To configure the web server for one of the APIs for Smart 3D, you use that API's Configuration Utility to provide information like website name and authorization provider.
-
The steps required to complete this task are almost identical for the two APIs, so the instructions are combined in this help.
-
The same IIS server can host both web APIs for Smart 3D. However, you must:
-
Configure each web API separately
-
Repeat these steps on each machine that acts as a web server.
-
-
Completing this task in the Configuration Utility does not complete the Web Server set up. Using other tools, you configure other parts of the environment like the application pool, web server file permissions, access claims, and app settings.
Security Recommendations
-
When a new site is created on IIS, make sure custom error pages are defined on it. This will make sure any request to this website does not show the platform information in response headers in case of an error scenario.
-
Enforce only TLS 1.2 on the web server.
-
Avoid configuring long token expiration times in the authorization server.
-
To avoid API replay attacks, such as someone trying to continuously burden the server with memory intensive requests, we recommend that you configure rate limiting for the APIs.
To get started
-
-
-
On the Configuration Utility's Welcome page, select Setup Web Server.
The Configuration Utility checks to make sure everything is ready for you to configure the web server.
-
Click Next, and continue:
-
If the Configure Database Connection & Prerequisites is automatically checked and cannot be cleared, it means that the database connection and/or RabbitMQ service is not configured. Continue with Provide database configuration information.
-
Otherwise, continue with Create the web site.
-