Isah Finance Services

Please note: You need to install WebDAV before proceeding with the installation of the Isah Finance Services.

For security reasons, Isah recommends that you acquire a certificate for your website to encrypt your transactions.

1. Start Isah.Service.Finance.Setup.msi to install the Isah Finance Web Services.
2. If you already have an installation of the Isah Web Services, it is possible to add another instance (or more), for example for test purposes. In the first window, specify if you want to install a new instance or upgrade an existing instance.

   Note: You can only use letters, numbers, spaces and underscores when you specify an instance name.

3. Follow instructions and press Next when necessary.
4. The installation will ask you to select an account to run the Windows service. The service can run in the security context of the LocalSystem account, a local user account, or a Managed Service Account. You can grant the service account rights and permissions for your environment that meet your security requirements. The LocalSystem account option is easy to use.

   If you want to use a specific account or a Managed Service Account, execute the following step before running the wizard:

   • Press Windows+R and run secpol.msc. Go to Local Policies, User Rights Management, choose Log on as a service and add the account in order to be able to log in as service. This step is necessary to start the service and to complete the wizard.

   If you run the wizard and select This account, you have to enter the user and password. Use the Verify credentials button to check the user and password you specified. There will be no check of rights. If you choose a Managed Service Account, enter an account ([Domain]\[Account]$, for example, ISAH\IsahService$) and use the Verify account button to check whether the specified account exists.

5. In the IIS Application Pool window, specify the Windows user that will access and run the web services. There are several built-in user accounts with varying permissions. The standard account is ApplicationPoolIdentity.

   If you want to use a custom account, you will need to verify its credentials before you can continue the installation process.

   If you want to use a Managed Service Account, enter the account name ([Domain]\[Account]$, for example, ISAH\IsahService$). Use the Verify account button to check whether the account exists.

   Information on Windows users

   • ApplicationPoolIdentity: This is a dedicated user account for the working process of the application pool.
   • LocalService: This account has the same user rights as the Network Service account, but it is limited to the local computer.
   • LocalSystem: This account has all user permissions. It is part of the Administrators group on the web server.
   • NetworkService: This account is a member of the Users group and has permission to run applications.
6. The installation will ask you to enter the database connection details:

   SQL instance

   Enter your SQL server name and instance name. If you want the installation to show you which instances are available, click Load SQL Instances and select the correct instance from the drop-down list.

   Note: The drop-down might not display all available SQL Server instances.

   Trusted (Windows Authentication) / Specify username and password

   Trusted (Windows Authentication)

   If you want to use the Windows Authentication, click Trusted. The installer will use the account you entered for the Application Pool; this user needs to have the IsahFinanceRole on the database you will use. Assign it to your application pool user if necessary. Please note:

   • If your trusted user is the ApplicationPoolIdentity and the Isah Finance Service is being installed on the database server (which is not recommended), you need to assign permissions to user IIS Appool\Isah AppPool x, in which x is the Isah Finance Service number in the name of the installation.
   • If your trusted user is the ApplicationPoolIdentity and the Isah Finance Service is being installed on another server, user {DOMAINNAME\COMPUTERNAME$} - for instance {ISAH\C0258$} - needs permissions for the database.

   You will not need to enter a login and password and can proceed with Next.

   Specify username and password

   If you want to specify another user name, click Specify username and password:

   • Login: This must be a user with the IsahFinanceRole in the Isah database. Use SQL Server Management Studio to assign this role to the SQL Server user in the Isah database. Isah recommends a user name with IsahFinanceRole permissions only. These are the only permissions required to run the Isah Finance Service.

     Isah does not recommend the use of SQL user 'sa'.

   • Verify connection: ensure the connection works properly by pressing this button. After the connection has been verified, the Next button becomes active.
7. In the Database window, enter the database name and verify the connection if necessary (you will not need to verify the connection if you have chosen Windows authentication in the previous window). If the user you entered in the previous window does not have sufficient permission, a message to that effect will appear. In that case, to avoid installation problems, it is better to go back and enter a user name with IsahFinanceRole in the Isah database.
8. The WebDAV Server Connection window concerns the accessibility of documents.
   • Enter the address of the server that hosts the WebDAV website, for instance localhost or 192.168.1.140.
   • Enter the Port you specified when installing WebDAV.
   • Enter a username and password. This user needs to have the correct Windows permissions for the WebDAV website and the directory that holds your documents.
9. Click Verify credentials.
10. Enter a website name for the Isah Finance Services and the port number the services will use.

    For security reasons, Isah recommends that you acquire a certificate for your website to encrypt your transactions. If you choose not to use a certificate, select Use HTTP. If you have a certificate, select the HTTPS connection type and select your certificate in the next window.

11. Enter the API site name and port. The API can be used for automated communication between Isah Finance and other (third party) applications, for instance when importing invoices.

    For security reasons, Isah recommends that you acquire a certificate for your website to encrypt your transactions. If you choose not to use a certificate, select Use HTTP. If you have a certificate, select the HTTPS connection type and select your certificate in the next window.

12. Enter the license server host and license server port.
13. Enter the destination folder.
14. Press Install.
15. You need to install the Isah Report Service in order to be able to create reminders.
16. An SMTP server is required for sending reminders by email using the Send documents process. The SMTP server needs to be configured in Isah Configuration.
17. You need to install the Electronic Returns Service in order to be able to submit VAT returns electronically.