Setting up a new sub-provider
Prerequisites and information
IMPORTANT: Before setting up a new sub-provider, please read the generic article about sub-providers: Subprovider
- You need a new public IPv4 IP address for a sub-provider.
- If the regify provider is directly connected to the internet
- Enter the public IP to the regify provider appliance
- If the regify provider is behind a firewall / NAT router / Loadbalancer
- The public IP must be configured to route to your regify provider software appliance or load-balancer (depending on your configuration).
- Internal routing IP address must get added in provider appliance menu.
- A new DNS A-record must be made to route your new domain (like sub-provider.company.com) to the new public IP address.
- If your provider appliance runs with own MTA settings (one setting for all (sub)provider instances), you also need a reverse DNS entry for email to make it work. Also, SPF records may be needed.
How to buy a SSL certificate for the needed sub-provider domain:
- While setting up the new sub-provider in your appliance menu, a new certificate is generated.
- You can display the signing request by choosing "Show Cert Request" in appliance menu. Fill in the fields.
- Copy and use the signing request to order your certificate.
- If received, collect the certificate and all intermediate certificates in a text editor.
- Import certificate using "Import Cert & Optionally Key" from appliance menu and past text editor content.
- Check correct certificate chain here at digicert (maybe only possible after you finished setup).
Setting up the sub-provider
Please ensure that all prerequisites are fulfilled. Now follow these steps:
- Enter appliance menu and chose "Network..." -> "Add IP" to add the public IP address (if not yet done).
- Enter "Provider..." -> "Add sub-provider" option.
- Choose the added IP address (internal address if behind firewall, router or load-balancer).
- Enter the server name of the new sub-provider and answer all questions asked by the system.
- Select "Edit Subprovider..." in the appliance menu and chose the added sub-provider from the menu
- Import the SSL certificate using "Import Cert & Optionally key" from the appliance menu (not needed if the load balancer holds the certificates)
- If the provider system is running a cross-master replication, ensure that you also configure the other system in the same manner
Setting up in web administration
After setting up the system in the appliance menu (on all systems), you can continue with the setup by using the web administration
- Login to the web administration of the main provider as a master admin and select "Manage sub-providers". The new sub-provider should appear in the list of sub-providers
- Selecting the new sub-provider in the list of sub-providers allows you to edit the settings in the lower area "Edit provider settings"
- Complete the settings of the new sub-provider and finish it by clicking "Save changes"
Admin-Account and Customization
Upon successful sub-provider creation, you need some administrator user for this sub-provider to edit customization:
- Let the new admin sign up for a regify account on the new sub-provider.
- Activate from the email and note your password.
- Login to main(!) provider administration -> "Manage sub-providers" (with existing main(!) provider admin account).
- Go "Manage sub-providers".
- Select the sub-provider in the list to add the admin user to.
- Click on "Manage portal administration roles" in the "Common" tab below.
- Enter the new user as "Sub-Provider Admin" (you can user the "..." button to search the user ID).
- Log-out from administration.
- The new admin now can log-in to https://sub-provider-domain/ADMINISTRATION
Upon the new admin log-in to his web-administration, he will see some ToDo's for sure. Please follow these to make sure that everything is set up correctly. Do not only click on "Done" if it is not really done.
Delete a sub-provider
In order to get deleted, a sub-provider must be empty. So saying, not a single user is assigned to this sub-provider anymore. Normally, all users are getting exported/imported to some other system or moved to another sub-provider.
Finally, only admin accounts are left. Please follow these steps to get rid of the sub-providers admin users:
- You first have to enter the main provider administration with "master" admin role and remove any admin roles for the affected sub-provider except the one for the last and final administrator of the sub-provider.
- Now, log-in with this last admin user to the sub-provider administration.
- Enter "Manage user" and do a simple search. Only the single admin should come up (you). You can not delete this account, because it is still an admin!
- Select "Action" - "Change the user data"
- On the bottom of the dialog, please switch the "Sub-Provider" to the main provider domain and click on "Save changes".
- Now, please close the window, go back to main page and log out.
- Now, you have to enter the main provider administration with "master" admin role and finally remove the admin role for the affected sub-provider. The "Master" role of the main provider admin may stay here and may not get deleted.
Finally, the sub-provider can get deleted by the SSH appliance menu.