Remote Administration

You can remotely administer EFT from any computer on which the administration interface is installed (with network access). If you are using SSL, you must create and/or assign an SSL certificate to use for connections. When you connect from a remote administration interface, an SSL Certificate dialog box appears in which you must accept the certificate to continue. If you reject the certificate, the User Connect Failed Event is triggered with the Event Reason of "Client SSL Certificate was rejected."

If you are not installing the administrative interface and plan to use the COM API for remote administration, refer to Remotely Administering EFT Using the COM API in the COM API reference.

Refer to FAQs About Remote Administration for several facts and caveats to consider regarding remote administration.

Refer to Remote Administration via DMZ Gateway if you intend to allow EFT administration through DMZ Gateway.

 

Remote administration is not allowed after the trial expires if you do not activate the software.

If you are using SQL Express as your database, you may not be able to generate a report remotely, unless the connecting account is a trusted SQL Server connection (e.g., if SQL Server and the remote computer are in the same domain, or if SQL Server is configured to allow "mixed authentication").

What you can't do remotely:

Before you can connect from the remote administration interface, you must:

  1. Configure the Server. You must do this locally, on EFT computer.

  2. Configure remote administration, as described below.

If you have configured remote administration, but are unable to connect, one or more of the following could be preventing the connection:

The following topics describe:

To configure EFT for remote administration

  1. Launch the administration interface on EFT computer and connect to EFT you want to configure for remote administration. (You cannot setup remote administration remotely.)

  2. In the right pane, click the Administration tab.

  3. In the Server administrator listening IP box, specify the IP address that is allowed to connect remotely. You can select a specific IP address that is defined on the computer on which EFT is installed or All Incoming IP addresses. (For command-line login, the EFT administrator listening IP address must be set to a specific IP address, not All Incoming.)

  4. In the Port box, specify the port on which EFT listens for connections. The default port is 1100. For security, you should use a different port other than the default.

  5. Select the Allow remote administration check box. A warning message appears advising you to connect over SSL for more secure administration.

    If you attempt to allow remote administration on a high security-enabled Site, a message appears to warn you that this setting violates PCI DSS, and allows you to continue with reason or disable the feature.

  6. Click Yes to set up secure administration or No to administer the server over a clear (not secure) connection.

  7. To require SSL for remote connections, click the Require SSL for remote administration check box, and then click Configure. The SSL Certificate Settings dialog box appears.

  8. Do one of the following:

  9. Click OK to close the dialog box.

  10. Click Apply to save the changes on EFT.

  11. Close the administration interface. Make sure that the EFT service is still running, then configure the remote administration interface using the procedure below.

To configure the remote administration interface

  1. Launch the administration interface on the remote computer.

  2. Click the Server tab.

  3. Specify EFT Group to which you want to add the remote server.

  4. On the File menu, click Add New Server. The Login wizard New Administrator Connection page appears.

  5. Click A remote computer.

  6. In the Label box, type the name of EFT to which you want to connect. You can call it anything you want; it has nothing to do with EFT's computer name.

  7. In the Host address box, type the IP address of EFT computer.

  8. In the Port box, type the port number used by EFT.

  9. Click Next. The EFT Administrator Login page appears.

  10. Click A remote computer, then click its name (the label you gave EFT in step 6) in the box.

  11. In the EFT Server administrator credentials area, provide your Username and Password, and then click Connect.

If SSL is required for remote administration, a Server Certificate dialog box appears.

  1. Accept or reject the SSL certificate from the remote EFT by clicking Trust Once (just for this session), Trust Always (for this and future connections, provided the SSL certificate does not change), or Reject (do not accept the certificate and do not connect to the server). (To undo a trust-always certificate, delete the appropriate trusted certificate file(s), stored in the %AppData% directory as Cert_for_<ip>.crt.)

Remote Administration FAQ

EFT allows you to administer it remotely from any computer with network access. You can administer EFT with the administration interface (AI) or using the COM API. Below are several facts and caveats to consider regarding remote administration.