Microsoft Windows Server#

This article describes how to install i-doit on the Windows operating system. The i-doit installation package for Windows is provided in the customer portal.

The contents of the package are as follows:

• i-doit Windows Installer.exe
• idoit-XX.zip
• src.zip
• windowsdesktop-runtime-6.0.14-win-x64.exe

The installation package always includes the current i-doit version. The src.zip folder also enables installation without an internet connection. Since the i-doit Windows installer requires windowsdesktop-runtime-6.0.14, it is also provided in case no internet connection is available during installation.

installation#

After running the i-doit Windows Installer.exe, the following GUI is displayed:

After clicking Install, all required components are installed in the background.

The following are installed:

• Apache 2.4
• PHP 8.2
• MariaDB 10.6
• i-doit

On successful installation, a small window displays "i-doit has been installed successfully.". After clicking OK, a new browser tab with the localhost URL opens automatically and you can use i-doit to its full extent.

Configuration#

The storage location of the PHP, MariaDB, or Apache configuration:

• PHP: C:\ProgramData\i-doit\php\php.ini

• MariaDB: C:\ProgramData\MariaDB\data\my.ini

• Apache: C:\ProgramData\i-doit\apache-2.4\conf\httpd.conf

Credentials#

Here you can find the login data for the i-doit Windows Installer:

The i-doit login credentials can be found here.

Set Up HTTPS (Optional)#

The following guide shows how to set up SSL for Windows with i-doit. Only the necessary steps to configure HTTPS are described. This section can be skipped.

Prerequisites#

You first need a valid certificate in .crt and .key format. You can create this with OpenSSL. You can download and install OpenSSL, for example, here: OpenSSL. Once OpenSSL is installed, you can open the Win64 OpenSSL Command Prompt via the Windows search bar by searching for "OpenSSL". Enter the following command to create the certificate:

1

OpenSSL req -x509 -sha256 -nodes -days 365 -newkey rsa:4096 -keyout private.key -out certificate.crt

The certificate and private key have now been created in the folder where the command was executed. Copy them, for example, to the folder ProgramData\i-doit\apache-2.4\conf\extra\.

You can also use the openssl.exe shipped in the i-doit Apache folder instead of installing OpenSSL separately. In PowerShell:

1
2
3

cd C:\ProgramData\i-doit\apache-2.4\conf\extra
$env:OPENSSL_CONF = "C:\ProgramData\i-doit\apache-2.4\conf\openssl.cnf"
C:\ProgramData\i-doit\apache-2.4\bin\openssl.exe req -x509 -sha256 -nodes -days 365 -newkey rsa:4096 -keyout private.key -out certificate.crt -subj "/CN=$env:COMPUTERNAME"

Configuration Steps#

1. Create the ssl.conf File#

Navigate to your i-doit folder at ProgramData\i-doit\apache-2.4\conf\extra\ and create the file ssl.conf. The file should have the following content:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

<VirtualHost *:443>
   DocumentRoot "${SRVROOT}/htdocs"
   ServerName localhost

   SSLEngine on
   SSLCertificateFile "path/to/certificate.crt"
   SSLCertificateKeyFile "path/to/privatekey.key"

   <Directory "${SRVROOT}/htdocs">
       Options Indexes FollowSymLinks MultiViews
       AllowOverride all
       Require all granted
       AddHandler application/x-httpd-php .php
   </Directory>

   ErrorLog "logs/ssl_error.log"
   LogLevel warn

   <IfModule log_config_module>
       LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
       LogFormat "%h %l %u %t \"%r\" %>s %b" common
       <IfModule logio_module>
           LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
       </IfModule>
       CustomLog "logs/ssl_access.log" common
   </IfModule>
</VirtualHost>

Note: Adjust the paths and configuration settings according to your own environment and make sure your certificate and private key are present in the specified paths.

2. Modifications in httpd.conf#

Edit the httpd.conf file located at i-doit\apache-2.4\conf\

• Add Listen 443 and comment out Listen 8080. This will make i-doit no longer accessible via HTTP.
• Also add the following lines: LoadModule ssl_module modules/mod_ssl.so and Include conf/extra/ssl.conf
• Change ServerName localhost:8080 to ServerName localhost:443.
• Leave PHPIniDir "C:/ProgramData/i-doit/php" unchanged. If PHPIniDir points to a different folder, PHP loads no php.ini and i-doit does not start.

The file should then look like this if nothing was changed before:

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108

Define SRVROOT "C:/ProgramData/i-doit/apache-2.4"

ServerRoot "${SRVROOT}"
#Listen 8080
Listen 443

LoadModule actions_module modules/mod_actions.so
LoadModule alias_module modules/mod_alias.so
LoadModule allowmethods_module modules/mod_allowmethods.so
LoadModule asis_module modules/mod_asis.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule authn_core_module modules/mod_authn_core.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authz_core_module modules/mod_authz_core.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule dir_module modules/mod_dir.so
LoadModule env_module modules/mod_env.so
LoadModule headers_module modules/mod_headers.so
LoadModule include_module modules/mod_include.so
LoadModule isapi_module modules/mod_isapi.so
LoadModule ldap_module modules/mod_ldap.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule mime_module modules/mod_mime.so
LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule php_module "C:/ProgramData/i-doit/php/php8apache2_4.dll"
LoadModule ssl_module modules/mod_ssl.so
Include conf/extra/ssl.conf

PHPIniDir "C:/ProgramData/i-doit/php"

<IfModule unixd_module>
    User daemon
    Group daemon
</IfModule>

ServerAdmin admin@example.com

ServerName localhost:443
<Directory />
    AllowOverride all
    Require all granted
</Directory>

DocumentRoot "${SRVROOT}/htdocs"
<Directory "${SRVROOT}/htdocs">
    Options Indexes FollowSymLinks MultiViews
    AllowOverride all
    Require all granted
    AddHandler application/x-httpd-php .php
</Directory>

<IfModule dir_module>
    DirectoryIndex index.html index.php
</IfModule>

<Files ".ht*">
    Require all granted
</Files>

ErrorLog "logs/error.log"

LogLevel warn

<IfModule log_config_module>
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    <IfModule logio_module>
      LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
    </IfModule>
    CustomLog "logs/access.log" common
<IfModule alias_module>
    ScriptAlias /cgi-bin/ "${SRVROOT}/cgi-bin/"
</IfModule>

<IfModule cgid_module>
</IfModule>

<Directory "${SRVROOT}/cgi-bin">
    AllowOverride all
    Options None
    Require all granted
</Directory>

<IfModule headers_module>
    RequestHeader unset Proxy early
</IfModule>

<IfModule mime_module>
    TypesConfig conf/mime.types
    AddType application/x-compress .Z
    AddType application/x-gzip .gz .tgz
</IfModule>

<IfModule proxy_html_module>
    Include conf/extra/proxy-html.conf
</IfModule>

<IfModule ssl_module>
    SSLRandomSeed startup builtin
    SSLRandomSeed connect builtin
</IfModule>

3. Restart Apache Web Server#

• Press Win+R, type cmd, and press Enter.
• Or type cmd in the Windows search bar to open the command prompt

Enter the following command to restart the Apache web server:

1

C:\ProgramData\i-doit\apache-2.4\bin\httpd.exe -k restart

The Apache web server has now been restarted. Check the installation and whether i-doit is accessible via HTTPS (https://<i-doit-host>/).

The error log logs\error.log then shows the warnings AH01873 (session cache) and AH01916 (HTTP on port 443). Neither affects operation.

That's it! Your i-doit installation is now configured for SSL on Windows.

Uninstallation#

To uninstall i-doit, the Apache2 service must first be stopped. Enter the following command in the command prompt:

1

C:\ProgramData\i-doit\apache-2.4\bin\httpd.exe -k stop

Once the Apache2 service is stopped, Apache2 can be uninstalled:

1

C:\ProgramData\i-doit\apache-2.4\bin\httpd.exe -k uninstall

Then uninstall MariaDB by removing it under Add or remove programs.

Now the i-doit folder must be deleted and the PHP PATH must be removed from the environment variables:

Install i-doit Discovery for Windows Server#

This section describes how to install i-doit Discovery. The i-doit Discovery package can be found on our website.

The contents of the package are as follows:

• i-doit Discovery Installer.exe
• idoit-XX.zip
• src.zip
• windowsdesktop-runtime-6.0.14-win-x64.exe

The installation package always contains the latest i-doit version as well as JDisc 5.0 and several JDisc add-ons. The src.zip folder also enables installation without an internet connection. Since the i-doit Windows installer requires windowsdesktop-runtime-6.0.14, it is also included in case no internet connection is available.

installation#

After running the i-doit Discovery Installer.exe, you will see the following GUI:

After clicking Install, all required components are installed in the background.

The following components are installed:

• Apache 2.4
• PHP 8.2
• MariaDB 10.6
• i-doit
• JDisc 5.X
• JDisc JDisc Discovery Dependency Mapping 5.X(Add-on)
• JDisc Discovery Device History 5.X(Add-on)
• JDisc Discovery Measurement 5.X(Add-on)
• JDisc Discovery Security 5.X(Add-on)
• JDisc Discovery WEB UI 5.X(Add-on)

After the installation is successful, a small window appears with the following message: "i-doit Discovery has been successfully installed.". After clicking OK, a new window opens in your browser where the localhost URL is automatically opened. You can now use i-doit Discovery to its full extent.

Configuration#

The configuration files for PHP, MariaDB, or Apache can be found in the following directories:

• PHP: C:\ProgramData\i-doit-discovery\php\php.ini

• MariaDB: C:\ProgramData\MariaDB\data\my.ini

• Apache: C:\ProgramData\i-doit-discovery\apache-2.4\conf\httpd.conf

Credentials#

Here you can find the login data for the i-doit Windows Installer:

The i-doit login credentials can be found here.

Uninstallation#

To uninstall i-doit, the Apache2 service must first be stopped. Enter the following command in the command prompt:

1

C:\ProgramData\i-doit-Discovery\apache-2.4\bin\httpd.exe -k stop

Once the Apache2 service is stopped, Apache2 can be uninstalled:

1

C:\ProgramData\i-doit-Discovery\apache-2.4\bin\httpd.exe -k uninstall

Then uninstall MariaDB by removing it under Add or remove programs.

Additionally, JDisc and its add-ons must be removed under Add or remove programs.

Now the i-doit folder must be deleted and the PHP PATH must be removed from the environment variables:

FAQ#

HTTPS connections from i-doit fail (cURL error 77)#

i-doit calls addresses over HTTPS for some functions, for example the update check. PHP verifies the certificates against the file set in php.ini under curl.cainfo and openssl.cafile. If this file is missing, the calls fail with a message like this:

1

cURL error 77: error adding trust anchors from file: C:/ProgramData/i-doit/php/extras/ssl/cacert.pem

This is how you add the file or replace an outdated certificate bundle. Open PowerShell as administrator:

Step 1: Check which file php.ini expects:

1

Select-String C:\ProgramData\i-doit\php\php.ini -Pattern '^\s*(curl\.cainfo|openssl\.cafile)'

If the command returns nothing, add these two lines at the end of php.ini:

1
2

curl.cainfo = "C:/ProgramData/i-doit/php/extras/ssl/cacert.pem"
openssl.cafile = "C:/ProgramData/i-doit/php/extras/ssl/cacert.pem"

Step 2: Download the current CA bundle from curl.se, store it in that location and verify the checksum. Adjust $target if php.ini names a different path:

1
2
3
4
5
6
7

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
$target = 'C:\ProgramData\i-doit\php\extras\ssl\cacert.pem'
New-Item -ItemType Directory -Force (Split-Path $target) | Out-Null
Invoke-WebRequest https://curl.se/ca/cacert.pem -OutFile $target -UseBasicParsing
Invoke-WebRequest https://curl.se/ca/cacert.pem.sha256 -OutFile "$target.sha256" -UseBasicParsing
(Get-Content "$target.sha256").Split(' ')[0] -eq (Get-FileHash $target -Algorithm SHA256).Hash
Remove-Item "$target.sha256"

The last check must return True.

Step 3: Restart the web server:

1

Restart-Service Apache2.4

To test, open Administration > [tenant name] management in i-doit, expand System Config Check and click Check for update next to Updates. Instead of the error message, i-doit then shows the latest available version or that it is up to date.

Improved Website Loading#

On Windows, i-doit takes longer to load in the browser. This is usually due to the antivirus scanner configuration under Windows. You should create an exception for the following i-doit directories:

• path\htdocs\admin
• path\htdocs\images
• path\htdocs\log
• path\htdocs\src