CWS - Conversation Web Service Interface

The CWS service is an active – active component and has to be installed on all TM machines. With CWS it is possible to perform a configuration of teams and team members without the use TM FE or TM Configurator. 

Installation

1. Run the TM.CWS.Setup.msi
2. On the   Luware-TM-CWS Configuration Settings   screen of the setup pay attention to fill the
   
   1. Instance Name
   2. Port number
   3. SfB Server Version
   4. Configure Certificate Security

3. For security reason TM provides possibility to use certificate-based encryption and verification during the components communication. To configure certificate based authentication, select ‘Configure Certificate Security’ check box and press ‘Next’ button to open a page with server certificate settings.

   

   Example of filled Luware-TM-CIC Configuration Settings screen

4. If ‘Configure Certificate Security’ check box was set to true, configure the server and client certificate settings as the next step. The client settings specify which settings CWS will use while connecting to PS. The server settings are used to validate another services when they try to connect to CWS.
   

   

   Example of CIC Certificate settings

   Settings	Description	Value
   Mode	Transfer security modes offered by WCF to ensure a secured communication between a client and a server.	None : This mode ensures that no security is applied while communication between server and client. Transport:   As the name suggests, it is concerned with security of communication between a client and a service over a network protocol. It guarantees the confidentiality and integrity of messages at transport level since transport security secures the entire communication channel.
   Validation Mode	The mode that specifies how incoming certificate is validated and how trust is determined.	None:  In this mode no validation is perfomed. ChainTrust: :  In this mode WCF simply validates the certificate against the issuer of a certificate known as a root authority (the expiration time is checked too). PeerTrust:  In this mode WCF simply checks if the incoming certificate is installed in the  Trusted People  folder in the certificate store (the expiration time is checked too). PeerOrChainTrust:  Mixed mode.
   Is Dedicated	The flag that defins which certificate is used for encryption.	False: Encryption is done with default certificate. It means that certificate with the hostname of the machinefrom the Personal Store is used on server side. True : Encryption is done with a dedicated certificate. It means there is  possibility to configure identifier (thumbprint) of the certificate.
   Thumbprint	The thumbprint is a hash value computed over the complete certificate, which includes all its fields, including the signature.	→  See Prepare Certificate Thumbprint

Configuration

In the Luware TM Configurator application:

1. Open TM Configurator -> Topology -> Components (Server)

2. Add CWS component as it is shown in the example (select the CWS Server Type, System Instance, Activity Order and fill the service's Settings according to the table below):

   

   Example of filled CWS component details