1. Tyler Technologies presents: What you need to know about upcoming changes to your New World ERP technical environment in
Mike Adnson | Launch Manager, ERP Development
Ray Mah | Architect, ERP Development

2. Certificate Requirements in 2018.1 Tyler Identity Hub
Agenda
Browser Support
Certificate Requirements in
Tyler Identity
Hub
Security changes in New World ERP
Server environments

3. Browser Support
The more, the better!

4. The following browsers are support in New World ERP 2018.1 Edge Chrome
Browser Support
The following browsers are support in New World ERP
Edge
Chrome
Safari (Mac)
Firefox
Internet Explorer 11
- The above browsers are still supported in eSuite
- For best performance, we recommend Chrome or Edge
- Microsoft has ceased development of IE 11 and is replacing it with Edge

5. Certificate Requirements
Certificates for use with SSL/TLS protocols

6. Digital Certificates
“An SSL Certificate (Secure Sockets Layer), also called a Digital Certificate, creates a secure link between a website and a visitor's browser. By ensuring that all data passed between the two remains private and secure….”
SOURCE: Network Solutions – What is an SSL Certificate
Creates a secure link between a website and a visitor’s browser

7. 2018.1 Digital Certificates are required in 2018.1
Support for certificates available now!
Talk to your certificate vendor!
Self-Signed = Not Supported
2048 bit length +
Client and Server Authentication
Sha-2 +
Digital Cert:
Must have certificates in Required 2048 bit length
Chrome will complain about SHA1 algorithm.
Support:
You can install them now.
Don’t wait:
Run it in TEST first!
Just link the MIU.
ALWAYS DO IT IN TEST FIRST!
Always test in test.
SSL Configuration Tool
Talk to your vendor:
Your vendor will have instructions on how to get it added to the server.

8. Success Issues The GOOD! Client and Server Authentication
2048+ Bit Length
Resolves in DNS
Bound properly to 443 in IIS
Client and Server Authentication
See the lock and how the address bar is NOT red? This tells you the URL matches the certificate.
Here is where your DNS must match the certificate name
This Photo by Unknown Author is licensed under CC BY-SA

9. The bad
Success
Issues
May not resolve in DNS
May not be bit length
Does it also have Client Authentication?
Part of the correct Cert Stores in MMC?
Bound properly in IIS
This MAY still work but your employees will need to click extra items.
You may have get more calls from employees asking what’s up?
Within the software, using FQDN that produce errors in browsers will cause the software to fail as well

10. Your own authority? Acceptable and how we run internally at Tyler
Client and Server Authentication required

11. What is it and why do I need it?
Tyler Identity
What is it and why do I need it?

12. New application for authentication Single sign-on Separate Install
What is Tyler Identity?
New application for authentication
Single sign-on
Separate Install
Benefits
User authentication that allows for single sign-on with other Tyler applications
Separate application requiring its own installation
Benefits
Additional password policies
Forgot password process
User verification
Single sign-on
Hub
Tyler Content Manager (future)
Energov (future)
Executime (future)

13. Tyler Identity – Impact to End Users
New sign-in page

14. Tyler Identity – Impact to End Users
Tyler Identity web page used for password maintenance

15. Tyler Identity – Password Options (Non-AD)
Tyler Identity web page used for password maintenance

16. Tyler Identity – Email Notifications
Tyler Identity web page used for password maintenance

17. Tyler Identity – Impact to Administrators
Add a new user in NWERP is slightly different
User migration
Add a new user in NWERP is slightly different
No password set when user is created
User migration
Preparing for migration: add a unique address to all active users

18. Tyler Identity – Impact to Administrators (AD)
Find button still there
Find the user from AD on creation, adds them to TID
Add a new user in NWERP is slightly different
No password set when user is created
User migration
Preparing for migration: add a unique address to all active users

19. Tyler Identity – Migration
One-time, simple interface
Simulation or live mode
Copy existing users from ERP to TID
Add a new user in NWERP is slightly different
No password set when user is created
User migration
Preparing for migration: add a unique address to all active users

20. Common Identity Install Issues
Ensure you install Identity before New World ERP
Have your certs applied to the servers in IIS and working in DNS before install
Certificate should be in the personal store. For direction, see your vendor’s deployment instructions.
Checking into too many stores can break the chain
In the Identity installer, use the cert name in the FQDN field (Whatever resolves)

21. Security Enhancements

22. Added a “forgot username” process in HR Portal
eSuite
Added a “forgot username” process in HR Portal
Utilities users now required to register for an account
Admin site users are now required to have an address

23. Tyler Identity integration Excel add-ins
NWERP
Tyler Identity integration
Excel add-ins
Budget
UDF mass update
Revenue collections receipt void process also uses Tyler Identity authentication

24. Resetting ERP Passwords
Login Page
Configurable
Instructions here

25. Resetting ERP Passwords
From inside the software
Click profile bubble > My Settings

26. Tyler Identity integration Can now use AD account in myInspections app

27. NWERP About page is now secured
There was enough information here to make our penetration testers nervous. (Yes we do that!)

28. What is it and why do I need it?
Tyler Hub
What is it and why do I need it?

29. What is Tyler Hub? Included in maintenance
High level data visualization
Monitoring and alerting
SSO with NWERP
Optional separate installation through Octopus deploy
High level data visualization
similar to DSS Dashboards
Monitoring and alerting
These are items that may require actions
Single Sign-on along with NW ERP via Tyler Identity
Optional install

30. Server Environments

31. Current Hardware Configuration
3 server setup

32. Recommended Configuration
If you have other tyler products, we recommend that all of those items run on the Common server.
This is not required. You can run it on the NW ERP App server (more RAM my be required)

33. 1 more required application (Tyler Identity) Optional Tyler Apps
Flexibility in
1 more required application (Tyler Identity)
Optional Tyler Apps
Could use one server for everything (stack your RAM)
Review the installation guide prior to upgrading.
Backup the new Identity and Hub databases in maintenance.
1 more required application (Tyler Identity)
Optional Apps (Tyler Hub, Tyler Content Manager, Tyler Forms, etc.)
With enough resources (CPU, memory) one server for everything is still possible
Review the installation guide prior to upgrading.

34. 2018.1 Installer Odds and Ends
CD installer no longer required (unless you have myInspections)
Elastic Search + Java upgraded as pre-req to ERP install
Erlang and RabbitMQ remain at prior versions.
Patches continue to come through the MIU.
Patch at upgrade time to the highest level available
Help is no longer installed internally
Help Central

35. Event Viewer Changes
Consolidated to one log.
Change the size to get more events.

36. Questions?