Deltek Vision® 6.1 Synchronization Server Installation and Maintenance Guide for Intellisync Mobile Suite 8.0 SP2 or higher

June 30, 2009

13880 Dulles Corner Lane Herndon VA 20171 TEL: 703.734.8606 FAX: 703.734.1146 6.1 Synchronization Server Installation and Maintenance Guide for Nokia Intellisync Mobile Suite 8.0 SP2 or higher

While Deltek has attempted to verify that the information in this document is accurate and complete, some typographical or technical errors may exist. The recipient of this document is solely responsible for all decisions relating to or use of the information provided herein. The information contained in this publication is effective as of the publication date below and is subject to change without notice. This publication contains proprietary information that is protected by copyright. All rights are reserved. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, or translated into another language, without the prior written consent of Deltek, Inc. This edition published June 2009. © 2009 Deltek, Inc. Deltek’s software is also protected by copyright law and constitutes valuable confidential and proprietary information of Deltek, Inc. and its licensors. The Deltek software, and all related documentation, is provided for use only in accordance with the terms of the license agreement. Unauthorized reproduction or distribution of the program or any portion thereof could result in severe civil or criminal penalties. All trademarks are the property of their respective owners.

ii

Contents

Overview ...... 1 About the Deltek Vision Synchronization Server ...... 1 About This Guide ...... 2 Glossary of Terms Used in this Guide ...... 2 Additional Resources ...... 3 Training and Support From Deltek ...... 3 Server-to-Server Synchronization Overview...... 5 How Does it Work? ...... 5 Licensing ...... 5 Detailed Business Rules ...... 5 Restrictions and Non-Supported Environments...... 6 System Requirements ...... 6 Server Requirements ...... 7 Server-to-Server Synchronization Process Overview ...... 10 Frequently Asked Questions...... 11 Installing Server-to-Server Synchronization ...... 14 Steps to Perform on the Vision Web Server Before Installing IMS ...... 14 Enabling Synchronization in Deltek Vision ...... 16 Steps to Perform Before Installing Nokia’s IMS Server Using an Exchange 2003 or Exchange 2007 Groupware Server ...... 16 Steps to Perform Before Installing Nokia’s IMS Server Using a Domino 7.x Groupware Server ...... 22 Installing Nokia’s Intellisync Mobile Suite and Deltek Vision Synchronization Server Components ...... 24 Steps to Verify the Setup of IMS Was Successful ...... 37 Create User Groups and Define Profile Settings ...... 40 XML Translator Synchronization Configuration ...... 43 Configure the Lotus Domino Profile to Synchronize Contacts...... 44 Upgrading From Intellisync Server 1.5 to Intellisync Mobile Suite 8.0 ...... 47 Verifying the Services are Running ...... 52 Importing Users from Groupware (Exchange/Domino) to Deltek Vision ...... 52 Importing Users Into IMS ...... 53 Testing Synchronization ...... 56 Adjusting Existing User Synchronization Profiles ...... 57 Troubleshooting Server-to-Server Synchronization ...... 57

iii

Contents

iv

Overview

This section describes the Deltek Vision Synchronization Server, explains the contents of this guide, and tells you how to find additional information to help you install and use the Deltek Vision Synchronization Server.

About the Deltek Vision Synchronization Server The New Intellisync Mobile Suite (IMS) control console now replaces the set of separate tools previously used for managing the Intellisync Server (ISS) server. The previous ISS toolset; template editor, web admin console, iawdesk.exe user profile configuration utility, bulk import utility and the acserverconfig command line utility are now replaced with the single IMS control console. The IMS control is the center for all Intellisync Mobile Suite products on the server. You can complete many administrative tasks, including: . Managing Users and Groups . Managing Settings and Other Variables Specific to each Intellisync Mobile Suite Product . Managing Profile Settings . Configuring Connectivity Settings . Simplified User Creation and Management using the IMS Profiles Feature . From Templates to Profiles — In ISS, templates were assigned to individual users when they were imported. These templates defined the data sections that would be synchronized for each user. After the user was imported, the templates became the users’ profiles. In IMS these templates are replaced with profiles that can be assigned to a group of users. . About Profiles — Each IMS profile can be configured to synchronize specific data sections, use filters and connect to a specific Vision Web Server. . Improved User Management — Instead of managing individual users, groups are created and assigned to specific profiles that can synchronize certain data sections and/or use assigned filters. This process takes place before users are imported for syncing. Users are then imported into the configured groups and managed accordingly. . Improved Support from Nokia for IMS — IMS has enhanced and user friendly error logging capabilities. Detailed error logging can be enabled on a user or server level and can be utilized by Deltek Support for troubleshooting and, if necessary, easily gathered and sent to Nokia for troubleshooting. . Preconfigured Profiles —The IMS installation creates preconfigured Deltek Profiles that can synchronize any combination of the Deltek supported data sections (appointments, contacts, and tasks). The only thing left to do is to configure the profile to use your Vision Application server. . More Options for Connecting to Exchange — There are now two tools that can now be used by IMS for connecting to your Exchange Server; the Microsoft Exchange 2003 System Management Tools (recommended) or Microsoft Outlook 2000- SR2. The Exchange 2003 System Management Tools support 2003 and 2007.

1

Overview

About This Guide This guide contains an overview of the Vision Synchronization Server feature and technical installation, setup, and maintenance information. This information is intended for those at your firm responsible for setting up Vision’s Synchronization Server feature. This document contains information you need to install the Synchronization Server. We will continue to update this document as necessary, to provide the most up-to-date technical information and instructions. The last couple of pages in this document contain helpful tips and troubleshooting advice should you encounter troubles during the IMS installation and configuration. Visit the Deltek e-support Web site to determine if your copy is the latest copy, and to download the most recent copy, if necessary. To access the guide: 1. Browse to https://support.deltek.com. 2. Click the Answers tab. 3. Select Vision from the Products field. 4. Enter ―Synchronization Server Installation and Maintenance Guide for Nokia Intellisync Mobile Suite (IMS)‖ (without quotes) in the Search field. 5. Click Search. The date of the guide is printed in the bottom right of the front cover. You must have a username and password to log on to the e-support site. Contact your Deltek support representative if you do not have this information. This document is organized into three chapters: . Synchronization Server Overview . Installing Synchronization Server with Nokia’s Intellisync Mobile Suite (IMS) . Synchronization Server Maintenance and Troubleshooting

Glossary of Terms Used in this Guide The following terms are used extensively throughout this document: . Active Directory® Services Interface (ADSI) — Used to perform lookups in Active Directory to find the Microsoft Exchange Server and perform user lookups. . Courier Account — An account used by IMS to perform updates on behalf of the sync users. o In Microsoft Exchange 2003 and 2007, this is an Active Directory account used by the IMS Server to update a synchronization user’s Microsoft Exchange mailbox records. This account is delegated control as an Exchange View Only Administrator along with ―Receive As‖ and ―Send As‖ extended rights in Exchange System Manager and must be a member of the local administrator’s group on the IMS Server. o In Lotus Domino 7.0, this is a Server ID file used by the IMS Server to update a synchronization user’s Lotus Domino mail database records. The account used to run the IMS Services on the server must be a member of the local Administrator’s group on the server.

2

. Email Accelerator (EA) – The main system on the IMS Server that synchronizes the user accounts involved in Sync with their Server PIM (Microsoft Exchange, Lotus Domino) with Vision (XML Server) and other sync devices (such as Palm or Treo). . Fully Qualified Domain Name (FQDN) — A domain name made up of a host and a domain name, including the top-level domain. For example, syncserver.deltek.com is an FQDN where the host name is syncserver, and Deltek is the second-level domain and com is the top-level domain. . Intellisync Mobile Suite (IMS) — Nokia’s Intellisync Mobile Suite is a collection of products designed to help support a mobile workforce. It has a full range of components that meets every mobile need and supports a wide range of mobile devices, back-ends, and applications. The IMS server installation combined with the XML Translator configured for Deltek Vision is referred to as the IMS Server in this guide. . Personal Information Manager (PIM) — A generic term used to describe application software that allows users to access and maintain personal data such as appointments and contacts. Microsoft Outlook is an example of a PIM. . Profile — Collections of general and application settings that define how IMS is set up for a specific user or group. With profiles, you can define default and additional profile settings for Microsoft Exchange, Filters, and other supported devices. You can then assign these settings to appropriate groups or users. . Profile Settings — Configuration settings for a particular profile. IMS profile settings for the default Deltek Vision Synchronization Server define the connection to the Vision Web Server and which data sections (calendar, contacts, tasks) will be synchronized. . Server ID File – Lotus Domino ID File assigned with Server level rights to users’ mailfiles. Used as an IMS Courier file for Lotus Domino Synchronization but does not allow a user to log into Notes to access mailfiles using the ID file. . Server PIM – Refers to the backend server hosting the users email accounts (Microsoft Exchange, Lotus Domino) . WebPIM — The front-end interface to user accounts being synced on the IMS Server. The IMS web page allows users or the IMS Administrator to validate connections to Vision and Exchange, and possibly access synchronized data stored in Exchange via the Wireless Email Server web page. . Wireless Email Server — The Intellisync Mobile Suite Server. . XML Translator —The server-to-server component of IMS. It is used to interface the IMS Server with the Vision Web Server via XML files. . XML Server — When configured on the IMS Server, the Vision Web Server is known as the XML Server.

Additional Resources The Deltek Synchronization Server Business Rules Document: Specifications and Business Rules for Synchronization between Deltek Vision 3.0 and higher and Microsoft Exchange or Lotus Domino using Intellisync Mobile Suite, Wireless Email Server (IMS), available from the Answers tab of the Deltek e-support site (https://support.deltek.com).

Training and Support From Deltek Information on training from Deltek is available on the web site: http://www.deltek.com

3

Overview

For technical support contact Deltek support at: Phone number: 800.836.1600. Email: [email protected].

4

Server-to-Server Synchronization Overview

Deltek Vision server-to-server synchronization supports server-to-server bi-directional synchronization of contacts, appointments (meetings, phone calls), and tasks between Deltek Vision and your groupware server (Microsoft Exchange 2003, Exchange 2007 and Domino). To perform this synchronization, Deltek has enlisted the help of a third party synchronization tool called Nokia’s Intellisync Mobile Suite (IMS) Wireless Email Server, referred to as IMS throughout this document. IMS is a collection of products designed to help support a mobile workforce. It has a full range of components that meets every mobile need and supports a wide range of mobile devices, back- ends, and applications. Deltek’s implementation of IMS uses the XML Translator component to interact with the Vision application Server (also known as the XML Server).

The IMS synchronization suite (8.0 SP2) now supports two-way, bi-directional and one-way synchronization. Intellisync Server can synchronize all Vision data, except information contained in public folders on Microsoft Exchange. Shared Contacts in Lotus Domino can be synchronized. For more information about Intellisync and our other partners, see http://www.deltek.com/partners/default.asp.

How Does it Work? You install IMS on a dedicated machine and it makes a connection between your groupware server and your Vision Web Server. IMS utilizes a groupware account, called a Courier Account, with specific groupware elevated privileges in Microsoft Active Directory and Exchange to push Vision database updates into your groupware server user accounts.

Deltek recommends that you be on the latest service pack for your collaboration platform (for example, Microsoft Exchange 2003 SP2). There are several prerequisite pieces that need to be installed on the Intellisync Server for the synchronization to work, as outlined in the section, Installing Server-to-Server Synchronization on page 14.

Licensing Your firm must license the Vision synchronization module to perform synchronization.

Detailed Business Rules Refer to the business rules document, Specifications and Business Rules for Synchronization between Deltek Vision 3.0 and higher and Microsoft Exchange or Lotus Domino using Intellisync Mobile Suite, Wireless Email Server (IMS), available from the Answers tab of the Deltek e- support site (https://support.deltek.com).

5

Server-to-Server Synchronization Overview

Restrictions and Non-Supported Environments . You cannot install IMS on the same server as your IntelliSync Server (ISS). . You cannot install IMS on the same server as any of your Deltek Vision Servers (Web, Report or Database Tier). . You cannot install IMS on your Microsoft Exchange Server or Lotus Domino Servers.. . You cannot install IMS on a Domain Controller. . You cannot install IMS on a Windows XP or other desktop operating system. . If using Microsoft Outlook for establishing connections between IMS and your Exchange Server, you cannot use any version of Microsoft Outlook, other than Outlook 2000 –SR2. . Synchronization with Novell Groupwise is not currently supported with Vision. . Synchronization with Microsoft Exchange 5.5 and 2000 Servers, or Lotus Domino 6.5 is not currently supported with Vision. . You cannot use Lotus iNotes as the Lotus Notes API client on the IMS Sync Server. The full Lotus Notes Client is required to be installed on the IMS Sync Server

New Features and Updates . One-way synchronization is now available with IMS 8.0 SP2 and Vision 6.1 . Synchronization with IMS 8.0 SP2 and Exchange 2007 Lotus Domino 7.0 is currently supported with Vision 6.1. . If using Windows Integrated Security in IIS for Deltek Vision, see page 17 for updated steps that no longer require creating a separate VisionSync Virtual Directory configured with Anonymous security.

System Requirements The following are Deltek recommended system requirements for the groupware server and Intellisync Mobile Suite Server.

Groupware Server requirements Microsoft Exchange 2003 Server, Exchange 2007 or Lotus Domino 7.0 is required.

Intellisync Mobile Suite Server Requirements for Exchange Connections . Internet Explorer 6.0 (or higher) . One of the following two items below is required by the IMS installation in order to make connections to your Exchange Server: . Microsoft Exchange Server System Management Tools with SP2 is recommended. The tools require the IIS Snap-in to be installed via Add/Remove Programs (Add/Remove Windows Components), accessible from the Control Panel. When enabling IIS, do not enable ASP.NET or World Wide Web Services. To remove IIS Web Services, complete the following steps: 1. Launch Control Panel and select Add/Remove Programs.

6

2. Select Add/Remove Windows Components. 3. Highlight Application Server and then click Details. 4. Highlight Internet Information Services (IIS) and then click Details. 5. Scroll to the bottom and UNcheck the box for World Wide Web Service.

. Outlook 2000 SR2 can also be used if the Microsoft Exchange Server System Management Tools are unavailable.

If you are not using the Microsoft Exchange Server System Management Tools, then you can use Outlook 2000 SP2 (also known as ―Outlook 2000 SR-1 with Security Update‖) on the IMS Server, even if your mail servers are running Microsoft Exchange Server 2003. Newer versions of Outlook (2002/XP, 2003) are not supported and the IMS installer will block the installation if it detects those versions.

. A Windows Domain Courier Account set up before the installation and used by the Intellisync Mobile Suite Server Services . This account must be a Domain User that is a member of the local administrator group on the machine (this account does not have to be an administrator account in the Domain). For IMS to update these databases during synchronization or browser access, the account must be delegated control as an Exchange View Only Administrator along with ―Receive As‖ and ―Send As‖ extended rights in Exchange System Manager on Microsoft Exchange 2003 and 2007.

Intellisync Mobile Suite Server Requirements for Lotus Domino Connections . Internet Explorer 6.0 (or higher) . Lotus Notes 7.0 Full Client. IMS connects to the Lotus Domino Server using the Lotus Notes Client API. (The iNotes client is not supported on the IMS Server) . Lotus Domino Server ID File assigned to and stored on the IMS Server.

About Remote Access The IMS administration console can be installed on a remote workstation and used to connect and administer IMS remotely. If you plan to install the Nokia Intellisync Mobile Suite Server remotely on a Windows 2003 Server using Remote Desktop, before launching remote desktop, you must specify the console switch at a DOS prompt or the RUN command using the syntax ―mstsc /console‖ Do not use Microsoft Terminal Services/Remote Desktop to install your Nokia Intellisync Mobile Suite Server on any other Microsoft Windows operating system. Attempting to use Terminal Services incorrectly to install or manage Intellisync Server can cause errors and issues with the product. If you plan to install IMS on a Windows 2000 Server remotely, use another remote access tool, such as VNC. VNC is a freeware application that can be downloaded from the following URL: http://www.realvnc.com/cgi-bin/download.cgi?product=free4. If you are using remote desktop to install IMS on a Windows 2003 Server, you can verify that you are logged in using the console switch by browsing to Administrative Tools and selecting the

7

Server-to-Server Synchronization Overview

Terminal Services Manager option. Then, verify that the value in the ID column (highlighted in green) is equal to 0. See screenshot below for an example.

Server Requirements The benchmarking results Deltek has received from Intellisync are based upon three variables: . Number of total users. . Number of concurrent users. . Polling frequency. Because the synchronization is server based, you will need to specify a polling frequency for how often the synchronization server will ―check‖ the collaboration server (that is, Microsoft Exchange or Lotus Domino) for changes to calendar activities, contacts or tasks. . Polling frequency will vary widely by firm and firm profile. Some firms might wish to have an almost immediate sync, checking every 15 minutes for changed items, whereas other firms might synchronize once a day. The following tables contain hardware and sizing recommendations. This information is provided simply as a guideline for sizing and purchase of server equipment. Deltek will publish additional information as it becomes available. For detailed hardware requirements for the machine where you install IMS Server, refer to the Intellisync documentation: Intellisync Mobile Suite Administrator’s Guide (AdminGdeEN.pdf) provided in the IMS Server installation documentation directory provided with your IMS Setup files.

8

Server Requirements – (Firms of 10-100)

Sync Users 10 – 100

Concurrent Users 1 – 10

Polling Frequency > 6 minute increments for every 20 Sync Users

Hardware Name Brand, Workstation Class Machine Requirements for Pentium® III 1.0 GHz or Faster Processor machine (512K Cache) 1 GB RAM 1 GB free space + 10 MB per sync user 100 MB Network Card Properly sized Uninterruptible Power Supply Windows 2000/2003 Server Operating System

Server Requirements – (Firms of 100-200)

Sync Users 100 – 200

Concurrent Users 10 - 20

Polling Frequency > 15 minute increments for every 50 Sync Users

Hardware Name Brand, Server Class Machine Requirements for Dual Intel Pentium® III 1.0 GHz or Faster Processor machine (512K Cache) 2 GB RAM 2 x 18 GB SCSI Hard Drives (RAID 1 Recommended) 1 GB free space + 10 MB per sync user RAID Controller 100 MB Network Card Properly sized Uninterruptible Power Supply Windows 2000/2003 Server Operating System

9

Server-to-Server Synchronization Overview

Server-to-Server Synchronization Process Overview This section provides an overview of the synchronization process and capabilities of the Vision Server-to-Server Synchronization module.

The process . Synchronization is completely an automated server-side process and does not need any intervention from the end-user. . During installation, a default Exchange Server Profile is created that defines the connections to Microsoft Exchange and Active Directory. . During installation, a default Deltek Vision Synchronization Server Profile along with seven standard profile configuration settings are created that can be used to define the connections and data sections that are synced with the Deltek Vision Web Server. . The IMS Server sits between the Deltek Vision Web Server and the groupware server (Exchange/Domino) and uses the Profiles to communicate with them. . Each Deltek Vision Synchronization Profile Setting on the IMS Server talks to Vision by making an HTTP call (port 80) to the synciss.aspx page on the Vision Web server, which in turn calls the Vision .NET DLLs. The Vision Web Server is also referred to as the XML Server in the context of the synchronization process. . IMS uses the Lotus Notes API to talk to Lotus Domino . IMS uses MAPI to talk to Microsoft Exchange and ADSI to perform lookups on the Exchange Lookup Server. . Groups are created in the IMS Admin Console and configured to use the profile settings that control the data sections that are synced. . Users on IMS server are created by importing users from the groupware server and assigning them to the preconfigured groups. . The import process creates a link/mapping between users in Deltek Vision, users on the IMS Server, and users on the Exchange/Domino groupware server. The link and sync history information is stored in a local IMS database and is used by IMS in order to make these three systems communicate with each other and exchange data. . Users can be imported either directly from Active Directory via LDAP, NT, or using a tab- delimited text file. The import process associates users on IMS with their respective mailboxes on the groupware server. . Deltek recommends importing the users using a tab-delimited text file. The text file can have different values for Exchange aliases and usernames. The text file import process automatically creates the internal mapping in IMS between the Vision username and the Exchange/Domino Mailbox for the sync user by activating the connections for each user and automatically assigning them to the preconfigured groups. . If importing directly from Active Directory, the account logged into the machine or the Courier Account specified must have lookup rights to Active Directory, and the Active Directory Organizational Units (OU) for the domain must be correctly specified when building the list of users. . If importing directly from Active Directory, the internal mapping is not automatically created in IMS and two additional steps are required to enable syncing for the sync users.

10

. Either the users or the administrator (on the users’ behalf) must log into the Web PIM of the IMS Server and activate the connection to the Exchange/Domino Server. . Either the users or the administrator (on the users’ behalf) must log into the Web PIM of the IMS Server and activate the connection to the XML Translator(s) that are making the connection to the Vision Server. . Every user that is imported unto the IMS Server has an Email Accelerator account on the IMS Server that keeps track of their synchronized data. . The Email Accelerator (EA) component on the IMS Server synchronizes the users’ data with all connectors such as Exchange or Domino (server PIMs), XML server (Vision), and devices (handheld, Outlook, etc.) that are configured for that user account. The order of synchronization will be as follows: 1. The Email Accelerator first synchronizes the user with Exchange or Domino. 2. The Email Accelerator then synchronizes the user’s data with Vision (XML server) 3. The sync process uses a merging algorithm to merge changes from both sides. If one of the fields was modified on both sides, the IMS server uses the data from the connector that was synced last. Because the Vision server is synced last, the changes from the XML Server always win conflicts. 4. If the account also has a device and the sync was initiated from device, the device would be synced last. By default the synchronization process only involves syncing data between a groupware server (Exchange/Domino) and Vision.

Frequently Asked Questions This section includes answers to common questions about Vision Server-to-Server Synchronization. Refer to the business rules document, Specifications and Business Rules for Synchronization between Deltek Vision 3.0 and higher and Microsoft Exchange or Lotus Domino using Intellisync Mobile Suite, Wireless Email Server (IMS), available from the Answers tab of the Deltek e-support site (https://support.deltek.com). What is synchronized? Deltek Vision supports bi-directional and one-way server to server replication of contacts, calendar events (appointments, phone calls), and tasks between the Deltek Vision database and Microsoft Exchange 2003, Exchange 2007 and Lotus Domino 7.0. What collaboration platforms are supported with IMS? Microsoft Exchange Server 2003, Exchange 2007 and Lotus Domino 7.0. How is the synchronization module licensed? The Deltek Vision synchronization module is an optional Deltek Vision application and is licensed per company. Can I synchronize directly with Microsoft Outlook (where there is no Microsoft Exchange server in the environment) GroupWise, Act, Goldmine? No, this is not currently possible with Deltek Vision. Can I sync with Palm or PocketPC devices? While there is not a direct sync between Deltek Vision and these devices, you can synchronize data to them from your Exchange or Notes server. This is accomplished with software provided by your device vendor. Contacts, calendar events, and tasks are synchronized to your Exchange

11

Server-to-Server Synchronization Overview or Notes server from Vision. Then your server and vendor software take care of the device synchronization from there. Can I synchronize with personal folder (PST) on my machine? No. Can I use any of the other synchronization modules from the Intellisync Mobile Suite? Yes, but this would not be implemented or supported by Deltek Support. To get additional information for using any of the IMS modules, contact your Deltek Support representative and they can open up a case with Nokia to get the appropriate support from Nokia. Can my collaboration server and IMS Server be at different physical locations? Yes. However, if the average ping response time between the machines is greater than 32 ms, then the connection would be unacceptable and render the environment unsupportable. Can my Vision server and IMS Server be located in different time zones? No. The Vision Server and IMS Server must be in the same time zone so that the calendar dates and start times can synchronize correctly. Can my collaboration server and IMS Server be the same server? No. Can my IMS Server be the same server as any other Deltek Vision tier? No. How efficient is the server to server synchronization? The server-to-server synchronization has been optimized for low bandwidth so that only the changes of a particular record are transferred between the collaboration server and the Deltek Vision database and not the entire record. Can I synchronize with mailboxes stored on the server? Yes. Can I synchronize with public folders? No. The current release of IMS does not support Public Folders. Deltek is working with Nokia to obtain a bi-directional public folder synchronization solution. How do I synchronize my contacts from Deltek Vision? Contacts associated with your employee record are considered ―my contacts‖ and those are the contacts that will be synchronized. Can I associate a query with ―my contacts‖ so that new contacts that are added are automatically added to my contacts? This feature will be considered for a future release of Deltek Vision. How do I initiate a server to server synchronization? All organizations will set up a polling frequency or interval to automatically synchronize between the collaboration server (Microsoft Exchange or Lotus Domino) and Deltek Vision. The polling frequency is required setting for IMS Server. The default frequency is 15 minutes. Some firms, however, may prefer to set a much lower frequency (for example, 24 hours). To force synchronization before your next synchronization cycle, login to the IMS Admin Console and select the Management node. Drill down to Users and right-click on the user and choose the Use Webpage as User option. Once the web page is loaded, type http://localhost in the browser

12

address bar and login as that username. The Exchange folders (calendar, contacts, tasks) will appear, click on the folder for the user that you want to synchronize and synchronization will be forced for that user. Do the calendar items maintain the association with contacts? Yes. Do the contacts maintain the association with categories? Yes. How is conflict resolution handled? The sync process uses a merging algorithm to merge changes from both sides. In the event of a conflict, where one of the fields was modified on both sides, the IMS server uses the data from the connector that was synced last. Because the Vision server is always synced last, the changes from the XML Server always win conflicts. Can I have multiple Exchange Servers with Sync? With Exchange 2003 and Exchange 2007, as long as all Exchange servers are in the same Exchange Organization and in the same domain, you only need one Synchronization Server. How often should I reboot my synchronization server? It is recommended to reboot your sync server weekly to ensure optimal performance and reliability. What if I am new to Microsoft Exchange 2007 and do not have the Microsoft Exchange Server 2003 Management tools or the Microsoft Outlook client? Refer to the section for downloading and installing the Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1 for use with IMS.

13

Installing Server-to-Server Synchronization

Installing Server-to-Server Synchronization

This section includes instructions for installing server-to-server synchronization, including prerequisite steps, installation itself, enabling synchronization in Vision after installation, and creating user groups and defining profile settings. Before you begin to set up Nokia IMS Server prerequisites, first review the comprehensive business rules document on Deltek Vision Synchronization (Specifications and Business Rules for Synchronization between Deltek Vision 3.0 and higher and Microsoft Exchange 2003 or Exchange 2007 using Nokia’s Intellisync Mobile Suite (IMS)) available from the Deltek Documents web part on the Downloads/Uploads tab of the Deltek e-support site (https://support.deltek.com). This section also provides upgrade instructions for upgrading from ISS 1.5 to IMS 8.0.

Steps to Perform on the Vision Web Server Before Installing IMS Before installing Intellisync Server you must do the following: . Log on to the Vision Web Server into Weblink and specify which databases will be used for synchronization.

To specify prerequisite installation settings: 1. Access the WebLink utility from any computer that can access the Vision Web/Application server via the WebLink utility URL (http://[Vision Web/Application Server Name]/[name of virtual directory for Vision]/weblink.aspx). 2. Enter your WebLink password. 3. For information about WebLink and the WebLink password, refer to the WebLink book of the Vision Online Help, accessible from within the Deltek Vision user interface. 4. Click the Database Configuration tab. 5. Verify that the Disable Sync Server option is deselected for each database you wish to synchronize with, and verify that this option is selected for each database you do not wish to synchronize with. Then click Apply (to save changes and stay within WebLink) or Save (to save changes and exit WebLink).

14

. When syncing with multiple Vision databases, each sync user must have a unique Vision Username, otherwise, once the sync server has synchronized data for that username, it will stop at that database and not synchronize the data with the other Vision databases that contain that same username. . When importing users that are in multiple Vision databases, the user should have a different Vision Username in each database. An IMS Import file is required and must have the following additional settings for each user record. o The import file should contain multiple entries for each user that is syncing to multiple databases. o In each individual entry for the user, the IMS Username (the first field in the import file) should be unique. o On each entry for the user, the $XMLUser token value should match the Vision Username in the database the entry is for. o In each entry for the user, it is recommended that you populate the $lastname token with the name of the database that the user is in. (This makes it easy to identify the specific user and the database they are syncing with in the IMS Admin Console. . The Using Tokens in text files.pdf file that ships with the setup contains a list of tokens and their values that can be used in import files.

6. If you are using Integrated authentication on the Vision virtual directory, on the Vision Web Server, perform each of the below steps.

If any prompt is encountered when accessing the Vision web page from the Nokia IMS Server, the sync connection will fail. (For example security certificate issues, windows authentication issues or third party authentication issues.)

Windows Integrated Security is used, the security settings of the synciss.aspx page used by the sync server must be set to Anonymous access only: 1. From the Microsoft Windows Start menu, open IIS by selecting Programs, Administrative Tools, Internet Services Manager. 2. Click on the + sign next to the machine name to view the web site on which Vision is installed. This is typically the Default Web Site. 3. Highlight the Vision virtual directory to view the web pages available 4. In the right-hand window, scroll down to the synciss.aspx page. 5. Right-click the synciss.aspx page, and choose Properties. 6. Click the Directory Security tab and press the Edit button under Anonymous access and authentication control. 7. Check Anonymous access and uncheck all other options.

15

Installing Server-to-Server Synchronization

Enabling Synchronization in Deltek Vision After you perform the prerequisite steps, but before you install IMS, you must enable synchronization from within the Deltek Vision user interface.

To enable synchronization: 1. Log on to Deltek Vision. 2. Click Configuration, Module Activation from the Deltek Vision main menu. The Module Activation dialog displays. 3. In the Synchronization Password field, enter the password you obtained from Deltek. 4. Close Deltek Vision.

After you have completed these steps, log onto the Vision server and check for updates (Start, Deltek Vision, Check for Updates). In the list of updates, download all updates related to server-to-server synchronization.

Steps to Perform Before Installing Nokia’s IMS Server Using an Exchange 2003 and 2007 Groupware Server This section documents steps you need to follow before you can install the Nokia IMS Server software if you are using Microsoft Exchange 2003 and 2007, such as setting up a Courier Account (domain account) and configuring Microsoft Outlook. Be sure that you have performed the prerequisite Vision Web Server steps before continuing with the steps in this section. Exchange Server 2007 requires Outlook 2003 SP2 management tools (do not use Outlook 2000- SR2 with Exchange 2007).

To create the required Courier Account and configure the machine to properly install IMS: 1. Create a new Windows Domain Account called IMSAdmin (using Active Directory Users and Computers) that is a Domain User account only. If the user is a member of Active Directory groups other than Domain Users, synchronization will not work. On the Intellisync Server, add this account into the local administrator’s group. Intellisync Server uses this account to communicate with Exchange and Vision. 2. Create an Exchange mailbox for IMSAdmin. 3. Grant the IMSAdmin account access through Exchange System Manager to all mailboxes in a single Mailbox Store (Microsoft defines this as an Exchange Database) regardless of inherited denials. Specific steps to accomplish this are below: . In Exchange 2003, using the Exchange System Manager: o Log on to your Exchange Server, start Exchange System Manager, and then locate your Exchange Server object. o Expand the Exchange Server object, and then expand the Administrative Groups. o Select the Administrative Group that contains the mailbox store containing the user mailboxes that you want IMSAdmin to have full mailbox access to.

16

o Right-click on this Administrative Group and click Delegate Control. By default this is usually named First Administrative Group. o From the Exchange Administration Delegation Wizard, click Next. o From the Users or Groups panel, click Add. o Click the browse button and select the IMSAdmin account (your courier user) as an Exchange View Only Administrator and click Next. o Click Finish. o Expand the Administrative Group, then expand the Servers Group and right- click on the Exchange server, and choose Properties. o Click the Security tab. o Select your IMSAdmin Account (courier user), and in the Allow column, enable the Receive As option and click OK. o Navigate to the mailbox store beneath the Exchange server, below the storage groups, and right-click the mailbox store. Select Properties. o Click the Security tab. o Click Advanced. o Enable Allow inheritable permissions from parent to propagate to this object and all child objects. o Click OK to close the Advanced Security Settings box. o Click OK to close the Properties box. . In Exchange 2007, using the Microsoft Exchange Server 2007, Exchange Management Shell Console, perform the following steps: Setup the Exchange Administrator Rights o Access the Microsoft Exchange Shell by going to Start > Programs > Microsoft Exchange Server 2007 > and selecting Exchange Management Shell. o Run the command below to delegate the role to the IMS Server Admin account. The example below assumes that your IMS Admin account is named IMSAdmin. add-exchangeadministrator ”IMSAdmin” -role ViewOnlyAdmin o After running the command verify the role is configured properly. Run the command below to determine if the role is configured properly. Check the Exchange View-Only Administrator role in the results. get-exchangeadministrator | Format-List If the ―ViewOnlyAdmin‖ role displays, then the command was successful, Configure Rights to the Exchange Information Store Run the commands below in the Microsft Exchange Shell to give the IMSAdmin Account the necessary rights to the Exchange Information Store for making the updates in Exchange. In the command below, Replace DomainName with the name of your domain. Replace CourierAccount with the name of the IMSAdmin account you created, Replace InformationStoreName with the name of the entire information store that holds the mailboxes of your sync

17

Installing Server-to-Server Synchronization

users. You may need to run this command multiple times for each Information Store in your organization if there is more than one. Add-ADPermission - Identity “” -User \ -ExtendedRightsReceive-As,Send-As

Example: Add-ADPermission –Identity ―Mailbox Database‖ – User AppleBartlett\IMSAdmin –ExtendedRights Receive-As, Send-As Add-ADPermission -Identity InformationStore -User applebartlett\IMSAdmin -ExtendedRights Receive-As, Send-As, "View Information Store status"

Verify courier account: To verify that the information was entered correctly run the Get- ADPermission line as shown below Get-ADPermission -Identity -User courier Example: In this example, InformationStore is the name of the Exchange Information Store and IMSAdmin is the courier account you configured the rights for above: Get-ADPermission -Identity InformationStore -User IMSAdmin

. Additional information about the commands executed above along with a description of the changes to the Exchange Server Administration are found in the Microsoft article titled ―Changes in the Administration and Permissions Model‖ located at http://technet.microsoft.com/en-us/library/bb266972.aspx

4. Log on to the Intellisync Server machine as a domain administrator, and select Administrative Tools, Computer Management, Users and Passwords. Open the Administrators group and add the courier account (IMSAdmin) to it. Log off of the machine. 5. Log back on to the machine where you want to install IMS using the IMSAdmin account. If using Terminal Services on Windows 2003 Server, use the console switch through the run command or from a DOS prompt with the following syntax to launch remote desktop: ―mstsc /console‖

18

. Microsoft Exchange Server 2003 System Management Tools with SP2 is recommended to be installed on the IMS Server for connecting to the Microsoft Exchange 2003 or Exchange 2007 Servers.. . Outlook 2000 SR2 can also be used if the Microsoft Exchange Server 2003 System Management Tools are unavailable. Note that Outlook 2000 SR2 (also known as ―Outlook 2000 SR-1 with Security Update‖) is required on the Wireless Email Server, even if your mail servers are running Exchange Server 2003. Newer versions of Outlook (2002/XP, 2003, 2007) are not supported and the IMS installer will block the installation if it detects those versions. . Exchange 2007 Server users who cannot obtain the Microsoft Exchange Server 2003 Management tools or the Microsoft Outlook 2000 SR-2 client can use the Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1 download. Follow the instructions in the prerequisite and installation sections.

6. Install the Microsoft Exchange Server 2003 System management Tools. If you do not have the installation for the tools, or choose to install Outlook 2000 SR2 instead, continue to step 7.

The Microsoft Exchange Server 2003 System Management Tools setup requires that IIS be enabled on the server. IIS can be removed after the setup is completed.

. Browse to the setup\i386 folder and run setup.exe. . Continue through the warnings about compatibility issues with Exchange Server 2003 and Windows 2003 SP1.

. Click Continue and you will be prompted with a second warning message.

19

Installing Server-to-Server Synchronization

. Click Continue, and then Next. . Accept the License Agreement and click Next again to begin the installation.

. Click Custom in the left column. . Click Install — Microsoft Exchange System Management Tools in the left column.

20

. At the Installation Summary Screen, click Next to continue.

The installation begins.

21

Installing Server-to-Server Synchronization

. Click Finish to finalize the installation. Continue to the next section, Installing Nokia’s Intellisync Mobile Suite and Deltek Vision Synchronization Server Components, on page 24. 7. If Exchange Server 2003 Management Tools are unavailable, install Outlook 2000SR2 on the machine. To do this: . Install the Outlook 2000 client. (When finished if you access Help, About from Microsoft Outlook, the version number should b e 9.0.0.3821.) . Add only the relevant updates from Microsoft to update to the SR2 client. (When finished if you access Help, About from Microsoft Outlook, the version should be, Microsoft Outlook 2000 SR-1 (9.0.0.4527)). If the version number does not match this number, the Nokia IMS installation will not continue. . For more information about determining the version of Outlook 2000 installed, see How to determine the version of your Office 2000 program, http://support.microsoft.com/kb/255275. 8. Start Microsoft Outlook and create a local mail profile for the IMSAdmin account. 9. Log on to Outlook using the courier account (IMSAdmin) and verify that the account is properly configured. For example, verify that you can open another user’s mailbox. 10. After you have tested your Microsoft Outlook connection and the IMSAdmin profile, close Outlook to allow the system to recognize the Exchange Email Profile Settings. 11. Proceed to the next section Installing Nokia’s Intellisync Mobile Suite and Deltek Vision Synchronization Server Components.

Steps to Perform Before Installing Nokia’s IMS Server Using a Domino 7.x Groupware Server This section documents steps you need to follow before you can install the Nokia IMS Server software if you are using Lotus Domino 7.0 or higher, such as setting up a courier account, configuring ACL privileges on users’ mailfiles and installing and configuring Lotus Notes on the IMS Server. Before you begin to set up Nokia IMS Server prerequisites, first review the comprehensive business rules document on Deltek Vision Synchronization (DeltekVision51SpecificationsandBusinessRulesforSynchronization)) available from the Deltek

22

Documents web part on the Downloads/Uploads tab of the Deltek e-support site (https://support.deltek.com). Be sure that you have performed the prerequisite Vision Web Server steps before continuing with the steps in this section.

Creating the required Courier Account The IMS Server exchanges data with the Domino server by using the Lotus Notes API included in the Lotus Notes client that is installed on the IMS Server. From a Domino Server perspective, the IMS server is another Notes client accessing or changing data on Domino. In order to make updates on behalf of the sync users, IMS requires a Lotus Notes ID with a valid certificate (as compared against the server id on the Domino server). This Lotus Notes ID must have rights to change all sync users’ mailfiles. This type of id is called a courier ID and requires Manager/delete access to all the mailfiles that will be involved in synchronization.

When using a courier ID in IMS it is recommended to use a Domino server ID instead of a User ID as your IMS courier. This will give you an extra layer of security as described below: Security and the Courier ID.

A Domino courier ID can be created as either a Notes user ID or a Domino server ID. The server ID has several advantages, including: Ease of setup: A new server is automatically put into a Domino group called LocalDomainServers, which is included in the ACL of all Notes databases created by default (including mailfiles) Additional security: A server ID cannot be used from a Notes client to open mailfiles (assuming that the entry in the ACL of the mailfiles for localdomainservers is set to type = Server Group and Default is set to ―No Access‖).

Personal Contacts Synchronization in Domino The way in which contacts in Lotus Notes/Domino is handled can differ by each company using the sync software. In order to be synchronized the Contacts must be stored in either or a combination of the following: The users’ mailfiles (if using the iNotes web client, contacts are synchronized from the users personal address book and stored directly in their mailfiles on the Domino Server – recommended method) Network Address Book (Personal Address Book stored on a Domino Server) Replicated Address Book (the users’ personal address book is replicated to a directory on the domino server) Public Address book shared by all users.

After the installation is performed, the Lotus Domino Profile in the IMS Admin Console must be configured to sync the Contacts based on the scenarios described above. Steps to perform before Installing Nokia IMS.

1. Create a Server ID for use as the IMS courier ID (Register a new server for use on the IMS server as a courier ID. ):

23

Installing Server-to-Server Synchronization

2. In the Domino Administrator client choose the tab ―Configuration‖ and then select ―Registration‖ under the Tools option on the right side of the screen. 3. Click ―Server‖ in the Registration dropdown list. Select your Certifier ID and enter your password (the initial default certifier ID in Domino is called cert.id). 4. In the ―Register New Server(s)‖ dialog enter a unique server name for the courier ID (whatever name makes sense in your environment). 5. Set a secure password for the Domino server ID; a requirement of using courier access in IMS. Most Domino server IDs will not have a password. Slide the password quality scale bar over as appropriate and enter a password. 6. Click on the ―Set ID File‖ button to select where the ID file will be created (the file will need to be copied to the IMS server later). 7. You can add a Server title if you wish (this is simply text describing the server). You will not need to set any of the advanced options. Be sure that the Registration Server listed at the top of the dialog is your existing Domino server. 8. After adding your information click on the green check to add the server information to the registration queue. 9. In the registration queue click the ―Register‖ or ―Register All‖ button to add the server to your Domino address book and create the ID. 10. After the registration is complete copy the server ID to your IMS server and browse to it when prompted during the installation of IMS. 11. Log on the machine where you want to install IMS using an account that is a member of the local Administrator’s group. This account does not need to be a domain user. If using Terminal Services on Windows 2003 Server, use the console switch through the run command or from a DOS prompt with the following syntax to launch remote desktop: ―mstsc /console‖ 12. Install the full Lotus Notes client for a single user install (―Only for me‖ radio button on the Customer Information page). Accept all default values. The Lotus Notes client must be the same version as the Domino Server. 13. Initialize the Lotus Notes client by logging in as a known Lotus Notes user, not the courier account. 14. Copy the Server ID file created above to a location on the Synchronization Server. 15. Proceed to the next section Installing Nokia’s Intellisync Mobile Suite and Deltek Vision Synchronization Server Components.

Installing Nokia’s Intellisync Mobile Suite and Deltek Vision Synchronization Server Components Before you begin, you must follow the steps in the previous section, Steps to Perform Before Installing Intellisync Server. The Intellisync Mobile Suite installation installs with a tool called the Environmental Analyzer that verifies the hardware and software prerequisites are met before initiating the Wireless Email Server installation.

24

Deltek now provides an upgrade or a full installation setup file for IMS installations. If you are performing a new installation, you must download the IMS_8.0.10 (SP2) for Vision_Full.zip file. If you are performing an upgrade installation, you must download the IMS_8.0.81 (SP2) for Vision_Upgrade.zip file. . If you are upgrading from IMS 7.0 to IMS 8.0, download the IMS_8.0.50.81 (SP2) file and follow the instructions in the section called Installing Nokia’s Intellisync Mobile Suite and Deltek Vision Synchronization Server Components on page 24. If you download and install the IMS_8.0.50.81 (SP2) for Vision_Full.zip file over an existing IMS installation, any configuration changes you made after installing IMS 7.0 or 8.0 the first time (for example, your Vision Web Server name in the IMS profiles) will be overwritten. . If you are upgrading from ISS to IMS, follow the upgrade instructions on page 46.

To install Nokia’s IMS wireless email server and Deltek Vision server-to-server components: 1. Log on to the machine where you will install IMS, using the Microsoft Windows domain account created previously (for example, IMSAdmin). 2. Extract the contents of the IMS zip file that was supplied by your technical support representative. Run the Setup.exe from the root of the extracted folders and files. Do not run setup.exe from the zip file (or zip folder view).

3. The Environmental Analyzer starts. Click Next to continue.

25

Installing Server-to-Server Synchronization

4. Accept the license Agreement and click Next.

5. From the License Key screen, enter the License key supplied by your Deltek Support Representative and click Next.

6. From the Installation Features screen, select the Intellisync Mobile Suite option and click Next. Do not select the Install in Basic/Professional mode option.

26

7. From the User Permission Checks screen, enter the courier account username in the Username field in the format of Domain\Username and the password in the Password field. This account will be used to run the IMS Services.

8. From the installation Location screen, you may accept the defaults or you may enter the drive and folder location where you would like the synchronization server software installed. Then click Next.

9. From the Standalone or Clustered Installation screen, accept the defaults (do not check the option). Then click Next.

27

Installing Server-to-Server Synchronization

NOTE: If installing IMS with Lotus Domino skip to step #13

10. From the Mail Server screen, select Microsoft Exchange 2000 or greater and click Next. However, if you are using the Microsoft Exchange Server MAPI Client and Collaboration Data Objects for Exchange Server, then select None and skip to step 16.

11. From the Exchange Lookup Checks screen, enter the required information to test the connection in Active Directory and click Next. Do not specify the courier account in this section. Specify a regular user account in Domain\User format as the test user account, if you have not created any test users for synchronizing. A valid domain password is required for the user. The Global Catalog server is usually a Domain Controller in the domain.

28

12. From the Exchange Server Access screen enter in the courier account you specified earlier in Domain\Username format and click Next.

NOTE: The next three steps are for Domino Installations only. Skip to Step #16 to Continue.

13. From the Mail Server screen, select the Lotus Domino Release 6.0 or greater and click Next.

29

Installing Server-to-Server Synchronization

14. From the Domino Checks screen, enter the required Domino Directory Server information. Browse to select the proper User ID file (This can be the same account used to initialize the Lotus Notes installation) and supply the User ID Password and click Next.

15. From the Domino Server Access screen, browse to the Server Courier Account you created earlier and supply the Courier Password. Click Next to continue.

16. From the Web Server URL screen, accept the defaults and click Next to continue. The installation will not accept the NetBIOS name for the server; it only verifies the FQDN of the server in the domain.

30

17. Manually test each scenario listed in the Manual Checks screen, except for the second one (I can reach this server via HTTP from outside my corporate firewall…). 18. When you have performed each of the tests (except test two) listed and had successful results, from the Manual Checks screen, check all of the options and click Next to continue. Enabling the check boxes indicates that you were able to satisfy the installation criteria before the setup begins.

19. From the Environment Analysis Completed screen, click Install to continue.

31

Installing Server-to-Server Synchronization

The installation begins. The following screens display the progress of installation.

32

20. At the InstallShield Wizard Complete screen, click Finish.

21. Browse to the folder where you extracted the setup files and browse the Patches folder for any Nokia patches that may need to be applied after the installation. Select the folder for your Groupware server (Exchange\Domino). Each patch will have its own folder along with a text file and zip file named after the patch. The text file contains instructions for applying the patch. The zip file contains the compressed patch files. 22. When the installation is finished, log into the server and ensure that the Adaptive Server Anywhere - …, Intellisync Mobile Gateway, Intellisync Mobile Suite and Intellisync Secure Gateway services are started. (The Intellisync Application Sync and Intellisync Device Management are not started, and do not need to be started). See the following table for more detail:

Service Name Status Startup Type Log On As

Adaptive Server Anywhere Started Automatic Local System

Intellisync Application Sync Not Started Manual IMSAdmin (Courier Account)

Intellisync Device Management Not Started Manual IMSAdmin (Courier Account)

Intelilsync Mobile Gateway Started Manual IMSAdmin (Courier Account)

Intellisync Mobile Suite Started Automatic IMSAdmin (Courier Account)

Intellisync Secure Gateway Started Manual IMSAdmin (Courier Account)

23. If you are connecting to the Vision Integrated site, log into the Vision Integrated site to ensure that you are not prompted for credentials. If you are prompted, then the synchronization will fail because it has no mechanism to handle the prompt. To resolve this, open Internet Explorer and click Tools, Internet Options. Then click the Advanced Tab, scroll to the

33

Installing Server-to-Server Synchronization

Security section, and ensure the box is checked to Enable Windows Integrated Authentication. 24. Browse to the \Program Files\Intellisync Mobile Suite\PIM folder. You will see a dcssettings100.cfg and a dcssettings.cfg file. The dcssettings100.cfg file has been configured for Deltek Vision. Rename or delete the dcssettings.cfg file (the one without the 100 in its name. 25. If you are using SSL to connect to the Vision Web Server, ensure that the certificate has not expired and the Certificate Authority is trusted by the Intellisync Mobile Suite Server. 26. From the Microsoft Windows Start menu, select Programs, Intellisync Mobile Suite, Admin Console. 27. On the Admin Console, expand the Intellisync Mobile Suite, click on WebAdmin, Action and then select Launch WebAdmin.

28. On the System Summary page that opens, edit the URL in the Address field by deleting everything to the right of admin/, and replacing it with diag/system.jsp. (Example http://camqaims80.psgqa.local/admin/diag/system.jsp)

34

29. Click on the Wireless Email link.

35

Installing Server-to-Server Synchronization

30. Scroll down to the Groupware Sync Folders section and uncheck options for Email folders and Memo folder (only calendar, tasks and contacts should be enabled). 31. Click Set to save the changes.

36

32. Proceed to the next section to verify that the setup of IMS was successful.

Steps to Verify the Setup of IMS Was Successful

To verify that the Deltek Synchronization Server Profile and Profile Settings were created successfully: 1. From the Microsoft Windows Start menu, select Programs, Intellisync Mobile Suite, Admin Console. 2. Expand Intellisync Mobile Suite. 3. Expand Profile Settings. 4. Expand Wireless Email. 5. Verify that Deltek Synchronization Server exists. 6. Expand Deltek Synchronization Server. 7. Verify that the following Profile Settings exist: . Default

37

Installing Server-to-Server Synchronization

. DeltekCalendar . DeltekCalendarContacts . DeltekCalendarContactsTasks . DeltekCalendarTasks . DeltekContacts . DeltekContactsTasks . DeltekTasks 8. Right-click on each of the Profile Settings and choose Properties. 9. On the Settings tab of the Properties dialog, in the Server URL field, enter the name of your Vision Web Server. 10. On the Settings tab of the Properties dialog, in the Server URI field, confirm the virtual folder is correct. The default assumes a manually created virtual folder of Visionsync, if you did not create this optional virtual folder change this to /synciss.aspx. (Example vision/synciss.aspx).

11. If you are using SSL to connect to your Vision web server, check the Use Secure XML Server option and enter a value in the Secure Server URL field.

38

12. On the Settings tab of the Properties dialog, click Check Server Connection. 13. From the Check Server Connection dialog, enter a valid Vision username in the XML Username field and click Connect.

14. If the connection is successful, click Exit and click OK to save your changes. Repeat Steps 9 -14 for each of the Profile Settings. 15. If you get an error message:

39

Installing Server-to-Server Synchronization

. Verify that you are able to access the Vision Web Server name or IP Address you entered in the Server URL field on the Settings Tab. . Verify that the username exists in Vision and is associated with an employee number in Vision, Configuration, Security, Users and Passwords. . Verify that the Server URI you specified exists as a Virtual Directory on your Vision Web/App server. If it does not, you can modify the entry in the Profile Setting to use the Vision virtual directory. . Open a browser connection to your Vision Web Server and to the synciss.aspx page. You should get a NullReferenceException message. If you get an error message referencing sessionstate, contact your Vision Support representative for assistance on enabling session state for Vision. 16. After you have verified that the connections are successful for each of the profile settings, proceed to the next section to create User Groups to import your users into and assign the Deltek profile settings to them before importing the users into IMS.

Create User Groups and Define Profile Settings Before you create your user groups and assign the profile settings to the user groups, you need to know what data sections you are planning to enable for your users. Maybe all users will only synchronize contacts? Maybe some will synchronize just Calendar/Activities, and others will synchronize Calendar, Tasks and Contacts. This decision should coincide with your internal business rules in order for IMS Server to be a success. After you have decided on what information you want to synchronize, and after you have put your internal synchronization business rules into place, you are now ready to create and configure your user groups for synchronization. Each user group that is set up for synchronization can be configured to have its own sync profile. The user group’s sync profile is what IMS Server uses to understand how to connect to Vision, the polling interval and the data sections that are to be synchronized. IMS allows you to assign a profile setting to individual users. However, Deltek recommends managing profile settings and users in groups rather than by individual user. Deltek recommends that you do not make any modifications to the All User or the New User group or the default profile under Deltek Synchronization Server. If all users will be synchronizing to the same Vision Web Server and synchronizing the same data sections, you can configure a user group to use the specific profile settings for the data sections you plan to synchronize and import the users and assign them to this group. All users that are imported are automatically members of the All Users group and the New User group and use the profile settings assigned to that group. By default, the All Users group uses the default profile setting, which has all the data sections turned off. If your users may be synchronizing different data sections, create and name the user groups according to the profile setting and data sections that will be synchronized and after doing so, assign the users to the appropriate user groups. After the installation is complete, log into the IMS Admin Console to create the groups and edit each group profile to use the corresponding profile setting. This step must be done before users are imported. If users are imported before being assigned to groups and appropriate profiles, they will need to be re-imported for the new group and profile settings to take effect.

To create groups and assign profile settings, complete the following steps:

40

1. From the Microsoft Windows Start menu, select Programs, Intellisync Mobile Suite, Admin Console. 2. Expand Intellisync Mobile Suite. 3. Expand Management. 4. Expand Groups. 5. Right-click on Groups and choose Create Group.

6. Create a corresponding group name for each of the profile settings you are using for your synchronization users. For example, if all users will be synchronizing only Contacts, create a DeltekContacts group. 7. Right click on the new group created, in this case DeltekContacts group, and select Properties.

41

Installing Server-to-Server Synchronization

8. From the Properties dialog, click Assign Profiles. 9. From the Profile dialog, click the Server Tab to assign the appropriate profile setting.

10. From the Profile dialog, select the Deltek Synchronization Server row, click on the dropdown list that displays and choose the matching profile setting for the user group you created. 11. If you are using filters, you must create a profile setting for filters and assign each to a user group in order to be enforced for the group. By default the installation creates a filter named DeltekContactsCategoryFilter. This filter is configured to only synchronize contacts with a category containing the term Vision.

42

To assign the filter to your user group, from the Server tab of the Profile dialog, select the filter name from the drop-down list in the Filter row and click OK to save changes.

12. Repeat steps 5-11 for each user group you create.

XML Translator Synchronization Configuration Synchronization options for IMS are handled differently from ISS. Prior to IMS, several separate tools were used to create an initial template that was used to import the users, configure their connections, and to manage their data sections that were synchronized. Those tools are now replaced by the Profile Sections that are created during the installation process. The Profile Settings contain options that control the Vision Web Server and the data sections used in the synchronization process. Following are some of the options you use to configure connections, connect to the Vision Web Server, and manage the data sections that are synchronized.

Settings Tab The settings tab allows you to specify either the standard connection values or secure connection values for connecting to the Vision Web Server and using the Synchronization Server Module. . Server URL — The FQDN or name of the Vision Web Server. . Server Port — The port number used to connect to the Vision Web Server. The default value is 80 for standard connections and 443 for secure connections using SSL. . Server URI — The visionsync/syncciss.aspx page. This section requires the specification of the Vision Virtual directory and the synciss.aspx page that calls the .NET DLLs used to run the Synchronization Server Module. . Polling — If you enable polling and specify a polling period, information entered in the groupware application (Exchange/Domino) and in Vision is synchronized when the specified

43

Installing Server-to-Server Synchronization

polling period has expired. Changes made after the last synchronization will not appear until the polling period has recurred and the next synchronization operation is complete. This setting is the same as the sync frequency in ISS. The default from the install is 15 minutes. It can be made as frequent as one minute. This option needs to be carefully monitored and set as it can have an impact on the performance of both the IMS server, the Vision server, as well as the groupware server (Exchange/Domino).

Advanced Tab . Data Sections — You select the types of data to be synchronized from the Advanced tab. There are three data sections that can be synchronized and these can be individually selected or de-selected for users by means of enabling or disabling them in the profile setting. The data sections are Contacts, Appointments and Tasks. For more information, refer to the business rules document, Specifications and Business Rules for Synchronization between Deltek Vision 3.0 and higher and Microsoft Exchange or Lotus Domino using Intellisync Mobile Suite, Wireless Email Server (IMS), available from the Answers tab of the Deltek e-support site (https://support.deltek.com). . Folders — Folders can no longer be changed to use non-default data folders (contacts, appointments and tasks). Data in subfolders existing within the default Contact data folder is always synced. . Conflict Resolution — In IMS, there is no conflict resolution option. If the same field in Exchange/Domino and Vision are updated at the same time, the data from Vision will always win because data from Vision is synchronized last. . Filters — Filters can be used to control the data coming in from the groupware servers during synchronization. Note that there is no option to control what comes out of Vision. These filters are specific to Exchange/Domino data. Filters are simply queries set on the data section using fields on which querying is available. By default, the setup creates a filter named DeltekContactsCategoryFilter that will sync only those contacts with a category containing the text ―vision.‖

Configure the Lotus Domino Profile to Synchronize Contacts

Lotus Domino, by default stores contacts in the users’ local personal address book on their local machine and not on the Domino database server. In order to synchronize contacts with Vision, the contacts must be stored on a Domino database server and fit into one or more of the categories below specified in the Lotus Domino Default Profile Settings: The recommended method and IMS default for synchronizing contacts is for the users to utilize iNotes which will synchronize their local address book with their mailfile (mail database) on the Domino server. With this method, there are no other prerequisite items that have to be configured in order to synchronize contacts. The other supported scenarios are as follows: Network Address Book (Personal Address Book stored on a Domino Server) or Replicated Address Book (the users’ personal address book is replicated to a directory on the domino server) – NOTE: The personal address book database must be named using the format of ―_nab.nsf‖ in order for the contacts to be synchronized for the user. Public Address book shared by all users.

44

To configure the Lotus Domino Default profile, perform the following steps: 1. From the Microsoft Windows Start menu, select Programs, Intellisync Mobile Suite, Admin Console. 2. Expand Intellisync Mobile Suite. 3. Expand Profile Settings. 4. Expand Wireless Email. 5. Expand Lotus Domino 6. Right-click on Default and choose Properties. 7. Click on the User Settings Tab. The following boxes in the Personal Address Book and Journal section should be filled in based on the scenario that you are using to store Contacts: Domino server containing personal address book and journal databases – Specify the Domino Server Name where the address books are stored. Directory, relative to server’s data directory, containing the databases- Specify the relative path to the personal address book files. Note: This box and the box before it are required if users are not using iNotes, or if it is being used in combination with iNotes. Enable the box for Use mail database on server (iNotes/EX template) if no replicated address book is found 8. If using shared contacts, at the bottom of the form, in the Shared Contacts section, specify the path (including the server name and relative path to the address book file) for the shared contacts database.

45

Installing Server-to-Server Synchronization

It is possible to have both a check for the iNotes template (a) and the server/directory (b) defined. In that case IMS with attempt to find the user’s replicated address book (b) and, on failing to find the replicated address book, then default to pulling contacts from the mailfile (a). Additionally, in cases where users’ mailfiles maybe stored on multiple Domino servers, IMS can be configured to have additional Domino profile documents allowing the IMS administration to select how contacts are synced per user (For example, pulling the Personal Address Books for a given group of users from ServerA and the Personal Address Books for another group of users from ServerB. Also, having multiple profile documents will allow users to sync different Domino address books in the ―Shared Contacts‖ section . If contacts are stored in the mailfile and the sync user will be using the full Notes client, then the user must synchronize their local personal address book with their mailfile (using the Action ―Synchronize Address Book‖ This is initiated by the user and is an option available when the user has the mailfile open) as below. Be aware that the action is available in the Notes client and simply moves contacts added in the personal address book to the user’s mailfile.

46

(Synchronize the personal address book entries to the mailfile.)

Upgrading From Intellisync Server 1.5 to Intellisync Mobile Suite 8.0

Follow the steps in this section if you are currently running ISS 1.5 to upgrade to Intellisync Mobile Suite 8.0. Before upgrading read the following notes about Nokia Intellisync Mobile Suite 8.0.

. Deltek now provides an upgrade or a full installation setup file for IMS installations. If you are performing a new installation, you must download and install the IMS_8.0.10 (SP1) for Vision_Full.zip file. If you are performing an upgrade installation, you must download the IMS_8.0.10 (SP1) for Vision_Upgrade.zip file. . If you are upgrading from IMS 7.0 to IMS 8.0, download the IMS_8.0.10 (SP1) for Vision_Upgrade.zip and follow the instructions in the section called Installing Nokia’s Intellisync Mobile Suite and Deltek Vision Synchronization Server Components on page 24. If you download and install the IMS_8.0.10 (SP1) for Vision_Full.zip file over an existing IMS installation, any configuration changes you made after installing IMS 7.0 the first time (for example, your Vision Web Server name in the IMS profiles) will be overwritten. . If you are upgrading from ISS to IMS, follow the upgrade instructions in this section.

Before you Upgrade to IMS 8.0 From ISS 1.5 The setup for Nokia’s Intellisync Mobile Suite does not allow the installation on the same server as an existing ISS 1.5 installation. However, Nokia has provided a user migration tool that allows you to export the list of users currently being synchronized in ISS. Use the following procedure to create an import text file that can be imported into IMS.

To create an import text file to import into IMS: 1. Log on to the IMS Server using your IMSAdmin account.

47

Installing Server-to-Server Synchronization

2. Browse to the MigrationTool.exe file that is included in the zip file that you receive from your Vision support representative. By default the file is located in a Migration Tool folder in the root of the extracted folder. 3. Run the MigrationTool.exe file on your ISS Server. Running the file populates the list of all users currently being synchronized on your ISS Server.

4. Click on the Browse button and locate the import file and click Open.

5. From the Migration Tool dialog, click the Migrate button to export the user list and create the file. 6. Copy the file to a safe place and make an extra copy. 7. Edit the import file with notepad or Microsoft Excel and add the following tokens to each of the users’ entries, adding them to a preconfigured group in IMS and configuring IMS to use NT security. Add the entries after the $password token in the text file. $addtogroup=groupname[TAB] $authtype=-1[TAB] $timezone=America/New_York[TAB]

48

The timezone entries must be located immediately after the email address in the import file. The timezone entries must be configured for each user based on the timezone where the sync user is located. A listing of common time zones is below:

For Eastern Time Zones Set the zone equal to ―America/New_York‖ For Central Time Zones Set the zone equal to ―America/Chicago‖ For Mountain Time Zones Set the zone equal to ―America/Denver‖ For Pacific Time Zones Set the zone equal to ―America/Los_Angeles‖ For Hawaii Set the zone equal to ―America/Honolulu‖ For Alaska Set the zone equal to ―America/Anchorage‖

If your time zone is not listed here, a complete detailed list can be found in pages 58-61 of the Nokia Intellisync Mobile Suite Administrator’s Guide located in the Documentation folder of the extracted setup files that you received from Deltek.

The Vision Server and IMS Server must be in the same time zone so that the calendar dates and start times can synchronize correctly.

8. Save your changes to the import file. If you are editing the file with Microsoft Excel, note that the text file must be saved as a tab-delimited text file.

Import files use tokens to specify data fields and values. These tokens are case-sensitive. Refer to the file using tokens in text files.pdf, which is available in the Sample Import Files folder from the extracted IMS installation Media you received from the Vision Support Representative.

9. If you are installing IMS onto the same machine as your current ISS installation, first uninstall ISS. 10. After uninstalling ISS, remove all references in the Microsoft Windows registry to Intellisync and Pumatech and reboot the computer. Be aware that Microsoft Windows does not allow the Legacy_Pumatech registry keys to be deleted. 11. Install IMS using the steps starting with the section titled, Steps to Perform Before Installing Nokia’s IMS Server using an Exchange 2003 Groupware Server, on page 16.

One Way Synchronization IMS 8.0 SP2 Only – Explanation of One-way syncing settings One-way synchronization was implemented by Nokia beginning with the IMS 8.0 SP2 release. It can be enabled and configured using the dcssettings.cfg file located in the \PIM folder. The dcssettings.cfg file is "global" configuration file for the IMS Server that is used to control the various XML connectors. By default the name of this file in all vision installations is named dcssettings100.cfg One way synchronization can be configured on a per data section basis. The data sections that are synchronized with Vision are Calendar, Contacts and Tasks. So, you can have contacts sync in one direction from Vision to Exchange only and still have calendar items sync both ways. The information below contains the settings specifying the type/direction of synchronization performed on each data section between the Exchange/Domino server and Vision. For all the data sections being synchronized, the possible values are:

49

Installing Server-to-Server Synchronization

Sync Direction Configuration Settings

Sync – Data will be synchronized in both directions between Vision and the Exchange/Domino server. This is the default setting for all data sections; even when there is no specific [sync mode] configuration entry in the dcssettings.cfg file. By default if the same data is changed on both sides, the data from Vision always wins.

Import (Exchange/Domino to Vision only) – The ―Import‖ value indicates that data for the specified section is imported only into Vision. The IMS server will never try to add/delete/modify records on the Exchange/Domino side via the sync process. Updates, deletions or additions made on the Exchange/Domino side are sent to the Vision Server and not back to Exchange/Domino. The IMS Sync engine discards all updates that would normally be sent from the Vision Server. Any change made in Vision are ignored. If the same fields are updated in Exchange/Domino and in Vision, the data from Exchange/Domino will always win. Export (Vision to Exchange/Domino only) – The ―Export‖ value indicates that data for the specified section is exported from Vision and pushed into Exchange/Domino. The IMS server will never try to add/delete/modify records Vision via the sync process. Updates, deletions or additions made in the Vision are sent to the Exchange/Domino Server and not back to Vision. The IMS Sync engine discards all updates that would normally be sent from the Exchange/Domino Server. Any change made in Exchange/Domino are ignored. If the same fields are updated in Vision and in Exchange/Domino, the data from Vision will always win.

Data Sections Synchronized

Calendar – Calendar data that is synchronized are Appointments and Meetings in Exchange/Domino and Phone Calls and Meetings from Vision. This setting will specify the type/direction of sync which will be performed on the Calendar section. The possible values for this setting are Sync, Export or Import. The default value for this setting is Sync. Contacts – Contact data that is synchronized includes personal and company data from Exchange/Domino with Contact and Client data in Vision. Vendor type contacts are not synchronized from Vision. This setting will specify the type/direction of sync which will be performed on the Contacts section. The possible values for this setting are Sync, Export or Import. The default value for this setting is Sync. Tasks- Task data that is synchronized include ToDos from Domino and Vision and Exhchange Tasks. This setting will specify the type/direction of sync which will be performed on the Tasks section. The possible values for this setting are Sync, Export or Import. The default value for this setting is Sync.

50

One-way Synchronization Configuration Examples (Configuration entries added to the bottom of the dcssettings.cfg file)

Updates/Data flows only from Exchange/Domino into Vision (Data Imported into Vision)

[Sync Mode] Calendar=Import Contacts=Import Tasks=Import

Updates/Data flows only from Vision into Exchange/Domino

[Sync Mode] Calendar=Export Contacts=Export Tasks=Export

Two-Way Synchronization Configuration Example

Updates/Data flows bidirectionally into Vision and Exchange/Domino

[Sync Mode] Calendar=Sync Contacts=Sync Tasks=Sync

51

Installing Server-to-Server Synchronization

Troubleshooting and Maintenance This section provides information about verifying that IMS services are running, importing users from groupware (Exchange/Domino) into Deltek Vision, testing synchronization, adjusting existing user profiles, and troubleshooting synchronization.

Verifying the Services are Running After you have completed all installation steps, you must verify that the appropriate Intellisync services are started.

To verify that the proper IMS services are started: 1. From the Microsoft Windows Control Panel, open Administrative Tools. 2. Locate all services that begin with Intellisync. The Nokia IMS services that should be running for synchronization with Deltek Vision are: Intellisync Mobile Gateway, Intellisync Mobile Suite, and Intellisync Secure Gateway. Ensure that each of these services is started.

All the Intellisync services are configured to use the integrated login credentials of the IMSAdmin account.

Importing Users from Groupware (Exchange/Domino) to Deltek Vision When you import users from your Exchange/Domino server, you are basically mapping their Exchange/Domino user names with their Vision user names. This section provides steps to map users between Exchange\Domino and Deltek Vision. For more information about mapping users (importing users), refer to the IMS Administrator’s Guide (AdminGdeEN.pdf, page 58) provided in the Documentation folder of the uncompressed setup media files.

For the Vision users who will participate in synchronization, if the Vision user name does not match the Windows Network Name (The Windows Network Name is the account used to log onto the network), you must either change each Vision user name to match the Windows Network Name, or import using a tab-delimited text file, making the correct mapping in the text file. Disassociate the ADMIN user in Vision from any employee record it may be associated with from within the Vision interface.

You can use any of the following methods to Import Users: . Import users by creating a list of users from a synchronization list (NT Security, Active Directory Lookup) . Map users using a tab-delimited text file.

If you import users using a tab-delimited file, rather than by building a user list from NT or Active Directory, you do not have to manually create the connection to Exchange and to Vision in order to enable syncing for the user.

52

Importing Users Into IMS After the user groups are created and the group profile is assigned to a profile setting, users are now ready to be imported into IMS and assigned to the appropriate groups. Deltek recommends creating and naming the user groups appropriate to the profile setting that will be configured for the group. IMS provides several methods for importing users.

Warning — Data duplication may occur If you delete and re-import a user without restarting the IMS Synchronization Server Service. If the service is not restarted between the deletion and re-importing of a user, duplication in Vision and Outlook (the same contacts and activities appearing multiple times in Outlook and in Vision) may occur. This is because the IMS server may still have data cached for the user and possibly synchronize the same data twice. To ensure there is no duplication, In the Admin Console, expand Management, and click on the Servers object. Right-click on your server name and choose Stop. After it is stopped, restart the service and re-import the user.

Importing Users into IMS Server Using a Tab-delimited Text File This section provides instructions for importing users from a tab-delimited text file. Deltek provides several sample tab-delimited text files for your reference as part of the setup files. They are copied to the Sample Import Files folder when you extract the IMS setup zip file. You can simply choose one of the sample files and edit the file by adding your company information.

To import users into IMS from a tab-delimited text file: 1. Review the Using tokens in text files.pdf file for token settings that can be used when building the import file. 2. In the IMS Admin Console, ensure you have created the preconfigured groups and assigned profile settings to those groups. 3. Ensure you have added the group name with the $addusertogroup token in the tab-delimited text file for each user so that the user is imported into a user group. 4. Create an import CSV file including both Microsoft Exchange and Deltek Vision user information, as shown in the Sample Import Files. 5. After you have created your file, from the IMS Admin Console, expand Management, Users. 6. Right-click on Users and select Import Users from File.

Importing Users into IMS using LDAP or NT

To import users into IMS using LDAP or NT: 1. Log into the IMS Admin Console. 2. Expand Intellisync Mobile Suite. 3. Expand Management. 4. Right click on Users and select Import/Synchronize User List and select NT Domain Users or Active Directory/LDAP users, as appropriate.

53

Installing Server-to-Server Synchronization

5. From the Import/Synchronize dialog, click the Create button.

6. From the Create Active Directory/LDAP Information Source dialog in the Name field, enter a description for the import list you are creating that will contain the users involved in synchronization and click OK.

54

7. From the Active Directory/LDAP Configuration dialog, in the Server field, enter the name of your Active Directory Global Catalog Server (Lookup Server). 8. In the Search base field, enter the domain levels. 9. Select Connect as Specific User and enter your IMSAdmin account (courier account) in Domain\Username format and then enter your password. 10. Click OK. If you do not enter the username in Domain\Username format you will receive a login failure error.

11. From the next dialog, select the username you will import and click Add. 12. You will receive the following confirmation message. Click OK to continue.

55

Installing Server-to-Server Synchronization

Log into Web PIM and Initialize Connections After the import is performed, you must log into the Web PIM as the user to initialize the connections to Exchange and Vision to enable synchronizing for each user. To log into the Web PIM and initialize connections, complete the following steps: 1. Right click on Users (Intellisync Mobile Suite, Management, Users) and select Use Website as User.

2. Fill in the required information, noted with an asterisk, to test the connection to Microsoft Exchange and click Next. 3. In the Server Connections section, select the Deltek Synchronization Server Connection. 4. From the Verification screen, enter the Vision username and password (can be anything since its not used for authentication purposes) and the name of the company and click the Create Connection button. 5. If you are prompted for time zone settings, Select the option to verify time zone settings. 6. Enter a city and zip code in the City and Zip Code fields. 7. Click Next. 8. Click the Don’t Install Now button.

Testing Synchronization After you have completed all the necessary steps in this chapter, you should test your synchronization set up. By default a change in Exchange will trigger a sync for that data section.

To test synchronization: 1. Log on to Outlook and add a new calendar item, contact or task. 2. Save your changes in Outlook to activate a sync cycle. 3. Verify that the item you added in step one appears in Deltek Vision.

When changes are made In Vision the sync cycle is not activated until the polling interval has been reached. Default polling interval is 15 minutes.

56

Adjusting Existing User Synchronization Profiles After a user is configured for synchronization, and has been synchronizing, there may come a time where their synchronization settings must be changed, perhaps to add a new data section, remove a data section, or modify an existing data section in the profile. If changes are required the changes must be made to the profile setting, then the profile setting must be applied to the user group to which the member belongs. The user must then be deleted and re-imported to allow the new setting to be enforced.

Troubleshooting Server-to-Server Synchronization This section includes descriptions of errors that may occur when installing IMS, with possible solutions.

Profile Cannot Access the Web Server While configuring the Profile Setting with the Vision Web Server name and testing the connection to the Vision server, you receive an error message that the Profile cannot access the Web server. This error is typically caused by a configuration error on either the Vision Web/App server or the IMS Server.

To help resolve this error, check the following: . Ensure your Vision webserver is listed in the Server URL field (Settings tab of the IMS Profile dialog), and the Server URI is pointing to Vision/synciss.aspx. Also check to make sure the Server Port number listed is 80 (Port 80 is the default HTTP port on the Vision web server). If you are using an alternative port number, enter that value in the Port field.)

. If you are using SSL, check Use Secure XML Server (Settings tab of the IMS Profile dialog) and ensure your Vision webserver is listed in the Server URL, and the Server URI is pointing to vision/synciss.aspx. Also check to make sure the Server Port number listed is 443 (Port 443 is the default SSL Port on the Vision web server). If you are using an alternative port number, enter that value in the Server Port field.)

57

Installing Server-to-Server Synchronization

. If you are using SSL, ensure that the certificate on the Vision Web Server is trusted by the IMS Server. If you login into Vision via SSL from the IMS Server and you are prompted to trust the certificate on the Vision Server, then the profile will not connect correctly since IMS cannot process the prompt to trust the certificate. If the certificate is generated internally, install the root certificate from the certificate server on the IMS Server. . Make sure on the vision web server, from the Weblink utility, that Disable server to server synchronization is not selected for the database you want enabled for synchronization. All databases set up from Weblink that should not be synchronizing should have this option checked. . In the Vision database you are synchronizing with, make sure the Synchronization module has been activated within the application. . Make sure you can connect to Vision from the sync server using the URL to your Vision webserver. For example, http://visionwebserver/Vision/login.aspx. . On the Vision web server, make sure the web site, Vision, is installed on is running, and is not stopped. Also check to make sure IIS is started and running, and users can access Vision successfully. . If using Integrated Security in IIS on the Vision web server for the Vision virtual directory, log onto the IMS Server as the IMSAdmin account, and launch Vision. Ensure that the IMSAdmin account can access the initial Vision Login form without receiving any Windows or network security prompts. (Any security prompts will prevent IMS from connecting to Vision successfully). . If the URL to your Vision web server is using a Fully Qualified Domain Name (FQDN) such as vision.webserver.com, you must logon to the IMS server as the IMSAdmin account and add the URL to the Vision web server to the Trusted Sites Zone in Internet Explorer. To do this, from the Control Panel, click on the Security Tab and select Trusted Sites. Add the Vision URL to the list of trusted sites, then click on close to get back to the Security tab. Click the Custom level button for the Trusted Sites zone and scroll to the bottom to the User Authentication section and enable Automatic Login with Current Username and Password. NOTE – This step should be done in whatever Internet Explorer security zone the Vision web server is located in.

On the Vision web server if session state was turned off in web.config for the Vision web application virtual directory or on the site where the Vision virtual directory resides, then read the following for two solutions to two possible reasons the profile is not connecting to the Web server. . The C:\Program Files\Deltek\Vision\Web\web.config file has the session state mode set to "off.‖ AND/OR . Sharepoint is installed on the server and has turned off sessionstate in its C:\Inetpub\wwwroot\web.config file.

SOLUTION#1: Set the Session State Mode Element to On in the Web.Config File

To set the Session State Mode Element to On: 1. On the Vision Web Server, find the web.config file (for example, C:\Program Files\Deltek\Vision\Web\web.config file and make a backup.

58

2. Edit and update the mode element in the session state section of the web.config file as follows, and restart IIS. . Open the C:\Program Files\Deltek\Vision\Web\web.config file with Notepad . Scroll towards the bottom of the web.config file to the

mode="InProc"

. Save your web.config edits and restart IIS.

A quick test to determine whether or not the session state is disabled and preventing synchronization from occurring is to open a browser session to the vision sync page. For example: http://webservername/visionsync/synciss.aspx You should see this message: NullReferenceException Object reference not set to an instance of an object. If one of the following is true, continue to Solution #2: If you are still receiving this message, "Session state can only be used when enableSessionState is set to true, either in a configuration file or in the Page directive." OR your c:\program files\deltek\vision\web\web.config file was already configured correctly.

SOLUTION#2: Enable SessionState If Sharepoint is installed on your Vision Web Server and has disabled SessionState

To enable SessionState: 1. On the Vision Web Server, find the C:\Inetpub\wwwroot\web.config and make a backup. 2. Edit the file as follows to enable session state and restart IIS. . Open the file with Notepad. . Scroll towards the bottom of the web.config file to the section. Edit the System.Web.SessionState.SessionStateModule line by removing the at the end, as indicated below: Change from: Change to: . Save your web.config edits, restart IIS, and browse to http://YourVisionwebserver/visionsync/synciss.aspx to ensure that the following message is returned. If the following message is returned, synchronization between Deltek Vision and Microsoft Outlook will be successful.

59

Installing Server-to-Server Synchronization

60