Using the Administration Tools

To access SharePoint Portal Server Central Administration pages, you must at a minimum be a member of the SharePoint administrators group. However, if you want to enable Secure Sockets Layer (SSL), you must be a member of the local Administrators group.

On the taskbar, click Start, point to All Programs, point to SharePoint Portal Server, and then click SharePoint Central Administration.

Alternatively, on the Site Settings page for a portal site, in the General Settings section, click Go to SharePoint Portal Server central administration.

It is recommended that you enable Secure Sockets Layer (SSL) for the virtual server for SharePoint Central Administration on each front-end Web server on the server farm. Otherwise, passwords can be sniffed across the network.

1. On the taskbar, click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
2. In Internet Information Services (IIS) Manager, expand the node for the computer name, and then expand the node for Web Sites.
3. Right-click SharePoint Central Administration, and then click Properties.
4. On the SharePoint Central Administration Properties page, click the Directory Security tab.
5. In the Secure communications section, click Server Certificate.
6. On the Web Server Certificate Wizard, click Next.
7. Click Assign an existing certificate, and then click Next.

   Note  If you already have a certificate for your portal site, it is recommended that you assign that same certificate to SharePoint Portal Central Administration. If you do not have a certificate, you must request one and then assign it.

8. Click the certificate you want to use for SharePoint Portal Server Central administration, and then click Next.
9. In SSL port this web site should use, type a port number.

   Note  This is a temporary port number needed to configure SSL. When you set the port for SharePoint Central Administration, you must use a different port number.

   Caution  If you set this port to 443 and the portal site is also using 443, you will receive errors. It is strongly recommended that you choose a port number not used by the portal site.

10. Click Next.
11. Click Finish.
12. On the Directory Security tab of the SharePoint Central Administration Properties page, in the Secure communications section, click Edit.
13. In the Secure Communications dialog box, click Require secure channel (SSL), and then click OK.
14. On the SharePoint Central Administration Properties page, click OK.

After you configure SSL, you must run the following command (once only for the server farm) from a command prompt:

%programfiles%\Common Files\Microsoft Shared\web server extensions\60\BIN\stsadm.exe -o setadminport -port port -ssl

Note  If you use the same port that you used when configuring SSL, you will receive an error. If this occurs, run the command again using a different port number.

Running this command will change the URL of the root central administration page (stored in the configuration database) to https:// instead of http:// to reflect that SSL has been enabled on the virtual server. To secure portal sites, an administrator can also enable SSL on virtual servers that host portal sites.

After you update the port for SharePoint Portal Server Central Administration, you must modify the shortcut in your start menu to use the new port.

1. On the taskbar, click Start, point to All Programs, point to SharePoint Portal Server, and then point to SharePoint Central Administration.
2. Right-click SharePoint Central Administration, and then click Properties.
3. On the SharePoint Central Administration Properties page, click the Web Document tab, and change the port in the URL to use the updated port.
4. Click OK.

To back up or restore an image successfully, the following accounts must have access to the directory containing the backup files:

• The service account for SQL Server must have write access to the directory.
• The search service and database access accounts for search must have write access to the directory.
• The current user must have write access to the directory.

The current user must also have the following rights:

• Read access to all SQL Server databases
• Write access to all site databases and the configuration database
• Membership in the local administrators group on the document management server
• Administrator rights on the database server, either as a member of the local Administrators group or as a member of the SQL Server 2000 System Administrators server role

On the taskbar, click Start, point to All Programs, point to SharePoint Portal Server, and then click SharePoint Portal Server Data Backup and Restore.

To access the SharePoint Portal Server Single Sign-On Administration pages initially, before single sign-on is configured, you must be a member of the local Administrators group.

After single sign-on is configured, you must have the following rights:

• To access the Manage server settings page and the Manage encryption key page, you must be both of the following:
  1. A member of the single sign-on administrator account. For more information about this account, see Specifying Settings for Single Sign-On and Application Definitions.
  2. A member of the local Administrators group.
• To access the Manage settings for enterprise application definitions page and the Manage account information for enterprise application definitions page, you must be one of the following:
  • A member of the single sign-on administrator account.
  • A member of the enterprise application manager account. For more information about this account, see Specifying Settings for Single Sign-On and Application Definitions.

On the taskbar, click Start, point to All Programs, point to SharePoint Portal Server, and then click SharePoint Portal Server Single Sign-On Administration.

Alternatively, on the SharePoint Portal Server Central Administration for server_name page, in the Component Configuration section, click Manage settings for single sign-on.