Ecrion 12.0 (Nido) Sysadmin Guide
Getting Started
Overview
About Ecrion Platform
Ecrion provides a complete, end-to-end customer communication management solution that integrates every process involved in the creation of professional documents into a smart unified and easy-to-use platform.
Audience
This guide is designed to help system administrators to set up, configure and utilize the Ecrion Platform.
The System Administrator Guide is the primary source to follow when you start using the Ecrion Platform. This guide will help you understand how to configure various settings within Ecrion Platform.
Resources
After your platform is ready to be used, access the User Guide to learn how to add users, produce documents and use all the other features provided by Ecrion or visit Developer Guide to build an application that works with Ecrion Platform.
Contact Us
If you encounter any issue while using the Ecrion Platform, do not hesitate to contact us, at support@ecrion.com.
System Overview
Components
Ecrion Platform contains the following components:

- Enterprise Website: An Ecrion Website that provides access to the enterprise users to work with all the important Ecrion features. It is installed as a website on IIS. By default, the port number associated with the website is
8094. - System Administrator Website: An Ecrion Website that provides access to the system administrators to manage environments or domain. It is installed as a website on IIS. By default, the port number associated with the website is
8095. - Customer Portal Website: An Ecrion Website that provides access to your customers from where they can see all individual documents. It is installed as a website on IIS. By default, the port number associated with the website is
8096. - Ecrion Publishing Engine: A server component that performs XML/JSON conversion to various output formats. It is installed as a service on Windows Services.
- Ecrion Data Engine: A server component that performs data aggregation from multiple data sources. It is installed as a service on Windows Services.
- Ecrion Analytics Engine: A server component used to create dashboards and digital experience documents. It is installed as a service on Windows Services.
- Backend Services: Backend Services involves different windows services for jobs, schedules, triggers.
- Storage Engine: Repository for all documents and files within Ecrion Platform.
- Search Engine: An Ecrion component that allows administrators to enable the search feature across environments.
- Licensing Engine: An Ecrion component that allows administrators to manage Ecrion product keys.
Files&Folders
System files for Ecrion solution are placed in the following locations:
Application Installation Folder
This is where the product is installed. The installation directory contains all the binaries for the websites, backend services or components.
In a default installation, this is C:\Program Files\Ecrion\<Product Name>.
Application Data Folder
This directory contains the configuration files for the Ecrion Components. In a default installation, the configuration files are located under C:\ProgramData\Ecrion.
Main Configuration File
The main configuration file is EOS4.config and is loaded on start-up by all websites and main Ecrion Service (Ecrion Omni System 4 Service). It contains system settings which enable additional functionalities, such as distributed configurations and high availability. Any changes made to the main configuration file require a restart of both the main Ecrion Service (e.g. from Windows\Task Manager\Services) and websites (e.g. using iisreset).
The configuration file location is %Application_Data%\Ecrion\EOS4.config.
By default, you will notice that inside the config file you can find the IP Addresses and port numbers of all Ecrion Services and Websites. All of the IP Values mentioned throughout should be taken to mean “the IP through which this service can be accessed”. Usually, this is the intranet IP of the machine hosting the component. If a component is load balanced, then it’s the IP of the load balancer. Essentially, if someone were to specify all IPs explicitly on each machine, the list of IPs should be the same across all the machines.
To change the default values, you will need to log in as a system administrator and navigate the Domain Settings:
- To change Ecrion Website values, visit the URLs section.
- To change Ecrion Services values, visit the Services section.
Components Configuration Files
Publishing, Data, and Analytics services have separate configuration files named the same as the corresponding executable and located in the Application Data folder, respectively:
- Ecrion Publishing Engine:
- Configuration File:
PublisherSvc.config - Configuration File Location:
%Application_Data%\Ecrion\PublisherSvc.config
- Configuration File:
- Ecrion Data Engine:
- Configuration File:
DASSvc.config - Configuration File Location:
%Application_Data%\Ecrion\DASSvc.config
- Configuration File:
- Ecrion Analytics Engine:
- Configuration File:
BISvc.config - Configuration File Location:
%Application_Data%\Ecrion\BISvc.config
- Configuration File:
Any changes made to the configuration files require a restart of the associated service, from Windows Task Manager.
Domain
An Ecrion system is comprised of three entities: domain, environment, and workspace.
Ecrion Solution provides the following hierarchy:
- The Ecrion domain contains one or more environments
- Each environment contains one or more workspaces.

The domain refers to the entire Ecrion Platform setup - it is the top-level node. An installation of Ecrion Software, whether it's across one or multiple machines, will contain a single domain.
Note
There is no way to add multiple domains other than having separate Ecrion full instance installations with no connection to each other.
Environments
The domain contains multiple environments, each with its own set of users and features. An environment may be necessary for your organization in order to provide a sequential structure for your projects management needs. This is also where enterprise users log into and perform all of their work.
The purpose of environments is to have completely separate Ecrion instances within the same installation, which may be useful in some scenarios. Here are some examples of when you might consider multiple environments:
- DTAP (or similar) setups – a different environment for each stage of a development process (Development, Testing, Acceptance, Production);
- These environments are more or less clones of each other, with projects being worked on in Development, then being published through Testing, Acceptance and eventually Production.
- In this type of scenario, a user will likely have access to multiple environments.
- For performance and stability reasons, it’s highly recommended that the Production environment is part of a different Ecrion domain/installation altogether.
- Multi-tenant setups – a different environment for each customer (or “tenant”)
- This type of setup is intended to separate your customers into their own environments because it doesn’t make sense for any overlap to exist;
- A good practice is to give each user an account with their corporate email as the username; this way, customers will be naturally separated: @company1.com to the Company1 environment, @company2.com to the Company2 environment, etc.
- Built-in Ecrion authentication is recommended for this type of setup.
- Single purpose environments – a “one-off” environment to try a specific feature, perform a demo or a training session.
- Creating a new environment for trying out a new feature allows you to properly isolate your work from other operations being performed on the server.
Workspaces
Workspaces are subdivisions of an environment, containing files, jobs, and settings. They are only visible in the Enterprise Home website, to enterprise users logged into an environment.
The purpose of workspaces is to allow you to better organize your assets into meaningful categories, e.g. per department. You can also assign different permissions to workspaces so that certain users or groups will only see the workspaces you allow them to see.
Workspaces mostly act as top-level folders, however, there are subtle differences. To determine a file, a workspace and a path within that workspace must be provided – the workspace name is not a part of the path, but a different parameter altogether. This pattern rings true for other assets: jobs require a job ID and workspace name, tasks require a task ID and workspace name, etc.
Communications are a special case: while defined at the environment level, each communication references a workflow file internally, which belongs to a specific project. Furthermore, a communication will only depend on its workflow’s (static) dependencies, which must also belong to that same workspace, thus indirectly associating the communication with a single workspace. This means workspace permissions will affect which communications a user can effectively run, which is why the following security rule is enforced: if a user does not have access to a workspace, then communications referencing that workspace cannot be seen by that user.
In-place review and approval for assets is also enforced at the workspace level, meaning that all the assets in that workspace will be subject to the configured review and approval workflow – except for the workflow file itself, which by design must also belong to that workspace.
Lastly, workspaces may only be created by environment admins and will, by default, only be visible to other admins. Permissions may be set so that other users/groups can see or even manage that workspace. When a user has Manage rights to a workspace, they will have full control over that workspace, regardless of any permission enforced on individual assets.
You can read more information about Workspaces in the Ecrion User Guide.
Licensing
Product Keys
Ecrion solutions cannot be used until they have been licensed. When you download and install the Ecrion platform, you are given the rights to use it through the product keys you have purchased. Each product key dictates what features or components are available and how long can it be used.
Ecrion offers two types of licenses: server-side licenses or environment-based licenses.
Server-side licenses can be installed and managed from the Sysadmin Website, under the Licensing page. These incorporate users access to multiple Ecrion features or components. For example, for a full instance of Ecrion platform, you will have to request from your Account Executive four product keys, one for the Ecrion Platform features (providing access to multiple functionalities, such as communications, forms, customer portal, channels, etc.) and other three product keys for the Ecrion native engines, representing the Publishing Engine, Data Engine or Analytics Engine.
The server-side licenses can be further divided into volume-based keys or CPU-based keys. Volume-based product keys are tailored to the size of the assets you want to generate within the Ecrion Platform. CPU-based product keys come with limits to the number of CPU cores that are available.
Multiple Ecrion Components can use the same product key, but they will share the product key limits. For example, a Publishing Engine license with limits for Page Count restrict to 1000 pages can be shared by two Publishing Engine workers installed on two separate machines. Both workers can generate documents until the 1000 pages limit is reached by one of the servers. In the same way, a Publishing Engine license with limits of 16 LCPU can be used to activate 4 Publishing Engine workers running on 4 separate machines with 4 LCPU each.
Environment-based licenses can be installed and managed from the Enterprise Website. These provide access to the Ecrion Studio tools. To learn how to install and use these types of licenses, please visit the Licensing chapter from the Ecrion User Guide.
Vault Licenses
Before being able to take advantage of the Ecrion Vault microservice, a valid license must be installed. The Microservice Vault key have to be installed within the Licensing tab of the Sysadmin website. You can also check your existing licenses by logging in to your Ecrion account. In order to obtain a Microservice Vault license, please contact your Customer Success Executive, or send us an email, at support@ecrion.com .
Licensing Server
In distributed environments, in order to license individual remote domain components, you need to configure the domain licensing server for each component.
For Ecrion components, access the Domain Services page from the Sysadmin Website. Then, click on the IP Address next to Licensing Services and add the address and port number of the server that hosts the Ecrion Licensing component.
For individual engine components (Publishing Engine, Data Engine or Analytics Engine), open the Management Console tool, access Engine Settings\Miscellaneous of the needed engine and update the Licensing Server Address parameter with the correct IP Address.
Notification Services
For volume-based product keys, Ecrion provides the Notification Service tool useful to track the volume counter. It enables system administrators to receive e-mail notifications when the product key’s counter is close to reaching its maximum value, based on the selection from the drop-down.
By default, the Ecrion services will send email notifications every day, a week before the licenses would be expired.
Before configuring the Notification Services, you must ensure the following:
- A valid email address is set up at least for one of the Ecrion Sysadmins.
- An operational SMTP connection is configured on the Ecrion Domain.
Configuring Notification Services
- Sign in to the Sysadmin Website and access the
Licensingtab. - Click on the
Configure Notifications Servicebutton. - Select a percent from the drop-down list. When the value from the drop-down will be overcome, the Ecrion Platform will start sending email alerts. For example, for a Publishing Engine key with PageCount equal to 100, and the Notification Service set to 50%, Ecrion will notify you when Page Count reaches 50 pages.
- Once you're ready, select
Finish.
Install
In this section, you can learn how to install server-side licenses within the System Administrator website.
Online Installation
If your server has an Internet connection, we recommend using Online Installation for your product keys. Below you can find step by step instructions on how to install a product key online.
- Sign in to the Sysadmin website and access the
Licensingtile. - In the Product Keys page, click on the
Sign-inbutton.
- Next, enter your Ecrion Account credentials and select
Sign-in. Notice the green mark that indicates that you are connected with your Ecrion account.
- Once you are connected to the Ecrion Account, select the
+Add Licensebutton, at the top-right hand-side.
-
Within the Add Keys dialog, select the keys you want to install, then click on the
Install licensesbutton.
-
Your product key(s) is now installed and ready to use on your Ecrion Domain.
Offline Installation
If your server is offline or cannot otherwise communicate with our licensing server, you can use Offline Installation. Below you can find step by step instructions on how to install a product key offline.
- Sign in to the Sysadmin website and access the
Licensingtile. - Select the
+Add Licensebutton, at the top-right hand-side.
- In the Add Key dialog, copy the string generated in the Step 1 box.

- Next, in a web browser, access your Ecrion account, then select the corresponding
Key Idfrom the Product Keys tab.
- In the license dialog, select the
Install Product Keybutton, paste the string into theActivation Keybox, then clickInstall.
-
Next, copy the activation string, then go to your Ecrion domain page and paste the string into the Step 2 box. Once you're ready, select
Finish.
-
Your product key(s) is now installed and ready to use on your Ecrion Domain.
Notice the Product Keys page that displays meaningful information about your product keys, such as the date on which the license has been activated, the date until the key can be used or usage statics about CPU or utilized volume.

Uninstall
The uninstall process is very similar to the install process, providing both, an online and offline method.
Online Uninstallation
- In the Product Keys page of the Sysadmin Website, find the product key you want to uninstall, then click the
Deletebutton next to its name.
- Next, you will be prompted to confirm your selection.

Your product key is now uninstalled from your Ecrion Domain.
Offline Uninstallation
- In the Product Keys page of the Sysadmin Website, select the
Deletebutton next to the product key you want to uninstall.
- If Ecrion Platform is not synchronized with Ecrion Account, you will be switched to the Offline Uninstallation. It will provide an uninstall key which you need to copy and use on the account website.

- Next, sign in to your Ecrion Acount, find the license that you are uninstalling and click its
Key IDin the list.
-
In the opened dialog, select
Uninstall Product Keyand paste the string in the empty box, copied at point 2. ClickUninstallto complete the process. Note that if you skip this step, the product key will continue to appear as being used and you cannot install it on another machine unless manually freed by Ecrion Support.
-
Your product key is now uninstalled from your Ecrion Domain.
System Configuration
System Administrators
Ecrion Domain contains its own system-wide users called system administrators, or sysadmins. These users have full access to the System Administration website, giving them the following permissions:
- Create, edit or delete environments.
- Create, edit or delete users with full access within any environment (also called environment admins).
- Change domain-level settings.
Sysadmins cannot directly log into any environment; however, they can easily gain access to it by creating a new environment admin for that environment. This is because there is no overlap between sysadmin users (stored at the domain level) and regular users (stored at the environment level).
During the software installation, a default username called sysadmin with the password sysadmin is added to the system. For the first login to Ecrion Platform, you will have to use these credentials.
Note
At the first sign in, you will be prompted to change the default password, that will help you ensure security across Ecrion domain.
To add other system administrators:
- Sign in to the Sysadmin Website and select the
Userstile. - Select the
New Userbutton, at the top-right corner. - Fill in the form fields. You will have to enter:
- A unique
usernamefor the domain administrator to use when signing in. - A strong and secure
password. - A valid
e-mail addressfor the administrator. All e-mails from the system will be sent to this address.
- A unique
- Once you're ready, select Ok.

The system administrator will appear on your Users page.
Environments
Creating a new environment
- Sign in to the Sysadmin Website and select the
Environmentstile. From Environments, you can view or manage all existing environments. - Select the
New environmentbutton, at the top-right corner of the Environments page. - Within the New Environment dialog, fill in the form with the mandatory fields:
- A unique name for the environment.
- Username and Password for the environment administrator. An administrator can administer multiple environments.
- An e-mail address.
- Once you're ready, select
Create.

The Edit Environment dialog will appear on your screen from where you can either navigate through tabs to start editing environment settings, either select Ok to configure it later.
Initializing the new environment
Enabling Environments
By default, each new environment is enabled. To enable or disable an environment, go to the Environments page.
- To enable, check the
Enabledoption, next to the environment you want to edit. - To disable, uncheck the
Enabledoption, next to the environment you want to edit.

Sending Welcome E-Mails
When a new user is added to an environment, you may want to send them a friendly welcome e-mail to notify it about their new Ecrion account. Within Ecrion Platform, you can use automation to send or not welcome e-mails to new users, based on your necessities. For each environment, the Sysadmin Website provides an option for the domain administrator users to enable or disable welcome e-mails for the new users created.
To enable/disable welcome e-mails, go to the Environments page and access the environment you want to edit.
- To enable, check the
Send welcome email when user is createdoption. - To disable, uncheck the
Send welcome email when user is createdoption.

Note
Sending welcome e-mails require a valid and working e-mail connection within Sysadmin Website. To configure an e-mail connection, please visit the E-mail chapter of this guide.
Enabling Environment Modules
Functionalities in Ecrion Solution are grouped and placed in modules so you can easily select the desired module to access all applicable features available to you. To gain access to each module, you will need to visit the Enterprise Website and choose from the list available under the Ecrion Platform welcome page.
Note
By default, we recommend keeping the environment modules to a minimum, based on your organization needs, as they use system resources. If your company decide to use other features, you can enable the modules later. For more information, please contact the Ecrion Technical Support, at support@ecrion.com, to establish the modules you might need to enable.
To enable/disable an environment module:
- Sign in to the Sysadmin Website and select the
Environmentstile. - Select the environment you want to edit from the Environments page.
- Next, access the
Environmenttab from the Edit Environment dialog. From the Environment tab, you can view a list with all the environment modules available. Check/Uncheck the module(s) you want to use for the selected environment.

Note
Environments modules highly depend on the Ecrion Product Keys you have installed. If you are not able to see all the Ecrion modules, please contact your account manager.
Setting Up Environment Administrators
The first user created during the environment creation is mandatory. It is created along with the environment and it is also called environment administrator. Environment admins have unlimited permissions in their own environment. By design, it’s impossible to enforce restrictions on an environment admin within the environment they are managing.
Environment Admins are the only users who have access to the Admin page of the Enterprise Website, as they by default, are included in the Administrators group that has Manage Environment permissions.
Environment admins can also manage access and publish assets to the Customer Portal website, change the accounts and customers schema, design new communications and share them (with enterprise users or customers).
To set up new administrators for an environment:
- Access the Environments page and select the environment you want to edit.
- Go to the
Administratorstab in the Edit Environment dialog. The Administrators tab will display the existing administrators and their last login, and also allows you to enable/disable one admin or reset the password. - To create a new environment administrator, select the
+Newbutton. - In the Configure Admin dialog, fill in the mandatory fields:
- Select the Authentication type: EOS Authentication or Windows Authentication.
- An admin username and a password, respectively the domain admin user.
- An e-mail address.
- Once you're ready, select
Create.
The admin user will appear now on your Administrators list.
Authentication
Authentication is the process through which system administrators grant a user access to the Ecrion Platform. Authentication to the Ecrion Enterprise Website can be accomplished in different ways, such as built-in users created through the Ecrion Platform, using an external system that stores user's credentials, such as Active Directory or accessing Ecrion Platform through Single Sign-On.
Users can log in to the Enterprise Website using one of the following methods:
Ecrion Authentication
This type of authentication contains all the Ecrion Platform built-in users created by an environment administrator.
To add a new user to the Enterprise Website:
- Sign in to the Enterprise Website and access the
Adminmodule. - Select the
Userstab. - Click the
+New Userbutton, at the upper-right side. - For each user, you will have to provide an e-mail address, username and password. Optionally, you can enable or disable the user, add the user to groups or provide different permissions. Please visit the Users and Groups section of the Ecrion User Guide to learn more about Users and Groups.
Active Directory Authentication
One of the most common ways to authenticate to Ecrion Platform is by using Active Directory users. This allows your users to use the same credentials to log in to the Ecrion Platform as they use with their computer or other services, and also allows you to keep all information in a central location, preventing you for losing data. When a user signs in using an Active Directory, Ecrion will validate their username and password through the Windows principles in the operating system. If you intend to share environments between users, using an external system to store user credentials, such as Active Directory is a good practice.
Using Active Directory users with Ecrion requires you to enable the Use Active Directory to authenticate users option available in the Domain\Authentication page of the Ecrion Sysadmin Website.
Enable Active Directory
- Login to the Sysadmin Website.
- Access the
Domainmodule from the Welcome page. - Select
Authenticationunder the Settings section. - Enable the
Use Active Directory to authenticate usersoption.
Note
Subsequent changes to the AD user or to the Group permissions in Ecrion Platform will require the user to re-login to apply the new properties.
Single Sign-On
Single Sign-On (SSO) is an authentication process that allows users to enter one set of credentials and access multiple applications. The process authenticates the user for all the applications they have been given rights to and eliminates further prompts when they switch applications during a session.
An Ecrion environment can be configured to use:
Single Sign-On using Windows Authentication
Windows SSO uses the Active Directory user that is currently logged into the computer to access the Ecrion Platform. The same authorization and synchronization principles described in the Authentication using Active Directory are applicable for Windows SSO.
Configuration
To use Windows Authentication, you will need to make the following settings in IIS Manager:
- From the Connection Tree View, navigate to the Ecrion Website that you wish to enable windows authentication.
- Double click on the Configuration Editor button, under the Management section.

- From the Configuration Editor dialog, select
system.Webserver\security\authentication\windowsAuthentication
- Unlock the configuration by selecting the
UnlockSection button.
- Change the value of the enabled property to True.

- Repeat the steps from above to unlock configuration for the anonymousAuthentication property, as well:
- From the Configuration Editor dialog, select
System.Webserver\security\authentication\anonymousAuthentication - Unlock the configuration by selecting Unlock Section
- Make sure that the enabled property is set to true.
- From the Configuration Editor dialog, select
Note
Windows Authentication within Ecrion Platform uses Kerberos authentication. Kerberos authentication requires having set a Service Principal Name for IIS Server.
To check what SPN is registered, you can run the following command on the AD Machine:
SetSpn -L
If you need to set a new SPN, you can read more information here.
Login
To log in to Enterprise Website with windows authentication, you need to access the following URL:
{Enterprise_Website_URL_and_Port_Number}/windows/login?environment={environmentName}
Single Sign-On using SAML or WS-Fed
Single Sign-On consists of using a single set of credentials to log into multiple applications. Setting up the Single Sign-On solution in Ecrion Platform, provides authorized access to users through a simple and easy process. Ecrion comes with a friendly setup assistant and a series of well-defined steps for Single Sign-On configurations. The Single Sign-On process can be enabled either for Ecrion Enterprise users, either for Customer Portal users.
Ecrion Platform acts as a service provider(SP) for SSO. When setting up SSO, a trusted relationship between the Identity Provider and the Ecrion Platform will be created. This enables users to authenticate to the Identity Provider website, then access Ecrion Solutions in a secured way.

Ecrion offers two ways to use Single Sign-On:
- SSO with Security Assertion Markup language (SAML 2.0)
- SSO with Web Services Federation (WS-Federation)
In a nutshell, setting up a Single Sign-On connection through Ecrion involves the following steps:
- Set up your Identity Provider using Ecrion Information.
- Configure Ecrion Single Sign-On using information received from your IdP.
- Verify the Single Sign-On configuration.
Single Sign-On using SAML
-
When you set up the Single Sign-On connection with SAML protocol, you will have to provide to your IdP the following information:
ACS URL This indicates the location to which the SSO Tokens will be sent. Access the Single Sign-On dialog wizard, go to the Setup IDPstep and select Copy to Clipboard, next to the ACS URL box, then forward the link to your IdP. For example, the link should like this:https://EcrionServer:PortNumber/Security/ConsumeSAMLToken?environment=EnvironmentNameSingle LogOut When the Single Sign-On is enabled, logging out from Ecrion Website will bring users back to their Ecrion login page. To enable log out, the Single Logout URL that needs to be configured should look like this: http://ecrionserver:8094/Security/LogOut -
Once the Identity Provider has finished configuration of the Single Sign-On process, to create the setup within Ecrion Enterprise Website, you will have to follow the SSO wizard provided by Ecrion. For more details, please visit the Single Sign-On page from the Ecrion User Guide to learn how to configure it.
-
Once the configuration is ready on both sides, open a web browser and navigate to the Single Sign-On URL. It should look like this:
http://EcrionServer:PortNumber/security/login?environmentName=envName
You will be redirected to the IdP Sign-in page. Log in using your IdP credentials. If everything is working properly, you will be redirected to the Ecrion Enterprise Website.
Setting Up SSO with WS-Federation
-
Setting up the Single Sign-On with WS-Federation protocol, will require to work with you your Identity Provider to create a relying party trust connection. While creating the Relying Party Trust, you will have to forward the following information to your IdP:
ACS URL This indicates the location to which the SSO Tokens will be sent. Access the Single Sign-On dialog wizard, go to the Setup IDPstep and select Copy to Clipboard, next to the ACS URL box, then forward the link to your IdP. For example, the link should like this:http://EcrionServer:PortNumber/Security/ConsumeSAMLToken?environment=EnvironmentNameEcrion URL If you want to enable Single Sign-On for Enterprise Users, you will have to provide the Enterprise Website URL to your IdP.
If you want to enable Single Sign-On for Customer Portal Users, you will have to provide the Customer Portal Website URL to your IdP. -
Update the Ecrion web.config file:
Go to the Ecrion Installation folder (Web.config file. The file needs to be updated as follows:
a. Comment the <customErrors> lines:
<customErrors mode="On" defaultRedirect="~/Error">
<error redirect="~/Error/NotFound" statusCode="404"/>
<error redirect="~/Error/InternalServer" statusCode="500"/>
</customErrors>
b. At the end of the configuration file, add the system.IdentityModel, as follows. Note that it should be included between the </runtime> and </configuration> tags.
<system.identityModel>
<identityConfiguration>
<audienceUris>
<!--The value indicates the URL to the Ecrion Website on which you enabled Single Sign-On (Enterprise or Customer Portal)-->
<add value="https://ecrionserver:portnumber" />
</audienceUris>
<certificateValidation certificateValidationMode="None" />
<issuerNameRegistry type="System.IdentityModel.Tokens.ConfigurationBasedIssuerNameRegistry, System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089">
<trustedIssuers>
<!-- Add the Certificate Thumprint and the Certificate Name (e.g. Subject) used in the Relying Party Trust configured by your Identity Provider -->
<add thumbprint="********" name="*****"/>
</trustedIssuers>
</issuerNameRegistry>
</identityConfiguration>
</system.identityModel>
<system.identityModel.services>
<federationConfiguration>
<!-- Issuer = the IdP Server URL
Realm = the IIS Ecrion Website URL, e.g. https://ecrionserver:portnumber
Reply = the IIS Ecrion Website URL, e.g. https://ecrionserver:portnumber -->
<wsFederation passiveRedirectEnabled="true" issuer="https://idpserver" realm="https://ecrionserver:portnumber" reply="https://ecrionserver:portnumber" requireHttps="true" />
<wsFederation passiveRedirectEnabled="true" issuer="https://idpserver" realm="https://ecrionserver:portnumber" reply="https://ecrionserver:portnumber" requireHttps="false" />
<cookieHandler requireSsl="false" />
</federationConfiguration>
</system.identityModel.services>
- Once you're ready, save the configuration file, then access the Ecrion Enterprise Website and go to the Single Sign-On page to add the information received from your IdP to the SSO wizard.
Other Authentication Settings
From the Ecrion Sysadmin Website, you can also manage other important authentication settings. To access the authentication page, you need to follow the steps below:
- Sign in to the System Administrator Website and access the
Domaintile. - Select the
Authenticationoption under the Settings group.
The Authentication page allows you to configure the following:
| Use Active Directory to authenticate users | Check this option if you want to toggle Active Directory logins to the Ecrion system. |
| Force new users to change their password on first-time login | This option will force a new user to change the password at the first log in. It is not available for users that authenticate with Active Directory or SSO. The option is useful for two reasons, it will simplify the process of adding new Ecrion users for system administrator and also adds a security benefit. |
| Max session duration | In addition to the property from above, you can also specify the session duration, in seconds (0 represent infinitely) of the new user’s login. After the set period ends, users will be logged out from their Environment. |
| Captcha enabled | Checking this option will enable Google reCaptcha. The keys retrieved by configuring reCaptcha on Google website are necessary to be added here to invoke Google reCaptcha. |
Services
Configure Domain Services
To perform management and operational tasks on an Ecrion distributed environment, an administrator must ensure that all the IP Addresses and Port Numbers of the remote servers that host Ecrion Components are correct and are pointing out to the right Ecrion service, allowing Ecrion to establish a stable and reachable connection between its components. These connections have to be configured from the Domain Services page. Initial services values (for Publishing Engine, Data Engine, Analytics Engine, etc.) are also called default workers.
A typical use case when you have to update the Domain Services can be when you installed all Ecrion components on a server, (e.g. having IP Address X.X.X.X), lesser the Search component, which is isolated on a separate server (e.g. having IP Address Y.Y.Y.Y). To access the Search component, from the server that contains the Admin Website, you will have to update the Search Services with the corresponding IP Address (e.g. for our case, you will have to enter the following address - Y.Y.Y.Y) and Port Number of the server hosting the Search component.
To access the Domain page:
- Sign in to the Sysadmin website and access the
Domaintile. - Select the
Servicesoption under the Settings group.

By default, no nodes are configured, in which case Ecrion will look for the services at the address specified by the initial values in the main configuration file. Within the Services page you can configure the following:
Publishing Engine- Select the IP Address next to the Publishing Engine to configure the IP Address and the port number on which the publishing engine will run.
- The default Port Number is
40017.
Date Engine- Select the IP Address next to Data Engine to configure the IP Address and the port number on which the data engine will run.
- The default Port Number is
40021.
Analytics Engine- Select the IP Address next to the Analytics Engine to configure the IP Address and the port number on which the analytics engine will run.
- The default Port Number is
40023.
Backend Services- Select the IP Address next to the Backend Services to configure the IP Address and the ports for services related to the backend.
- The default Port Numbers are, as follows:
- Workflow Port:
40015. - Log Port:
40018. - Repository Port:
40016. - Triggers Port:
40020. - Scheduler Port:
40022. - Alert Port:
40025. - Distribution Port:
40024. - Notification Port:
40029. - Crawler Port:
9100. - Background:
40026. - Backup Port:
40030. - Synchronization Port:
40031.
- Workflow Port:
Repository Services(Storage Servicesstarting with the Patch 6)- Select the IP Address next to the Storage Services to configure the IP Address and the ports for services related to the storage.
- The default Port Number is
40014.
Search Services- Select the IP Address next to the Search Services to configure the IP Address and the port number for the search service.
- The default Port Number is
40028.
Licensing Services- Select the IP Address next to the Licensing Services to configure the IP Address and the port number for the licensing service.
- The default Port Number is
40035.
Transient Services- Select the IP Address next to the Transient Services to configure the IP Address and the port numbers of the transient services.
- The default Port Numbers are, as follows:
- Transient Workflow Port:
40037. - Transient Repository Port:
40036. - Publishing Engine Port:
40017. - Data Engine Port:
40021
- Transient Workflow Port:
For each change, select Save to apply the changes and refresh the page.
Configure additional services at environment level
Ecrion also provides you with options for using additional Publishing Engine, Data Engine or Analytics Engine per environment. These connections are also called "multiple workers", while the initial connections, set up in Domain Services, are called "default workers".
Multiple Publishing, Data and Analytics nodes may be used by the same Ecrion server to boost throughput. When more than one connection are defined on the environment, the load is balanced to all connections by using the Round Robin Algorithm.
How does it work?
While in older Ecrion versions, the load balancer did not provide a failover, therefore, in case of invalid connections, the request failed, starting with the 12.0 (Nido) release, the load balancer bring failovers, meaning that unreachable connections will be handled successfully.
The Load Balancer (and failover) is available for all the Publishing, Data and Analytics workers. Each instance of the Ecrion services has its own Load Balancer.
The failover reacts when one of the workers become unavailable at connection time, not if the connection will be dropped while processing or if the request will fail due to input or other external issues. For example, if you are using a wrong input template, the failover will remain idle.
Note
If the network connection is not stable enough and it drops while processing (for the rendering process), a recommendation would be to use the Retry Count parameter within the Render(advanced) step of the workflow. Please note that this is NOT part of a failover.
Below, you can find some scenarios showing the intervention of a failover, based on various use cases:
Scenario 1 - No custom workers are defined on the environment
In this case, the default connections defined in the Domain Settings will be used.
Scenario 2 - One custom connection is added on the environment
The default connection will be overwritten with the custom one.
Scenario 3 - Two or more connections are defined on the environment
Here, all the custom connections will be used with a distributed load. In case one connection will become unreachable, but the rest of them will be available, no failure will be experienced by the user and only warning messages will be registered in the log.
This current scenario can be further divided into others sub-scenarios, detailed as follows:
3.a - One unavailable connection
If one of the connections becomes unavailable, it is marked as Unavailable and it will be removed from the Robin algorithm for a specified period of time. By default, the value is 180 seconds.
This can be modified within the main config file through the parameter below:
WorkerLoadBalancerFailOutSeconds=<enter_time_period_value>
For example, to set up the unavailability time to 240 seconds, the parameter should be added in the EOS4.config file as follows: WorkerLoadBalancerFailOutSeconds=240.
Note
- The minimum value that can be set is 30 seconds.
- There is a polling interval equals to 30 seconds when the connection is verified for the expiration period. Then, the connection will re-enter in the Robin algorithm after the interval [WorkerLoadBalancerFailOutSeconds, WorkerLoadBalancerFailOutSeconds + 30 seconds].
3.b - One connection is marked as unavailable and all the others become unavailable
When a connection is marked as Unavailable and all the others become unavailable as well, the first connection will be retested before the out period to expire. If the connection succeeded, it will be marked as Available. Therefore, if at least one connection is available at some point in time the request will not fail.
3.c - All connections are unavailable
If all the connections become unavailable the request will fail.
To set up multiple workers per environment:
Note
When adding multiple workers per environment, the services configuration from Domain Services will be ignored. Additionally, the settings from the main configuration file will be updated.
- Sign in to the Sysadmin website and access the
Environmentstile. - Next, select the environment you want to edit, then navigate to the
Connectionstab.
- By default, default workers are visible. To configure a new connection, select the
+New Connectionbutton, then choose the engine you want to configure: for a server that hosts Publishing Engine, selectReporting Server, for a server that hosts Data Engine, selectDA Server, and for Analytics Engine select theAnalytics Server. - Next, fill in the form fields. You will have to provide:
- A unique name for the connection.
- The IP Address of the server that hosts the component you want to point out.
- The corresponding Port Number that will be used to communicate with the server.

The machine containing the Ecrion Service will need to have in its main configuration file the following line:
RepositoryAddress=<Ecrion Service IP>
The IP used above must be the IP as seen from the machine(s) where the Publishing, Data and/or Analytics nodes are installed.
Healthcheck Status Page
Enterprise Portal provides a new HTTP endpoint responsible for checking the status of Ecrion Services. The HTTP endpoint is hosted by the Enterprise Website at the following path:
<Ecrion_IP_Address:portNumber>/status/check
Note
In case of HA conditions, to discover the availability of your Ecrion instances, a load balancer is assigned to send HTTP requests for verification.
By default, all the services are checked, but these can be customized through the main configuration file (EOS4.config) under the path C:/ProgramData/Ecrion. All the parameters in the table below can be set up to verify on each HA node:
| Config Name | Fallback | Default Value | Description |
|---|---|---|---|
| ProcessReporterCheckAlerts | - | True | Enable if check or not the alerts service. |
| ProcessReporterAlertsAddress | AlertsAddress | 127.0.0.1 | The address of alerts service that will be tested. |
| ProcessReporterAlertsAddress | AlertsPort | 40025 | The port of alerts service that will be tested. |
| ProcessReporterCheckBackgroundServer | - | True | Enable if check or not the background service. |
| ProcessReporterBackgroundServerAddress | BackgroundServerAddress | 127.0.0.1 | The address of background service that will be tested. |
| ProcessReporterBackgroundServerPort | BackgroundServerPort | 40026 | The port of background service that will be tested. |
| ProcessReporterCheckDistribution | - | True | Enable if check or not the distribution service. |
| ProcessReporterDistributionAddress | DistributionAddress | 127.0.0.1 | The address of distribution service that will be tested. |
| ProcessReporterDistributionPort | DistributionPort | 40024 | The port of distribution service that will be tested. |
| ProcessReporterCheckScheduler | - | True | Enable if check or not the scheduler service. |
| ProcessReporterSchedulerAddress | SchedulerAddress | 127.0.0.1 | The address of scheduler service that will be tested. |
| ProcessReporterSchedulerPort | SchedulerPort | 40022 | The port of scheduler service that will be tested. |
| ProcessReporterCheckTrigger | - | True | Enable if check or not the trigger service. |
| ProcessReporterTriggerServerAddress | TriggerAddress | 127.0.0.1 | The address of trigger service that will be tested. |
| ProcessReporterTriggerServerPort | TriggerPort | 40020 | The port of trigger service that will be tested. |
| ProcessReporterCheckWorkServer | - | True | Enable if check or not the transient service. |
| ProcessReporterWorkAddress | WorkAddress | 127.0.0.1 | The address of transient work service that will be tested. |
| ProcessReporterWorkPort | WorkPort | 40015 | The port of trigger service that will be tested. |
| ProcessReporterCheckTransientServer | - | True | Enable if check or not the transient service. |
| ProcessReporterTransientWorkPort | TransientServerAddress | 127.0.0.1 | The address of transient work service that will be tested. |
| ProcessReporterTransientWorkPort | TransientWorkPort | 40037 | The port of transient service that will be tested. |
| ProcessReporterTransientXFEOSServerPort | TransientXFEOSServerPort | 40017 | The port of transient XF service that will be tested. |
| ProcessReporterTransientDASEOSServerPort | TransientDASEOSServerPort | 40021 | The port of transient DAS service that will be tested. |
| ProcessReporterCheckRepository | - | True | Enable if check or not the repository service. |
| ProcessReporterRepositoryAddress | RepositoryAddress | 127.0.0.1 | The address of repository service that will be tested. |
| ProcessReporterRepositoryPort | RepositoryPort | 127.0.0.1 | The port of transient repository service that will be tested. |
| ProcessReporterCheckLog | - | True | Enable if check or not the log service. |
| ProcessReporterLogAddress | LogAddress | 127.0.0.1 | The address of log service that will be tested. |
| ProcessReporterLogPort | LogPort | 40018 | The port of log service that will be tested. |
| ProcessReporterCheckStorage | - | True | Enable if check or not the storage service. |
| ProcessReporterESSAddress | ESSAddress | 127.0.0.1 | The address of storage service that will be tested. |
| ProcessReporterESSPort | ESSPort | 40014 | The port of storage service that will be tested. |
| ProcessReporterCheckSearch | - | True | Enable if check or not the search service. |
| ProcessReporterSearchServerAddress | SearchServerAddress | 127.0.0.1 | The address of search service that will be tested. |
| ProcessReporterSearchServerPort | SearchServerPort | 40028 | The port of search service that will be tested. |
| ProcessReporterCheckNotifications | - | True | Enable if check or not the notifications service. |
| ProcessReporterNotificationsServerAddress | NotificationsServerAddress | 127.0.0.1 | The address of notifications service that will be tested. |
| ProcessReporterNotificationsServerPort | NotificationsServerPort | 40029 | The port of notifications service that will be tested. |
| ProcessReporterCheckBackup | - | True | Enable if check or not the backup service. |
| ProcessReporterBackupServerAddress | BackupServerAddress | 127.0.0.1 | The address of backup service that will be tested. |
| ProcessReporterBackupServerPort | BackupServerPort | 40030 | The port of backup service that will be tested. |
| ProcessReporterCheckRepositorySynchronization | - | True | Enable if check or not repository synchronization service. |
| ProcessReporterRepositorySynchronizationServerAddress | RepositorySynchronizationServerAddress | 127.0.0.1 | The address of repository synchronization service that will be tested. |
| ProcessReporterRepositorySynchronizationServerPort | RepositorySynchronizationServerPort | 40031 | The port of the repository synchronization service that will be tested. |
| ProcessReporterCheckXfServer | - | True | Enable if check or not XF service. |
| ProcessReporterXFServerAddress | XFServerAddress | 127.0.0.1 | The address of XF service that will be tested. Multiple address can be configured separated by ‘;’ e.g. 127.0.0.1;127.0.2.1. |
| ProcessReporterXFEOSServerPort | XFEOSServerPort | 40017 | The port of the XF service that will be tested. Multiple ports can be configured separated by ‘;’ e/g. 40017;40117. If no service will be available then the node will be invalidated. |
| ProcessReporterCheckDAS | - | True | Enable if check or not DAS service. |
| ProcessReporterDASAddress | DASAddress | 127.0.0.1 | The address of DAS service that will be tested. Multiple address can be configured separated by ‘;’ e.g. 127.0.0.1;127.0.2.1. If no service will be available then the node will be invalidated. |
| ProcessReporterDASEOSServerPort | DASEOSServerPort | 40021 | The port of the XF service that will be tested. Multiple ports can be configured separated by ‘;’ e.g. 40021; 40121. If no service will be available then the node will be invalidated. |
| ProcessReporterCheckBI | - | True | Enable if check or not BI service. |
| ProcessReporterBIAddress | BIAddress | 127.0.0.1 | The address of BI service that will be tested. Multiple address can be configured separated by ‘;’ e.g. 127.0.0.1;127.0.2.1. If no service will be available then the node will be invalidated. |
| ProcessReporterBIEOSServerPort | BIEOSServerPort | 40023 | The port of the BI service that will be tested. Multiple ports can be configured separated by ‘;’ e.g. 40023; 40123. If no service will be available then the node will be invalidated. |
| ProcessReporterCheckLicensing | - | True | Enable if check or not Licensing service. |
| ProcessReporterLicensingServerUrl | LicensingServerUrl | 127.0.0.1 | The address of Licensing service that will be tested. Multiple address can be configured separated by ‘;’ e.g. 127.0.0.1;127.0.2.1. If no service will be available then the node will be invalidated. |
| ProcessReporterLicensingServerPort | LicensingServerPort | 40035 | The port of the Licensing service that will be tested. Multiple ports can be configured separated by ‘;’ e.g. 40035; 40135. If no service will be available then the node will be invalidated. |
Note
If you want to use the previous version of process checker service you have to add in the configuration file: ProcessReporterBackwardsCompatible=true (by default, it is false).
For changing the default value of a parameter, you should access the configuration file (EOS4.config) and assign a new value. For example, ProcessReporterCheckSearch=false. If you made modifications, you should restart the Ecrion website from the Internet Information Services (IIS).
The results can be of two types, either all the instances are up and running or the load balancer determines that an instance is unhealthy and it sends a server error message specifying where the server crushed.
- Success -
204 - No Content - Server Error -
50x - errorMessage
Search
For each environment, you may enable or disable the Search module. In a new environment, the search will be off, by default. Below you can find step by step instructions on how to configure Search in an environment. Note that the configuration steps should be repeated for every environment.
Configuring Search
- Sign in to the Sysadmin Website and access the
Environmentstile. - Select the environment you want to edit, then navigate to the
Searchtab. - Select the
Configurebutton. - Within the Search Configuration dialog, select the search engine:
Database: use the database configured during installation for search.- Elastic: use an Elastic Search instance.
- Configure additional crawling options by checking the following options:
Crawl Job Output: will crawl the generated files, i.e. the files under Jobs; this could significantly increase crawl time if you generate many documents;Crawl Document Content: will also use full-text search, so as to crawl the contents of documents; having a large collection of documents will significantly increase crawl time.Enable Search for Portal Website.
- Once you are finished, select
Save. The Search bar will be available in the Enterprise Website, at the top right side of the window.

Note
The Search Engine Address will be added, by default in the main configuration file(EOS4Svc.config.)
Long crawl times don’t affect the system’s performance. Instead, what this means is that new and modified items will take longer to appear in the search results due to the fact that the service takes a long time to index them.
Full Crawl
A Full crawl is required the first time when the Search database is configured. Once a Full Crawl is started, it can either find no results, if the Ecrion database is empty, or it can display status information. To run it, click on the Full Crawler dropdown next to the Configure button and select Start. Information about the current configuration, crawler status, and indexed items will appear on the page. When the drop-down says Full Crawler (finished), your search is configured.
Users logging into the environment (on the Enterprise Home website) will now see the search bar at the top right of each page, on the navigation bar. To learn more information about the Search bar and Search center, please visit the Search chapter from Ecrion User Guide.
If you are trying to set up e-mail notifications or amazon connections, then the settings below should help you get up and running in no time.
Domain e-mails
System Administrators can configure an e-mail connection to use it for e-mail notifications. For example, when new accounts are created, the user will retrieve a welcome e-mail, for which Ecrion Platform will use the e-mail connection configured here. Or, when this connection is configured, users will be notified when new tasks are assigned.
To configure a domain e-mail:
- Sign in to the Sysadmin website and access the
Domaintile. - Select the
e-mailoption under the Settings group. - Fill in the form fields. You will have to enter:
- A server hostname or an IP Address.
- A port number. By default, the port number is 25.
- A username and a password.
- An e-mail address that will be used when sending e-mails using this connection.
- Decide if the connection is encrypted or not.
Note
You can set up configurations for general e-mails (e.g. e-mails send to customers through an Ecrion workflow) from the Admin Settings page of the Enterprise Website. Also, e-mail configurations from Domain can be overwritten by the SMTP e-mail connections from each environment. You can read more information about this in the Ecrion User Guide manual.
Amazon
If you intend on setting up an Amazon connection through Ecrion Platform, you will have to set Amazon in the Ecrion Domain Settings.
To configure Amazon:
- Sign in to the Sysadmin website and access the
Domaintile. - Select the
Amazonoption under the Settings group. - Fill in the form fields. You will have to enter:
- The Amazon AWS access key.
- The Amazon AWS secret access key.
- The Amazon AWS region.
While Amazon is configured in Ecrion Domain, environment users will be able to configure e-mail SES Connections and SMS Connections in the Enterprise Website. e-mail SES is useful if you want that e-mails configured in Enterprise Website to have a better status, such as delivered, complained or rejected.
Miscellaneous
URLs
From URLs page, you can configure or update the URL used to access the Ecrion Websites: Enterprise, Customer Portal or Sysadmin. These are used in both, single or distributed installation.
If you deployed Ecrion components across multiple servers, to ensure a reliable communication between instances, you have to update the corresponding URLs. Each URL needs to reflect an existing website. For example, if you want to change the port of a website, you must ensure that the same configurations are done in IIS/HA, as well.
Aside from this, these websites also have other roles. For example, the Enterprise URL is used to send e-mails when a new user is created. Or, Portal URL is used to distribute e-mails that contain links to shared files for your organization customers.
To access the URLs page:
- Sign in to the Sysadmin website and access the
Domaintile. - Select the
URLshyperlink under the Settings group.
Each URL must contain the IP Address or the domain name of the server hosting the website, as well as the port number on which the website is available.
By default, Ecrion Websites are available at the following ports:
- Enterprise Website: port
8094 - Customers Portal Website: port
8096 - Sysadmin Website: port
8095
Note
The URLs you configured above will not overwrite the existing values in the main configuration file (usually, there are the values configured at installation time). However, Ecrion Software will ignore the config values and it will consider the values configured in Domain\URLs.
Ecrion Studio
Ecrion Studio is a powerful software, integrated into the Ecrion Platform that comes with multiple tools that will help you to create dynamic documents, uniforms outputs, powerful dashboards or synchronize local files with the Ecrion platform. The product suite provided by Ecrion Studio is formed by four products:
Publisher, a visual design tool used to design professional document templates, which integrates well with the other Ecrion products. These templates are used at runtime by Ecrion server software to generate documents dynamically from data in high volumes.Modeler, a visual design tool used for designing a singular powerful data source from combining, cleansing, and transforming your enterprise data from wherever it resides in a graphical environment. Having the ability to view where your data is coming from and change mappings help speed up the development process.Analyst, a powerful dashboard design application for visualizing, filtering, analyzing and interpreting enterprise data.- Additionally, with the installation tool, Ecrion Studio will also install the
Ecrion Drivecomponent, that allows you to synchronize your local files with the Ecrion Solutions assets.
To download the design software, you will have to access the Enterprise Website and go to the Developer\Software page. Please visit the Developer chapter of the Ecrion User Guide to read more information about it. For more details on how to use each Ecrion Studio product, please visit the Ecrion Studio Documentation documentation.
Ecrion Solutions allows the administrators to handpick the build version available in the Enterprise Website, from URLs page.
To configure the Ecrion Studio version:
- Sign in to the Sysadmin website and access the
Domaintile. - Select the
URLsoption under the Settings group. - Next, you can choose to use the latest version available of Ecrion Studio, by checking
Use latest version, or click the empty box and enter the URL to the Ecrion Studio tool.
Restrictions
A job is one of the most important element when creating documents through Ecrion Platform. It refers to a process (e.g. workflow) that is executing or has finished executing. Jobs can be run from the Enterprise Website.
Each time when running a job, a new access token is created. The access token has limited availability and this can be managed from the Job revocable token validity option. If the job will exceed the time you have set up, your job will fail. For example, you have created a workflow that contains a manual step. You can use the token validity option to restrict the time other users can solve that manual step.
Note that the same validity is imposed on the token generated through API Keys.
- Sign in to the Sysadmin website and access the
Domaintile. - Select the
Restrictionsoption from the Settings group. - Enter the new value under the corresponding box:
Below there are some configurations that will give to the sysadmin more control over the distribution of services within SMTP connections.
Job revocable token validity- To change the validity time of an access token.Distribution SMTP number of parallel clients per connectionDistribution SMTP retry count (number of retries if send fail)Distribution SMTP wait for retry in milliseconds (wait until the next retry)
Number of Threads
For each environment, you can specify how many threads to use for Ecrion services to run the jobs. By default, each environment will use a small instance of 4 threads. To change the number of threads, simply select the needed value from the drop-down menu.
Note that, adding multiple threads doesn't speed up the processing of a single document. It will enable users to process multiple documents at the same time. If the server has adequate resources, then processing multiple documents should scale linearly.

Maintenance
Storage
As the Storage is designed to support continuous operations, Ecrion provides a series of features to help system administrator to maintain it at a high-level.
There are two ways of maintaining the Ecrion Storage:
- By accessing the Storage Page.
- By using the Storage Tool.
Storage Page
Ecrion provides the Storage Page that allows you to monitor and perform additional administration tasks on your storage folder.
To access it:
- Sign in to the Sysadmin website and select the
Domaintile. - Under the Summary section, you can see the Storage space and the percentage of the space you can save after running the compact command. Select the
Storage Detailshyperlink for more details and additional tasks.
- The Storage page provides information regarding the storage location and checks disk space. In addition, you can perform operations in case of storage breakage, such as:
Repair Now: If the Status shows errors, proceed with selecting theRepair Nowbutton. This operation will start a process in the background that will verify if there are any corrupted data in the storage folder, and will try to fix the files.Important Note
We highly recommend contacting Ecrion Technical Support to discuss the best options for your organization before running the repair storage command.

Reclaim Now: The option allows you to free up the Ecrion storage by deleting old data you do not longer need. You will be prompted to confirm your selection to start the compact process. When the process is ready, you will be able to see a list with all the storage data file that has been compacted.
View data files running status: This option is valuable for a HA installation to see if the nodes are synchronized in parallel and their statuses (RunningorNot running). Each node has 256 files encrypted and the same 256 files decrypted for security purposes.
Update now: The option allows users to keep the storage data updated in the page after several changes have been performed within the repository. The data displayed in the Storage Details is cached, it does not provide real-time information. The information will be retrieved from the last update performed. For more updated results, use this feature.
Storage Checker Tool
Another way to manage the Ecrion storage is by using the Storage Checker tool. To have access to the Storage Checker tool, you need to check the
Storage Checker Utility, Maintenance Utility and Logs Migration Utility option, available in the Document Repository Settings step of the installation wizard.
The tool can be found in
< Installation Folder >\Windows Service\EOSUtility\StorageChecker\StorageUtility.exe
The Storage tool uses the following general syntax:
StorageUtility.exe
[-command checkStorage|compactStorage|repairStorage|encryptStorage]
[-u <sysadmin username>]
[-p <sysadmin password>]
[-logLevel None|Normal|Debug]
[-outputFilePath <Path>]
[-configFile <condifg File Path>]
Quick Reference
The table below provides a quick reference to the various parameters and options available.
| Parameter | Occurence | Description |
|---|---|---|
| -command | Required | Runs the specified command. |
| -u | Required | Specifies the system administrator username. |
| -p | Required | Specifies the system administrator password. |
| -loglevel | Optional | Sets the log level events to be reported. |
| -outputFilePath | Optional | Specifies the location of the generated log files. |
| -configFile | Optional | Specifies the path to the configuration file. |
Storage Commands
The tool has four functionalities: check, compact, repair or encrypt.
Check Storage
The Check Storage command verifies if there are any invalid <version of> documents present in the storage and provides access to detailed storage information such as storage size, encrypted or unencrypted size and compacting storage size.
Usage example for checking storage:
StorageUtility.exe -command checkStorage -u sysadmin -p sysadmin
Compact Storage
Compact Storage command verifies the storage for files marked as deleted by Ecrion (either from UI or API) and releases the disk space that was previously allocated to those files. The tool also defragments the storage.
This operation is performed automatically at the end of each day on the server where Ecrion is running. However, if you would like to perform this operation manually, please see below:
Usage example for compacting storage:
StorageUtility.exe -command compactStorage -u sysadmin -p sysadmin

To find out more information, please go to C:\ProgramData\Ecrion\Log and check the EOS4Svc.log file, referenced after running the command above.
Repair Storage
Important Note
We highly recommend contacting Ecrion Technical Support to discuss the best options for your organization before running the repair storage command.
Repair Storage command allows you to repair damage data of your storage folder. For example, if you encounter a power outage that led to corrupted data, you can use the repairStorage command to retread the storage.
The Repair Storage command comes with two options: users can just read a full report of their corrupted data, by adding the -readonly flag, or they can directly start repairing the storage data.
Note
As a best practice, we highly recommend running the repair storage command with readonly to assess the corrupted files.
Usage examples for repairing storage:
To obtain a report with all the .dat files that can be repaired in your storage folder:
StorageUtility.exe -command repairStorage -u sysadmin -p sysadmin -readonly
To start repairing the storage data, use the following command:
StorageUtility.exe -command repairStorage -u sysadmin -p sysadmin
Encrypt Storage
Storage encryption is a controlled-based solution that provides the capability to encrypt the storage data, ensuring protection over your Ecrion Storage assets.
The encrypt storage command should be used when you want your Storage data to be encrypted. Another important use case of the storage encryption applies if you want to migrate a single Ecrion instance in an HA environment, it is necessary to encrypt your storage data first.
Note
Before you begin the encryption process, you may note that it will affect both the Ecrion database and the storage folder.
Additionally, when running the encrypt command, the Ecrion service needs to be stopped from the Windows Task Manager.
Usage example for encrypting storage:
StorageUtility.exe -command encryptStorage -u sysadmin -p sysadmin -readonly
Username and Password
Storage Utility provides a password-controlled mechanism for administering storage operations. Each time when running a storage command in CLI, you will have to specify the username and the password of the Ecrion Domain, as follows:
StorageUtility -command <enter command> -u sysadmin -p sysadmin
Note
If you do not specify both the username and the password, the storage command fails.
Storage Utility Log
Storage Utility allows you to enable logging when performing operations to the storage data. Enabling logging allows you to record different events that happen when you run a command.
Logging can be enabled by configuring the level of the events you want to track, and also a path to the file that will store that information.
The available log levels are: None, Normal or Debug.
When enabled, Storage Utility will display the events details in the console or in the output file, if specified.
Enabling logging is possible by using the -logLevel parameter, as follows:
StorageUtility -command <enter command> -u <username> - p <password> -logLevel Debug
Output Location
When running a command on the Storage Data, you can choose how would you like to view the results. Storage Utility allows you to view all the results directly in the Command Line interface console or you can save the output results to an external file.
To append the output to an external file, you will need to specify the file location on the disk drive, as follows:
StorageUtility -command <enter command> -u <username> -p <password> -outputFilePath C:\out\file.txt
Configuration File
Storage Utility allows you to specify the Ecrion configuration file to be used. By default, on a single-deployment installation, Storage Utility will read the configuration settings from the default configuration file location, which is %Application_Data%\Ecrion and it is not necessary to use this parameter.
In cases when you want to perform storage commands from a remote server, Storage Utility will require reading its settings from a configuration file in order to run. This should be a copy of the Ecrion configuration file (EOS4.config) from a machine running one of the Ecrion websites.
To perform remotely storage commands, you must point the tool to the configuration file via the -configFile parameter (the file provided will tell the Storage tool which storage folder to use).
To use the -configFile parameter, use a syntax as follows:
StorageUtility -command <enter command> -u <username> -p <password> -configFile %Application_Data%\Ecrion\EOS4.config
Database
Ecrion enables a page which provides capabilities to configure a retry for database errors. On this page, you can also see information about the server name and size, sql options, such as initial catalog used, Ecrion database version and the version of the Microsoft SQL Server.

Database Errors Handling
Basically, if you have some of the options described below properly configured and a deadlock occurred, the system will retry the operation. By default, no retry is done.
- Login to the Sysadmin Website and access the
Domaintile. - Under the Summary section, you can see the Database used space. Select the
Database Detailshyperlink for more details. - The Database page provides information regarding the database used to store the data, its version, the current version of Microsoft SQL Server.
- Enter the new value under the corresponding box for
SQL Connection Retries. The value represents the number of retries whenever the database connection fails. - Provide the value for
SQL Wait Time Retry (ms), in milliseconds, under the corresponding box also. The value will represent the time to wait until the next retry will be performed.
Note
It is mandatory to have a View Definition permission on the master database for the users that utilize the Sysadmin Website.
Backup
It is important to back up your Ecrion Database and Storage so you can restore the assets in case of system crashes or other issues that may occur. The Ecrion Platform provides a variety of backup strategies from which you can choose the option that suits you best. In this section, you can learn about the backup types and ways to back up your Ecrion Data.
Backup Types
To back up the Ecrion data, you can use either the Full Backup, or the Differential Backup. Full Backup is a complete backup of all the Ecrion assets stored in the database and storage. A Differential Backup captures only the changed assets since the last full backup.
A full backup needs to be performed as an initial backup, followed by a differential backup. It is highly recommended to back up your Ecrion system as often as possible. Periodically full backups with a retention policy should be implemented if possible. If your objective is to create a reliable backup, with an easy recovery of your data, Full Backup is a good choice.
A differential backup is highly bounded to the Full Backup, and it's the best solution when you want to reduce the backup size and the backup time. When a differential backup is run, it will preserve data, saving only the difference in the data since the last full backup (Note that if a new full backup is created you won't be able to create a differential backup for the previous backups).
Creating a differential backup can be very fast compared to creating a full backup. Additionally, since the differential backup contains only the system changes from the last backup, its size will be much smaller compared to the full backup size, and also, it can be run much more often than a full backup. As best practice, a full backup must not be done more than a month old to a differential backup. Otherwise, the size of the differential backups will increase considerably. Furthermore, note that differential backups are not connected, as an incremental backup, even if they are saving data from the same full backup.
Note
While Ecrion is running a backup process for the Ecrion Database, make sure that no other external system runs full backups at the same time. Otherwise, there is a big change in failing to restore your data.
In the case of Ecrion deployments, it is recommended to run a full backup for the first time, then perform a differential backup. For instance, if a differential backup will be run on the Ecrion Platform 12.0 (i.e. Nido), and the last full backup was done on an older version, the differential backup will see the Ecrion Storage as new and it will be considered a part of the differential backup (only the database can be made as a truly differential backup).
Backup Procedures
There are three ways to backup Ecrion data:
- Using the System Administrator Interface.
- Using the Command Line.
- Performing a Manual Backup.
Managing Backups from the Sysadmin Interface
One of the easiest ways to create backups is by accessing the Backup page available under the system administrator interface. The Backup page allows you to configure settings, schedule periodic backups, view old backups or run backup manually.

Before Backup
Before you start running a backup, it may be necessary to configure the backup settings first. In the section below you can learn how to shape the backup configuration to meet your organization's needs.
.NET Framework 4.5 & SQL
Back up requires .NET Framework 4.5 and SQL Server Command Line Utilities.
Backup Settings
Access the Backup Settings page, following the steps provided below:
- Login to the Sysadmin Website and access the
Domaintile. - Select the
Backup Detailshyperlink to navigate to the Backup page. - Click on the
Configurebutton to start configuring the backup settings. Note that the adjustments will be automatically saved, on blur input events and a feedback message will be shown.
Within the Settings page you can configure the following:
1. Backup Location
In the Backup Location box, you can enter the local or network path to the Backup Folder destination.
Note
Please make sure the backup folder destination has enough available space.
When changing the backup folder location, the Ecrion Database and Ecrion Service must have write access to that folder.
After running the backup, you will be able to see the following files in the backup folder:
- The SQL Backup file;
- The Storage archive file;
- The Backup manifest file that specifies the directory structure and backup description.
2. Full Backup Script
The Full Backup Script box displays commands to create a full backup of your Ecrion data, for both database and storage. At any time, system administrators can edit the backup script, to meet their organization's needs.
The backup script uses two commands, sqlcmd, for the Ecrion database backup, and eosbackup, for the storage backup. You can customize the scripts by adding CLI commands or by using the System Placeholders, visible on the right side.
3. Differential Backup Script
The Differential Backup Script box displays commands to create a differential backup of your Ecrion data, for both, database and storage. At any time, system administrators can edit the backup script, to meet their organization needs.
The differential backup script uses two commands, sqlcmd, for the Ecrion database backup, and eosbackup, for the storage backup and the last full backup fulfilled on your system. You can customize the scripts by adding CLI commands or by using the System Placeholders, visible on the right side.
Note
Creating a differential backup requires a previous full backup. If your system has never been backed up, run a full backup before creating any differential backups.
4. SQL Authentication
To create a backup for the Ecrion database, it is mandatory to add the user name and password used to authenticate the SQL Server. Windows Authentication is no longer accepted for backup processes.
To configure the SQL Database Permissions:
- Access the
Object Explorerpane in the SQL Server Management Studio. - Expand the
Security\Loginsoptions. - Right-click on the user you want to use to authenticate the database, and select
Properties. - Access
Server Rolesand make sure thesysadminrole is selected. - Access
User Mappingand make sure thedb_backupoperatoranddb_ownerpermissions are selected on the Ecrion database.
Next, return to the Ecrion Backup Configuration page, and add the SQL user name and password to the correlated fields.
Note
This configuration will avoid making the user who's running the Ecrion system to be a power user in the Ecrion Database.
To make sure the backup scripts are correct, the backup can be done in the specified folder and the SQL authentication is working properly, select the Test Backup button. If everything works successfully, you will notice this message: Test was successful.
Creating an On-Demand Backup
This section provides step by step instructions for creating backups from the system administrator website.
- Login to the Sysadmin website and access the
Domaintile. - Select the
Backup Detailshyperlink to navigate to the Backup page. - Next, use
Backup Nowto configure a manual backup process. - You will be prompted to select the Backup Type you want to run. Use the drop-down list to select between a
FullorDifferentialbackup. Optionally, add some comments into theDescriptionbox. - Select
Runto start the backup process. Note that while a backup is running, the Backup Now button will be disabled and the caption will be changed toRunning backup... You cannot start a new backup until the current backup is finished. - The process can take from several seconds to a few hours depending on database and storage sizes. Once the backup is complete, the new backup will show up on the list of available backups.
- Optionally, you can select the
Logpage to access the Backup Log page where additional information is displayed. The backup log can also be used for troubleshooting.
Scheduling an Automatically Backup Process
This section provides step by step instructions for scheduling a full or differential backup from the system administrator website.
- Login to the Sysadmin website and access the
Domaintile. - Select the
Backup Detailshyperlink to navigate to the Backup page. - Select the
Changehyperlink next to thefullordifferentialbackup type, to start configuring an automatic backup process. You will need to set up days and hours for when you want your full/differential backup to be run automatically. - When you're ready, check the
Enabledoption to start the backup schedule, then clickOk.
Creating Backups using the Command Line Tool
Another way to perform a backup is by using the Ecrion backup tool.
The default location is :
<Installation Folder>\Windows Service\EOS Utility\EOSBackup\Tools.EOSBackup.exe.
The tool will backup and restore Ecrion Database and Ecrion Storage. As in the user interface, it can also backup and restore files in/from a shared network folder or an Amazon S3 folder.
Syntax:
Tools.EOSBackup.exe
[ -backup2 | -restore2 | -getbackups | -examples ]
[ -u <sysadmin username> ]
[ -p <sysadmin password> ]
[ -backupName <backupName> ]
[ -backupType <full|differential> ]
[ -backUpFolder <networkFolderPath> ]
[ -configFile <EOS4 config file> ]
[ -backupScript <backup script> ]
[ -restoreScript <restore script> ]
[ -backupDescription <backupDescription> ]
Steps:
- Navigate to your installation folder (e.g. %Installation_Path%\Ecrion\Engage 2018 (64 bit).)
- Find the EOSBackup subfolder under
Windows Service\EOS Utility\EOSBackup. - Open a command prompt to this location.
- Run the command below to create a backup for your files, using the default location. Note that you will need to provide the username and password used to access the Ecrion Domain. Optionally, you can add a simple description that will appear in the backup manifest file. Use the backupType parameter to specify if you want to run a full or a differential backup.
Tools.EOSBackup.exe -backup2 -backupType full -u sysadmin -p sysadminpassword -backupDescription "some description" - When the backup is complete, a message will be displayed, confirming that Ecrion has successfully written its data to the file you specified.
Note
Ecrion Backup commands are case sensitive. Be careful when you're typing in the backup commands - whether a character is upper or lower case does make a difference.
Performing a Manual Backup
Before attempting a manual backup, you will need to stop all the Ecrion services and websites.
To perform a manual backup, follow the steps below:
- Back up the Storage Folder, located by default at <%Application_Data%\Ecrion\EOSStorage>.
- Back up the Ecrion Database.
Note
Please use the appropriate guidelines to back up a database on your version of SQL Server.
We strongly recommend saving a copy of your main configuration files (EOS.config and PublisherSvc.config mandatory, DASSvc.config and BISvc.config, if necessary) along with the backup for future reference.
Restore
In the event your Ecrion data has been lost or a major system failure occurs, you have the ability to restore your back up data.
When restoring, as best practice, we recommend disabling user access to the system by stopping all Ecrion websites for the duration of the restore (using IIS Manager).
Important Note
There are certain precautions that should be taken when using the options below. We highly recommend contacting Ecrion Technical Support to discuss the best options to meet your company needs.
Restore Procedures
As for the backup, there are three ways for restoring Ecrion data:
- Using the System Administrator Interface.
- Using the Command Line.
- Performing a Manual Restore
Restoring a Backup Using the Sysadmin Interface
Before Restore
Before you start restoring your data, it may be necessary to configure the restore settings first. In this section you can learn how to shape the restore configurations to meet your organization's needs.
Backup
- Creates at least one backup of your data before proceeding with the restore processes.
.NET Framework 4.5 & SQL
- Make sure the machine that runs the restore has .NET Framework 4.5 and SQL Server Command-Line Utilities.
Note
For remote restore, you will need an existing main configuration file with the correct addresses specified for the database and the storage folder.
Restore Settings
To access the Restore Settings page, follow the steps provided below:
- Login to the Sysadmin Website and access the
Domaintile. - Select the
Backup Detailshyperlink to navigate to the Backup page. - Click on the
Configurebutton to start configuring the back settings. Note that the adjustments will be automatically saved, on blur input events and a feedback message will be shown.
Within the Settings page you can configure the following:
Full Restore Script & Differential Restore Script
Restore scripts display commands to create a full/differential restore of your Ecrion backup data. At any time, system administrators can edit the scripts, to meet their organization needs.
The restore scripts use two command:
sqlcmd: a command used to restore the Ecrion Database;eosbackup: that contains three parameters:eosbackup -migratedatabase: a command that migrates the database version from the backup to the current database version required by the Ecrion Platform. For instance, if you created a backup in the Ecrion 11.5 (i.e. Mantine) version, and you want to restore it in the Ecrion 12.0 (i.e. Nido) version, the command will ensure that the database will be up to date.eosbackup -restore: a command used to restore the storage data. For the differential restore, the storage from the last full backup needs to be specified.eosbackup -sanitize: a command that cleans up relics (zombies) from the backup. Due to the fact that a backup is run in two steps (first backup the database, and then backup the storage), some de-synchronizations can appear, which can be cleaned by using the -sanitize parameter.
Note that these scripts can be customized as needed, either by using the CLI commands, or by adding the System Placeholders, visible on the right side.
SQL Authentication
To create a restore of the Ecrion database, it is mandatory to add the user name and password used to authenticate to the SQL Server. Windows Authentication is no longer accepted for the restore process.
To configure the SQL Database Permissions:
- Access the
Object Explorerpane in the SQL Server Management Studio. - Expand the
Security\Loginsoptions. - Right-click on the user you want to use to authenticate the database, and select
Properties. - Access
Server Rolesand make sure thesysadminanddbcreatorroles are selected. - Access
User Mappingsand make sure thedb_ownerpermission is selected on both, the Ecrion database and the master Database.
Next, return to the Ecrion Settings page, and add the SQL user name and password to the correlated fields.
To make sure the restore scripts are correct and the SQL authentication is working properly, select the Test Restore button. If everything works successfully, you will notice this message: Test was successful.
Performing a Restore from the Sysadmin Interface
This section provides step by step instructions for creating a restore of an Ecrion backup from the system administrator website.
- Log in as a System Administrator and access the Domain module.
- Select the
Backup Detailshyperlink to navigate to the Backup page. - Select
Restore, to start a (manual) restore process. Note that while the restore is running, the Restore button will be disabled and the caption will be changed toRestoring... You cannot start a new restore process until the current restore is finished. - The process can take from several seconds to some hours depending on database and storage sizes. Once the restore is complete, the restore hyperlink will become available.
- Optionally, you can click
Logto access the Backup Log page where additional information is displayed. The backup log can also be used for troubleshooting.
Restoring a Backup using the Command Line
This section provides explanations on how to restore your Ecrion data by using the Command Line tool.
- Navigate to your installation folder (e.g. %Installation_Path%\Ecrion\Engage 2018 (64 bit)).
- Find the EOSBackup subfolder under
Windows Service\EOS Utility\EOSBackup. - Open a Command prompt to this location.
- Run the command below to see all the backups available:
Tools.EOSBackup.exe -getbackups -u sysadmin -p sysadminpassword - Run the command below to restore a specific backup (e.g. backup with number 20180228120843):
Tools.EOSBackup.exe -restore2 -u sysadmin -p sysadminpassword -backupName 20180301101600 - When the restore is complete, a message will be displayed, confirming that Ecrion has successfully finished the process.
Performing a Manual Restore
Before attempting a manual restore, you will need to stop the Ecrion services and the Ecrion Websites.
To perform a manual restore:
- Restore the Storage Folder from a previously created backup.
- Restore the Ecrion Database from a previously created backup.
- Start the Ecrion Websites from IIS Manager.
- Start the Ecrion services from Windows Services.
- Sign in to the Ecrion Website and ensure that the environments and project files exist and are functioning properly.
SQL server permissions for Backup/Restore
You should be aware that certain permission are needed in order to successfully perform SQL database backup and restore. In order to successfully perform this operations, the login used by Ecrion Server to connect to the database should have this permissions. You can find more information about the required permissions for backup here and for restore here.
Cloning an Ecrion Server
To clone an Ecrion Server from a source to a target machine, the following are required:
- Back up the source machine, see the Backup section for details.
- On the target machine, run the installer for the same Ecrion version as the source machine. Make sure the settings specified during installation, e.g. the IP addresses, the database connection, etc., are correct.
- Restore the backup on the target machine, see the Restore section for details.
Note
Some configuration on the target machine may need to be done by manually adding settings to the main configuration file(s), e.g. enabling cross-environment logins. We recommend reviewing the services address and port numbers from the source machine.
Note
License info will not be preserved. New licenses will need to be installed and activated on the target machine.
Rolling Back an Installation
To roll Ecrion back to a previous version:
- Uninstall the newer version.
- Run the installer for the older version, using the previous configuration.
- Restore a compatible backup on the Ecrion server.
Note
The backup must belong to the specific older Ecrion version that is being rolled back to. Ignoring this may lead to data loss. Please contact support@ecrion.com if your rollback scenario cannot accommodate these requirements.
Monitoring
System Status
The System Status page is a good way of monitoring and finding any major issue related to the Ecrion Services or Ecrion Storage.
To access the System Status page, you will have to sign in to the Sysadmin Website and select the System Status hyperlink, available in the Domain tile.
The System Status page will provide a view of all the Ecrion Services and real-time information regarding their status. Here you can inspect and ensure what services are functioning properly and which are not. Ecrion Platform performs automated checks on every service component to identify issues and return the results under the Health column. If the service is available and reachable, it will be marked by a green check icon, and in the Additional Information column you will be able to view the last start time of the service. If the service is not reachable or there is an issue related to it, you can view a red exclamation mark, and the error encountered in the Additional Information column.
At the bottom of the System Status page, you can inspect Storage Statistics about the utilization metrics, such as versions, warnings, disk size, and activity. These statistics will get you a picture of the overall Ecrion storage.
Background Services
Within Sysadmin Website, you can monitor background services, which are services created and maintained internally by Ecrion. Achieving visibility on background system tasks or services that use CPU, RAM or Database resources outside of document creation will improve production environment monitoring, troubleshooting or hot fixing (for example, some services can be disabled or configured to run at a reduced frequency).
To access the monitor page, sign in to the Sysadmin Website and select the Background Services monitor hyperlink, available in the Domain tile.
The Background Services Monitor page provides a summary view of the progress and completion of the Ecrion Background Services. Additional information is shown, such as the environment in which this service is running, their last start and execution time, or the current status, which can be Finished OK, Running or Finished with errors. You can also extend the monitoring period by selecting the filter button, at the top-left corner.
Enable/Disable Background Services
Ecrion Platform allows you to configure the running frequency of the background services and also enable or disable some of the services on an environment.
To enable/disable environment services:
- Sign in to the Sysadmin Website and select the
Environmentstile. - From the environments list, select the environment on which you want to configure background services.
- Next, navigate to the
Servicestab. Here, you can check on or off theEnabledbutton, next to the service name to enable or disable it on the current environment. Note that you cannot disable theHealth Checkservice on any environment. Additionally, enter the time in seconds within theFrequencybox to determine how often the selected service will run.
Backend Services
Within Sysadmin Website, you can monitor backend services which role is to monitor backend health according to health check and to direct traffic according to a balancing mode. To manage the backend services, you have to access Domain > Services > Backend Services > Configure.
Enable/Disable the following services:
| Analytics Crawler | If enabled, the service will crawl environment activity like document productions, distributed tickets, promotions ads, and prepare the database for environment dashboards. |
| CRM Synchronization | If enabled, services within the CRM Synchronization are handling the synchronization of accounts/contacts with connections defined in Environment Settings. |
| Background Alerts | If enabled, alerts will keep the users updated by notifying them through email whenever a report is defined on a view and an important process is encountered within that view. |
| Environment HealthCheck* | If enabled, the service computes and verifies information from the environments and keeps the application running efficiently and flawlessly. The default frequency can be updated at domain level and its default value is initially set to 1 day. In case of another value configured on the current environment, the default value will be overwritten. |
| Task Notification | If enabled, it allows users to set reminders for their manual tasks. |
| Engagement | If enabled, the engagement's role will be to perform actions defined in the Customer Journey and Touchpoints due to Engagement Services. |
| Domain health check | If enabled, the Domain Health Check is required to delete the expired tokens from the Enterprise website, in order to free storage. It is also responsible for the defragmentation of indexes within the database and cleaning up the system log. |
| Reclaim free space | If enabled, the service verifies the repository for files marked as deleted and releases the disk that was previously allocated to those files. |
| Repository stats calculator* | If enabled, it computes periodical storage size, reclaimable storage space and status of the storage files. By default, the option is enabled and its frequency is set to 1 day. |
| Check Database Defragmentation | If enabled, it maintains the database performance, reorganize and rebuild fragmented indexes. |
| Reorganize | If enabled, you can set up the Fragmentation threshold parameter. By default, its value is 5%. |
| Rebuild | If enabled, you can set up the Fragmentation threshold parameter. By default, its value is 30%. |
| Clean up Expired Tokens | If enabled, it deletes the enterprise, sysadmin and customer portal expired tokens. |
| System log maintenance | If enabled, system log will accumulate information for previous running of DOmain and Environments background services. You can set up the Maximum log age parameter. By default, its value is 5 days. |
| Environment log maintenance* | If enabled, the feature will delete all logs from all environments. The system administrators can configure retention policy for some environment logs such as schedulers, triggers, CRM synchronization, folders synchronization and execution logs. It can be set up at domain level. This maintenance occurs every day, on a local machine at midnight and it keeps only the logs from the last 30 days. |
* - The option is available starting with the Patch 6 version.
Troubleshooting
Master Logs
Master Logs are the main logs of the Ecrion System. All Ecrion Components except native engines (analytics engine, data engine, publishing engine) log there.
Configuring Master Log
To configure master logs, you will have to navigate to the %Application_Data%/Ecrion folder and open the EOS4Svc.config file. Within the Ecrion configuration file, you can set up log level or log location.
Note
Any changes made to the configuration file require a restart of the Ecrion Service (e.g. using Windows Task Manager) and, in some cases of the IIS web server, if the changes impact the websites.
Log Levels
Log Levels allow system administrators to decide what activities should display in the log file.
There are 4 logging levels you can enable:
None: No logging will occur.Normal: Errors, warnings and information messages will be logged.This is the default value.All: Errors, warnings, information messages and various traces will be logged.Debug: Everything will be logged, including diagnostic information for troubleshooting.
To configure the Log Level you will have to use the LogLevel parameter. For example, to set the Log Level to Normal, you need to add the following line in the configuration file: LogLevel=Normal
Master Log Location
The default location for the Ecrion master logs is %Application_Data%/Ecrion/Log. To specify a new log folder, you will have to use the MasterLogFolder parameter, as follows: MasterLogFolder={Enter_Log_Path}
UI Configurations
Some Master Log's option can be also configured from the User Interface, such as log level.
Log Level
To enable/disable logging:
- Sign in to the Sysadmin Website and access the
Domaintile. - Select the
Logoption from the Settings group. - Select the required log level from the drop-down list.
Note
When you configure Ecrion Logging from the user interface, the changes will be automatically saved and you will not have to restart the Ecrion Service or IIS Website.
Include error details in REST response
If you are using the public REST API, it may be necessary to check the Include error details in REST response. By checking this, more explicit information will be returned when an exception is thrown.
Log Maintenance
To create policies on deleting older logs, you will have to configure log maintenance from Ecrion Domain. Enabling the maintenance log, allows you to automatically delete master logs, helping you to preserve the disk space.
To configure Log Maintenance:
- Sign in to the Sysadmin Website and access the
Domaintile. - Select the
Logoption from the Settings group. - In the Log page, click the
Configure Log Maintenancebutton. - Next, check
Enabledin the Configure Log Maintenance. Then, enter the time whereupon you want to delete the old logs underMaximum log age in day'sbox and clickSave.
Ecrion Platform will automatically delete logs older than the period you have set. If you want to delete the logs now, you can select the Run Delete Now button to start the process manually.
If you go back to the Domain page, you will notice that the Maintenance Status has been updated in the Summary group.
Engine Logs
In Ecrion Platform, native Ecrion Engine components will generate separate logs. By default, these are stored on a disk drive, at the default location %Application_Data%\Ecrion\Log.
Logging can be enabled/disabled from the Management Console tool, for the following Ecrion Components: Publishing Engine, Data Engine and/or Analytics Engine.
To enable/disable logging:
- Open the Management Console tool from Windows Start. Or go to the Ecrion Installation Folder, navigate to Engines\Bin and open
ManagementConsole.exe. - Next, in the left-hand tree-view, go to the ServerManager\Configuration and select the component on each you want to enable/disable logging.
- Expand
Engine Settings, then access theLoggingoption. - Within Logging window, double-click on the Log Level option and select the log level you want to configure.
Note
For each configuration, you will have to restart the Ecrion Component service in order that the configurations be taken into account.
Dump stack trace on error
The stack trace is logged whenever an exception is thrown. This should be set to false, and must be turned on for troubleshooting, only when instructed by Ecrion Technical Support.
Log Folder
By default, all Ecrion log files are located in %APPLICATION_DATA/Ecrion/Log. To change the default location, you will have to follow the steps below.
For Publishing Engine
- Open the Management Console and navigate to the Ecrion Publishing Engine tool.
- Next, navigate to Engine Settings\Logging and double click on the
Log Folderparameter. - Enter the path to disk drive location where you want to store the log files.
- Make sure that the
Restart the service to apply changesis checked so the Publishing service to be restarted to apply the changes. - Once you're ready, select Ok. To view the log files, double-click on the
Log Filesoption.
For Data Engine
- Open the Management Console and navigate to the Ecrion Data Engine tool.
- Next, navigate to the Engine Settings\Logging and double click on the
Log Folderparameter. - Enter the path to disk drive location where you want to store the log files.
- Make sure that the
Restart the service to apply changesis checked so the Publishing service to be restarted to apply the changes. - Once you're ready, select Ok. To view the log files, double-click on the
Log Filesoption.
For Analytics Engine
- Open the Management Console and navigate to the Ecrion Analytics Engine tool.
- Next, navigate to the Engine Settings\Logging and double click on the
Log Folderparameter. - Enter the path to disk drive location where you want to store the log files.
- Make sure that the
Restart the service to apply changesis checked so the Publishing service to be restarted to apply the changes. - Once you're ready, select Ok. To view the log files, double-click on the
Log Filesoption.
Runtime Logs
Execution Logs
These logs are used to track brief information for everything that runs in Ecrion Platform. By accessing Execution Logs, you will be able to inspect both, jobs and some API calls like Direct Render. Please visit the Execution Log section from Ecrion User Guide to learn more information.
Synchronization Logs
These logs are used to track synchronization between Amazon S3 and Ecrion. Please visit the Synchronization Logs section from Ecrion User Guide to learn more information.
Backend Services Logs
Other Ecrion services like Analytics, Audit, Customer, Discussions, Scheduler, Triggers also provides logging. Usually the logging of this services is stored in the Ecrion database and are visible in each particular service module.
Event Viewer
Ecrion Platform allows users to enable event logs on an environment, permitting users to duplicate the jobs logs in the Windows Event Viewer tool. In this section, you can learn how to enable logging notifications on an environment.
Enabling Event Logs in Sysadmin Website
- Sign in to the Sysadmin Website and access the
Environmentstile. - Select the environment on which you want to enable the event logging and navigate to the
Logging Notificationstab. - Start by checking in the
Logging Notification Enabledoption, then fill in the form with the needed content:Destination: select the destination of the event logging (the logging application) Currently, you can selectWindows Events.Event Source Id: set up a unique identifiable event ID.Severities: select the appropriate security levels that will be logged.Message: create a message log. You can use the placeholders, from the right side, to create the log message.
Inspecting Event Logs
- Sign in to the Enterprise Website using the environment credentials on which you enabled logging notifications.
- Navigate to the Communications module and run the project of which job you want to inspect.
- When the communication has finished, you will be able to view the logs details into the Log page.
- Next, open the Windows Event Viewer tool. In the left-hand tree view, navigate to
Windows Logs\Application. - In the Application list, search for the
Event IDyou have set up. Once selected, notice that the logs displayed in the communication log page will be also visible here in the upper part of the window.
Vault Logs
These logs have two scopes: one is for audit log, where actions like logout, create, update or delete will be stored, and the second one is containing information about the archiving process, such as when an archive was started, when finished, failed jobs, when it was bring online, etc.
Inspecting Vault Logs
- Access the Ecrion Vault website.
- In the home screen, select
Logfrom the toolbar to see the audit and all archives data available in the Log page. - In case you want to access only the logs for a specific archive, select the archive and after that, click
Logfrom the toolbar. The Log page will deliver to you now, only the archive messages related to your selection.
To configure the Vault Logs you will have to use some parameters from the Vault configuration file. For example, to disable the Log Service, you need to add the following line in the configuration file: LogServiceEnabled=false.
The log messages will be stored in the Vault log folder (by default, at C:\programData\Ecrion\MicroservicesLog\ - folder that can be configurable at installation time) and it can be easily changed from the configuration file (Vault.config) after the installation is completed. The logs are stored in a sub folder, named "Vault" and they are created per environment.
Vault Master Log
System logs are present in a corresponding Vault master log, where its location can be found under the configuration file (Vault.config). By default, the folder path is C:\ProgramData\Ecrion\Log.
Common Errors
This section lists troubleshooting tips for common encountered problems.
400 Bad Request
Symptoms
When accessing an Ecrion Platform Website, you receive a 400 Bad Request error. This can manifest in a number of ways, depending on how Ecrion Software was installed:
- The website can only be accessed from the server itself using the localhost URL, but cannot be accessed from the outside using the hostname URL.
- The website can be accessed from the outside using the hostname URL, but not from the server using the localhost URL. The website can, however, be accessed from the server using the hostname URL.
Solution
This is because of the default bindings in IIS. These will match the hostname URL(s) configured during installation. By default, these are localhost, but they should actually be set to use the hostname of the server as seen from the outside. This is important because the hostname URL will be used in emails sent to users and customers. We also recommend accessing Ecrion Platform using the hostname URL, even if that access is being performed from the server itself.
To change the hostname for either of the websites, just re-run the installer and set the correct hostname for each of the websites: Enterprise Website, System Administration, Customer Portal.
You can also set up access to each website from any machine, regardless of the hostname, by setting the appropriate bindings in IIS. However, the recommendation is that the IIS bindings always match the hostname set during installation, for consistency.
500 Internal Server Error(500.19)
Symptoms
After installation, you receive a 500 Internal Server Error when trying to access Ecrion Website pages from a remote computer. On the server, the detailed error is 500.19 - Internal Server Error. The requested page cannot be accessed because the related configuration data for the page is invalid, like in the screenshot below:

Solution
Install the URL Rewrite module for IIS 7 or later: https://www.iis.net/downloads/microsoft/url-rewrite. You can also read more details on this in the Pre-Install Requirements chapter of this guide.
Missing Modules on Home Page
Symptoms
After creating a new environment, most of the modules on the home page are missing.
Solution
Enable this functionality in the System Administration website by clicking on the corresponding environment. New environments are automatically created with a minimal set of modules enabled. The sysadmin must then enable the functionality they need from the Edit Environment dialog:
License Not Found
Symptoms
License Not Found error when accessing one of the Ecrion Websites, or missing functionality.
Solution
Common license errors are:
- Missing suitable license for specific product or feature
- Suitable license found but doesn’t support the number of cores
Make sure you have the appropriate licenses installed and activated on the machine. You need a total of 8 distinct licenses for a fully functional setup, one for each of the components. Some components are optional, e.g. the Customer Portal website or the Analytics Engine.
If you are not sure whether you have the correct license(s) installed, please reach out to support@ecrion.com.