Configure and Set Up On-Premise Connector

To start using the On-Premise Connector the first step is to configure it. Configuring it requires the flow to be started from the Scalefusion Dashboard and continued on-premise with required information exchanged between the two, that is, the Scalefusion Dashboard and the On-Premise Connector instance.

Prerequisites

1. Scalefusion Account with Enterprise License (Legacy, Modern or Trial)
2. The administrator should have owner or co-account owner privileges to complete the setup.
3. Any other administrator (Group Admin, Device Admin or in custom role) who has write access can also do the setup.

Overview of Setup

In a nutshell, following is the process for OPC Setup:

1. Download .msi file from Scalefusion Dashboard and install it to create an OPC Instance
2. Login to OPC Instance and choose an appropriate Network Configuration scheme
3. Configure On-Premise Connector Details on Scalefusion Dashboard
4. Check Connection to validate connection between Scalefusion Dashboard and OPC Instance
5. Set-Up On-Premise Connector certificates. To do so:
   1. Generate CSR from OPC Instance
   2. Upload .csr file on Scalefusion Dashboard to generate a signed identity certificate
   3. Download the signed identity certificate from Scalefusion Dashboard
   4. Upload the signed identity certificate to OPC Instance
   5. Download the trust certificate from Scalefusion Dashboard
   6. Upload the trust certificate to OPC Instance
6. Directory (LDAP) Configuration on OPC Instance
7. Complete Setup on Scalefusion Dashboard

The steps are explained in detail below.

Setting up On-Premise Connector (OPC) on Scalefusion Dashboard

Step 1: Download and Install On-Premise Connector .msi file

Download

1. On Scalefusion Dashboard, navigate to Integrations > On-Premise Connector
2. Click Configure

   

3. The On-Premise Connector configuration page opens. Click on Download button to download On-Premise Connector file

   

4. Once download is complete, copy the opc-installer-<version>.msi file to a server within your premises that can access your on-premise resources like Microsoft Active Directory, Microsoft Exchange, etc.
   If you are already working on the host machine, it is not required to copy the .msi file

Install On-Premise Connector file

1. On the target machine, where you have copied the downloaded file, double click on the opc-installer-<version>.msi file to begin installation.
2. Follow the on-screen instructions as shown in the installation wizard to complete the installation.

   

3. Once the installation is complete, click Finish to launch the On-Premise Connector Instance's Admin UI on the default browser. If the set up is successful then the On-Premise Connector Instance's Admin UI would open with URL http://localhost:28626/opc-ui
   As we do NOT support IE browser, it is recommended that non-IE browser is set as default. Else the URL will need to be opened manually by admin on a non-IE browser.

1. On Scalefusion Dashboard, click Next

Step 2: Configure the On-Premise Connector Instance

The On-Premise Connector Instance can be configured once you have made the necessary network configurations to allow reachability of the On-Premise Connector Instance from Scalefusion Dashboard either via the Reverse Proxy scheme or directly. You may refer to this document for further details. Kindly ensure such network configuration is in place before proceeding ahead.

1. On the host machine where OPC Instance is created follow these steps:
   1. Login to the OPC instance using the credentials
      1. Username: admin@local
      2. Password: Aur0r@dm!n
         NOTE: You can change the password later in the Log In Settings of On-Premise Connector

         

   2. Under Network Configuration, Choose one connection method from the following:
      • Web-Server or Reverse proxy (e.g: IIS) : Selected by default
      • Static Public IP

        

   3. Next button will get enabled once you configure On-Premise Connector Details on Scalefusion Dashboard

      

1. Switch to Scalefusion Dashboard and enter the following details:
   

   Field	Description
   Scheme	Choose one from among the following: Http (Selected by default) Https
   Enter the IP Address / Domain Name where the On-Premise Connector can be reached	The public IP address of the server where OPC Instance is created if HTTP scheme is selected. The public DNS name if HTTPS scheme is selected.
   Enter the Port number for inbound connections if the default has been changed	This is set to 28767 by default if HTTP scheme is selected. Unless instructed specifically, you should not change this port. This is set to 443 by default if HTTPS scheme is selected.

1. Check Connection button will get enabled after entering the required details. Click on Check Connection which would trigger a connectivity check with OPC Instance using the details provided
2. Once the connection between Scalefusion Dashboard and OPC Instance are validated, following will reflect:
   1. On Scalefusion Dashboard, the button changes from Check Connection to Next
   2. Next button on OPC Instance > Network Configuration (mentioned on Step #1.c above) will also get enabled.

      

Step 3: Set Up On-Premise Connector Certificates

You need to setup On-Premise Connector certificates to enable encrypted communications for a secure data exchange between Scalefusion Dashboard and OPC Instance. Follow these steps:

1. In the On-Premise Connector Instance click Next at the Network Configuration step which takes you to Step 2, that is, Set Up On-Premise Connector Certificates
   1. Here click on Generate CSR button to generate a Certificate Signing Request (CSR) file

      

   2. This opens up a dialog where you need to enter server/host information where the OPC Instance is hosted.
      1. Hostname: The IP address or hostname of the server where OPC Instance is created
      2. Department: The department "OU" that is managing the OPC Instance
      3. Organization: Name of the Organization "O" licensed to host OPC Instance
      4. City: City "L" where OPC Instance is hosted
      5. State/Province: Name of the State "ST" where OPC Instance is hosted
      6. Country: Name of the Country where OPC Instance is hosted
   3. Click Submit

      

   4. This will generate and download the CSR file on your local machine (with extension .csr).
2. On the Scalefusion Dashboard, upload the same CSR file (downloaded on your local machine) either by dropping the CSR file here or by Selecting Browse Files. This will generate a signed certificate.

   

3. Notice that Download button will get activated under both sub-sections viz. On-Premise Connector Certificate and Trust Store Certificate.
4. Click on Download button under On-Premise Connector Certificate sub-section to download the Identity Certificate.
5. Click on Download button under Download Trust Store Certificates sub-section to download the Trust Certificate

   

6. On the OPC Instance, first upload the Identity Certificate.
   

   

7. Next upload the Trust Certificate.

   

Step 4: Directory Configuration on OPC instance

After uploading the certificates, the next step is to configure directory settings in OPC Instance. This enables Scalefusion Dashboard to read the users' and groups information.

1. Enter following under Directory Configuration

Some fields are pre-filled as hints for understanding. These should be replaced with actual data.

1. Click Submit
   If LDAP information is not available during setup, admin can click on Later button and come back later to complete the setup.

   

2. You will land on Basic Configuration page which indicates that the integration with OPC is complete. The Basic Configuration page displays basic details like primary email, setup date, certificate details etc.

   

Step 5: Complete Setup on SF Dashboard

On Scalefusion Dashboard, click Complete Setup.

This completes the setup and displays the OPC configuration details in a single view:

• Connector IP, Port, Version
• Configuration Date
• Configured by
• Status
• Configuration Info: The directory configuration that has been set in OPC Instance.

  

Clicking on View Details to shows the Organizational Units and Security Groups

Actions on Configurations

Following actions can be performed over configuration:

1. Sync: If you want to do a manual sync with OPC Instance, click on Sync
2. Edit Config: Allows you to edit the scheme, port or IP
   Sync and Edit are available on clicking three dots under Actions menu
3. Renew Certificate: There will be an option to renew certificates if they have expired. Click on Renew and follow the same Steps to update the certificates.
4. Delete: Deletes the complete OPC configuration. When you click Delete, a confirmation box will appear. Click Confirm.

Management of On-Premise Connector Instance

OPC Instance consists of following sections when you login to it after initial setup is complete

1. Setup Configuration: This consists of two sections
   1. Basic Configuration - Displays all basic configurations that have been done in sync with Scalefusion Dashboard
   2. Network Configuration - View the network configuration options to establish connection between Scalefusion Dashboard and OPC Instance.

      

2. Directory Configuration
   1. Directory Visibility Info - Shows the list of OU's and Security Groups that would be visible to the On-Premise Connector, based on Directory Configuration. The users from these groups can be searched and synced with Scalefusion Dashboard.
   2. Directory Configuration - The directory settings that have been configured. These can be edited.

      

3. Manage Users - Manage the users who are allowed to access OPC UI. Users can be Read+Write (Admin) or Read-Only (User). The User Login Search Base in Directory Configuration must be defined.