Konfiguracja Sitecore Commerce 9 na Azure VM

Konfigurując środowisko dla Sitecore Commerce 9 na pojedynczej instancji (np środowisko do testów, lub demo) musisz zadbać o kilka dodatkowych ustawień, tak żeby strona działała z własną domeną. Spróbuję opisać tutaj co trzeba zmienić w konfiguracji XC zainstalowanej na maszynie wirtualnej w Azure. Podobne ustawienia obowiązują także na własnym serwerze.

Nazwy hostów w plikach konfiguracyjnych

Aplikacja Business Tools: Ustaw EngineUri, IdentityServerUri i BizFxUri w pliku SitecoreBizFx\assets\config.json:

{
  "EnvironmentName": "HabitatAuthoring",
  "EngineUri": "https://hostname.westeurope.cloudapp.azure.com:5000",
  "IdentityServerUri": "https://hostname.westeurope.cloudapp.azure.com:5050",
  "BizFxUri": "https://hostname.westeurope.cloudapp.azure.com:4200",
  "Language": "en",
  "Currency": "USD",
  "ShopName": "CommerceEngineDefaultStorefront",
  "LanguageCookieName": "selectedLanguage",
  "EnvironmentCookieName": "selectedEnvironment"
}

{

"EnvironmentName": "HabitatAuthoring",

"EngineUri": "https://hostname.westeurope.cloudapp.azure.com:5000",

"IdentityServerUri": "https://hostname.westeurope.cloudapp.azure.com:5050",

"BizFxUri": "https://hostname.westeurope.cloudapp.azure.com:4200",

"Language": "en",

"Currency": "USD",

"ShopName": "CommerceEngineDefaultStorefront",

"LanguageCookieName": "selectedLanguage",

"EnvironmentCookieName": "selectedEnvironment"

}

Aplikacja Identity Server: Ustaw AppSettings\Clients\RedirectUris (możesz dodać też cały wpis) w pliku SitecoreIdentityServer\wwwroot\appsettings.json:

...
"Clients": [
      {
        "ClientId": "CommerceBusinessTools",
        "ClientName": "CommerceBusinessTools",
        "AccessTokenType": 0,
        "AccessTokenLifetimeInSeconds": 3600,
        "IdentityTokenLifetimeInSeconds": 3600,
        "AllowAccessTokensViaBrowser": true,
        "RequireConsent": false,
        "RequireClientSecret": false,
        "AllowedGrantTypes": [ "implicit" ],
        "RedirectUris": [ "http://hostname.westeurope.cloudapp.azure.com:4200", "http://hostname.westeurope.cloudapp.azure.com:4200/?", "https://hostname.westeurope.cloudapp.azure.com:4200", "https://hostname.westeurope.cloudapp.azure.com:4200/?" ],
        "PostLogoutRedirectUris": [ "http://hostname.westeurope.cloudapp.azure.com:4200", "http://hostname.westeurope.cloudapp.azure.com:4200/?", "https://hostname.westeurope.cloudapp.azure.com:4200", "https://hostname.westeurope.cloudapp.azure.com:4200/?" ],
        "AllowedCorsOrigins": [ "http://hostname.westeurope.cloudapp.azure.com:4200/", "http://hostname.westeurope.cloudapp.azure.com:4200", "https://hostname.westeurope.cloudapp.azure.com:4200/", "https://hostname.westeurope.cloudapp.azure.com:4200" ],
        "AllowedScopes": [ "openid", "dataEventRecords", "dataeventrecordsscope", "securedFiles", "securedfilesscope", "role", "EngineAPI" ]
      }
...

...

"Clients": [

{

"ClientId": "CommerceBusinessTools",

"ClientName": "CommerceBusinessTools",

"AccessTokenType": 0,

"AccessTokenLifetimeInSeconds": 3600,

"IdentityTokenLifetimeInSeconds": 3600,

"AllowAccessTokensViaBrowser": true,

"RequireConsent": false,

"RequireClientSecret": false,

"AllowedGrantTypes": [ "implicit" ],

"RedirectUris": [ "http://hostname.westeurope.cloudapp.azure.com:4200", "http://hostname.westeurope.cloudapp.azure.com:4200/?", "https://hostname.westeurope.cloudapp.azure.com:4200", "https://hostname.westeurope.cloudapp.azure.com:4200/?" ],

"PostLogoutRedirectUris": [ "http://hostname.westeurope.cloudapp.azure.com:4200", "http://hostname.westeurope.cloudapp.azure.com:4200/?", "https://hostname.westeurope.cloudapp.azure.com:4200", "https://hostname.westeurope.cloudapp.azure.com:4200/?" ],

"AllowedCorsOrigins": [ "http://hostname.westeurope.cloudapp.azure.com:4200/", "http://hostname.westeurope.cloudapp.azure.com:4200", "https://hostname.westeurope.cloudapp.azure.com:4200/", "https://hostname.westeurope.cloudapp.azure.com:4200" ],

"AllowedScopes": [ "openid", "dataEventRecords", "dataeventrecordsscope", "securedFiles", "securedfilesscope", "role", "EngineAPI" ]

}

...

Dla wszystkich ról Commerce Engine ustaw AppSettings\SitecoreIdentityServerUrl i AllowedOrigins w pliku {CommerceAuthoring/Ops/Minions/Shops}\wwwroot\config.json:

...
"AppSettings": {
    "SiteTitle": "Sitecore Commerce Engine",
    "BootStrapFile": "Global",
    "DeploymentId": "Deployment01",
    "EnvironmentName": "HabitatShops",
    "EncryptionProtectionType": "Machine",
    "EncryptionCertificateHash": "Enter a valid certificate thumbprint for a PXF file. X-509 not supported yet",
    "EncryptionSID": "Enter a valid SID for a domain registered user",
    "EncryptionKeyStorageLocation": "c:\\Encryption-Keys\\",
    "SitecoreIdentityServerUrl": "https://hostname.westeurope.cloudapp.azure.com:5050",
    "AllowedOrigins": [ "https://hostname.westeurope.cloudapp.azure.com", "https://hostname.westeurope.cloudapp.azure.com:4200" ],
    "AntiForgeryEnabled": false,
    "UseHttpsInKestrel": true,
    "SslPort": 5000,
    "SslPfxPath": "wwwroot/localhost.pfx",
    "SslPfxPassword": "sitecore"
  }
...

...

"AppSettings": {

"SiteTitle": "Sitecore Commerce Engine",

"BootStrapFile": "Global",

"DeploymentId": "Deployment01",

"EnvironmentName": "HabitatShops",

"EncryptionProtectionType": "Machine",

"EncryptionCertificateHash": "Enter a valid certificate thumbprint for a PXF file. X-509 not supported yet",

"EncryptionSID": "Enter a valid SID for a domain registered user",

"EncryptionKeyStorageLocation": "c:\\Encryption-Keys\\",

"SitecoreIdentityServerUrl": "https://hostname.westeurope.cloudapp.azure.com:5050",

"AllowedOrigins": [ "https://hostname.westeurope.cloudapp.azure.com", "https://hostname.westeurope.cloudapp.azure.com:4200" ],

"AntiForgeryEnabled": false,

"UseHttpsInKestrel": true,

"SslPort": 5000,

"SslPfxPath": "wwwroot/localhost.pfx",

"SslPfxPassword": "sitecore"

}

...

Dla wszystkich ról Commerce Engine ustaw Policies\$values\Host w {CommerceAuthoring/Ops/Minions/Shops}\wwwroot\data\Environments\PlugIn.Content.PolicySet-1.0.0.json:

{
  "$type": "Sitecore.Commerce.Core.PolicySet, Sitecore.Commerce.Core",
  "Id": "Entity-PolicySet-ContentPolicySet",
  "Version": 1,
  "IsPersisted": false,
  "Name": "ContentPolicySet",
  "Policies": {
    "$type": "System.Collections.Generic.List`1[[Sitecore.Commerce.Core.Policy, Sitecore.Commerce.Core]], mscorlib",
    "$values": [
      {
        "$type": "Sitecore.Commerce.Plugin.Management.SitecoreConnectionPolicy, Sitecore.Commerce.Plugin.Management",
        "Host": "hostname.westeurope.cloudapp.azure.com",
        "SitecoreDatabase": "master",
        "UserName": "admin",
        "Domain": "sitecore",
        "Password": "b",
        "ConnectionLeaseTimeout": 60000,
        "AuthRequestUrl": "sitecore/api/ssc/auth/login",
        "Protocol": "https"
      },
      {
        "$type": "Sitecore.Commerce.Plugin.Content.DefaultContentPathsPolicy, Sitecore.Commerce.Plugin.Content",
        "ContentPaths": {
          "$type": "System.Collections.Generic.List`1[[System.String, mscorlib]], mscorlib",
          "$values": [
            "/sitecore/Commerce/Commerce Control Panel"
          ]
        }
      }
    ]
  }
}

{

"$type": "Sitecore.Commerce.Core.PolicySet, Sitecore.Commerce.Core",

"Id": "Entity-PolicySet-ContentPolicySet",

"Version": 1,

"IsPersisted": false,

"Name": "ContentPolicySet",

"Policies": {

"$type": "System.Collections.Generic.List`1[[Sitecore.Commerce.Core.Policy, Sitecore.Commerce.Core]], mscorlib",

"$values": [

{

"$type": "Sitecore.Commerce.Plugin.Management.SitecoreConnectionPolicy, Sitecore.Commerce.Plugin.Management",

"Host": "hostname.westeurope.cloudapp.azure.com",

"SitecoreDatabase": "master",

"UserName": "admin",

"Domain": "sitecore",

"Password": "b",

"ConnectionLeaseTimeout": 60000,

"AuthRequestUrl": "sitecore/api/ssc/auth/login",

"Protocol": "https"

{

"$type": "Sitecore.Commerce.Plugin.Content.DefaultContentPathsPolicy, Sitecore.Commerce.Plugin.Content",

"ContentPaths": {

"$type": "System.Collections.Generic.List`1[[System.String, mscorlib]], mscorlib",

"$values": [

"/sitecore/Commerce/Commerce Control Panel"

]

}

]

}

Certyfikaty w plikach konfiguracyjnych

Dla wszystkich ról Commerce Engine ustaw thumbprint strony storfront w Certificates\Certificates\Thumbprint (możesz też dodać cały wpis) w pliku {CommerceAuthoring/Ops/Minions/Shops}\wwwroot\config.json:

"Certificates": {
    "Certificates": [
      {
        "Thumbprint": "76879429EB10AC4B44F5EFEEB8F338D3C484563D",
        "DefaultRoles": [ "sitecore\\QA", "sitecore\\Commerce Business User" ]
      }
    ],
    "CertificateHeaderName": "X-CommerceEngineCert"
  }

"Certificates": {

"Certificates": [

{

"Thumbprint": "76879429EB10AC4B44F5EFEEB8F338D3C484563D",

"DefaultRoles": [ "sitecore\\QA", "sitecore\\Commerce Business User" ]

}

"CertificateHeaderName": "X-CommerceEngineCert"

}

Aby uzyskać thumbprint certyfikatu, użyj skryptu PowerShell Get-ChildItem -path cert:\LocalMachine\My i skopiuj wartość dla certyfikatów użytych na stronie.

Commerce Business Tools w Launchpad

Na bazie core ustaw wartość pola Link w itemie /sitecore/client/Applications/Launchpad/PageSettings/Buttons/Commerce/BusinessTools:

Nazwa hosta Storefront

Na bazie master zmień wartość pola Host Name w itemie /sitecore/content/{Sites}/{Site}/Settings/Site Grouping/{Site}:

Nazwy hostów w IIS

Skonfiguruj IIS bindings, numer portu i wybierz odpowiedni certyfikat SSL dla:

strony Sitecore (storefront):

Commerce business tools (BizFx):

Identity Server:

Commerce authoring service:

Ustawienie lokalnego firewall’a

Dodaj regułę dla połączeń przychodzących dla portów 4200, 5000, 5050 w ustawieniach firewalla na VM:

Ustawienie firewall’a w Azure Portal

Dodaj regułę dla połączeń przychodzących dla portów 4200, 5000, 5050 (oraz dla 80 i 443 jeśli ich brakuje) w ustawieniach Networking maszyny wirtualnej w Azure Portal:

Jimmy

I also had to update the Sitecore.commerce.Engine.Connect.config in the sitecore rootapp_configincludey.commerce.engine folder path. There is a CertificateThumbprint that needs updated with the new thumbprint as well. I saw in my commerce logs it was still referencing the old thumbprint. Once I changed it here, everything worked.
- whuu
  
  @disqus_awjnVma9oE:disqus thanks for your feedback!
serdar karahisarli

Hey,

this was a blog that I was looking for. I guess I did the steps correctly but I am not sure what you mean with the “Certificates in Configuration Files”. Which certificate’s thumbprint should be updated in that config? Is it the new certificate that you get for the domain ? because the default installation puts the xxx.engineconnect certificate’s into that thumbprint.
- whuu
  
  Hi
  
  You should put there certificate which you used for your storefront domain and BixFx app (if it uses different certificate). Finally in this file you should have thumbprints for all certificates of domains which you have in “AllowedOrigins” entry in same config file.
  - serdar karahisarli
    
    thanks for the reply, I forgot to say that 🙂