8.4 Modifying the installation

You can use the MyID installation program to modify the installation. This allows you to add features, such as individual web services.

Note: The Modify option on the installation program does not allow you to change other aspects of the installation, such as the server user accounts or the web site used to host the MyID web site and web services. If you need to change the passwords for user accounts, you can use the Password Change Tool; if you need to change the web site, you must uninstall the Web Server or Web Services Server feature and install it again. If both the web server and web services server features are installed on the same physical server, and you need the change the web site where they are installed, you must uninstall both features then reinstall them.

Important: You are recommended not to use this feature to remove features. To remove items from an existing MyID server installation, first uninstall the product from the affected server, then reinstall with the required features. You need to do this only on the affected server in your installation; for example, if you want to remove a web service, you can uninstall the web tier, then reinstall with only the required web services; you do not have to uninstall the application server. If you require further assistance with this issue from Intercede, contact customer support, quoting reference SUP-299.

Note: If you have installed MyID to a non-default location, when attempting to modify you may see an error similar to:

Error 1306. Another application has exclusive access to the file C:Test\Company\MyID\SSP\MyIDDataSource\MyIDDataSource.log. Please shut down all other applications, then click retry

If this error occurs, open a Windows command prompt, type iisreset to reset IIS, which clears the file lock, then click Retry.

To modify the MyID installation:

1. Log on to the MyID server using the installation account.

2. Close all application windows.

   Note: Once you have started the installation process, do not leave the installer program idle. Windows UAC may cancel the installation if you leave the program idle for too long, depending on your Windows environmental settings.

3. From the MyID Installer folder, right-click the installation program – for example, MyIDServer-12.4.0.exe – then from the pop-up menu select Run as administrator.

   

4. Make sure the Modify option is selected, then click Next.

   

   The screen displays the features you currently have installed.

   Note: The options in this installation program do not correspond exactly to the options displayed in the MyID Installation Assistant; the MyID Installation Assistant displays a list of options that has been organized to make it clear which options are optional. The options available in this installation program are as follows:

   • Application Server – contains the MyID application components.
   • Database Server – contains the MyID database.

   • Web Server – contains the main MyID web server, including the web sites for MyID Desktop and the MyID Operator Client.

   • Web Services Server – contains the MyID web services. You are recommended to install this on the same server as the Web Server; if you want to install the services on a different server, you must carry out additional configuration. See the Setting up the MyID web services on a standalone server section in the Web Service Architecture guide for details.
     • rest.core – required for the MyID Operator Client. This contains the rest.core web service that you can also use for your own systems; see the MyID Core API guide for details.
     • rest.provision – used for issuing mobile credentials and soft certificates. See the REST API for credential provisioning section in the Implementation Guide.
     • web.oauth2 – required for the MyID Operator Client. This contains the web.oauth2 web service that you can also use for your own systems; see the MyID Authentication Guide guide for details.
     • MyID Client Web Service – required for MyID Desktop,the Self-Service App, the Self-Service Kiosk, and mobile clients.
     • Lifecycle API – see the Lifecycle API guide.
     • Credential Web Service – see the Credential Web Service guide.
     • Device Management API – see the Device Management API guide.
     • Mobile iOS OTA – see the Setting up iOS OTA provisioning section in the Mobile Identity Management guide.
     • Reporting Web Service – see the Reporting Web Service API guide.
     • Derived Credentials Notifications Listener – see the Derived Credentials Notifications Listener API guide.
     • SCEP API – see the Managing devices section in the Administration Guide.
     • MyID Verification Service – see the MyID Verification Service section in the Mobile Authentication guide.
     • Self-Service Request Portal Web Service – see the Derived Credentials Self-Service Request Portal guide.
   • MyID External Authentication Server – contains web services for use with external authentication. Select the following options:
     • ADFS Auth Web Service – see the Setting up the ADFS Auth web service section in the MyID Authentication Guide.
     • web.oauth2.ext – see the Setting up the standalone authentication service section in the MyID Authentication Guide.
   • Archive Database Server – contains a database that can contain an archive of some parts of the MyID database. Creating the database does not set up the archiving procedures; the Database configuration section in the Advanced Configuration Guide for details.
5. Select the features you want to add, then click Next.
6. Review the installation summary, then click Install.
7. Once you have completed the installation, restart the server.

8.4.1 Considerations for modifying your system

Once you have installed the MyID server, its installation configuration settings are preserved in the MSI database and the registry. Subsequent installer actions use these values; if the server configuration has been modified without the use of the installer, actions such as upgrade and update may fail.

In a scenario where you need to change the MyID server configuration, and you have already installed the MyID server components, you must run the installation program and select the Modify option. You may need to deselect features such as web and web services if, for example, you need to change the IIS configuration.

Once you have made your system configuration changes (for example, changing your IIS configuration), you can re-run the installation program, select the Modify option again, and re-add the required features. This ensures future updates or upgrades of the system will function correctly.

8.4.2 Known issues

• IKB-317 – Issue with modified installations

  For all 11.x versions of MyID before MyID 11.7, if you install MyID without the Web Server and Web Services Server features, then modify the installation to add these features, you will experience problems when attempting to update, upgrade, or uninstall MyID.

  If this error is encountered, it is present in the MSI log file. The IIS error causes an installer status of 1603.

  As a workaround, you can run the installation program to modify the system and remove the Web Server and Web Services Server features, at which point you can successfully carry out an uninstallation; you can then reinstall MyID with the required features, and subsequently carry out an update or upgrade.