import...`. This will open the Certificate Import Wizard.</li> |
| 70 | +<li>Select `Next`, then browse to the location of the SSL certificate you want to use.</li> |
| 71 | +<li>Once you select the certificate, click `Next`.</li> |
| 72 | +<li>Input the password for the certificate and check the box that says `Mark this key as exportable. This will allow you to back up and transport your keys at a later time.` Click `Next`.</li> |
| 73 | +<li>The `Trusted People` certificate store should already be input in the `Browse...` bar. Select `Next`.</li> |
| 74 | +<li>Verify the information in the pane and then select `Finish`.</li> |
| 75 | +</ul> |
| 76 | +</details> |
| 77 | + |
| 78 | +### Chocolatey Central Management Component Installation Scripts |
| 79 | + |
| 80 | +<TabsTabContainer content={ccmInstall} /> |
| 81 | +<TabsPaneContainer> |
| 82 | + <TabsPane content={ccmInstall[0]}> |
| 83 | + <OrgGuideCcmDatabase /> |
| 84 | + <Xref title="Back To Top" value="setup-central-management"/> |
| 85 | + </TabsPane> |
| 86 | + <TabsPane content={ccmInstall[1]}> |
| 87 | + <OrgGuideCcmService /> |
| 88 | + <Xref title="Back To Top" value="setup-central-management"/> |
| 89 | + </TabsPane> |
| 90 | + <TabsPane content={ccmInstall[2]}> |
| 91 | + <OrgGuideCcmWeb /> |
| 92 | + <Xref title="Back To Top" value="setup-central-management"/> |
| 93 | + </TabsPane> |
| 94 | +</TabsPaneContainer> |
0 commit comments