Migrating a TechDoc Database

Occasionally, the need arises to migrate a DM and/or SM database from one server to another; particularly when using a remote SQL Server system. The following instructions will show the steps to safely migrate the database(s).

DM Cannot Send Updates to SM Due to SSL Error

If a DM cannot send updates to an SM, it is normally a network connectivity issue but can occasionally be from an SSL certificate problem. If it is an SSL issue, the DM may report an exception that begins with the following line:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Controlling which sheets render in an Excel workbook

Many of our customers wanted the ability to control which sheets in an Excel workbook would render as many times extra sheets only contain data that feeds into the sheet(s) they actually want printed. To support this ability, TechDoc only renders the sheets that are selected when the document is saved and checked into TechDoc. If your Excel workbook is already in TechDoc, you will first need to reserve (check out) the document.

When you select sheets in a workbook, you will normally use the bottom lower left corner of the Excel window. That area should look something like this:

Adding HTTP Headers to Increase IIS Security

We get asked about why doesn't TechDoc have this HTTP header or that HTTP header; most often due to a security scan that was run against a server where TechDoc is running. Depending on the Security tool used at your site, you may get a whole host of potential vulnerabilities displayed. We've seen tons of them come and go. Most of these only work on specific browsers that support them. If the user's browser honors the header then it helps, otherwise it doesn't do anything.

Configuring ADFS 4.0 and Above as an SSO Identity Provider for TechDoc

TechDoc's SAML Authenticator supports most of the Single-Sign-On implementations out there. That being said, Microsoft's Active Directory Federation Services (ADFS) works quite well as an Identity Provider and can be easily configured by way of a SAML Authenticator to achieve access starting in a TechDoc 9 or newer Document Manager (DM). This will give all of your TechDoc DM users a quick and easy way to authenticate and log into TechDoc using your current ADFS setup. We'll go over the steps needed to exchange metadata between the two and configure both sides as needed.

Changing the Metadata File for a SAML Authenticator

From time to time it may become necessary to update the metadata file for a SAML Authenticator. It may change because certificates are changing, IDP host names are changing, because the IDP sofware is changing, etc. This article describes the easiest way to change the metadata file for a SAML authenticator that allows for easy fallback in case there are problems and you have to roll back changes.

Redirecting HTTP to HTTPS on an IIS Web Site

As a good security practice, all TechDoc traffic (and for that matter, almost all web application traffic) should be conducted over HTTPS. On Windows, TechDoc runs underneath IIS so almost all IIS features and capabilities can be applied to the TechDoc web application. One fix for HTTPS is to simply set your web site to require HTTPS only.

Integrating TechDoc with Outlook 2013

Since version 7, TechDoc has had the ability to integrate directly with most standalone email clients through the use of the IMAP/IMAPS protocol. There are vast array of email clients out there and most support IMAP these days: Microsoft Outlook, Mozilla ThunderBird, Evolution, etc. Once you've connected your email client to your TechDoc user account, you'll be able to simply drag emails from your inbox directly into folders within TechDoc!

Disabling TLS 1.0 on a Server Running TechDoc 9

Now with multiple attacks available against TLS 1.0, more system administrators are interested in disabling the protocol in order to harden their servers. TechDoc 9 has been updated to support running without TLS 1.0 (and all prior SSL protocols) being enabled. However, it can be a little tricky to get all the parts in place to do so. Here's a list of steps needed to disable TLS 1.0 on your server.
  1. Upgrade Microsoft SQL Server

Configuring SharePoint 2010 to use ADFS 3.0 as a Trusted Identity Provider

In this post we'll detail the steps required to configure both SharePoint 2010 and Active Directory Federation Services v3 (ADFS) to provide SAML Claims based authentication. Once configured, you will be able to select and use ADFS as a Trusted Identity Provider for any of your SharePoint Web Applications. In order to complete this tutorial, you must have administrative access to both the ADFS server and the SharePoint 2010 Central Administration site.

Pages