MICROSOFTHowtoconfigureanInternet-FacingDeploymentforMicrosoftDynamicsCRM4.02/9/2009ThisdocumentisintendedtocoverhowtosetuptheMicrosoftDynamicsCRM4.0WebsitetomakeitavailablefromtheInternet.ThisdocumentwillcoverthefollowingInternet-FacingDeployment(IFD)scenariosforMicrosoftDynamicsCRM4.0.InstallorUpgradeMicrosoftDynamicsCRM4.0throughtheuserinterface(UI)setupInstallorUpgradeMicrosoftDynamicsCRM4.0withaconfigurationfile2TableofContentsOverview.......................................................................................................................................................3Usingaconfigurationfileorthe“CRM40IFDTool”...................................................................................3SetuptestDNSrecord...............................................................................................................................4MicrosoftDynamicsCRMDataConnectorforSQLServerReportingServices........................................5Scenario1:InstallorUpgradeMicrosoftDynamicsCRM4.0throughtheuserinterface(UI)setup...........5Scenario2:InstallorUpgradeMicrosoftDynamicsCRM4.0withaconfigurationfile................................6HowtousetheCRM40IFDTool...................................................................................................................10Stepstorunthetool...............................................................................................................................10MoreInformation...................................................................................................................................12ISAServer............................................................................................................................................12TurnoffIFD.........................................................................................................................................12LogFile................................................................................................................................................12InstallingCRMwithIFDenabledagainstanexistingwebsitewithHostheadersoraCertificateenabledonthewebsite......................................................................................................................13SplittingOutServerRoles...................................................................................................................14TroubleshootingInformation......................................................................................................................16FAQ..............................................................................................................................................................18SendFeedbackonthearticle......................................................................................................................243HowtoconfigureanInternet-FacingDeploymentforMicrosoftDynamicsCRM4.0ThisdocumentwillcoverthefollowingInternet-FacingDeployment(IFD)scenariosforMicrosoftDynamicsCRM4.0.InstallorUpgradeMicrosoftDynamicsCRM4.0throughtheuserinterface(UI)setupInstallorUpgradeMicrosoftDynamicsCRM4.0withaconfigurationfileThisdocumentisintendedtocoverhowtosetupMicrosoftDynamicsCRM4.0tomakeitreadytobeaccessedfromtheInternet.ThisdocumentwillnotcoverthestepsthatyoumustcompletetomakeaserveravailablefromtheInternet.TherewillbeadditionalstepsdependingonifyouareusingISAserver,firewallsoranythingelseinyourenvironmentthatmayneedtobeconfiguredtogetyourserveraccessiblefromtheinternet.OverviewUsingaconfigurationfileorthe“CRM40IFDTool”TosuccessfullysetupaMicrosoftDynamicsCRM4.0IFDenvironment,thereareseveralitemsthatmustbesetforauthenticationtoworkcorrectly.TheseoptionsaresetwhenyouinstallMicrosoftDynamicsCRM4.0byusingaconfigurationfileorbyusingthe“CRM40IFDTool”afterMicrosoftDynamicsCRMisinstalledtoenableIFD.EnablingIFDdoesthefollowing:Theweb.configfilecontainsanauthenticationstrategyparameter.Thisparameterwillbeupdatedto“ServiceProviderLicenseAgreement”Forexample,youwouldseethefollowingparameterintheweb.configfile:authenticationstrategy=”ServiceProviderLicenseAgreement”/TheEnableanonymousaccessauthenticationmethodontheMicrosoftDynamicsCRM4.0Websiteismarked.Note:TheIntegratedWindowsauthenticationmethodmustremainmarkedforinternaluserswhodonotaccesstheMicrosoftDynamicsCRMWebsitebyusingtheIFDdeployment.TheDeploymentPropertiestableintheMSCRM_ConfigSQLdatabasehasthreevaluesthatareupdated.oIfdRootDomainScheme4httporhttpsoIfdSdkRootDomainDomain.comoIfdWebApplicationRootDomainDomain.comTheIfdInternalNetworkAddressregistrykeyontheMicrosoftDynamicsCRMserverisupdated.ThisregistrykeydetermineswhethertheuserisloggingintotheMicrosoftDynamicsCRMWebsitefromtheInternetorIntranet.ThisregistryvaluethendetermineswhethertheuserusesCRMticketauthentication(Internet)orIntegratedWindowsauthentication(Intranet).oTheIfdInternalNetworkAddressregistrykeyislocatedhere:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRMoThiskeyholdsanexampleofanipaddressandthe