--- title: "HealthCast EPCS Server Installation and Configuration" slug: "healthcast-epcs-server-installation-and-configuration" description: "How to install and configure your HealthCast EPCS Server Installation and Configuration." tags: ["Client", "EPCS", "Fingerprints", "Windows", "How-To", "Authentication", "IIS", "Configuration", "Server", "Installation", "Multi-Factor", "Hyperspace", "Server Manager", "Controlled Medications"] updated: 2023-02-09T17:15:59Z published: 2023-02-09T17:15:59Z canonical: "healthcare.rapididentity.com/healthcast-epcs-server-installation-and-configuration" --- > ## Documentation Index > Fetch the complete documentation index at: https://healthcare.rapididentity.com/llms.txt > Use this file to discover all available pages before exploring further. # HealthCast EPCS Server Installation and Configuration ### Installation Steps The solution requires multiple installation steps: 1. [HealthCast EPCS Server Core Infrastructure Installation and Configuration](/v1/docs/healthcast-epcs-server-installation-and-configuration#healthcast-epcs-server-installation-and-configuration) 2. [Configuring Authentication Device in Hyperspace for EPCS](/v1/docs/healthcast-epcs-server-installation-and-configuration#configuring-authentication-device-in-hyperspace-for-epcs) 3. [Installing the HealthCast ExactAccess Server](/v1/docs/healthcast-epcs-server-installation-and-configuration#installing-the-healthcast-exactaccess-server) 4. [Creating the ExactAccess Server Database for auditSERVER](/v1/docs/healthcast-epcs-server-installation-and-configuration#creating-the-exactaccess-server-database-for-auditserver) 5. [Configuring the ExactAccess Server Database for auditSERVER](/v1/docs/healthcast-epcs-server-installation-and-configuration#configuring-the-exactaccess-server-database-for-auditserver) 6. [Installing the SSO Audit Monitor](/v1/docs/healthcast-epcs-server-installation-and-configuration#installing-the-sso-audit-monitor) ### HealthCast EPCS Server Installation and Configuration Installation of the HealthCast EPCS Server requires numerous Microsoft® technologies to be previously installed. - These technologies are called the RapidIdentity Server Core Infrastructure and may include the following items as desired by the organization. - Microsoft Windows Standard or Enterprise Server 2008 R2 or higher running IIS 7.0 or higher - Microsoft Active Directory - Microsoft SQL Server or SQL 2016 or higher Microsoft Windows Server 2008 Certificate Services or higher (Required for PKI contact smart card Only) RapidIdentity MFA Server may be deployed on Windows® domain controllers and member servers. For the purposes of this installation guide, a non-domain controller server is joined to a pre-existing domain, MFAServer.local. Once the required technologies are installed, proceed with the HealthCast EPCS Server core infrastructure installation steps. Installing core infrastructure components will include the following steps: 1. [Installing IIS](/v1/docs/healthcast-epcs-server-installation-and-configuration#installing-iis) 2. [Installing the RapidIdentity MFA Server](/v1/docs/healthcast-epcs-server-installation-and-configuration#installing-the-rapididentity-mfa-server) 3. [Installing the RapidIdentity MFA Client-Side Components](/v1/docs/healthcast-epcs-server-installation-and-configuration#installing-the-rapididentity-mfa-clientside-components) 4. [Configuring the RapidIdentity MFA Server](/v1/docs/healthcast-epcs-server-installation-and-configuration#configuring-the-rapididentity-mfa-server) 5. [Configuring the Data Tables for the RapidIdentity MFA Server](/v1/docs/healthcast-epcs-server-installation-and-configuration#configuring-the-data-tables-for-the-rapididentity-mfa-server) #### Installing IIS In order to begin setting up for HealthCast EPCS solution components, IIS must be installed on the RapidIdentity MFA Server. Proceed with the following steps to install IIS. 1. From the Start Menu, type **Server Manager** and select it. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-5urvs7a2.png) 2. Within the **Server Manager Dashboard** menu, click **Add roles and features**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-t9h11jy2.png) - A wizard opens to explain roles, role services, and features. After reading the description, click **Next**. 3. In the **Installation Type** menu, select **Role-based or feature-based installation** and click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-0hv9jw7c.png) 4. Within the **Server Selection** menu, click **Select a server from the server pool**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-w84a607o.png) - Verify the local server is selected and click **Next**. 5. In the Server Roles menu, check the **Web Server (IIS)** box. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-qrjwf62l.png) - Checking the Web Server Box triggers an additional window to open. Click **Add Features** and then click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-dauwbjrk.png) 6. The **Features** menu requires two focus points. 1. First, expand the **.NET Framework 3.5 Features** and click **HTTP Activation**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-1mcl3c8e.png) 2. This selection triggers a new window stating the requirements for HTTP activation. Click **Add Features**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-kxlqqhzv.png) 3. Second, expand the **.NET Framework 4.6 Features** and then expand **WCF Services**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-1y2ym53i.png) 1. Check **HTTP Activation, Message Queuing (MSMQ) Activation, Named Pipe Activation** and **TCP Activation**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-prkvp0e4.png) 2. As additional dialog boxes open, click **Add Features**. After the additional four boxes are checked, click **Next**. 7. Read the Web Server Role (IIS) menu content and then click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-6uaahwka.png) 8. The **Role Services submenu** requires three focus points. 1. First, scroll to the **Security** category and check the boxes for **Basic Authentication** and **Windows Authentication**.![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-0fsr1qq6.png) 2. Second, expand the **Application Development** category and check the **.NET Extensibility 3.5**, **.NET Extensibility 4.x**, **ASP .NET 3.5**, and **ASP .NET 4.x** boxes. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-nisb9e64.png) 3. Third, scroll to **Management Tools** and verify that the **IIS Management Console** box is checked. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-tr2tu3of.png) 4. Click **Next**. 9. Confirm the installation selections and then click **Install**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-qo3y4c6j.png) 10. Wait for the installation to complete successfully. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-n11yewip.png) - Click **Close** to complete the installation. #### Changing the Number of Fingerprints Enrollment is automatically set for three fingers. The following steps show how to change the number of fingerprints required for enrollment. 1. In the Administration Portal in the RapidIdentity MFA Server, go to Methods Tab > Biometrics > Click **Profile List**. 2. Select **Edit** next to the EPCS. 3. Select desired amount in the dropdown menu next to Number of Fingers 4. Press **Save**. Tip The fingers with a better success rate are: - Thumb - Index - Middle finger #### Installing the RapidIdentity MFA Server In order to continue the setup, download the RapidIdentity MFA Server files and complete the proceeding steps. 1. **Right-click** on the RapidIdentity MFA Server and select **Run as administrator**. 2. The RapidIdentity MFA Server – InstallShield Wizard will open, click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/Step%202-8.png) 3. The License Agreement will appear. Read the License Agreement, accept the terms of the license agreement, and click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/Step%203-9.png) 4. Tell the computer where to place MFA files or accept the Default, then click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/Step%204-10(1).png) 5. The Database Configuration window will appear. Enter the **server** **name** into the proper field. Enter the **SQL Account ID** or **Windows Credentials** and the **Password**, along with **Password Confirmation,** and click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/Step%205-11.png) - This will generate a new window that will confirm the new database creation; click **Next**. 6. If a SQL Account ID was entered, the screen will now ask for Windows Credentials required for setup. Enter the **Windows Credentials** and the **Password**, along with **Password Confirmation,** and click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/Step%206-12.png) - A window will generate to inform that the new database has been created; click **Next**. 7. The Database Configuration window will appear again to ensure the fields entered properly represent the account that will be used for connection in the RapidIdentity MFA Server. Click **Next** to confirm. 8. The Choose Destination Location will appear. Select a folder in which the setup will install the files through the Change button or maintain the recommended default server location. Click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/Step%208-13.png) 9. The server is now ready to install. Click **Install** to proceed. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/Step%209-14.png) 10. Wait for the installation to complete successfully. 11. The InstallShield Wizard Complete screen will appear when the installation is complete. Click **Finish**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/Step%2011-15.png) The RapidIdentity MFA Server is successfully installed. Proceed to the steps to install the client-side components. #### Installing the RapidIdentity MFA Client-Side Components To complete the RapidIdentity MFA Server installation, there are client-side components that require installation on the HealthCast EPCS Server. **Note** Download the RapidIdentity MFA Client-Side Components files: [RapidIdentity_Client-Side-Components_v4971.exe](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/RapidIdentity_Client-Side-Components_v4971.exe) ***This file is additionally used for installing the MFA server.** Once downloaded, proceed with the following steps to install the components. 1. **Right-click** on the **RapidIdentity Client-Side Components** folder and select **Run as administrator**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-lrcbvr6a.png) 2. On the welcome screen, click **Next**. 3. The License Agreement will appear. Read the License Agreement, accept the terms of the license agreement, and click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-4wn53iuu.png) 4. The Choose Destination Location window will appear. Select a folder in which the setup will install the files through the Change button or maintain the recommended default server location. Click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-37tiz7ke.png) 5. The server is now ready to install. Click **Install**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-oqrah6of.png) 6. Wait for the installation to complete successfully. 7. The InstallShield Wizard Complete screen will appear when the installation is complete. Click **Finish**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-9hq4i89z.png) The installation steps for the RapidIdentity MFA Server are now complete. #### Configuring the RapidIdentity MFA Server Now that the installation steps for the RapidIdentity MFA Server are completed, it is necessary to configure the web services in IIS. 1. Go to **Windows** > **Administrative Tools** and locate and click on the **Internet Information Services IIS Manager**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-5katvzc7.png) 2. Within the Connections field, select where the RapidIdentity MFA Server was installed. 1. This generates a window that offers notification of the latest Web Platform Components. Select **Yes** to opt-in. 3. Within the Connections field, select **Application Pools** and **right-click** on **oneAppPool** to go to the Advanced Settings. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-t7bx0baz.png) 1. Under the General section, change the .NET CLR Version to **v4.0**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-2nejvmwt.png) 2. Under the Process Model section, ensure that the Identity is set to **Network Service. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-m2g8qb2a.png)** 3. Change Load User Profile status to **True**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-qu0v82uy.png) 4. Click **OK**. 4. Minimize windows and go to Windows Explorer. Open Control Panel and navigate to **C:\Program Files\2FA**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-1qsfqsq6.png) 5. On the local disc drive, go to **Program Files** > **2FA Server** and **right-click** on the downloaded RapidIdentity MFA Server to go to Properties. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-7sicasph.png) 6. In the Security tab, click on **Edit** to change permissions. 7. Then, click on **Add** when the permissions for the server window generates. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-q928uxvb.png) 8. In the Enter the object names to select field, type in **network** and click the **Check Names**button. 1. This generates a window that will display multiple files with the same name, select **NETWORK SERVICE** and click **OK**. 9. Within the Permissions for NETWORK SERVICE, check the box under **Allow for Full Control**. 1. Click **Apply** and then **OK**. 10. Click **OK** on the server properties window. 11. Open a command window and **right-click** and select **Run as administrator**. 12. Type in **iisreset** and press **enter** to restart the web server. A return command will state, “Internet services successfully restarted,” which completes the server configuration. #### Configuring the Data Tables for the RapidIdentity MFA Server Complete these seven steps to create the RapidIdentity MFA Server Database tables. 1. On the RapidIdentity MFA Server, open a browser and navigate to **http://[servername]/One/install/build_cm_tables.aspx** - The **servername** is the name of the server instance created previously and the authentication credentials are those configured for that server instance. - **Note** - The first attempt to access the newly created RapidIdentity MFA Server may require more time than anticipated. This experience is normal. - Once the RapidIdentity MFA Server configuration sequence below is completed, the access time should be faster. 1. After authentication, leave the SysAdmin Role Name, Username, and LDAP Unique Identifier as the default **ONE_sys_admin** – do not input a different Role Name, Username, or LDAP Unique Identifier. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-8dj4phd6.png) - Complete the password fields as shown and then click **Build RapidIdentity**. 2. A pop-up message will appear stating that all the data in the repository will be replaced with the default settings. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-6y4wv2rk.png) - **Important** - During the **first RapidIdentity MFA Server installation**, click **OK**. - During subsequent RapidIdentity MFA Server upgrades, click **Cancel**. 3. When the server tables are completed, a confirmation message appears. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-d3bs2vx1.png) 4. Click **Home**. 5. It is necessary to authenticate to RapidIdentity MFA Server using the credentials created in Step 2. In the **Username** field, enter **ONE_sys_admin**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-h6j27w0z.png) - Leave the **Domain** field blank. Click **OK**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-w6w53fkb.png) 6. Enter the password chosen in Step 2 in the **Password** field and then click **Validate**. A successful authentication to RapidIdentity MFA Server directs users to the **Home** screen. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-vro3i3zy.png) ### Configuring Authentication Device in Hyperspace for EPCS To create and configure Identity Automation's authentication devices in Hyperspace please have your Hyperspace and Desktop TS user follow the directions in the "3rd Party Authentication Setup" section in the "Authentication Setup and Support Guide". This Guide is maintained and supported by Epic and has directions on setting up a 3rd party authentication device E0G record and configuring it in Authentication Administration to allow Hyperspace to use an authentication device. These ProgIDs can be used to support an EPCS workflow authentication in Hyperspace: - Use **RIBiometric.riBio** ProgID to support Fingerprint authentication. - Use **RIPingMe.RIToken** ProgID to support PingMe and OTP authentication. **The following sections are provided for clarity and may be covered in the Epic documentation.** After configuring our EPCS-supported Program IDs in the Epic back-end system, customers will need to configure the following two contexts in Hyperspace's Authentication Administration: - E-prescribing Controlled Medications - First Context [41] - E-prescribing Controlled Medications - Second Context [42] **Note**Although Hyperspace has the functionality to require multiple authentication devices for a single context using Primary and Secondary device settings, this is not used for the EPCS workflow configuration. Instead, the two contexts listed above are used to configure the two-factor authentication needed. **Configuring E-prescribing Controlled Medications - First Context [41]** In Hyperspace's Authentication Administration, after selecting the above context for the needed level (system, workstation, etc.), add RIBiometric.riBio and RIPingMe.RIToken devices - in that order - to the **Primary Device** setting. Leave the **Secondary Device** setting empty, as it is not used. One of the devices configured will be the first authentication factor that the user will have to pass to complete a controlled medication order. In this configuration, the user has to authenticate with one of the devices configured, but not both. This configuration allows the user to use the Fingerprint reader to authenticate, if available, or use PingMe if Fingerprint is not available or the user cancels. **Configuring E-prescribing Controlled Medications - Second Context [42]** After selecting the above context for the needed level (system, workstation, etc.), add Hyperspaces Default Login[0] to the **Primary Device** setting, leaving the **Secondary Device** setting empty. This will be the second authentication factor the user will have to pass to complete a controlled medication order. **Note** If you want to require the user to use both Fingerprint and PingMe authentication, then add only one device like RIBiometric.riBio for Fingerprint in the **Primary Device** setting for the first context, and then add RIPingMe.RIToken device in the second context's **Primary Device** setting. **Tip** Use the “Change Challenge Questions” Context for proof of concept setup to test using the above authentication devices. Contact your Epic Client Systems – Hyperspace and Desktop TS for detailed instructions and more information about adding authentication devices. ### Installing the HealthCast ExactAccess Server To continue the HealthCast EPCS setup, download the HealthCast ExactAccess Server .msi file and proceed with the following steps. **Note** These instructions are for installing and configuring the Audit Server where the full ExactAccess Server is not being used. 1. **Right-click** on the HealthCast ExactAccess Server and select **Run as administrator**. 2. When the InstallShield Wizard appears, click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-7gyeshb4.png) 3. In the Choose Destination Location window, select a folder in which the setup will install the files through the Change button or maintain the recommended default server location. Click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-syl5nfj6.png) 4. At this point, services can be configured to run under a domain account. This step can also be skipped at this time by clicking **Next**. NoteIf skipped, a window will be generated to notify of an invalid username or password entry. Click **Cancel**to proceed with the setup without the username and password. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-dbla0juf.png) 1. The program is now ready to install. - Press **Install**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-2cvevk3j.png) 2. Wait for the program to install, configure, and process. Click **Finish** on the generated completion screen. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-ey0k5x0p.png) 3. The system will need to be restarted for the configuration changes to be made to the HealthCast ExactAccess Server to take effect. Click **Yes** to restart now or **No** to restart later. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-bcbx0h4n.png) Continue to follow the steps on creating and configuring the database for auditSERVER. Once completed, it will be recommended to restart the system at that time. ### Configuring the ExactAccess Server Database for auditSERVER Once the database is created, configure it for the auditSERVER with these steps. 1. Go to Windows > HealthCast and locate and click on **ExactAccess Server Configuration**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-1du2a7za.png) 2. This populates the HCI Server Configuration Window populates. Click on the **Database tab**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-j2us8q66.png) - This generates a Database window. Select **Audit Server**. 3. Click the **+** button on the right side of the screen. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-r4o4ao2s.png) 1. This populates the Data Link Properties (FireDAC) window. Using the drop-down menu for the Select a driver section, select **SQL Server Native Client 11.0**. 1. Other driver versions are supported here, for newer versions of SQL server (such as **ODBC Driver 17 for SQL** [for MSSQL2019] Server or **ODBC Driver 18 for SQL Server** [for MSSQL2022]).  Choose the appropriate driver for the version of SQL server the environment has installed. 2. Select or enter the server name and use the dropdown to select it. 3. Enter information to log on to the server. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-08uv0ebf.png) 4. Use the dropdown menu to select the **hciAudit database** and click **Test Connection**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-x4fgsagd.png) 5. Click **OK** once successfully connected. 4. Click **OK** on the Data Link Properties (FireDAC) widow. 5. Click **OK** on the HCI Server Configuration Window. 6. Now, complete the service restart that was required previously and click **Yes** to confirm. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-pnpr5j2z.png) 7. Select **Close** on the HCI Server Configuration Window. 8. The system will need to be restarted to complete all of the updates to the HealthCast ExactAccess Server to take effect. Click **Yes** to restart now. 9. From the Start menu, Run services.msc. 10. Find the entry for **HCI auditServer Service**, right-click on it, and click on **File Properties**. 11. On the login tab, Select the service account by clicking on **Browse...** ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-1l7thuqq.png) 1. Type in the password for the service account. 2. Click **Apply** and then, click the **Ok** button. 12. In the services window, right-click on HCI auditSERVER Service and select **restart**. 13. Disable the other Exactaccess services if SSO functionality is unused in this environment (AuditServer service is  the only required serveries specific to EPCS) 1. Services that can be set to disabled when deploying an EPCS only solution: 1. HCI Deploy Client 2. HCI Deploy Service 3. HCI eXactACCESS Server 4. HCI eXactACCESS Server Availability Monitor 5. HCI eXactACCESS Windows Logon Listener 6. HCI ProxCard Server 7. HCI Remote Authentication Server The system will now restart and this will conclude the HealthCast ExactAccess Server. ### Creating the ExactAccess Server Database for auditSERVER Now that the HealthCast ExactAccess Server is set up, follow these steps to create the database for the auditSERVER. 1. Access the database server by going to Microsoft SQL Server Management Studio and under the Object Explorer section, click on **Databases** and select **New Database**. 2. Name the database and click **Enter**. 3. Go to File > Open > File and locate the database script that was created through the downloaded of the HealthCast ExactAccess Server msi file. Click **Open**. - The default location is PC > Local Disk (C:) > Program Files (86) > HealthCast > ExactAccess > SQL > MSSQL > audit > database.sql under the coordinating server it was installed in. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-6k4kn6j1.png) 4. In the workstation of the opened script, select **Execute**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-7xk36gui.png) 5. A command will return in the message section indicating successful completion. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-cktss264.png) 6. In the Object Explorer menu, click on the **+** sign next to the Security folder to expand the directory. Repeat for the Logins folder and **right-click** on hcisql to click on **Properties**. - **Note:** This step assumes that the domain service account in the active directory of the environment for SQL setup is preexisting. 7. This generates The Login Properties window. Select **User Mapping** in the Select a Page menu to ensure that the box is selected under Map for the hciAudit Database. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-lyxltheh.png) - Click **OK**. The database is now created. ### Installing the SSO Audit Monitor To ensure the HealthCast SSO Audit Monitor Reporting Tool is ready to use, follow the proceeding steps to install and set up this tool. ImportantInstall the server certificate or verify that the certificate is present. The certificate must have the Fully Qualified Doman Name as the subject field. User and Admin Groups should be created on the AD and users added. 1. **Right-click** on the setup.exe file and Run as administrator. 2. Click **Next** on the InstallShield Wizard for SSO Audit Monitor Welcome screen. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-9628u6dv.png) 3. Click **Next** on the Destination Folder screen that populates to utilize the default folder for installation or configure to the preferred folder and then click **Next**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-czn53zqo.png) 4. The program is ready to install; click **Install**. Wait for the program to successfully install. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-bjwfp3xm.png) 5. Click **Finish** on the install completion screen. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-vhuy80x0.png) The SSO Audit Monitor is now installed. Proceed with the post-installation procedures to complete the setup of the tool. #### Setting up the SSO Audit Monitor To ensure the HealthCast SSO Audit Monitor Reporting Tool is ready to use, follow the proceeding steps to properly set up this tool. 1. Open PowerShell as Administrator. 2. Execute the following script: (C:\Program Files (x86)\HealthCast\SSO Audit Monitor\Config\SsoAudit- MonitorSetup.ps1) on the server that will be hosting the SSO Audit Monitor application. 3. Exit PowerShell. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-wnar6iau.png) 4. Navigate to C: > Program Files (x86) > HealthCast > SSO Audit Monitor > Config and use Notepad to **open** CreateDb.sql. 5. On the second line, replace the content of [your_audit_db] with the name of the database to be used and save the file. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-3axl43u6.png) 6. In SQL Server, navigate to and open the script you just edited. Click **Execute** to apply the script to the database. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-dgddr9vl.png) 7. Navigate to C: > Program Files (x86) > HealthCast > SSO Audit Monitor and open appsettings.json. 8. On the **defaultconnection** line, change (localdb) to the name of the server, MSSQLLocalDB to the name of the instance, and database= to the name of the database. Save and close the file. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-xrtai5iv.png) 9. From the Start menu, run **services.msc**. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-r4b7l44y.png) 10. Find the entry for **HCI SSO Audit Monitor Service**, right-click on it, and click **File Properties**. 11. On the Log On tab, Select the service account by clicking on **Browse...** ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-jzmgbdos.png) 1. Type in the password. 2. Click **Apply** and then OK. 12. In a browser, navigate to the URL of the audit reporting website: https://computername:5000. ![](https://cdn.document360.io/f2567005-8048-43b2-8bfc-3abc2da42bca/Images/Documentation/guides-image-xv0k0ss3.png) 13. Log in with your system credentials to see the different audit reports available. There is a search functionality within the audit report site that can be used to find users that did an authentication for an EPCS transaction. The installation and setup of the SSO Audit Monitor is now complete. ## Related - [HealthCast EPCS Install on Enrollment Workstation](/healthcast-epcs-install-on-enrollment-workstation.md) - [HealthCast EPCS Install on Citrix](/healthcast-epcs-install-on-citrix.md) - [Server Configuration for EPCS](/server-configuration-for-epcs.md) - [Solution Architecture](/epcs-solution-architecture.md) - [Enrolling Users with Fingerprint Biometrics](/enrolling-users-with-fingerprint-biometrics.md)