Professional Documents
Culture Documents
9.0
Installation Guide
THE CLINICAL CONTENT IS PROVIDED “AS IS.” MCKESSON HEALTH SOLUTIONS LLC DISCLAIMS ANY OTHER
WARRANTY, EXPRESS OR IMPLIED, INCLUDING AS TO MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
OR SERVICE OF THE CLINICAL CONTENT, OR THE COMPATIBILITY OF OUTPUT USING THE CLINICAL CONTENT WITH
ANY LAW, REGULATION, OR ORDER. IN NO EVENT SHALL MCKESSON HEALTH SOLUTIONS LLC BE LIABLE FOR
SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR EXEMPLARY DAMAGES IN CONNECTION WITH, OR ARISING OUT OF, ANY
USE OF THE CLINICAL CONTENT.
This guide explains the hardware and software requirements and tasks that
you should perform before you begin the installation process.
If you are installing CareEnhance Review Manager Enterprise for Red Hat
Enterprise Linux, the descriptions and procedures in this guide require that
you be familiar with the following:
Red Hat Enterprise Linux
IBM® WebSphere® Application Server and WebSphere server clustering
Product Support
You can contact Product Support in the following ways:
Phone—1-800-CRITERIA or 1-800-274-8374
E-mail—cesupport@mckesson.com
Web—MHSCustomerHub.McKesson.com
If you still cannot resolve your problem, before contacting Product Support,
please do the following to assist the Product Support representative in
expediting the diagnosis and resolution of your problem:
Record the nature of the problem and what you were doing just before the
problem occurred.
Determine the release number and the build number of the software that
you are using. To obtain this information, on the menu bar, click Help and
then click the “About” option.
If possible, contact Product Support from in front of your workstation with
the relevant application open.
Configuration 1 Configuration 2
End User
Workstation
Configuration 3
DBMS
Web Server
Application Server
DBMS Application Server
CareEnhance Review Manager End User
CareEnhance Review Manager
Enterprise Workstation
Enterprise
Server Software
Table 1–1
Application App. Server OS Web Server DBMS
Server
Jetty 6.1.20a Microsoft® Windows® Server 2003 Jetty 6.1.20a or Microsoft Access b,c,d
SP2 IIS 6.0 on 32-bit server
32-bit server or 64-bit server Any of the following on 32-
Jetty 6.1.20 a
® ®
Microsoft Windows Server 2008 a
Jetty 6.1.20 or bit server or 64-bit server:
32-bit server or 64-bit server IIS 7.0 Oracle 10g (10.2.0.4)
Oracle 11g (11.1.0.7 R1)
IBM® WebSphere® Microsoft Windows Server 2003 SP2 Apache 2.2 HTTP
7.0 Microsoft SQL Server
32-bit server
2005 SP3e
IBM WebSphere 7.0 Red Hat Enterprise Linux Version IBM HTTP Server
Microsoft SQL Server
4.0 Updater 6f 7.0g
2008 SP1e
32-bit server
a. McKesson includes the Jetty Web and application servers with Review Manager.
b. You cannot use an Access database if Review Manager is installed on a Linux server.
c. Review Manager and InterQual® View use the Microsoft JET Database Engine to connect to the Access database.
These applications do not require you to have Microsoft Access installed. For Access installations, Review
Manager automatically installs the JET Database Engine. Microsoft Access is required only to view the data in an
Access database outside of the Review Manager application. Note that Microsoft requires an Access license when
10 or more users access an individual Access database.
d. McKesson recommends that you do not use Review Manager with a Microsoft Access database in production
environments.
e. McKesson will support compatibility mode for the CareEnhance® Care Manager Software.
f. A Microsoft Windows-based computer is required to initially install the Review Manager application files and
populate the Review Manager database.
g. Bundled with WebSphere 7.0.
Table 1–2
Client Application Client Operating System Other Required Software
Custom Criteria Utility 4.0 Any of the following Microsoft operating Review Manager 9.0
systems on 32-bit client: Any of the following:
Microsoft Windows XP SP2 Internet Explorer 6.0a,b
Microsoft Windows XP SP3 SP2
Microsoft Windows Vista Business Internet Explorer 7.0b
Edition SP1 Internet Explorer 8.0b
Review Manager Enterprise Mobile Any of the following Microsoft PDA Microsoft ActiveSync® 4.5
5.2 operating systems: (Windows XP only)
Windows Mobile 2003 Microsoft Windows Mobile
Windows Mobile 2003 Second Edition Device Center
(Windows Vista only)
Windows Mobile 5.0
Windows Mobile 6.0 Professional
Edition
a. Review Manager 9.0 is the last release for which Internet Explorer 6.0 will be supported.
b. McKesson supports only Internet Explorer (32-bit), even on a 64-bit PC.
Table 1–3
Software Version Notes
SUN JRE 1.6.0_16 The JRE/JVM is automatically installed with Jetty.
Sun JDK/JVM 6.0 1.6.0_16 Only 32-bit JDK/JVM is supported.
IBM JDK 6.0 Sun JVM 6.0 McKesson supports this configuration with WebSphere-based installations only.
compatible
Microsoft 9.0c and DirectX is required only on the workstation used to run the installation program.
DirectX® later
Crystal Reports 11 and later Crystal Reports is required only to create custom reports.
Although version CRxi R3 is available, it is not supported by McKesson.
Adobe Reader 8.x or 9.x Reader is required to display Review Manager PDF files, such as the
documentation and Clinical Evidence Summaries.
Adobe Flash 9.x and later This is a new requirement starting with Review Manager 9.0.
Player
This guide includes installation and upgrade instructions for each supported
CareEnhance Review Manager platform. The following sections describe the
relevant installation and upgrade chapters for each supported platform.
This chapter describes all the tasks that you need to perform to upgrade to
CareEnhance Review Manager Enterprise 9.0 or to add new products to an
existing installation of Review Manager Enterprise 9.0.
For installations using Jetty, Review Manager Enterprise 9.0 requires Jetty
6.1.20. The Review Manager installation program automatically upgrades Jetty
during the installation process to ensure that you are using this version.
Obtain the Customer ID, Product Key, and Organization values for the
upgrade. Your McKesson representative will provide you with this
information.
Make sure that all users have logged out of Review Manager Enterprise.
Ensure that the Windows user upgrading Review Manager Enterprise has
administrative rights to the installation workstation.
You can upgrade to Review Manager Enterprise either from version 7.x or
8.x. If you are upgrading from a version prior to 7.0, then you must first
upgrade to version 7.0 before upgrading to version 9.0.
If you upgrade directly from Review Manager Enterprise 7.0 to version 9.0,
the InterQual 2010 Criteria (which is included with Review Manager
Enterprise 9.0) will be installed, but the InterQual 2009 Criteria (which was
included with Review Manager Enterprise 8.0) will not be installed. If you
also want the InterQual 2009 Criteria, then you must first upgrade to Review
Manager Enterprise 8.0 before upgrading to version 9.0.
Before upgrading the Review Manager Enterprise software, you must first
update the Review Manager database.
Manager Enterprise. Make sure to backup your database before and after
upgrading Review Manager Enterprise and before upgrading your
database server.
The password associated with this user ID is encrypted and not listed in the
Connection XML Editor. If you forgot the password for this user, use SQL
Server Management Studio to change the user’s password. Make sure to
test the connection when you are done.
To abort the installation at any point, click Cancel on any installation window.
If you want to go back to a previous window, click Previous on any
installation window.
When you call McKesson Product Support, you will also receive a default
username and password, which you must use to initially access the
application.
The items listed will vary depending on which products your organization has
licensed.
Selecting either RME Mobile or CCU only copies that application’s installer to
your server. Selecting either of these options does not install the application.
To install either of these applications, select the application in the Choose
Components window to copy the installer to your server, and then follow the
applicable instructions in either the CareEnhance Review Manager Enterprise
Mobile Installation Guide or the CareEnhance Review Manager Custom
Criteria Utility Installation Guide.
If you previously installed the HL7 Interface or have not licensed the HL7
Interface, or chose a Microsoft Access installation, the Pre-Installation
Summary window appears. Continue with the procedure “Completing the
Upgrade” on page 25.
If you are licensed for the HL7 Interface and chose either a Microsoft SQL
Server or Oracle installation, the HL7 Application window appears.
If you do not want to install the HL7 application, select No, and
then click Next.
The Pre-Installation Summary window appears. Continue with the
procedure “Completing the Upgrade” on page 25.
To install the HL7 application, select Yes, and then click Next.
The HL7 Service window appears.
a. Enter the port number used for the interface, such as 5001.
b. Enter the service name or leave the default (CERMEHL7).
c. Choose whether or not to have the HL7 service start automatically,
and then click Next.
The Pre-Installation Summary window appears. Continue with the
procedure “Completing the Upgrade” on page 25.
For information on using the organization policy migration utility, see the
CareEnhance Review Manager System Administrator’s Guide.
Make sure that your system meets the system requirements for this release
of Review Manager Enterprise before installing the upgrade.
Use the same directory structure for each application server to simplify
sharing configuration files across the cluster.
Computers:
computer1—This computer hosts the WebSphere Network Deployment
Manager node, which contains the primary cluster controller and the server
administration software for the cluster. This server also hosts one
application server node.
You may use more than two computers in your cluster. Additional computers
(for example, computer3, computer4, and so on) should each host only one
WebSphere Application Server node. Should you use additional computers,
repeat any instructions provided in this book for computer2 for each
additional computer.
Nodes:
node1—This is the node on computer1 that contains both the WebSphere
Network Deployment Manager and the first WebSphere Application Server.
node2—This is the node on computer2 that contains the second WebSphere
Application Server.
Overwrite the old versions of the files on the application servers with the
newer versions as necessary.
War files
b2sw.war
help.war
help2005.war
help2006.war
help2007.war
help2008.war
help2009.war
rm.war
You can optionally copy the documentation files to additional nodes in the
cluster. The documentation files include: DataDictionary.pdf, HL7.zip,
RMInstallationGuide.pdf, and the SystemAdministratorsGuide.pdf.
3. Review all of the options in the ReviewManager.xml file, and make any
necessary changes.
4. Save the modified ReviewManager.xml file.
5. Copy ReviewManager.xml from the C:\Program Files\McKesson\CERME
directory to the
C:\Program Files\IBM\WebSphere\AppServer\profiles\AppSrv01\properties
directory of each application server node (for example, node1).
6. You can customize the performance of each server by editing certain values
in the ReviewManager.xml file. For example, you may want to modify a
specific application server’s copy of ReviewManager.xml to correspond with
that server’s cluster loading configuration.
Servers that receive a higher load should have a higher database
connection limit. However, make sure not to exceed the database network
connection limit when you add the maximum network connections for all
nodes combined.
Make sure that your system meets the system requirements for this release
of Review Manager Enterprise before installing the upgrade.
Use the same directory structure for each application server to simplify
sharing configuration files across the cluster.
Computers:
computer1—This computer hosts the WebSphere Network Deployment
Manager node, which contains the primary cluster controller and the server
administration software for the cluster. This server also hosts one
application server node.
computer2—This computer hosts another application server node.
You may use more than two computers in your cluster. Additional computers
(for example, computer3, computer4, and so on) should each host only one
WebSphere Application Server node. Should you use additional computers,
repeat any instructions provided in this book for computer2 for each
additional computer.
Nodes:
node1—This is the node on computer1 that contains both the WebSphere
Network Deployment Manager and the first WebSphere Application Server.
node2—This is the node on computer2 that contains the second WebSphere
Application Server.
Overwrite the old versions of the files on the application servers with the
newer versions from the Windows-based computer as necessary.
b2sw.war
help.war
help2005.war
help2006.war
help2007.war
help2008.war
help2009.war
rm.war
4. Repeat steps 1 through 3 on each additional computer in the cluster (for
example, computer2).
3. Review all of the options in the ReviewManager.xml file, and make any
necessary changes.
4. Save the modified ReviewManager.xml file.
5. Copy ReviewManager.xml from the C:\Program Files\McKesson\CERME
directory on the Windows-based computer to the /opt/IBM/WebSphere/
AppServer/profiles/AppSrv01/properties directory of each application
server node (for example, node1).
6. You can customize the performance of each server by editing certain values
in the ReviewManager.xml file. For example, you may want to modify a
specific application server’s copy of ReviewManager.xml to correspond with
that server’s cluster loading configuration.
Servers that receive a higher load should have a higher database
connection limit. However, make sure not to exceed the database network
connection limit when you add the maximum network connections for all
nodes combined.
The remainder of this book assumes that you are working in a clustered
WebSphere environment. If you do not create a cluster, in the procedures
that start in Chapter 7, “Installing Review Manager Enterprise,” ignore the
steps that instruct you to repeat tasks on additional application servers.
If you do not want to run CareEnhance Review Manager Enterprise in a
clustered environment, you can skip this chapter and proceed with Chapter 7.
This chapter applies to both Microsoft Windows and Linux installs. It describes
the tasks that you need to perform to set up a clustered WebSphere
environment. Clustering is available only for WebSphere. You can install
Review Manager Enterprise in a clustered environment to improve
performance. A cell is a collection of application servers that work together to
process application tasks. Each application server is in a node that resides on a
separate computer in the cluster. The WebSphere Network Deployment
Manager node is installed on only one computer, which manages each of the
WebSphere Application Server nodes in the cluster.
nodeDM1
Deployment
Manager
nodeAP1 nodeAP2
Application Application
Server Server
computer1 computer2
The procedures in this chapter require you to have the WebSphere Network
Deployment Manager installed only on computer1 and a WebSphere
Application Server installed on each server in your cluster (including
computer1). The procedures in this book assume that you have both the
Deployment Manager node and an application server node installed on
computer1.
Use the same directory structure for each application server to simplify
sharing configuration files across the cluster.
Computers:
computer1—This computer hosts the WebSphere Network Deployment
Manager node, which contains the primary cluster controller and the server
administration software for the cluster. This server also hosts one
application server node.
You may use more than two computers in your cluster. Additional computers
(for example, computer3, computer4, and so on) should each host only one
WebSphere Application Server node. Should you use additional computers,
repeat any instructions provided in this book for computer2 for each
additional computer.
Nodes:
node1—This is the node on computer1 that contains both the WebSphere
Network Deployment Manager and the first WebSphere Application Server.
node2—This is the node on computer2 that contains the second WebSphere
Application Server.
4. In the Cluster name text box, type the name of the cluster. You can use any
name that conforms to your organization’s naming standards.
5. Select the option to Prefer local.
F. Click Next.
The Create additional cluster members step appears.
F. Click Next.
The Summary step appears.
9. Confirm that the summary information is correct, and then click Finish.
The Server Clusters window appears.
Before deploying the Review Manager applications, you must configure each
application server.
3. Remove any application servers that are not part of the cluster by selecting
each application server that is not part of the cluster, and then click Delete.
4. For each server in the cluster, configure the OSCache:
This chapter describes all the tasks that you need to perform to install
CareEnhance Review Manager Enterprise. Review Manager Enterprise is a Web
browser-based application that requires Web server software. McKesson
includes the Jetty Web Server (for Windows) with the Review Manager
Enterprise installer. You can install Review Manager Enterprise in a clustered
environment using the IBM® WebSphere Application Server.
As part of the installation procedure, you will set up a database to use with
Review Manager Enterprise. The database does not need to be on the same
server as Review Manager Enterprise.
IBM® WebSphere® 7.0 (used for both the application servers and the
Deployment Manager).
The IBM WebSphere Network Deployment Manager installed on node1
on computer1.
An IBM WebSphere Application Server installed on the node on each
computer in the cluster (for example, node1 on computer1, node2 on
computer2, and so on).
A Java SDK. For WebSphere-based installations, McKesson supports any
WebSphere-supported Java SDK that is compatible with version
1.6.0_16 of the Sun Java SDK.
To install the Microsoft SQL Server version of Review Manager Enterprise, you
must use a SQL Server login that has database owner privileges on the Review
Manager database. Day-to-day operations of Review Manager Enterprise
require the specific server login with SELECT, UPDATE, INSERT, and DELETE
rights to the Review Manager tables.
script. If you change the user or name of the database, record these
modifications because you will need to specify these changes later in the
installation process.
This username and password will be used when you install Review Manager
Enterprise. The username and password will be encrypted and placed in an
XML file that is used by the software.
1. McKesson recommends that you close all Windows programs, and close any
anti-virus applications.
2. Do either of the following:
To install Review Manager from the DVD, place the Review Manager
installation DVD into your DVD drive.
The Review Manager DVD has an autorun feature. If autorun is not
enabled on your PC, use Windows Explorer to navigate to your DVD
drive, and open the main.htm file to begin the installation.
To install Review Manager from a network location, access that
network location and open the main.htm file.
Before the installation begins, you can view and print the Release Notes,
Review Manager Installation Guide, InterQual View Installation Guide, and
System Administrator’s Guide.
3. Click any of the links to view a document. The document opens in a
separate window. View or print the document as necessary.
4. Once you have reviewed the documents, click Continue to proceed with the
installation.
5. Click Install Review Manager/InterQual View.
6. In the File Download window, click Run. When prompted to run software
from publisher McKesson Health Solutions, click Run again.
The installation program will check for available disk space on your C:\, or
home, drive. If there is not enough space, the installation program will
prompt you to select a different drive.
7. Read the information on the Introduction window, and then click Next.
To abort the installation at any point, click Cancel on any installation window.
If you want to go back to a previous window, click Previous on any
installation window.
When you call McKesson Product Support, you will also receive a default
username and password, which you must use to initially access the
application.
The Licensed Products Window appears. The Licensed Product window shows
the product(s), database(s), and criteria sets for which your organization is
licensed.
The items listed will vary depending on which products your organization has
licensed.
11.Click Next.
The Review Manager Enterprise Installation Type window appears.
12.Select New installation, and then click Next.
The Choose Components window appears.
13.Continue with the procedure “Customizing the Installation” on page 56.
Selecting either RME Mobile or CCU only copies that application’s installer to
your server. Selecting either of these options does not install the application.
To install either of these applications, select the application in the Choose
Components window to copy the installer to your server, and then follow the
applicable instructions in either the CareEnhance Review Manager Enterprise
Mobile Installation Guide or the CareEnhance Review Manager Custom
Criteria Utility Installation Guide.
The desktop shortcuts check box enables you to create shortcuts on your
Windows desktop to the Review Manager appplication. Whether or not you
choose to create shortcuts on your desktop, you can access the Review
Manager application from Start > Programs > Review Manager.
3. Choose whether or not to create desktop shortcuts, and then click Next:
If you want to create shortcuts, leave the check box selected.
If you do not want to create shortcuts, clear the checkbox.
The Review Manager Enterprise Database Information window appears.
4. From the Database Type drop-down menu, select the type of database that
you will use for the Review Manager database. When you select a database,
the installer prompts you to enter database-specific connection
information:
For a Microsoft Access database, choose the folder where you want to
install the Access database, and then click Next.
For a Microsoft SQL Server database, specify the following
information, and then click Next.
Server Name—the server where the database resides.
Database Name—the name of the SQL database.
Port Number—the database listener port address. Default is 1433.
Instance—the system identifier used for this installation. If you are
not installing to an instance, then leave this field blank.
Enter the user ID and password of the SQL user who ran the
mss_create.sql script used when the database was created. The user
ID and password are used to connect to the database.
For an Oracle database, specify the following information, and then
click Next:
Server Name—the server where the database resides.
Port Number—the database listener port address, usually 1521.
Instance (SID)—the system identifier used for this installation.
Schema name—the database user who owns the Review Manager
tables. This name must be in uppercase.
Enter the User ID and password for the schema. The user ID and
password are used to connect to the database.
The Review Manager Enterprise Reporting Database window appears.
5. Select whether or not to store report data in a separate database.
Review Manager Enterprise allows you to store report information in either
the Review Manager database or a separate database that is a copy of your
Review Manager database. Choosing to store report data in a separate
database that is on a different server from the Review Manager database
might help to improve system performance.
If you want to store report data in the Review Manager
database:
Select No, and then click Next.
If you want to store report data in a separate database:
If you choose to use a separate database for report data, prior to the
following procedure, your database administrator must create this database
from a copy of your production Review Manager database (the one you
created in the section, “Creating the Database” on page 52). To keep this
data current, refresh the data in the reporting database often. Your database
administrator will be responsible for keeping your reporting database up to
date.
If you do not want to install the HL7 application, select No, and
then click Next.
The Jetty Application Server window appears. Continue with the
procedure “Customizing the Server Software” on page 58.
To install the HL7 application, select Yes, and then click Next.
The HL7 Service window appears.
a. Enter the port number used for the interface or leave the default
8077.
b. Enter the service name or leave the default (CERMEHL7).
c. Choose whether or not to have the HL7 service start automatically,
and then click Next.
The Jetty Application Server window appears.
d. Continue with “Customizing the Server Software” on page 58.
The Jetty Application Server window enables you to configure Review Manager
Enterprise to use Jetty as its application server.
1. Choose whether to install the Jetty Application Server:
If you are not installing Review Manager Enterprise for WebSphere, you must
install Jetty.
c. Click Next.
Make sure that you use a valid port number that is not already in use on the
server where you install Review Manager Enterprise. Also, use a valid service
name that is not already in use. You can check the service name by going to
Control Panel >Administrative Tools >Services.
If you are installing Review Manager Enterprise for Windows with Jetty, refer
to Chapter 8, “Logging on to CareEnhance Review Manager.
After creating and populating the database, you must copy the required
application files to each of the WebSphere Application Server nodes in the
WebSphere cluster.
War files
b2sw.war
help.war
help2005.war
help2006.war
help2007.war
help2008.war
help2009.war
rm.war
You can optionally copy the documentation files to additional nodes in the
cluster. The documentation files include: DataDictionary.pdf, HL7.zip,
RMInstallationGuide.pdf, and the SystemAdministratorsGuide.pdf.
3. Review Manager Enterprise uses JGroups 2.0 for the cache invalidate
messaging system with UDP as the default JGroups communication
protocol. However, you can use a different communication protocol. If you
want to use a different communication protocol, change the
cache.cluster.properties value. For example, you could use the following
value for the TCP/IP communication protocol:
cache.cluster.properties=TCP(start_port=7800):TCPPING(initial_h
osts=intersun[7800];port_range=5;timeout=3000;num_initial_membe
rs=2;up_thread=true;down_thread=true):MERGE2(min_interval=5000;
max_interval=10000):FD_SOCK:VERIFY_SUSPECT(timeout=1500):pbcast
.NAKACK(gc_lag=50;retransmit_timeout=300,600,1200,2400,4800):pb
cast.STABLE(desired_avg_gossip=20000):UNICAST(timeout=5000):FRA
G(frag_size=8096;down_thread=false;up_thread=false):pbcast.GMS(
join_timeout=5000;join_retry_timeout=2000;shun=false;print_loca
l_addr=true)
For more information on JGroups 2.0 configuration parameters, visit
http://www.jgroups.org/javagroupsnew/docs/ug.html.
4. If you are using the UDP protocol and you intend to run more than one
OSCache cluster on the same local area network (LAN), then make sure to
specify a different multicast IP address for each cluster (the value is
contained in the cache.cluster.multicast.ip parameter). Make sure the
parameter is uncommented.
5. Save the modified oscache.properties file.
6. For each additional computer (for example, computer2), copy the
oscache.properties file from the
C:\Program Files\IBM\WebSphere\AppServer\profiles\AppSrv01\properties
directory on computer1 to the corresponding directory on each additional
computer.
3. Review all of the options in the ReviewManager.xml file, and make any
necessary changes.
4. Save the modified ReviewManager.xml file.
5. Copy ReviewManager.xml from the C:\Program Files\McKesson\CERME
directory to the
C:\Program Files\IBM\WebSphere\AppServer\profiles\AppSrv01\properties
directory of each application server node (for example, node1).
6. You can customize the performance of each server by editing certain values
in the ReviewManager.xml file. For example, you may want to modify a
specific application server’s copy of ReviewManager.xml to correspond with
that server’s cluster loading configuration.
Servers that receive a higher load should have a higher database
connection limit. However, make sure not to exceed the database network
connection limit when you add the maximum network connections for all
nodes combined.
Keep in mind that a server hosting a handler will have additional workload, so
consider performance when making your selection and try to distribute
handlers evenly between servers.
Example
The following example describes how to assign the ReviewAuthHandler to an
application server in the cluster.
1. On the computer running the application server that you want to be the
ReviewAuthHandler, from the C:\Program
Files\IBM\WebSphere\AppServer\profiles\AppSrv01\properties directory,
open the ReviewManager.xml file in any text editor.
The first time you log on to CareEnhance Review Manager Enterprise, you
must accept the security warning to enable printing. A Microsoft ActiveX®
printer plug-in will be added to Internet Explorer.
After you create your WebSphere cluster, you need to create and populate the
Review Manager Enterprise database and install the application files to each
application server node.
mkdir warfiles
2. On the Windows-based computer where you initially installed Review
Manager Enterprise, copy the following files from
C:\Program Files\McKesson\CERME\Doc to computer1 into the
/opt/McKesson/CERME/doc directory:
DataDictionary.pdf
HL7.zip
RMInstallationGuide.pdf
SystemAdministratorsGuide.pdf
3. On the Windows-based computer where you initially installed Review
Manager Enterprise, copy the oscache.properties file from
C:\Program Files\McKesson\CERME\jarfiles to computer1 into the
/opt/IBM/WebSphere/AppServer/profiles/AppSrv01/properties directory.
4. On the Windows-based computer where you initially installed Review
Manager Enterprise, copy the log4j.xml file from
C:\Program Files\McKesson\CERME\jarfiles to computer1 into the
/opt/IBM/WebSphere/AppServer/profiles/AppSrv01/properties directory.
5. On the Windows-based computer where you initially installed Review
Manager Enterprise, copy the following files from
C:\Program Files\McKesson\CERME\warfiles to computer1 into the
/opt/McKesson/CERME/warfiles directory:
b2sw.war
help.war
help2005.war
help2006.war
help2007.war
help2008.war
help2009.war
rm.war
6. Repeat steps 1 through 5 on each additional computer in the cluster (for
example, computer2).
cache.cluster.properties=TCP(start_port=7800):TCPPING(initial_h
osts=intersun[7800];port_range=5;timeout=3000;num_initial_membe
rs=2;up_thread=true;down_thread=true):MERGE2(min_interval=5000;
max_interval=10000):FD_SOCK:VERIFY_SUSPECT(timeout=1500):pbcast
.NAKACK(gc_lag=50;retransmit_timeout=300,600,1200,2400,4800):pb
cast.STABLE(desired_avg_gossip=20000):UNICAST(timeout=5000):FRA
G(frag_size=8096;down_thread=false;up_thread=false):pbcast.GMS(
join_timeout=5000;join_retry_timeout=2000;shun=false;print_loca
l_addr=true)
For more information on JGroups 2.0 configuration parameters, visit
http://www.jgroups.org/javagroupsnew/docs/ug.html.
4. If you are using the UDP protocol and you intend to run more than one
OSCache cluster on the same local area network (LAN), then make sure to
specify a different multicast IP address for each cluster (the value is
contained in the cache.cluster.multicast.ip parameter). Make sure the
parameter is uncommented.
5. Save the modified oscache.properties file.
6. For each additional computer (for example, computer2), copy the
oscache.properties file from the /opt/IBM/WebSphere/AppServer/profiles/
AppSrv01/properties directory on computer1 to the corresponding directory
on each additional computer.
3. Review all of the options in the ReviewManager.xml file, and make any
necessary changes.
4. Save the modified ReviewManager.xml file.
This chapter describes how to install and configure the HL7 Interface in your
Red Hat Enterprise Linux environment to use inbound and outbound
messaging.
Inbound HL7 is not a WebSphere application. You will install inbound HL7 as a
background service. In a clustered environment, you will install the inbound
HL7 service on only one server.
Prerequisites
Before installing and configuring the HL7 services, make sure that you have
done the following:
Installed and configured Review Manager Enterprise in your Linux
Environment
Have not modified or removed your original Windows-based installation of
Review Manager Enterprise (which you used to populate the initial
database)
You have superuser access to the Red Hat Enterprise Linux computer on
which you will install the HL7 service
5. If necessary, change the port number (the default is 7779). Using any text
editor, open the cermehl7.xml file, and edit the port number specified by
the following element:
<Setting Name="Port" Value="7779"/>
If the start script is run while the previous HL7 process is still running, the stop
script will be executed before the HL7 start script starts another HL7 process.
The stop script can only be run once (it removes itself from the file system)
since it is referencing a specific PID.
5. If necessary, change the port number (the default is 7779). Using any text
editor, open the cermehl7.xml file, and edit the port number specified by
the following element:
<Setting Name="Port" Value="7779"/>
6. Update the HL7 license information:
A. In the Red Hat terminal, type the following, and then press Enter:
cd /opt/HL7Server
B. Type the following, and then press Enter: ./mklic.sh
7. Start the HL7 service:
A. In the Red Hat terminal, type the following, and then press Enter:
cd /opt/HL7Server
B. Type the following, and then press Enter:
./CreateCERMEHL7Service.sh
The HL7 server starts on the port number specified in cermehl7.xml.
This chapter describes how to configure the HL7 Interface in your Windows
with WebSphere environment to use inbound and outbound messaging.
Inbound HL7 is not a WebSphere application.
Prerequisites
Before configuring the HL7 services, make sure that you have done the
following:
Have not modified or removed your original installation of CareEnhance
Review Manager Enterprise on computer 1(which you used to populate the
initial database)
You have superuser access to the computer on which you will configure the
HL7 service
Symphonia-3.8.7.jar
6. Click Next.
WebSphere unpacks the .WAR file, and then displays the installation
options.
7. Either accept the default installation options or customize the settings for
your environment, and then click Next.
The Map modules to servers step appears.
C. Click Next.
The Summary step appears.
10.Click Save.
WebSphere saves the changes to the master configuration.
Historical help content is available with Review Manager Enterprise 8.0. For
both Linux and Windows, the context root format is /help<year>. For
example, /help2005,/help2006, and so on. The context root for the current
year is /help. The help war naming format is help<year>.war. For example,
help2005.war.
After starting the applications, verify that WebSphere is configured to use the
correct connectivity options.
1. Log on to the WebSphere Administrative Console.
2. From the navigation panel, expand Environment, and then click Virtual
Hosts.
The Virtual Hosts window appears.
<!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
<!-- Add a AJP13 listener on port 8009 -->
<!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
<Call name="addConnector">
<Arg>
<New class="org.mortbay.http.ajp.AJP13SocketConnector">
<Set name="Port">8009</Set>
<Set name="MaxIdleTime">0</Set>
<Set name="confidentialPort">443</Set>
</New>
</Arg>
</Call>
Figure 1
# Configuration file for the Jakarta ISAPI Redirector
Figure 2
workers.tomcat_home=C:\Program Files\McKesson\CERME\Jetty\
# This file provides minimal jk configuration properties needed
to # connect to Jetty.
workers.java_home=C:\Program Files\McKesson\CERME\Jre\
#
# The workers that jk should create and work with.
#
worker.list=worker1
#
# Defining a worker named worker1 and of type ajp13.
# Note that the name and the type do not have to match.
#
worker.worker1.type=ajp13
worker.worker1.host=localhost
worker.worker1.port=8009
[uri:/jetty/*]
worker=ajp13:localhost:8009
2. When you create the new virtual directory, give it execute access.
3. Find the newly created rm virtual directory under Default Web Site.
5. Click the Remove button next to the application name, and then click Apply.
6. Click OK.
7. Add isapi_redirect.dll as a filter to your IIS web site as follows:
A. Right-click on the Web Sites icon on the left pane of the Internet
Services Manager (or IIS management console), and select Properties.
B. Select the ISAPI Filters tab.
The name of the filter should reflect its task; for example, confluence,
and its executable must be the full path to the ajp isapi redirector DLL.
8. Restart IIS (stop and start the IIS service - not just the web server - do this
by right-clicking on Local Computer in the IIS Manager and choosing All
Tasks, Restart IIS...).
9. Verify that the confluence filter is marked with a green up arrow confirming
that it is loaded and initialized correctly. If the ajp redirector did not
initialize properly, check the log file for errors messages
(C:\<ISAPI>\logs\isapi_redirect.log).
In the example below for IIS 6.0, the <ISAPI> directory that houses the
isapi_redirect.dll is named Mck_IIS.
6. When you locate the dll, click Open, and then click OK.
7. Select the Set status extension to Allowed check box, and then click OK.
3. Verify that the Physical path is the directory where you placed
isapi_redirect.dll, and then click OK. In this example, it is C:\Isapi.
4. Under Default Web Site in the left pane, right-click on rm, and then select
Edit Permissions.
The Isapi Properties window appears.
5. Make sure that users have the following permissions, and then click OK.
Read & execute
Read
List folder contents
6. Click Default Web Site in the left pane, and then double-click the ISAPI
Filters icon in the right pane.
7. Right-click on the ISAPI Filters pane, and then click Add on the menu that
appears.
The Add ISAPI Filter window appears.
This chapter describes all the tasks that you need to perform to upgrade to
CareEnhance Review Manager 9.0 or to add new products to an existing
installation of Review Manager 9.0.
For installations using Jetty, Review Manager 9.0 requires Jetty 6.1.20. The
Review Manager installation program automatically re-installs Jetty during the
installation process to ensure that you are using this version.
Make sure that all users have logged out of Review Manager.
Ensure that the Windows user upgrading Review Manager has
administrative rights to the installation workstation.
You can upgrade to Review Manager either from version 7.x or 8.x. If you
are upgrading from a version prior to 7.0, then you must first upgrade to
version 7.0 before upgrading to version 9.0.
If you upgrade directly from Review Manager 7.0 to version 9.0, the
InterQual 2010 Criteria (which is included with Review Manager 9.0) will be
installed, but the InterQual 2009 Criteria (which was included with Review
Manager 8.0) will not be installed. If you also want the InterQual 2009
Criteria, then you must first upgrade to Review Manager 8.0 before
upgrading to version 9.0.
Before upgrading the Review Manager software, you must first update the
Review Manager database.
The password associated with this user ID is encrypted and not listed in the
Connection XML Editor. If you forgot the password for this user, use SQL
Server Management Studio to change the user’s password. Make sure to
test the connection when you are done.
2. Run the mss_upgradeto90.sql script against the Review Manager
database. This script is on the Review Manager installation DVD in the
Scripts folder.
To abort the installation at any point, click Cancel on any installation window.
If you want to go back to a previous window, click Previous on any
installation window.
When you call McKesson Product Support, you will also receive a default
username and password, which you must use to initially access the
application.
The items listed will vary depending on which products your organization has
licensed.
The Client installation includes the Review Manager application and the Web
server. You should choose this installation for most users. The Administrator
installation includes the Review Manager application, the Web server, and the
System Administration Module. After creating the database and installing the
criteria, use the System Administration Module to configure and maintain
Review Manager. Typically, there is only one administrator installation.
For information on using the organization policy migration utility, see the
CareEnhance Review Manager System Administrator’s Guide.
This chapter describes all the tasks that you need to perform to install
CareEnhance Review Manager. Review Manager is a Web browser-based
application that requires Web server software. McKesson includes the Jetty
Web Server (for Windows) with the Review Manager installer.
The Review Manager Installer installs the application on your client computer
and loads the criteria sets into your database. While the application is installed
on your client computer, the database may reside either on your client
computer or a network server.
To install the Microsoft SQL Server version of Review Manager, you must use a
SQL Server login that has database owner privileges on the Review Manager
database. Day-to-day operations of Review Manager require the specific server
login with SELECT, UPDATE, INSERT, and DELETE rights to the Review Manager
tables.
Before installing Review Manager using Microsoft SQL Server, your database
administrator must perform the following tasks:
1. Edit the mss_crt_db.sql script (located on the Review Manager installation
DVD in the Scripts folder) to customize the database file names and sizes.
You may also change the user or name of the database created by the
script. If you change the user or name of the database, record these
modifications because you will need to specify these changes later in the
installation process.
This username and password is used both to install Review Manager and to
upgrade to future versions of Review Manager.
The username and password will be encrypted and placed in an XML file that
is used by the software. McKesson recommends that you do not use a login
with sysadmin privileges.
1. McKesson recommends that you close all Windows programs, and close any
anti-virus applications.
2. Do either of the following:
To install Review Manager from the DVD, place the Review Manager
installation DVD into your DVD drive.
The Review Manager DVD has an autorun feature. If autorun is not
enabled on your PC, use Windows Explorer to navigate to your DVD
drive, and open the main.htm file to begin the installation.
To abort the installation at any point, click Cancel on any installation window.
If you want to go back to a previous window, click Previous on any
installation window.
When you call McKesson Product Support, you will also receive a default
username and password, which you must use to initially access the
application.
The items listed will vary depending on which products your organization has
licensed.
The Client installation includes the Review Manager application and the Web
server. You should choose this installation for most users. The Administrator
installation includes the Review Manager application, the Web server, and the
System Administration Module. After creating the database and installing the
criteria, use the System Administration Module to configure and maintain
Review Manager. Typically, there is only one administrator installation.
3. Specify the path where you want to install Review Manager or keep the
default location, which is C:\Program Files.
The desktop shortcuts check box enables you to create shortcuts on your
Windows desktop to the Review Manager appplication. Whether or not you
choose to create shortcuts on your desktop, you can access the Review
Manager application from Start > Programs > Review Manager.
4. Choose whether or not to create desktop shortcuts, and then click Next:
If you want to create shortcuts, leave the check box selected.
On Microsoft Windows, all log files (for Jetty-based installations) are located in
the C:\Program Files\McKesson\CERME\Jetty\logs directory unless otherwise
specified.
CERMEConsole.log File
CareEnhance Review Manager creates the CERMEConsole.log file, which
contains informational messages. For Jetty installations, restarting the
CareEnhance Review Manager Enterprise service truncates the log file. If you
access CareEnhance Review Manager using a port number other than 80, then
the port number appears in the log file name (for example,
CERME8001Console.log).
CERMEError.log File
CareEnhance Review Manager creates the CERMEError.log file, which records
errors from either Java run-time or Jetty. For Jetty installations, restarting the
CareEnhance Review Manager Enterprise service truncates the log file. If you
access CareEnhance Review Manager using a port number other than 80, then
the port number appears in the log file name (for example,
CERME8001Error.log).
rm.log File
This file logs all criteria loaded into the database during installation. This file is
located in the C:\Program Files\McKesson\CERM folder.
ReviewManager.xml File
Use this file to define database connections and miscellaneous items used by
the Web/application server. The parameters used are defined within the XML
file.
Jetty.xml
Use this file to determine the listening port number and information about
about the Jetty service. This file is located in
C:\Program Files\McKesson\CERM\Jetty\etc.
Debugging Information
You can log debugging information to the CERMEConsole.log and
CERMEError.log files.
For Jetty installations, restarting the CERMe service truncates the debugging
log files.
Database Connections
The Microsoft Windows installation and the ReviewManager.xml file each need
a connection to the database(s). Currently, CareEnhance Review Manager
Databases connect using a DSN-less type connection to connect to a particular
database for new and upgrade installations. Beginning with CareEnhance
Review Manager 9.0, ODBC data sources are no longer used. Connections to
the CareEnhance Review Manager MS SQL database are handled by a JDBC
driver.
CareEnhance Review Manager relies on the database to secure the data which
is accomplished by a username/password mechanism defined by the database.
Both a password and the corresponding username are stored in two places:the
database and the ReviewManager.xml file. The CareEnhance Review Manager
application connects to a database using a database-provided username and
the corresponding password. These parameters are stored in the
ReviewManager.xml file in encrypted form. If you change either a username or
a password in a database, you will need to repeat the change in the
ReviewManager.xml file. For more information on changing your password,
refer to the CareEnhance Review Manager System Administrator’s Guide.
Database connections are pooled. The size and behavior of a pool is set at the
time of a CareEnhance Review Manager installation. The pool parameters
are:initial number of connections, maximum number of connections in a pool,
and the session timeout parameter. Default settings for a pool might be
insufficient for a multi-user installation and may be changed using the
RmXmlEdit.bat file.
Previous Setting:-Xmx256M
Recommended setting:-Xmx1024
Jetty maxThreads is the limit to the number of threads that can be allocated to
connections for that HTTP listener. This will effectively limit the number of
simultaneous users of the server as well as the maximum memory usage.
Please see this URL for further details:
http://docs.codehaus.org/display/JETTY/Walkthrough+jetty.xml
Edit the jetty.xml file to change the ThreadPool setting. Set the value of
maxThreads to 1024 by doing the following:
If the start script is run while the previous HL7 process is still running, the stop
script will be executed before the HL7 start script starts another HL7 process.
The stop script can only be run once (it removes itself from the file system)
since it is referencing a specific PID.
Your company might have its own documentation for creating certificates. If
available, McKesson recommends that you refer to this documentation before
following the process described in this appendix. In addition, application
servers come with their own documentation for setting up SSL certificates. The
instructions in this appendix outline a general process for creating a certificate
for setting up SSL for your Web Application Server, using Jetty as an example.
Prerequisites
Depending upon the version of Java that you are using, you might have to
perform additional steps in order to complete the setup. This document
assumes that you are using JRE 1.6.0_16 for keystore management.
VeriSign/Thawte
It is important that you specify an alias and that the alias is the same for
each of the following steps.
For VeriSign: If you skip this step, you will receive chaining errors when you
try to import your CA response certificate into your keystore.
The CareEnhance Review Manager Enterprise Installer will do this for you.
Uncomment the SSL socket connector and set the appropriate values. The
SSL connector can be found by searching for ‘SslSocketConnector’.
<Call name="addConnector">
<Arg>
<New class="org.mortbay.jetty.security.SslSocketConnector">
<Set name="Port">8443</Set>
<Set name="maxIdleTime">30000</Set>
<Set name="handshakeTimeout">2000</Set>
<Set name="keystore"><SystemProperty name="jetty.home" default="." />/etc/
keystore</Set>
<Set name="password">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
<Set name="keyPassword">OBF:1u2u1wml1z7s1z7a1wnl1u2g</Set>
<Set name="truststore"><SystemProperty name="jetty.home" default="." />/etc/
keystore</Set>
<Set name="trustPassword">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
<Set name="handshakeTimeout">2000</Set>
</New>
</Arg>
</Call>
You can conceal your passwords in this file by obfuscating them. For
information about obfuscating your passwords, refer to your Jetty
documentation.
Once obfuscated, you need to add the obfuscation string to your XML in place
of your clear text password. In addition, the string will need to be prefaced
by the string: “OBF:”.
10.Remember that the default port for https is 443 not 80, so change 8443 to
443 if you want to use URLs without explicit port numbers. Production sites
usually have a HttpListener on port 80 and a SunJsseListener on port 443.
Note that these ports are privileged, so you might want to use a redirection
mechanism to map the ports. For example, map port 80 to 8080 and port
443 to 8443.
11.Make sure that your system wide cacerts file contains the root CA
certificate for your certificate vendor.
The Java JRE ships with root CA certificates for both VeriSign and Thawte. If
you are using another vendor, you will need to acquire the root CA
certificate for that vendor and import it into the cacerts file. The cacerts file
is typically found at <java-home>\lib\security, where <java-home> is the
runtime environment's directory (the JRE directory in the SDK or the top-
level directory of the Java 2 Runtime Environment).
IMPORTANT: Verify your cacerts file. Because you trust the CA’s file, verify
this in your cacerts file as entities for signing and issuing certificates to other
entities. Manage the cacerts file carefully. The cacerts file should contain only
certificates of the CA’s you trust. It is your responsibility to verify the trusted
root CA certificates bundled in the cacerts file and make your own trust
decisions. To remove an untrusted CA certificate from the cacerts file, use
the delete option of the keytool command.
12.Restart Jetty.
Certificates Notes
The following sections describe general information about digital certificates.
VeriSign
What is the difference between a VeriSign 40-bit SSL Secure Server ID and
a 128-bit SSL Global Server ID?
The primary difference between the two types of VeriSign Server IDs is the
strength of the SSL session that each enable. Secure Sockets Layer (SSL)
technology is the industry-standard method for protecting Web
communications developed by Netscape® Communications Corporation.
The SSL security protocol provides data encryption, server authentication,
message integrity, and optional client authentication for a TCP/IP
connection. Because SSL is built into all major browsers and Web servers,
simply installing a digital certificate turns on their SSL capabilities.
SSL comes in two strengths, 40-bit and 128-bit, which refer to the length of
the "session key" generated by every encrypted transaction. Longer keys
provide stronger encryption that it is more difficult to decrypt. Most
browsers support 40-bit SSL sessions and the latest browsers enable users
to encrypt transactions in 128-bit sessions—trillions of times stronger than
40-bit sessions.
Secure Site Pro and Commerce Site Pro Services include 128-bit SSL
Global Server IDs, which enable 128-bit SSL encryption—the world's
strongest—with both domestic and export versions of Microsoft and
Netscape browsers. (Most people in the U.S. use export-version browsers).
Secure Site and Commerce Site Services include 40-bit SSL Secure
Server IDs, which enable 40-bit SSL when communicating with export-
version Netscape and Microsoft Internet Explorer browsers, and 128-bit
SSL encryption when communicating with domestic-version Microsoft and
Netscape browsers.For more information, see
http://www.verisign.com/ssl/ssl-information-center/faq/index.html.
At present, only the Secure Server ID supports Java. Java is not supported
by the Global Server ID. This is due to the fact that their intermediate CA is
incompatible with JSSE (according to VeriSign). An alternative to this is to
obtain a 128-bit Global Server ID for Apache.
When using the 40-bit certificate, you will only achieve 128-bit encryption if
supported by your browser. For IE, you need the “domestic” version. If you
specify Help > About Internet Explorer, cipher strength should be indicated
under the browser version. It should indicate 128. If not, you need to
update the browser. If you purchase the 128-bit certificate, it will “enforce”
128-bit encryption, regardless of the browser cipher strength (domestic or
export). In addition, if the browser happens to only support a lesser cipher
strength, such as 56-bit, the certificate will also enforce 128-bit encryption.
Trial certificates available for free download are equivalent to the 40-bit
Secure Server certificates. If you want to try to use a trial certificate for
testing, you will need to obtain a test CA root and install it into your
browser. For more information, see
http://www.verisign.com/ssl/buy-ssl-certificates/free-ssl-certificate-trial/
test-root-ca/index.html.
Trial certificates are not good for testing and can take 1hr to several days to
obtain.
Verisign “certificate roots” (needed by the browser) are provided by default
with most browsers and with the Java JRE distribution.
You have 30 days to modify your CSR or certificate once purchased. After
that time, you need to pay $100 to get a reissue of the certification.
Intermediate CA certificates can be obtained at
http://www.verisign.com/support/ssl-certificates-support/install-ssl-
certificate.html.
Thawte
Thawte is now owned by Verisign
Thawte has several different types of certificates available for purchase. For
Jetty, you must obtain the SSL Chained CA Cert. If you purchase the X.509
v3 or equivalent, it will not work as it does not establish the trust chain
properly
Trial Chained CA certificates available for free download are not fully trusted
and will display a trust error if the certificate is viewed in the browser. This
is corrected by actually “buying” the certificate. The purchased certificate is
fully trusted.
Trial certificates are good for testing and can be downloaded instantly from
the Web site.
Thawte “certificate roots” (needed by the browser) are provided by default
with the Java JRE distribution.