EN
Español
English
Português
    Conserver Configuration

    « Installer Conserver

    ⚠ Important: The address IP or the name DNS server where the ConServer it must remain fixed.
    If the IP or the DNS change after installation, agents they will lose connectivity, being necessary Reinstall or reconfigure them to re-establish communication.


    1. During Conserver installation, if you keep the default path, the files will be saved in C:\Program Files\Aranda\Conserver. If you select a different path, the files will be in the location you define. Then, configure the file appsettings.json in the following way to communicate with the Repserver:

    Configuration path Description
    Serilog:MinimumLevel Used to set the minimum level of event logging for the Serilog log library.
    Serilog:WriteTo:0:Name Used to specify the first log target to be used for Serilog. The value “File” indicates that log events will be written to a file.
    Serilog:WriteTo:0:Args:path It is used to specify the path and name of the file where log events will be written.
    Serilog:WriteTo:0:Args:shared It is used to specify whether the log file should be shared by multiple processes or not.
    Serilog:WriteTo:0:Args:rollingInterval Used to specify the time interval at which new log files are created.
    Logging:LogLevel:Default It is used to set the default logging level for the Microsoft logging library.
    Services:ServerAddress Address where the Repserver is located.
    Services:CertificateSubject The name of the certificate that Conserver will use.
    Services:EnableProxy If you use Proxy, the enableProxy tag is enabled with a value of “true”.
    Services:ProxyAddress Proxy address.
    Services:ProxyUser Proxy User.
    Services:ProxyPassword Proxy password.
    Services:PrivateIp Identifier on the internal network of the Conserver, the IP must go.
    Services:PublicIp Identifier of the Conserver’s network from the outside, the IP must go. (In case it is not required, the same private address is placed).
    Services:MqttServerPort MQTT Communication port, by default is parameterized to “1884”.
    Services:MqttIp MQTT identifier on the internal network, the IP must go.
    Services:PublicServerPort Conserver’s public network communication port, by default “80” is parameterized.
    Services:PrivateServerPort Conserver private network communication port, by default “80” is parameterized.
    Services:MaxDistributionSleepMsPerThread -
    Services:MaxDistributionThreads These last two tags are used for the internal functioning of the system, they must be modified.
    Services:EnableSecurityPrivateIp Enables security validation for connections made using private IP addresses.
    Services:EnableSecurityPublicIp Enables security validation for connections made using public IP addresses.
    Services:SecondsPingRemoteServer Interval, in seconds, to check the availability of the remote server. 


    {
  "Serilog": {
    "Using": [ "Serilog.Sinks.File" ],
    "MinimumLevel": "Debug",
    "WriteTo": [
      {
        "Name": "File",
        "Args": {
          "path": "Logs\\Conserver-%COMPUTERNAME%.log",
          "shared": true,
          "rollingInterval": "Day",
          "retainedFileCountLimit": 7,
          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {Message:lj} {Properties:j}{NewLine}{Exception}"
        }
      }
    ]
  },
  "Logging": {
    "LogLevel": {
      "Default": "Information",
      "Microsoft": "Warning",
      "Microsoft.Hosting.Lifetime": "Warning",
      "Quartz": "Warning",
      "System.Net.Http.HttpClient": "Warning"
    }
  },
  "Services": {
    "ServerAddress": "",
    "CertificateSubject": "",
    "EnableProxy": false,
    "ProxyAddress": "",
    "ProxyUser": "",
    "ProxyPassword": "",
    "PrivateIp": "",
    "PublicIp": "",
    "MqttServerPort": 1884,
    "MqttIp": "",
    "PrivateServerPort": 80,
    "PublicServerPort": 80,
    "MaxDistributionSleepMsPerThread": 8,
    "MaxDistributionThreads": 4,
    "EnableSecurityPrivateIp": false,
    "EnableSecurityPublicIp": false,
    "SecondsPingRemoteServer": 60
  }
}


    2. Start the service Aranda Conserver V9, to allow communication with the Repserver.


    —

    Configuring the Server to receive requests over HTTPS

    To configure the Server to receive requests over HTTPS, HTTPS must be enabled in the IIS with the proper certificate.

    Important to secure any additional hostnames using SNI.

    IP address: select “All unassigned”.


    IIS environment with SSL certificate

    When your environment already has IIS and an SSL certificate installed, configure the file settings appsettings.json as follows:

    Parameter Value Description
    Services:ServerAddress https://<repserver> Address of the Repserver.
    Services:CertificateSubject <nombre del certificado> The name of the SSL certificate that will be used by the Conserver.
    Services:EnableProxy false It is enabled only if proxy is used in the environment.
    Services:PrivateIp <hostname> Hostname or private IP of the Conserver.
    Services:PublicIp <hostname> Hostname or public IP of the Conserver.
    Services:MqttServerPort 1884 MQTT communication port (default 1884).
    Services:MqttIp <hostname> Name of the host or IP where MQTT is located.
    Services:PrivateServerPort 443 Secure communication port on private network (HTTPS).
    Services:PublicServerPort 443 Secure communication port on the public network (HTTPS).
    Services:MaxDistributionSleepMsPerThread 8 Internal system parameter.
    Services:MaxDistributionThreads 4 Internal system parameter.
    Services:EnableSecurityPrivateIp true Enables security validation for private network connections.
    Services:EnableSecurityPublicIp true Enables security validation for public network connections.
    Services:SecondsPingRemoteServer 60 Interval in seconds to check remote server availability.


    JSON configuration example:

    {
  "Serilog": {
    "Using": [ "Serilog.Sinks.File" ],
    "MinimumLevel": "Information",
    "WriteTo": [
      {
        "Name": "File",
        "Args": {
          "path": "Logs\\Conserver-%COMPUTERNAME%.log",
          "shared": true,
          "rollingInterval": "Day",
          "retainedFileCountLimit": 7,
          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {Message:lj} {Properties:j}{NewLine}{Exception}"
        }
      }
    ]
  },
  "Logging": {
    "LogLevel": {
      "Default": "Information",
      "Microsoft": "Warning",
      "Microsoft.Hosting.Lifetime": "Warning",
      "Quartz": "Warning",
      "System.Net.Http.HttpClient": "Warning"
    }
  },
  "Services": {
    "ServerAddress": "<https://<repserver>",
    "CertificateSubject": "",
    "EnableProxy": false,
    "ProxyAddress": "",
    "ProxyUser": "",
    "ProxyPassword": "",
    "PrivateIp": "<hostnamePrivate>",
    "PublicIp": "<hostnamePublic>",
    "MqttServerPort": 1884,
    "MqttIp": "<hostnameMQTT>",
    "PrivateServerPort": 443,
    "PublicServerPort": 443,
    "MaxDistributionSleepMsPerThread": 8,
    "MaxDistributionThreads": 4,
    "EnableSecurityPrivateIp": true,
    "EnableSecurityPublicIp": true,
    "SecondsPingRemoteServer": 60
  }
}


    ⚠ Important: HTTPS traffic will be handled entirely through IIS. A valid SSL certificate must be associated with the Conserver website in IIS, and the ports PrivateServerPort and PublicServerPort should be set to 443 to establish secure communication. The parameters EnableSecurityPrivateIp and EnableSecurityPublicIp must be set to true to ensure security validation. If IIS is already using port 443 and connectivity testing is required, it may need to be temporarily released according to the procedure defined by the organization.


    Environment without IIS and with certificate

    When the environment does not have IIS installed, the Conserver will directly handle secure communication. In this case, keep the configuration as described in the initial section of this document, using the default ports and parameters:

    • PrivateServerPort: 443 (or the port configured for the private network).
    • PublicServerPort: 443 (or the port configured for the public network).
    • EnableSecurityPrivateIp: true (adjustment according to the organization’s security policy).
    • EnableSecurityPublicIp: true (adjustment according to the organization’s security policy).

    Example of JSON configuration for non-IIS and certified environment:

    {
  "Serilog": {
    "Using": [ "Serilog.Sinks.File" ],
    "MinimumLevel": "Information",
    "WriteTo": [
      {
        "Name": "File",
        "Args": {
          "path": "Logs\\Conserver-%COMPUTERNAME%.log",
          "shared": true,
          "rollingInterval": "Day",
          "retainedFileCountLimit": 7,
          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {Message:lj} {Properties:j}{NewLine}{Exception}"
        }
      }
    ]
  },
  "Logging": {
    "LogLevel": {
      "Default": "Information",
      "Microsoft": "Warning",
      "Microsoft.Hosting.Lifetime": "Warning",
      "Quartz": "Warning",
      "System.Net.Http.HttpClient": "Warning"
    }
  },
  "Services": {
    "ServerAddress": "",
    "CertificateSubject": "Nombre_certificado",
    "EnableProxy": false,
    "ProxyAddress": "",
    "ProxyUser": "",
    "ProxyPassword": "",
    "PrivateIp": "",
    "PublicIp": "",
    "MqttServerPort": 1884,
    "MqttIp": "",
    "PrivateServerPort": 443,
    "PublicServerPort": 443,
    "MaxDistributionSleepMsPerThread": 8,
    "MaxDistributionThreads": 4,
    "EnableSecurityPrivateIp": true,
    "EnableSecurityPublicIp": true,
    "SecondsPingRemoteServer": 60
  }
}


    « Installer Conserver