Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Replacing Apache with Internet Information Services (IIS) for OfficeScan Web Server

    • Updated:
    • 18 Apr 2016
    • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
    • Platform:
    • Windows 2003 Enterprise
    • Windows 2003 Enterprise 64-bit
    • Windows 2003 Enterprise Server
    • Windows 2003 Standard
    • Windows 2003 Standard Server Edition
    • Windows 2008 Enterprise
    • Windows 2008 Standard
    • Windows 2012 Standard
    • Windows 2012 Standard R2
Summary

Change the OfficeScan's Apache web server with Internet Information Services (IIS).

Details
Public

To replace Apache with IIS: 

 
Trend Micro recommends that the safest way to migrate Apache to IIS is to uninstall then install OfficeScan together with the Plug-ins (IDF/TMMS/TMSM/etc).

Do the following

  1. Back up the server configuration using Server Migration Tool.
  2. Back up the OfficeScan database. (optional)
  3. Uninstall and reinstall OfficeScan server. To retain communication between OfficeScan server and the clients, before uninstalling, go to ..\PCCSRV\ofcscan.ini and record the following:
    • Master_DomainName
    • Master_DomainPort
    • Client_LocalServer_Port 

    You will need these values when reinstalling the product using Custom Installation.

     
    If you have any plug-in installed, you will have to reinstall them after the last step.
  4. Restore server configuration that you previously backup using Server Migration tool.

Prerequisites

  1. This solution is only applicable for 32-bit platform. SEG/PDG does not recommend doing it on 64-bit platform OfficeScan Servers. Tested platforms are:
    • Windows 2008 Enterprise SP2 x86
    • Windows 2003 SP2 x86
  2. You need to be at one of the following Patch/Hot fix/Service Pack (SP) level:
    • 10.6 SP1 Patch 1.1 + HF 2503 (osce_106_sp1_win_en_hfb2503.exe)
    • 10.6 SP2

Important Reminders

  • You may experience some latency issues after migration. Current function and command (SVRSVCSETUP.EXE ) are designed to fix the problem in the same web service situation.
  • Do not uninstall Plug-in Manager during the migration steps. Uninstalling Plug-in Manager will automatically uninstall Plug-in service.
  • Apache web service is installed on 32-bit architecture even the platform is 64-bit, Web migration does not support x64 platform for either IIS or Apache.
  • Integrated Smart Protection Server will not work when migrating to the 64-bit platform. Local Web Classification Server and Smart scan Server have 32-bit and 64-bit architecture and they cannot be migrated using
    SVRSVCSETUP.EXE.
  • IIS and Apache’s PHP version are different. If PHP and web service are incompatible, PHP and OfficeScan web console’ widget cannot function properly.

Procedure

  1. Back up the existing OfficeScan files:
    1. Open command prompt.
    2. Navigate to ..\Officescan\PCCSRV\ folder
    3. Type the following command:

      SvrSvcSetup –BackupAosReg

      After the backup process is completed, close the command prompt.

    4. Back up the following files and folder:
      • ..\Officescan\PCCSRV\AosRegBak
      • ..\Officescan\PCCSRV\AosPlsRegBak
      • ..\Officescan\PCCSRV\OFCSCAN.INI
      • ..\Officescan\PCCSRV\OfUninst.ini
      • ..\Officescan\PCCSRV\Sscfg.ini
      • ..\OfficeScan\PCCSRV\LWCS\isapi\isapiLWCSStatus.in
      • ..\OfficeScan\PCCSRV\Private\ofcserver.ini
      • ..\OfficeScan\PCCSRV\Private\Saf\ssnotify.ini
      • ..\OfficeScan\PCCSRV\Admin\ssnotify.ini
      • ..\OfficeScan\Addon
    5. Back up server registry hive:

      HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\service

  2. Migrate Apache to IIS:
    1. Stop all OfficeScan server related services:
      • OfficeScan Master Service
      • OfficeScan Control Manager Agent
      • OfficeScan Plug-in Manager
      • Trend Micro Local Web Classification Server
      • Trend Micro Smart Scan Server
    2. Uninstall Apache:
      1. Go to Control Panel > Add or Remove Program.
      2. Look for Apache HTTP Server 2.x.x then select Remove.
      3. After uninstalling, check if Apache is still listed in services.
      4. If Apache is still listed, redo Step 1. If not, continue with Step e.
      5. Kill all instances of Apache.exe and ApacheMonitor.exe using Task Manager.
  3. Install IIS by following the applicable procedure below:
  4. Open ..\Officescan\PCCSRV\OfUninst.ini file then modify the entries below for IIS Web server.

    You can either use IIS Default Website or use Virtual Web Site. The port number, below are the default values. Just change the ports to the appropriate one if client doesn’t want to use the default ports:

    IIS Virtual Web Site

    [WEB_SERVER]
    ServerType=1
    EverKeepOSCEInstalledApache=0
    ServerPort=8080
    IIS_VhostName=Officescan
    IIS_VHostIdx=3

    [WSS_WEB_SERVER]
    ServerPort=8082
    IIS_VhostName=Smart Scan Server (Integrated)
    IIS_VHostIdx=4

    [LWCS_WEB_SERVER]
    ServerPort=5274
    IIS_VhostName=Local Web Classification Server
    IIS_VHostIdx=5

    [SSL]
    Certificate_Valid_Days=1095
    SSLPort=4343
    EnableSSL=1

    [WSS_SSL]
    SSLPort=4345

    [WFW_ADDED_PORT]
    OSCE_HTTP=8080
    WSS_HTTP=8082
    LWCS_HTTP=5274
    OSCE_HTTPS=4343
    WSS_HTTPS=4345

    IIS Default Web Site

    [WEB_SERVER]
    ServerType=1
    EverKeepOSCEInstalledApache=0
    IIS_VHostIdx=1

    [SSL]
    Certificate_Valid_Days=1095
    SSLPort=443
    EnableSSL=1

    [WSS_SSL]
    SSLPort=443

    [WSS_WEB_SERVER]
    IIS_VHostIdx=1

    [LWCS_WEB_SERVER]
    IIS_VHostIdx=1

    [WFW_ADDED_PORT]
    OSCE_HTTPS=443

  5. Use ISPSInstaller tool to re-install ISPS service:
    1. Open command prompt.
    2. Navigate to ..\Officescan\PCCSRV\Admin\Utility\ISPSInstaller folder.
    3. Type the following in sequence :

      ISPSInstaller /U
      ISPSInstaller /I

      For additional information how to use the ISPS, refer to this article: Using the ISPS Tool to install/uninstall Integrated Smart Protection Server (SPS)

  6. Execute SVRSVCSETUP command:
    1. Open the command prompt as Administrator.
    2. Navigate to ..\Officescan\PCCSRV\ folder.
    3. Type the following in sequence:
      1. Svrsvcsetup.exe –BackupAosReg (This can be skipped if you've performed the back up above)
      2. Svrsvcsetup.exe –Uninstall
      3. Svrsvcsetup.exe –install
      4. Svrsvcsetup.exe –setprivilege
      5. Svrsvcsetup.exe –enablessl (if using SSL)
      6. Svrsvcsetup.exe –RestoreAosReg
  7. If the OfficeScan Server platform is Windows 2003 x86 using IIS6, perform these additional steps:
    1. Download and install the FastCGI extension for IIS 6.0:

      fcgisetup_1.5_rtw_x86.msi

    2. Go to Internet Information Service (IIS) Manager.
    3. Right-click OfficeScan Virtual Web Site then select Properties.
    4. Click the Documents tab.
    5. Click the Add button.
    6. On the Add Content page dialog box, enter “index.php” in the Default content page test field.
    7. Click OK.
  8. Uninstall PHP module:
    1. Go to Control Panel > Program and Features.
    2. Look for PHP 5.x.x then uninstall it.

      Make sure that there no other program is using PHP except OfficeScan.

  9. Reinstall PHP:
    1. Download and save the php-5.3.5-nts-Win32-VC9-x86.msi Windows Installer Package then copy it on the OfficeScan Server.
    2. Open the command prompt as Administrator.
    3. Change the directory to the location where you saved the PHP Windows Installer Package from Step 1.
    4. Run the command below:

      msiexec.exe /i php-5.3.5-nts-Win32-VC9-x86.msi /q INSTALLDIR="C:\Program Files\PHP\
      "ADDLOCAL="iis4FastCGI,ext_php_openssl,ext_php_gmp,ext_php_pdo_sqlite,ext_php_
      ldap,ext_php_curl" /L "C:\PHP_web_service_migrate.log"

    5. Wait for a few minutes after running the command then restart IIS service.
  10. Manually delete ..\PCCSRV\Apache2 folder.
  11. Reboot the machine.
  12. Log on to the OfficeScan management console.

If you're using IIS 7.0 and you continue to encounter errors indicating "Server Error in Application OfficeScan" or "HTTP Error 403.1 - Forbidden", do the following:

  1. Go to the Summary screen and check the detailed error information. Verify that the file is having the error under Handler "PHP_via_FastCGI".
  2. Open the Internet Information Services (IIS) console and navigate to the OfficeScan website.
  3. Access the following path under the OfficeScan website and highlight it:

    OfficeScan > console > html > widget

  4. With the Widget folder highlighted, double-click the Handler Mappings option under the IIS section.
  5. Locate and select the PHP_via_FastCGI service. Right-click the service and then select Edit Feature Permissions.
  6. Verify that the PHP_via_FastCGI service now appears under the Enabled section (indicating that its status is "Enabled").
  7. Log on to the OfficeScan management console and verify if the Summary screen is now working.
Premium
Internal
Rating:
Category:
Migrate
Solution Id:
1030739
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.