How to Import the Commerce Server Template into the Security Configuration Wizard

Microsoft Windows Server Security Configuration Wizard (SCW) is an attack surface reduction tool. Use it with the Commerce Server 2009 SCW template to provide additional security for your deployment. 

You must install the Security Configuration Wizard before you import the Commerce Server template. After you install SCW and the Commerce Server template, you can run the Security Configuration Wizard (SCW.exe) and the Commerce Server 2009 extension will be included.

For complete documentation about the Security Configuration Wizard, see the Windows Server 2003 documentation or https://go.microsoft.com/fwlink/?LinkId=114097, or Security Configuration Wizard at https://go.microsoft.com/fwlink/?LinkId=114098 for Windows Server 2008.

If you are using Windows Server 2008 as your operating system, you must manually edit the file KBRegistration.xml in %windir%\security\msscw\kbs.

To install the Security Configuration Wizard

1. In Control Panel, double-click Add or Remove Programs.

2. In the Add or Remove Programs dialog box, in the left pane, click Add/Remove Windows Components.

3. On the Windows Components page, in the Components box, click Security Configuration Wizard, and then click Next.

4. On the Completing the Windows Components Wizard page, click Finish.

To import the Commerce Server template into SCW on Windows Server 2003

1. At the command line, locate the Commerce Server 2009 template in the %ProgramFiles%\Microsoft  Commerce Server 2009\Tools directory 

2. Copy CommerceSCWTemplate.xml to the %windir%\security\msscw\kbs directory.

3. Open the Command Prompt window and move to %windir%\security\msscw\kbs.

4. Run the following command:

   scwcmd register /kbname:Commerce2007 /kbfile:CommerceSCWTemplate.xml.

   This command registers the Commerce Server Template in SCW. It will also create Commerce2007.xml and Commerce2007loc.xml in %windir%\security\msscw\kbs.

To import the Commerce Server template into SCW on Windows Server 2008

1. Open the file %windir%\security\msscw\kbs\KBRegistration.xml for editing with any text editor, such as Notepad.

2. Create a new DynamicKB entry in this file for Commerce Server by creating the following element as a child of the SCWKBRegistration/Custom element:

   <DynamicKB Name="Commerce2007" FunctionName="CommerceServerKBFile" DLLPath="c:\Program Files\Microsoft Commerce Server 2007\fwsetup.dll" />
   

3. If you have installed Commerce Server to a different drive and/or directory, you must alter the path to fwsetup.dll.

4. Save the changes and close KBRegistration.xml.

   The following is an example of what the KBRegistration.xml file should look like after you register the Commerce Server template:

   <?xml version="1.0" encoding="utf-16"?>
   <SCWKBRegistration  OSMajorVersion="6"
                       OSMinorVersion="0"
                       ServicePackMajorVersion="1"
                       ServicePackMinorVersion="0" >
       <Core>
           <KB Name="IndependentRoles"/>
           <KB Name="CoreServer"/>
       </Core>
       <Custom>
           <DynamicKB Name="Commerce2007" FunctionName="CommerceServerKBFile" DLLPath="c:\Program Files\Microsoft Commerce Server 2007\fwsetup.dll" />
       </Custom>
   </SCWKBRegistration>
   

See Also

Other Resources

Securing the Deployment