Data Classification Suite
Console (On-premises)
5.0
Installation Guide
Copyright Terms and Conditions
Copyright © Fortra, LLC and its group of companies. All trademarks and registered trademarks are the property of their respective
owners.
The content in this document is protected by the Copyright Laws of the United States of America and other countries worldwide.
The unauthorized use and/or duplication of this material without express and written permission from Fortra is strictly prohibited.
Excerpts and links may be used, provided that full and clear credit is given to Fortra with appropriate and specific direction to the
original content.
202412020904 - 5.0
Table of Contents
About this guide 4
Before you begin 5
Prerequisites 5
Install DCS Console 6
Access the DCS Console 8
License the DCS Console 9
Add or update SSL certificate in IIS Manager 10
Update token security certificate 11
Troubleshooting 12
View logs 12
Cannot access DCS Console website 12
Uninstall DCS Console 13
Contacting Fortra 14
Fortra Support Portal 14
Installation Guide www.fortra.com page: 3
About this guide /
About this guide
This guide is for administrators who are installing Fortra's Data Classification Suite (DCS)
Console to access DCS Policy Manager.
After you install, see the Documentation page on the DCS Console for more information on
how to create and publish Configurations and manage user access.
Installation Guide www.fortra.com page: 4
Before you begin / Prerequisites
Before you begin
Before you install DCS Console, verify that the Web Server (IIS) Server Role is installed. See
the Microsoft documentation for the installation steps.
Prerequisites
Requirement Description
Operating DCS Console is supported on the following 64-bit operating systems:
Systems
l Windows Server 2019
l Windows Server 2022
Web Browsers The latest version of one of the following browsers:
l Google Chrome
l Microsoft Edge
l Mozilla Firefox
Microsoft Connectivity to a Microsoft Active Directory domain is required to access
Active Directory the DCS Console website.
Microsoft IIS 10
Internet
Information
Services (IIS)
Software If required software prerequisites are missing, the following software will
be installed by default:
l Microsoft .NET Runtime 6.0.32 (x64)
l Microsoft ASP .NET Core 6.0.32 - Shared Framework (x64)
l Microsoft ASP. NET Core 6.0.32 - Windows Server Hosting
Certificates You need an SSL certificate for HTTPS site connection and a token
security certificate to access the DCS Console website.
Fortra recommends third-party Trusted Root Certificate Authority (CA)-
signed certificates for production use.
License file Fortra supplies a license file that is required for accessing the DCS
Console website and the DCS Policy Manager configuration product.
Contact Fortra Customer Operations (dataprotectionkeys@fortra.com) if
you do not have a license.
Installation Guide www.fortra.com page: 5
Install DCS Console /
Install DCS Console
1. Extract files from the DCS Console zip.
2. In the DCS Console > EXE folder, run Fortra DCS Console as an administrator to
launch the DCS Console installer.
3. Click Next on the welcome screen.
4. Review and accept the license agreement terms before clicking Next.
5. On the Select Installation Folder screen:
a. If desired, change the default installation folder (C:\Program Files\Fortra\DCS
Console).
b. Click Next.
6. On the DCS Console Connection Details screen:
a. Enter the host name or IP address.
l If you provide the host name, enter the full device name that includes the
fully qualified domain name.
l If you provide the IP address, you need to clear the All assigned checkbox.
This refers to a setting where the website hosted on IIS is configured to
listen for incoming requests on any IP address that is not assigned to
another website in IIS.
b. If desired, change the default port number (27005).
c. Select the SSL certificate for encrypted HTTPS connection. The certificate must
match the DNS name used to access the website. Click View Details for more
additional information on the selected certificate.
d. Click Next.
7. On the Select License Folder screen:
a. If desired, change the default installation folder for the license
(C:\FortraLicense). A Fortra-supplied license file is needed to access the DCS
Console website. You can provide this license file during or after the installation.
b. Click Next.
IMPORTANT:If you do not select the license file during the installation, see License
the DCS Console on page 9 to add the license after you install the DCS Console.
8. On the Select Diagnostic Logging Folder screen:
a. If desired, change the default installation folder for the logs (C:\Program
Files\Common Files\Fortra\DCS Console\logs).
b. Click Next.
Installation Guide www.fortra.com page: 6
Install DCS Console /
9. On the Token Security Certificate screen:
a. Select the token security certificate. Click View Details for more additional
information on the selected certificate.
b. Click Next.
10. Click Install.
11. Click Finish when the installation is complete.
Installation Guide www.fortra.com page: 7
Access the DCS Console /
Access the DCS Console
1. You can launch Fortra's DCS Console in the Windows Start menu, or navigate to the
site in your web browser.
l If the host name was entered during the installation:
https://<host name>:<port number>
l If the IP address was entered during the installation:
https://<IP address>:<port number>
2. Enter your Windows user credentials in the domain\username format.
3. On the DCS Console login page, select Microsoft On Premise.
The DCS Console home page includes links to the following pages:
Page Description
Policy Manager DCS Policy Manager allows administrators to create
configurations in the DCS Console portal so users can identify
and label sensitive information in a DCS client product. DCS for
Windows is supported in this release. Other products in the Suite
will be configurable in future releases.
Administration This page is only visible for users with Super Admin or Auditor
permissions.
A Super Admin can manage user access to the Policy Manager
and view audit reports on this page. An Auditor can only view the
audit reports on this page.
Documentation The Documentation page outlines how to create and publish
Policy Manager Configurations and manage user access.
Terms of Service This is Fortra's legal agreement.
Third-Party Access third-party software end-user license agreements on this
Notices page.
Installation Guide www.fortra.com page: 8
License the DCS Console /
License the DCS Console
NOTE: These steps are only necessary if you did not select the Fortra-supplied license file
during the installation, or you need to update the product with a new license.
1. Copy the license file to the license directory configured during the installation. The
default location is C:\FortraLicense.
2. Open the Internet Information Services (IIS) Manager.
3. Select Application Pools.
4. Recycle the DCS Console TenantInformation application pool to process the license.
You can do one of the following:
l Select Recycle for DCS Console TenantInformation to immediately recycle this
application pool.
l Update any of the following Advanced Settings for the DCS Console
TenantInformation application pool:
o Regular Time Interval (minutes): Period of time (in minutes) after which an
application pool will recycle.
o Specific Times: A set of specific local times, in 24 hour format, when the
application pool is recycled.
o Idle Time-Out (minutes): Amount of time (in minutes) a worker process will
remain idle before it shuts down. A worker process is idle if it is not
processing requests and no new requests are received.
If the license is valid, the .lic file extension is replaced with .processed when you log in to the
DCS Console. If the license is not valid, the file extension is .error.
If the license file extension is .error, open the ConsoleAuthentication log. The default location
is C:\Program Files\Common Files\Fortra\DCS Console\logs.
Installation Guide www.fortra.com page: 9
Add or update SSL certificate in IIS Manager /
Add or update SSL certificate in
IIS Manager
1. Open the Internet Information Services (IIS) Manager.
2. Select the DCS Console site.
3. Click Bindings.
4. In the Site Bindings dialog, click Add or Edit.
5. Configure the following settings based on the SSL certificate you are binding to the
DCS Console website:
a. Type: Select https.
b. IP address: Select All Unassigned or the IP address of the site.
c. Port: Enter the port number you are using for the DCS Console website.
d. Host name: Enter the host name.
e. SSL certificate: Select the SSL certificate you are binding to the DCS Console
website.
f. Click OK.
6. Click Close to close the Site Bindings dialog.
7. Click Restart for the DCS Console site.
Installation Guide www.fortra.com page: 10
Update token security certificate /
Update token security certificate
1. Verify that IIS_IUSRS for the token security certificate has read permissions allowed:
a. Run certlm.msc to open the Windows Certificate Manager.
b. Go to the Personal > Certificates folder.
c. Right-click the certificate, and then select All Tasks > Manage Private Keys.
d. Select IIS_IUSRS to confirm read access is allowed.
2. Find the certificate subject name:
a. Open the certificate.
b. Click the Details tab.
c. Click Subject. The full subject name with certificate attributes is needed.
EXAMPLE: CN=dcs.fortra.com
3. If the updated token security certificate has a new subject name:
a. Open the appsettings.json file. The default location is C:\Program
Files\Fortra\DCS Console\DCS Console Authentication\Tenant Information.
b. Update the "SigningCertificateSubjectName" setting. Remove spaces in the
signing certificate subject name. If the certificate has multiple certificate
attributes in the subject name, separate the attributes with commas.
4. Open the Internet Information Services (IIS) Manager.
5. Select Application Pools.
6. Recycle the DCS Console TenantInformation application pool to process the updated
token security certificate. You can do one of the following:
l Select Recycle for DCS Console TenantInformation to immediately recycle this
application pool.
l Update any of the following Advanced Settings for the DCS Console
TenantInformation application pool:
o Regular Time Interval (minutes): Period of time (in minutes) after which an
application pool will recycle.
o Specific Times: A set of specific local times, in 24 hour format, when the
application pool is recycled.
o Idle Time-Out (minutes): Amount of time (in minutes) a worker process will
remain idle before it shuts down. A worker process is idle if it is not
processing requests and no new requests are received.
Installation Guide www.fortra.com page: 11
Troubleshooting / View logs
Troubleshooting
View logs
By default, the DCS Console logs are installed here:
C:\Program Files\Common Files\Fortra\DCS Console\logs
Cannot access DCS Console website
l Verify that the Fortra-supplied license file is in the license directory configured during
the installation. The default location is C:\FortraLicense.
o If there is no license file in the designated folder, you need to add it before you
can access the DCS Console. See License the DCS Console on page 9.
o If the license is in the designated folder, but has a file extension of .error, open
the ConsoleAuthentication log. The default location is C:\Program
Files\Common Files\Fortra\DCS Console\logs. If you see "Failed to validate
encryption certificate" errors, you must update the token security certificate. You
can uninstall and reinstall DCS Console, or follow steps outlined in Update token
security certificate on page 11.
l If you see 500.19 or 500.31 errors, verify that the required software prerequisites are
installed. See Software on page 5.
Installation Guide www.fortra.com page: 12
Uninstall DCS Console /
Uninstall DCS Console
1. In the Control Panel, right-click Fortra's DCS Console, and click Uninstall.
2. Confirm you want to uninstall the program.
Installation Guide www.fortra.com page: 13
Contacting Fortra / Fortra Support Portal
Contacting Fortra
Please contact Fortra for questions or to receive information about Data Classification Suite
Console (On-premises).
Fortra Support Portal
For additional resources, or to contact Technical Support, visit the Fortra Support Portal
(https://support.fortra.com).
Gather and organize as much information as possible about the problem including job/error
logs, screen shots or anything else to document the issue.
Installation Guide www.fortra.com page: 14
