zettelkasten/OneNoteExport/Kommunikationstechnologie/Sharepoint/Infrastruktur/102_Workflow Manager Farm.md
Ralf Koop 5a108aa2b4 .
2023-08-25 23:29:11 +02:00

22 KiB

Workflow Manager Farm

Donnerstag, 13. Juni 2019

14:08

 

Wird Installiert mit dem Web Plattform Installer

 

 

Service Account SVC-SPPWorkflowM

 

DNS Name und IP für die VS

BKKSPPWMFARM001 10.96.73.107

 

VS auf dem Kemp ist eingerichtet "Workflow Farm Prod" WICHTIG PORT 12290 nutzen !!!!!

 

 

Installation des Workflow Client auf allen SP Servern sowie der Webinstaller muss auch auf allen SP Servern rauf.

 

 

 

SQL Alias SPP-Workflow

 

SQL Instanz bkksppsql001\sqlexsppconfig

 

Farm Passwort

Tausend2003#

 

 

 

Computergenerierter Alternativtext: WORKFLOW MANAGER CONFIGURATION WIZARD New Farm Configuration Pmide m \"deWy tr.t we requiæd fæ \"d in tr. The will the So-ice Configure Farm Databases SQL SERVER SPP-Workfiow Configure Service Account •ch tee tr. Crdetöels f« time join a to tre USER ID bkk-rnobiIoiIXsvc-SPPWorkfiowM Allow Workflow management Over HTTP on this computer Enable firewall rules on this computer Certificate Generation Key This key join to tr. Tausend200S# CONFIRM GENERATION KEY {width="3.8020833333333335in" height="4.125in"}

 

Aus <http://www.harbar.net/images/www_harbar_net/Windows-Live-Writer/Wor.End-to-End-Configuration-using-auto-_3D9/2a_2.png>

Ergebnis für die Konfiguration:

 

 

Computergenerierter Alternativtext: WORKFLOW MANAGER CONFIGURATION WIZARD Summary This page lists Charge-S that the Configuration wizard will \@Configuration for Workflow Manager Management Database SQL Instance Enable SSL connection with SQL Server instance Management Database Name Instance Management Database SQ Instance Enable SSL connection With SQL Server Instance Management Database Name Resource Management SQL Instance Enable SSL connection with SQL Server instance Resource Management Database Name Ru NAs Account RunAs Password Certificate Generation Key Workflow Signing Service SSI Certificate Encryption Certificate Workflow Port Wmd OWS SPP- Workflow Authenticabon spp.workflow Wmdows Authentication 12290 {width="4.947916666666667in" height="5.4375in"}

 

Computergenerierter Alternativtext: Enable firewall rules on this computer Administrators Group \@Configuration for Service Bus Management Database SQ Instance Enable SSL connection With SQL Server instance Management Database Name Gateway Database SQL Instance Enable SSL Connection with Server Gateway Database Name SQL Instance Enable SSI connection with SQL Server instance Container Database Name RunAs Account RunAs Password Certificate Generation Key Fa Certificate BUILTINWministrators Wmd ows Authenticabon Wmdows Authentication SbGatewayOatabase False Whidows Authentication b\" -SPPWMXflowM {width="4.385416666666667in" height="4.072916666666667in"}

 

Computergenerierter Alternativtext: Encryption Certificate Broker port Internal Communication Port Range this computer Group {width="4.083333333333333in" height="1.5208333333333333in"}

 

Erfasster Bildschirmausschnitt: 17.06.2019 14:11

 

 

 

 

 

 

Hier die Powershell Befehle dazu :

 

# To be run in Workflow Manager PowerShell console that has both Workflow Manager and Service Bus installed.

 

# Create new SB Farm

$SBCertificateAutoGenerationKey = ConvertTo-SecureString -AsPlainText -Force -String '***** Replace with Service Bus Certificate Auto-generation key ******' -Verbose;

 

 

New-SBFarm -SBFarmDBConnectionString 'Data Source=SPP-Workflow;Initial Catalog=SbManagementDB;Integrated Security=True;Encrypt=False' -InternalPortRangeStart 9000 -TcpPort 9354 -MessageBrokerPort 9356 -RunAsAccount 'bkk-mobiloil\SVC-SPPWorkflowM' -AdminGroup 'BUILTIN\Administrators' -GatewayDBConnectionString 'Data Source=SPP-Workflow;Initial Catalog=SbGatewayDatabase;Integrated Security=True;Encrypt=False' -CertificateAutoGenerationKey $SBCertificateAutoGenerationKey -MessageContainerDBConnectionString 'Data Source=SPP-Workflow;Initial Catalog=SBMessageContainer01;Integrated Security=True;Encrypt=False' -Verbose;

 

# To be run in Workflow Manager PowerShell console that has both Workflow Manager and Service Bus installed.

 

# Create new WF Farm

$WFCertAutoGenerationKey = ConvertTo-SecureString -AsPlainText -Force -String '***** Replace with Workflow Manager Certificate Auto-generation key ******' -Verbose;

 

 

New-WFFarm -WFFarmDBConnectionString 'Data Source=SPP-Workflow;Initial Catalog=WFManagementDB;Integrated Security=True;Encrypt=False' -RunAsAccount 'bkk-mobiloil\SVC-SPPWorkflowM' -AdminGroup 'BUILTIN\Administrators' -HttpsPort 12290 -HttpPort 12291 -InstanceDBConnectionString 'Data Source=SPP-Workflow;Initial Catalog=WFInstanceManagementDB;Integrated Security=True;Encrypt=False' -ResourceDBConnectionString 'Data Source=SPP-Workflow;Initial Catalog=WFResourceManagementDB;Integrated Security=True;Encrypt=False' -CertificateAutoGenerationKey $WFCertAutoGenerationKey -Verbose;

 

# Add SB Host

$SBRunAsPassword = ConvertTo-SecureString -AsPlainText -Force -String '***** Replace with RunAs Password for Service Bus ******' -Verbose;

 

 

Add-SBHost -SBFarmDBConnectionString 'Data Source=SPP-Workflow;Initial Catalog=SbManagementDB;Integrated Security=True;Encrypt=False' -RunAsPassword $SBRunAsPassword -EnableFirewallRules $true -CertificateAutoGenerationKey $SBCertificateAutoGenerationKey -Verbose;

 

Try

{

# Create new SB Namespace

New-SBNamespace -Name 'WorkflowDefaultNamespace' -AddressingScheme 'Path' -ManageUsers 'bkk-mobiloil\SVC-SPPWorkflowM','admin-rko@BKK-MOBILOIL' -Verbose;

 

Start-Sleep -s 90

}

Catch [system.InvalidOperationException]

{

}

 

# Get SB Client Configuration

$SBClientConfiguration = Get-SBClientConfiguration -Namespaces 'WorkflowDefaultNamespace' -Verbose;

 

# Add WF Host

$WFRunAsPassword = ConvertTo-SecureString -AsPlainText -Force -String '***** Replace with RunAs Password for Workflow Manager ******' -Verbose;

 

 

Add-WFHost -WFFarmDBConnectionString 'Data Source=SPP-Workflow;Initial Catalog=WFManagementDB;Integrated Security=True;Encrypt=False' -RunAsPassword $WFRunAsPassword -EnableFirewallRules $true -SBClientConfiguration $SBClientConfiguration -CertificateAutoGenerationKey $WFCertAutoGenerationKey -Verbose;

 

ERGEBNIS NACH DER Konfiguration :

 

 

Computergenerierter Alternativtext: WORKFLOW MANAGER CONFIGURATION WIZARD Configuration progress Confguratbn„ This may take up to 10 to Create a new Workflow Manager farm. Add host to Service Bus farm. Create Service Bus Get Service Bus dient configuration. Add host to Workflow Manager farm. {width="3.5208333333333335in" height="1.7708333333333333in"}

 

Erfasster Bildschirmausschnitt: 17.06.2019 14:15

 

 

Farm ist fertig erstell, nun müssen noch andere Server hinzugrfügt werden.

 

[Hinzufügend des 2 Servers zur Farm :]{.underline}

 

 

Computergenerierter Alternativtext: WORKFLOW MANAGER CONFIGURATION WIZARD Welcome This wizard helps pu configure a Manager farm. The wizard also configures the Service Bus farm required Oy the Workfo,v Manager tam. @ Configure Workflow Manager with Default Settings (Recommended) Apply default configuration created and you can \'O.n other computers to the farm later. @ Configure Workflow Manager with Custom Settings default settings wo will be created can join other to the farm later. Join an Existing Workflow Manager Farm this option to add this computer to existing Workflow Manager the nuchine. A Workflow Manager farm will and Bus faml\_ {width="3.8333333333333335in" height="2.3333333333333335in"}

 

Erfasster Bildschirmausschnitt: 17.06.2019 14:16

 

Hier Punkt 3 wählen Join an Exiting Workflow Manager Farm

 

 

 

Computergenerierter Alternativtext: WORKFLOW MANAGER CONFIGURATION WIZARD Join Farm Prcv\'de management databases tor the \'WVoRf\'„ow Manage farm and Service Bus tarm that this computer WII join. Provide Workflow Manager Farm Management Database SQL SERVER INSTANCE \@Advanced Options the above SQL Server Settings for all database DATABASE NAME Provide Service Bus Farm Management Database SQL SERVER INSTANCE SPP-workfcw DATABASE NAME SbManagementDB {width="3.7916666666666665in" height="3.3125in"}

 

Erfasster Bildschirmausschnitt: 17.06.2019 14:17

 

 

Computergenerierter Alternativtext: WORKFLOW MANAGER CONFIGURATION WIZARD Join Workflow Manager Farm Prcwide mandatory parameters for the Workflow Manager farm that this computer join. Provide Service Account Password fer the following RurAS user account USER ID bkk-mobiloilISVC-SPPWorkflowM Provide Certificate Generation Key cedifcate generation key configured during Wort•cw Manager tarm create\' , Allow Workflow management over HTTP on this computer 9.1 Enable firewall rules on this computer {width="3.8020833333333335in" height="3.3333333333333335in"}

 

Erfasster Bildschirmausschnitt: 17.06.2019 14:19

 

 

Computergenerierter Alternativtext: WORKFLOW MANAGER CONFIGURATION WIZARD Join Service Bus Farm Provide marotcry parameters torthe Service Bus farm that this compute will join. Provide Service Account Password for the following RLmAs use account. Use the same service account credentials as provided for Workflow Manager Provide Certificate Generation Key certificate generation key configured during creation Use the same certificate generation key as provided for Workflow Manager Enable firewall rules on this computer {width="3.875in" height="3.4166666666666665in"}

 

Erfasster Bildschirmausschnitt: 17.06.2019 14:20

 

 

 

Summary :

Configuration for Workflow Manager

Management Database SQL Instance        SPP-workflow

Enable SSL connection with SQL Server instance        False

Authentication        Windows Authentication

Management Database Name        WFManagementDB

RunAs Account        bkk-mobiloil\SVC-SPPWorkflowM

RunAs Password        ***********

Certificate Generation Key        ***********

Workflow Manager Outbound Signing Certificate        Auto-generated

Service SSL Certificate        Auto-generated

Encryption Certificate        Auto-generated

Workflow Manager Management Port        12290

HTTP Port        Disabled

Enable firewall rules on this computer        True

Administrators Group        BUILTIN\Administrators

Configuration for Service Bus

Management Database SQL Instance        SPP-workflow

Enable SSL connection with SQL Server instance        False

Authentication        Windows Authentication

Management Database Name        SbManagementDB

RunAs Account        bkk-mobiloil\SVC-SPPWorkflowM

RunAs Password        ***********

Certificate Generation Key        ***********

Farm Certificate        Auto-generated

Encryption Certificate        Auto-generated

HTTPS Port        9355

TCP Port        9354

Message Broker Port        9356

Internal Communication Port Range        9000 - 9004

Enable firewall rules on this computer        True

Administrators Group        BUILTIN\Administrators

 

Computergenerierter Alternativtext: Summary This page lists changes that the configuration wizard will appey. \@Configuration for Workflow Manager Ma SQL E nable SSI connection with SQL Server instance Fabe Ma Data base Na M- mo SPPWorkflowM Certificate Generation Key Workflow Manag er OutbouM Cetificate Auto Service SSI Certificate Encryption Ce rtificate Workflow Management port Enable firewall rules on ths convuter Ad m Group Auto -generated Auto •generated {width="2.375in" height="2.1354166666666665in"}

 

Erfasster Bildschirmausschnitt: 17.06.2019 14:21

 

 

Computergenerierter Alternativtext: \@Configuration for Service Bus Management Database SQL Instance Enable SSL connection with SQL Server instance Management Database Name Certificate Generation Key Fym Certificate Erwyption Certificate Message Broker Port Internal Port Enable firewall rules on tt\*s Administrators Group Faxe bkk-mo SPPWorkflowM Auto -generated Auto BUI {width="2.8541666666666665in" height="2.0729166666666665in"}

 

Erfasster Bildschirmausschnitt: 17.06.2019 14:21

 

 

Computergenerierter Alternativtext: Configuration progress Appb\'ing configuration This may take up to 10 minutes to compete. Add host to Service Bus farm. Create Service Bus Get Service Bus client configuration. Add host to Workflow Manager farm. {width="5.625in" height="2.0833333333333335in"}

 

C:\\EB4954A5\\4911F5F3-52F4-48E8-BF71-FCC743F4313D-Dateien\\image013.png{width="4.96875in" height="0.40625in"}

 

Erfasster Bildschirmausschnitt: 17.06.2019 14:25

 

 

[Hinzufügend des 3 Servers zur Farm :]{.underline}

 

Schritte wie bei 2

 

 

 

Computergenerierter Alternativtext: WORKFLOW MANAGER CONFIGURATION WIZARD Join Farm Prcvbde management databases for the \'.Vorkf\'„ow Manager farm and Service Bus tarm that this computer WII join. Provide Workflow Manager Farm Management Database SQL SERVER INSTANCE spp-Workflow \@Advanced Options the above SQL Server Settings for all database DATABASE NAME Provide Service Bus Farm Management Database SQL SERVER INSTANCE SPP-WcrkfIow DATABASE NAME SbManagementDB {width="3.09375in" height="2.96875in"}

Erfasster Bildschirmausschnitt: 17.06.2019 14:27

 

 

 

 

Computergenerierter Alternativtext: WORKFLOW MANAGER CONFIGURATION WIZARD Join Workflow Manager Farm Prcwide mandatory parameters for the Workflow Manager farm that this computer join. Provide Service Account Password Provide passwMd for the following RurAS user SCCOunt USER ID bkk-mobiloilNSVC-SPPWorkflowM Provide Certificate Generation Key cerjfcate generation key configured during Wort•ow Manager tarm creation, Allow Workflow management over HTTP on this computer 9.1 Enable firewall rules on this computer {width="2.8958333333333335in" height="3.2916666666666665in"}

Erfasster Bildschirmausschnitt: 17.06.2019 14:27

 

 

 

Computergenerierter Alternativtext: WORKFLOW MANAGER CONFIGURATION WIZARD Join Service Bus Farm Provide mandatory parameters for the Service Bus farm that this computer will join. Provide Service Account Password Provide the Rw-As account. Use the same service account credentials as provided for Workflow Manager Provide Certificate Generation Key certificate generation key configured during 3us creation Use the same certificate generation key as provided for Workflow Manager Enable firewall rules on this computer {width="3.03125in" height="2.0625in"}

Erfasster Bildschirmausschnitt: 17.06.2019 14:28

 

 

Summary :

Configuration for Workflow Manager

Management Database SQL Instance        SPP-Workflow

Enable SSL connection with SQL Server instance        False

Authentication        Windows Authentication

Management Database Name        WFManagementDB

RunAs Account        bkk-mobiloil\SVC-SPPWorkflowM

RunAs Password        ***********

Certificate Generation Key        ***********

Workflow Manager Outbound Signing Certificate        Auto-generated

Service SSL Certificate        Auto-generated

Encryption Certificate        Auto-generated

Workflow Manager Management Port        12290

HTTP Port        Disabled

Enable firewall rules on this computer        True

Administrators Group        BUILTIN\Administrators

Configuration for Service Bus

Management Database SQL Instance        SPP-Workflow

Enable SSL connection with SQL Server instance        False

Authentication        Windows Authentication

Management Database Name        SbManagementDB

RunAs Account        bkk-mobiloil\SVC-SPPWorkflowM

RunAs Password        ***********

Certificate Generation Key        ***********

Farm Certificate        Auto-generated

Encryption Certificate        Auto-generated

HTTPS Port        9355

TCP Port        9354

Message Broker Port        9356

Internal Communication Port Range        9000 - 9004

Enable firewall rules on this computer        True

Administrators Group        BUILTIN\Administrators

 

Computergenerierter Alternativtext: Summary This page lists changes that the configuration wizard will apps\'. \@Configuration for Workflow Manager SQL Instance Enable SSI connection With SQL Server instance Fabe Ma Data base Na SPPWorkflowM Certificate Key Workflow Manag er OutbouM Certificate Auto Service SSI Certificate Encryption Certificate Workflow M anaqement port Enable firewall rules on ths convuter Ad m iniStratorS Group Auto -generated Auto -generated {width="2.6041666666666665in" height="2.3020833333333335in"}

 

Computergenerierter Alternativtext: \@Configuration for Service Bus Management Database SQL Instance Enable SSL connection with SQL Server instance Management Database Name Certificate Generation Key Fym Certificate Encryption Certificate Message Broker Port Internal Port Enable firewall rules on tt\*s Administrators Group Fabe bkk-mo SPPWorkflowM Auto -generated Auto BUI {width="2.8645833333333335in" height="2.09375in"}

 

Erfasster Bildschirmausschnitt: 17.06.2019 14:29

 

 

Computergenerierter Alternativtext: Configuration progress Applying configuration This may take up to 10 minutes to compete. Add host to Service Bus farm. Create Service Bus Get Service Bus client configuration. Add host to Workflow Manager farm. {width="4.520833333333333in" height="1.9583333333333333in"}

 

C:\\EB4954A5\\4911F5F3-52F4-48E8-BF71-FCC743F4313D-Dateien\\image020.png{width="4.635416666666667in" height="0.34375in"}

 

get-wffarm :

 

PS C:\Program Files\Microsoft\Web Platform Installer> Get-WFFarm

 

 

FarmType : Workflow

WFFarmDBConnectionString : Data Source=SPP-Workflow;Initial Catalog=WFManagementDB;Integrated

Security=True;Encrypt=False

RunAsAccount : bkk-mobiloil\SVC-SPPWorkflowM

AdminGroup : BUILTIN\Administrators

Hosts : {Name: BKKSPPWM001.bkk-mobiloil.de, Configuration State: HostConfigurationCompleted,

Name: BKKSPPWM002.bkk-mobiloil.de, Configuration State: HostConfigurationCompleted, Name:

BKKSPPWM003.bkk-mobiloil.de, Configuration State: HostConfigurationCompleted}

InstanceDBConnectionString : Data Source=SPP-Workflow;Initial Catalog=WFInstanceManagementDB;Integrated

Security=True;Asynchronous Processing=True;Encrypt=False

ResourceDBConnectionString : Data Source=SPP-Workflow;Initial Catalog=WFResourceManagementDB;Integrated

Security=True;Asynchronous Processing=True;Encrypt=False

HttpPort : 12291

HttpsPort : 12290

OutboundCertificate : Thumbprint: 47F02E208882FAC72F2EF089A4C87B0920A8638D, IsGenerated: True

Endpoints : {https://BKKSPPWM001.bkk-mobiloil.de:12290/, https://BKKSPPWM002.bkk-mobiloil.de:12290/,

https://BKKSPPWM003.bkk-mobiloil.de:12290/}

SslCertificate : Thumbprint: B54E4A4CFAE33EF221D33D25D4D0D01E6688989E, IsGenerated: True

EncryptionCertificate : Thumbprint: B54E4A4CFAE33EF221D33D25D4D0D01E6688989E, IsGenerated: True

 

 

Mit dem IE (Wichtig Admin Modus und User svc-sppworkflowm) auf addresse https://bkksppwm001:12290 Verbinden.

 

Zertifikatserror ignorieren

 

Dann das Zertifikat exportieren.

 

<<SPP-Workflowfarm001.cer>>

 

Auf dem Sharepoint Server BKKSPPAPP001 folgende Befehle ausgeführt :

 

$trustCert = Get-PfxCertificate "D:\SP\Tools\WorkflowManagerFiles\SPP-Workflowfarm001.cer"

 

Ergebnis:

PS C:\Users\admin-rko> $trustCert

 

Thumbprint Subject

---------- -------

B54E4A4CFAE33EF221D33D25D4D0D01E6688989E CN=BKKSPPWM001.bkk-mobiloil.de

 

 

Register-SPWorkflowService -SPSite "https://mobilnet.bkk-mobiloil.de" -WorkflowHostUri "https://bkksppwmfarm001.bkk-mobiloil.de:12290"

 

 

Lief ohne Proleme durch

 

Ergebnis in der CA :

 

 

Computergenerierter Alternativtext: usage and Health Data Collection usage and Health Data Collection User Profile Service Application user Profile Service Application Visio Graphics Service Connection to Visio Graphics Service Visio Graphics Service Word Automation Services Word Automation Services Workflow Service Application Proxy usage and Health Data Collection Service Application usage and Health Data Collection Proxy user Profile Service Application user Profile Service Application Proxy Visio Graphics Service Application Visio Graphics Service Application Proxy Visio Graphics Service Application Proxy Word Automation Services Word Automation Services Proxy Workflow Service Application Proxy {width="9.625in" height="1.53125in"}

 

Erfasster Bildschirmausschnitt: 17.06.2019 15:23

 

Der unterste Service ist neu "Workflow Service Application Proxy"

 

Wenn man ihn anklickt kommt folgendes :

 

 

Computergenerierter Alternativtext: al Administration )plication view all sc Search Workflow Service Status Workflow is Connected {width="4.197916666666667in" height="1.4375in"}

 

Erfasster Bildschirmausschnitt: 17.06.2019 15:24

 

 

Nun kann man mit dem Sharepoint Designer prüfen ob die 2013 Workflows verfügbar sind.

 

 

Computergenerierter Alternativtext: Listenworkflow erstellen - Documents V • Hinzufügen eines neuen Worfflows zur Liste Namen Beschreibung für den neuen Workflow eingeben Beschreibung: WäNen Sie Plattform aus, auf der Ihr Workfbw erstellt werden SOIL Plattformtyp: SharePoint 2013 Workflow SharePoint 2010 Workflow SherePcint 2013 Wcrkflcw Abbrechen {width="5.0in" height="3.375in"}