Epicor® HCM 5.

Install Guide
 Epicor® HCM 5.9

Install Guide - Comprehensive

Epicor Software Corporation

Notices
This manual is furnished under a license agreement with Epicor® Software Corporation. The
manual was prepared to assist operators of Epicor Software Corporation’s Epicor HCM
product and may not be used for any other purpose without Epicor’s written permission. The
material contained herein is supplied without representation or warranty of any kind, is sub-
ject to change without notice, and does not represent a commitment by Epicor. Companies,
names, and/or data used in screens and sample output are fictitious unless otherwise noted.
Epicor assumes no responsibility and shall have no liability of any kind from the supply or use
of this manual or the material it contains. In an Epicor HCM-hosted or subscription envir-
onment, some Epicor HCM software functionality may not be available.
U.S. Government Restricted Rights. This software and its documentation are "Commercial
Items," as that term is defined at 48 C.F.R. §2.101, consisting of "Commercial Computer
Software" and "Commercial Computer Software Documentation," as such terms are used in
48 C.F.R. §12.212 or 48 C.F.R. §227.7202, as applicable. Consistent with 48 C.F.R.
§12.212 or 48 C.F.R. §§227.7202-1 through 227.7202-4, as applicable, the Commercial
Computer Software and Commercial Computer Software Documentation are being
licensed to U.S. Government end users (a) only as Commercial Items and (b) with only those
rights as are granted to all other end users pursuant to the terms and conditions herein.
Unpublished rights are reserved under the copyright laws of the United States.
Manufacturer is Epicor Software Corporation, 10955 Westmoor Drive, Suite 100, West-
minster, Colorado 80021.
www.epicor.com
Epicor HCM is a registered trademark of Epicor Software Corporation.
Windows Server 2012 and Windows 7 are registered trademarks of Microsoft Corporation.
SQL Server is a trademark of Microsoft Corporation.
All other trademarks are the property of their respective owners.
Copyright © 1999-2014, Epicor Software Corporation. All rights reserved.
Printed in the U.S.A.
EHCM-590IGC-111214
 Contacting Epicor Software Corporation
General Information
Epicor provides a variety of human resource software products and support services. You
can contact us at Epicor or find out more information about additional software products or
services using any of the following methods:
Epicor Software Corporation
10955 Westmoor Drive, Suite 100
Westminster, CO 80021
(800) 334-5660 (General Information)
www.epicor.com

Epicor HCM Product Support and Education Services

Epicor HCM users with a current maintenance agreement have access to telephone hotline
support. When you call the Product Support and Education (PSE) hotline, a qualified PSE
representative works with you to diagnose and correct your problem. Contact a Epicor HCM
PSE representative using the following methods:

Telephone: (800) 424-6749

E-mail: [email protected]

Please have the following information at hand before you contact a PSE representative:
l Your customer number.
l A listing of any Epicor HCM modules or service packs that you have installed.
l A clear summary of the problem. Identify it specifically, especially in documentation
that your organization can use later. Write down each step you took when you found
the problem (take screen prints, if possible).
l Any specific error messages you encountered.
Table of Contents
Contacting Epicor Software Corporation iii
About This Guide ix

Who Should Read This Guide x

Where to Look for More Information xi
Epicor HCM Online Help xi
Field Level Help xi
Microsoft Windows Online Help xi
Internet Explorer Online Help xi
How This Guide is Organized xii
Conventions Used in This Guide xiii
Using Installation Worksheets xiv
Completing Prerequisite Tasks 1

Epicor HCM Installation Workflow 2

Configuration Types 3
Split-Server Options 3
Verify System Requirements 4
Hardware and Software Requirements 4
Prerequisite Tasks Introduction 5
Prerequisite Tasks Checklist 5
General Prerequisites 7
Microsoft Windows Server Version 7
Microsoft .NET Framework and Windows SDK for .NET 8
Use Installer for Prerequisites 9
IIS Prerequisite 10
Configure IIS 8 10
Enable and Configure IIS 7.5 12
SQL Server Prerequisite 16
SQL Server Database and Shared Features 16
Instance Configuration 17
Server Service Accounts Configuration 17
Server Collation Configuration 18
Database Engine Configuration 18
Reporting Services Configuration 18
Analysis Services Server Prerequisite 19
 Install Native Client on SQL Server 19
Install Excel 19
Configuring Reporting Services 20
Database Setup 20
Verify and Remove 21
Installing Epicor HCM 23

Overview of Epicor HCM Software 24

Installation Types 25
Split Server versus Single Server 25
Install Order Exception 26
Installation Steps 27
Previous Installations 27
Crossroads Decision Points 28
Beginning Installation Steps 29
Crossroads Checkpoint 30
Database Setup 33
Reporting Services Setup 34
Crossroads Checkpoint 34
E-Mail Setup 36
Crossroads Checkpoint 36
Analysis Services Setup 37
Crossroads Checkpoint 37
IIS Web Setup and Epicor HCM Admin 38
Crossroads Checkpoint 38
Crossroads Checkpoint 41
Verify and Install 42
Business Library 43
Generate Business Library 43
Verify the System License 44
Removing Epicor HCM 45
Method One 45
Method Two 45
Configuring Epicor HCM Install 47

Epicor HCM Configuration Overview 48

Configuring Secure Sockets Layer 49
Import the Certificate into IIS Server 49
Configure the Certificate for Reporting Services 50
Setting Global Constant for Reporting Services 54
Configuring Analysis Services 55
Configure Analysis Server Properties 55
Configure OLAP Properties 57
Process OLAP Cubes 58
Configure Role Properties for Untrusted Domains 59
Configure Excel 59
Additional Configuration for Excel 2013 60
Configure OLAP Parameters for Untrusted Domain 61
Domain Connectivity and Windows Authentication 62
 Making IIS and SQL Trusted for Delegation 62
Making Domain User Accounts Trusted for Delegation 63
Configuring Epicor HCM Workstations 65

Log On to Epicor HCM 66

Log on to Epicor HCM Using Forms Authentication 66
Log On to Epicor HCM Using Window Authentication 67
Install Report Builder 68
Analysis Services Users 70
Configuring Client Workstations 70
Worksheets 73
Epicor HCM Installation Worksheet 74
Epicor HCM Installation Worksheet 75
Epicor HCM Installation Worksheet 76
Epicor HCM Installation Worksheet 77
Configuring Windows Authentication 79

Overview and Checklist 80

Create Epicor HCM Users 81
IE Security Settings on Workstations 82
Manager Self-Register and Windows Authentication 83
Configuring Deferred Authentication 85

Introduction 86
Setup Overview 86
Application Server Setup 87
Create EHDA Service Location and Configure 87
IIS Manager 88
Configure the Web Service 88
IIS 7.5 88
Test the Web Service 90
Enable Deferred Authentication 91
Self-Registration Parameters 92
Configure Registration Parameters 92
Setup Users in User Maintenance 93
Create User Login Account 93
Deferred Authentication User Access 95
Manager and Employee Self Registration 95
Create Manager Users Task is for Forms User 95
Changing Your Password 95
Disabling the Forgot Password Button 96
Troubleshooting 97
About This Guide

Thank you for selecting Epicor HCM as your Human Resource Information
System (HRIS). Epicor HCM delivers a superior solution to the management
needs of a wide range of organizations. It also has the built-in capabilities to
meet the needs of and grow with your organization.
This guide describes the tasks necessary to install Epicor HCM and make it
available from the personal computers of the users who will access the sys-
tem. If you would like some assistance with any step of the installation pro-
cess, contact an Epicor Product Support and Education representative at
(800) 424-6749.
You should perform the tasks described in this guide and in Chapter 3 of the
Epicor HCM Project Management Workbook concurrently. While the project
manager is becoming familiar with the concepts in Chapter 3, IT/IS depart-
ment representatives should be reviewing this guide and installing Epicor
HCM.
Read this guide in its entirety. To ensure a successful installation of Epicor
HCM, perform the following four items in the order you find them in this guide:
prerequisite tasks, installing Epicor HCM, configuring your Epicor HCM
install, and configuring Epicor HCM workstations.
On the first page of each chapter, you will see a mini-table of contents of top-
ics discussed in the chapter. Within the chapter, you will find detailed inform-
ation on those topics and instructions on completing the installation.

Concepts covered in this preface include:

Who Should Read This Guide x

Where to Look for More Information xi
How This Guide is Organized xii
Conventions Used in This Guide xiii

- ix -
Preface

Who Should Read This Guide

This guide is for those persons responsible for installing Epicor HCM and the
third-party software required for using Epicor HCM. While several people
within your organization are involved in the actual implementation of Epicor
HCM, your IT/IS department representatives should review this guide and
install Epicor HCM.
The people installing Epicor HCM should have expert knowledge of SQL
Server, popular Internet browsers, and the Windows operating systems on
both the server and client workstations. The IT/IS department rep-
resentatives should read this guide completely to introduce themselves to the
concepts of Epicor HCM setup configurations, issues involving installing
third-party software, and Epicor HCM installation and setup.

-x-
 About This Guide

Where to Look for More Information

There are several online help systems where you can find information and
documentation relating to Epicor HCM. This section describes the different
online sources available to assist you in using Epicor HCM and related soft-
ware.

Epicor HCM Online Help

Epicor HCM has an extensive online help facility to assist you when you need
help. You can access online help in Epicor HCM by clicking the Help button
that is in the product. If you are in a task when invoking help, the help topic for
the task that you are viewing appears.
Each procedural help topic in the Epicor HCM online help provides sys-
tematic instructions that guide a user through completing a task. Once the
online help is open, you can navigate to other areas in the help system. You
can search for other procedures through the Contents, Index or by using the
built-in Search functionality.

Field Level Help

While Epicor HCM is very intuitive to use, there may be certain fields in a task
that are more difficult to work with or remember their purpose. Epicor HCM
has a Field Level Help system, where some key fields have been singled out
for quick access to information. Anywhere you see a question mark icon
you can click it to display an informational box. The information presented is
intended to assist you in completing that field and therefore to finish the task.
If you need further assistance, the full online help system is always available.

Microsoft Windows Online Help

For more information about Microsoft Windows, choose Help and Support
from the Start menu.

Internet Explorer Online Help

Use Microsoft Internet Explorer Help for assistance with issues specific to
Internet Explorer. To view Microsoft Internet Explorer Help, from the Menu
bar click Help > Internet Explorer Help or press F1 on your keyboard.

- xi -
Preface

How This Guide is Organized

The following table describes the sections contained in this guide:

Chapter Contains
About This Guide Description of this guide.
Chapter 1: Introduction to install types and tasks to complete
Completing Prerequisite Tasks before installing Epicor HCM.
Chapter 2: Instructions for starting the Epicor HCM split-
Installing Epicor HCM server or single-server installation.
Chapter 3: Instructions for adjustments to Epicor HCM and
Configuring Epicor HCM Install third-party software after the installation to com-
plete the Epicor HCM setup.
Chapter 4: Instructions for getting Epicor HCM setup on Work-
Configuring Epicor HCM station.
Workstations
Appendix A: Worksheets to assist you in determining you organ-
Worksheets ization's technical operating environment.

Appendix B: This appendix describes the tasks necessary to

Configuring Windows configure Windows Authentication for Epicor
Authentication HCM.
Appendix C: This appendix describes the tasks necessary to
Configuring Deferred configure Deferred Authentication for Epicor
Authentication HCM.

- xii -
 About This Guide

Conventions Used in This Guide

As you use this guide, you'll notice that some text appears in bold or italic let-
tering. These conventions have meaning and help you learn and use Epicor
HCM. You'll see the following conventions in this guide.
Convention Description
bold Used for box labels including check boxes, drop-down list items, tab
names, menu labels, and any literal text that you must type exactly as
presented. Especially important to use for boxes where the label has mul-
tiple words or is a sentence. Also may be used for dialog box titles.
italic Any variable text you replace with specific text, such as the current date or
the name of a file, appears in italics.
CAPITALIZED Used for names of keys on a standard Microsoft and IBM-type keyboard.
IIS Server The server on which you install Internet Information Services software is
referred to as an IIS server, or as, simply, IIS.
SQL Server The server on which you install SQL Server software is referred to as a
SQL Server in this manual, or as, simply, SQL.
Reporting Ser- The server on which you install Reporting Services software is referred to
vices Server as a Reporting Services server, or as, simply, Reporting Services or RS.
Analysis Ser- The server on which you install Analysis Services software is referred to
vices Server as an Analysis Services server, or as, simply, Analysis Services or AS.
Navigational When you’re instructed to select an item, this instruction typically means to
Terminology click the item to highlight it (as in a list). When you’re instructed to choose
or click an item, these actions execute a command (as when choosing or
clicking the OK button). Double-click means to quickly press and release
the left mouse button twice. Press refers only to keys on the keyboard.
Enter means to type the text as indicated and take the appropriate action
to move on to the next step. For example, “Enter the employee’s hire date”
means to type the date in the box and then to press the TAB key to move
to the next box.

- xiii -
Preface

Using Installation Worksheets

As you use this guide, you will notice that several worksheets
have been included in the Appendix to assist you in installing Epicor HCM.
You can access the installation worksheets in the following ways:
You can photocopy worksheets directly from the “Using Epicor HCM Install-
ation Worksheets” appendix found at the end of this guide.
You can print worksheets from the Epicor HCM Setup CD that you received.

- xiv -
 Chapter 1

Completing Prerequisite Tasks

Installing your new software is a streamlined process so that the imple-

mentation goes smoothly. The Epicor HCM installer handles nearly all of the
general settings; however, there are a few things that must happen before
you begin installing Epicor HCM.
In this first chapter, we introduce the installation process and make sure all
prerequisite tasks are finished.
Concepts covered in this chapter include:

Epicor HCM Installation Workflow 2

Verify System Requirements 4
Prerequisite Tasks Introduction 5
General Prerequisites 7
IIS Prerequisite 10
SQL Server Prerequisite 16
Analysis Services Server Prerequisite 19
Configuring Reporting Services 20

Epicor HCM | 1
Chapter: 1

Epicor HCM Installation Workflow

The first step prior to installing Epicor HCM software is selecting a setup con-
figuration. Epicor HCM can support multiple setup configurations, so your ini-
tial basic decision is to use a split-server or single server configuration.
n Split-server uses more than one server with domain connectivity
between the machines, which allows interaction between the Epicor
HCM components installed on each server.
n Single-server runs all of your Epicor HCM components (IIS Web,
SQL database, Analysis Services, and Reporting Services) on one
server. Domain connectivity is not an issue with a single server.

It is important to choose the configuration that best fits your organization’s

needs before you begin the installation process.

NOTE: The most-used Epicor HCM configuration is a split-server

configuration with domain connectivity.

Split-server configurations allow for a variety of combinations of Epi-

cor HCM software on different servers. The table that follows
shows many of the possible variations.

This guide documents a split-server configuration with Epicor HCM

web component on one machine with the Epicor HCM database
component, Reporting Services, and Analysis Services com-
ponents being on a second machine. The single server installation
process is also covered.

2 | Epicor Software Corporation

 Completing Prerequisite Tasks

Configuration Types
As mentioned previously, when you are using a single server to install HCM,
all of the selected installation options reside on the one server. The following
table shows many split-server configuration types, although certainly not all
possible types. The single server and Option 1 of the split-server are the most
common configuration types.

NOTE: Candidate Connect is handled as a separate module and a

separate install. The Candidate Connect module is dealt with in the
Candidate Connect Implementation Guide.

Split-Server Options

Option Server 1 Server 2 Server 3 Server 4

1 IIS Web SQL Database
Reporting Services
Analysis Services
2 IIS Web Reporting Services
SQL Database Analysis Services

3 IIS Web Analysis Services

SQL Database
Reporting Services
4 IIS Web Reporting Services
SQL Database
Analysis Services
5 IIS Web Reporting Services Analysis Services
SQL Database
6 IIS Web SQL Database Analysis Services
Reporting Services
7 IIS Web SQL Database Reporting Services
Analysis Services
8 IIS Web SQL Database Reporting Services Analysis Services

Epicor HCM | 3
Chapter: 1

Verify System Requirements

Before you begin prerequisite tasks and working on the prerequisite tasks,
verify that you have the necessary hardware and software to accomplish
those tasks.

Hardware and Software Requirements

You can verify the required hardware and software requirements by referring
to the technical specifications insert in the packet included with your Epicor
HCM software.
To access the technical specifications on our Website, go to EpicWeb at
http://epicweb.epicor.com. Alternatively, you can contact an Epicor Product
Support and Education representative at (800) 424-6749 to request another
insert.

IMPORTANT: Epicor recommends you use a recent Microsoft Win-

dows Server operating system, such as Windows Server 2012 or
Windows Server 2008 R2 SP1.

There are instructions and screenshots for the following tasks that
apply to Windows Server 2012, separately from those that apply to
Windows Server 2008 R2.

4 | Epicor Software Corporation

 Completing Prerequisite Tasks

Prerequisite Tasks Introduction

Epicor HCM Setup makes installing your system easy; however, system pre-
requisites must be met to complete an installation. During Epicor HCM install-
ation the install program conducts a prerequisite check on the machine. If the
prerequisites for the server are not met, the setup requires that you satisfy
the outstanding prerequisites before continuation. So, it is best practice to
verify that all prerequisites have been met prior to starting Epicor HCM install-
ation.

Prerequisite Tasks Checklist

The following table provides an overview of the prerequisite tasks to perform.
It can also be used as a checklist for tasks completed.
Prerequisite Description Complete
General Prerequisites for All Servers
Install Verify that Windows Server 2012 or 2008 R2 SP1 is being run q
Windows on the servers being used for Epicor HCM. If not, install an
Server appropriate Windows Server version using a server install-
ation disk.
Install Epicor HCM Setup installs this software for you if it is not pre- q
Microsoft .NET viously installed. You can also get this software at the
Framework Microsoft Download Center at
and http://www.microsoft.com/downloads.
Windows SDK
Prerequisite Tasks for the IIS Server
Enable IIS IIS 8.0 or 7.5 may need to be enabled and the appropriate q
roles assigned.
Install SQL Use your SQL Server 2014 or 2012 SP1 installation disk to q
Server install and configure the SQL Server Shared Features related
to Epicor HCM IIS Web component.

Prerequisite Tasks for the SQL Server

Install SQL Use your SQL Server 2014 or 2012 SP1 installation disk to q
Server install and configure the SQL Server Shared Features related
to Epicor HCM Database component.
Prerequisite Tasks for the Reporting Services Server
Enable IIS IIS 8.0 or 7.5 may need to be enabled and the appropriate q
roles assigned.
Install SQL Use your SQL Server 2014 or 2012 SP1 installation disk to q
Server install and configure the SQL Server Shared Features related
to Epicor HCM Reporting Services component.
Prerequisite Tasks for the Analysis Services Server
Install SQL Use your SQL Server 2014 or 2012 SP1 installation disk to q
Server install and configure the SQL Server Shared Features related

Epicor HCM | 5
Chapter: 1

Prerequisite Description Complete

to Epicor HCM Analysis Services (OLAP) component.
Install Excel To use OLAP for reporting, install and configure Microsoft®
Excel 2010 or 2013.

NOTE: Depending on your server configuration, you may be able

to combine prerequisite tasks. Always keep in mind which com-
ponents you will be installing on which server. This will determine
what prerequisite installation options are needed, especially when
working with SQL Server installation and the Shared Features.

6 | Epicor Software Corporation

 Completing Prerequisite Tasks

General Prerequisites
It is required that any server being used with Epicor HCM products meet cer-
tain general prerequisites. There are three major installation prerequisites for
all servers being used with Epicor HCM products.
n Windows Server 2012 or 2008 R2 SP1.
n Microsoft .NET Framework 4.5 (Windows Server 2012 or 2008 R2)
or 4.0 (full version for Windows Server 2008 R2).
n Windows SDK for .NET 4.0.

Microsoft Windows Server Version

A Windows Server operating system is probably pre-installed on your server.
The first task to do is to verify the version and the service pack being used on
each server that will use an Epicor HCM product meets the requirements. It
is required that the server is running Windows Server 2012 or 2008 R2 SP1,
at a minimum. If necessary, install the required Windows Server version.
Also, make sure the operating system is up to date with the latest service
packs. Visit Microsoft Windows Update (http://win-
dowsupdate.microsoft.com) to download and install any service packs for
Windows Server.
After you install Windows Server on each of the server environments, be
sure that the user installing Epicor HCM has Windows Administrator rights to
those machines.

Epicor HCM | 7
Chapter: 1

Microsoft .NET Framework and Windows SDK for .NET

The Microsoft .NET Framework allows interoperability between newer and
older software applications. For proper functioning of Epicor HCM, you need
the Microsoft .NET Framework on each of the servers that run Epicor HCM
components. Windows SDK for .NET is also required. The versions required
by Epicor HCM are Microsoft NET Framework 4.5 or 4.0 (the full version).
The required Windows SDK is the .NET Framework 4.5 SDK or the .NET
4.0 SDK, depending on your Framework version and your Windows Server
version.
Windows Server 2012 includes and automatically installs the .NET Frame-
work 4.5. Earlier server versions do not include the Microsoft .NET Frame-
work. You can get the .NET Framework one of three ways:
n Epicor HCM Setup (if they are not detected on your system, the setup
alerts you that they will be installed if you want to proceed.).
n Microsoft Download Center at http://www.microsoft.com/downloads.
n From your Epicor HCM installation CD during installation.

NOTE: The .Net Framework requires Windows Installer 3.1. If your

machines do not already have Windows Installer 3.1, Epicor HCM
Setup alerts you that Windows Installer will be installed if you want
to proceed with the Epicor HCM installation process.

If you only have the client version of .Net Framework 4.0 and not the full ver-
sion, the server does not meet the prerequisite requirements. When installing
the full version to replace the client version, you can run the option to Repair
.Net Framework to it original state. The dialog box that you encounter
when upgrading to the full version is illustrated in Figure 1-1:

8 | Epicor Software Corporation

 Completing Prerequisite Tasks

Figure 1-1: Microsoft .NET Framework Upgrade

Use Installer for Prerequisites

The Epicor HCM Setup leads you through the installation process. As part of
the process, the installer conducts a prerequisite check on your server to
verify that the server meets the standards. The installation program provides
a notification box that specifies which components are missing from the
server and need installing. At that point you can let the Epicor HCM Setup
program proceed through the steps to install the missing components.
You can choose to exit the Epicor HCM Setup program, and then manually
install the components; however, it is recommended that you allow the Epicor
HCM Setup program guide you through the prerequisite install.
If you only have the client version of .Net Framework 4.0 and not the full ver-
sion, you are alerted by the Epicor HCM installer that the server does not
meet the prerequisites. As mentioned previously, you encounter a dialog box
that allows you to repair the .Net Framework, which upgrades your server to
the full version.

IMPORTANT: Aside from the prerequisite tasks on the server, you

must also verify that you have installed the latest Epicor HCM sys-
tem patches. The patches contain fixes to known issues, some of
which may affect the successful operation of the Epicor HCM
products. Visit EpicWeb to find information on what are the latest
patches.

Epicor HCM | 9
Chapter: 1

IIS Prerequisite
The next prerequisite tasks that you will want to complete are tasks related to
Internet Information Services (IIS). Complete the following tasks for servers
that will run either the web portal for the Epicor HCM product or the Report-
ing Services component.
n Configure IIS 8.0 for Windows Server 2012.
n Enable and Configure IIS 7.5 for Windows Server 2008 R2 SP1.

Configure IIS 8
IIS 8.0 for Windows Server 2012 is a necessary component to run Epicor
HCM and, therefore, it must be enabled prior to Epicor HCM installation. This
procedure also installs other software required by Epicor HCM.
Complete the following steps from both the server that will be used as the Epi-
cor HCM IIS Server and the Epicor HCM Reporting Services server.
1. Click Start Administrative Tools Server Manager. The Server
Manager window opens, as shown below.
2. From the Manage menu, select Add Roles and Features. The Add
Roles and Features Wizard displays.

Figure 1-2: Server Manager - Manage Menu

3. Click Next.
4. On the Select installation type page, select Role-based or fea-
ture-based installation, and then click Next.

10 | Epicor Software Corporation

 Completing Prerequisite Tasks

Figure 1-3: Roles and Features Installation Type

5. On the Select destination server page, verify the HCM server is

selected, and then click Next.
6. On the Select server roles page, select the following Roles:
Roles Location Path Roles
File and Storage Services > Storage Services
Web Server (IIS) > Web Server > Default Document
Common HTTP Features >
Web Server (IIS) > Web Server > Directory Browsing
Common HTTP Features >
Web Server (IIS) > Web Server > HTTP Errors
Common HTTP Features >
Web Server (IIS) > Web Server > Static Content
Common HTTP Features >
Web Server (IIS) > Web Server > HTTP Logging
Health and Diagnostics >
Web Server (IIS) > Web Server > Logging Tools
Health and Diagnostics >
Web Server (IIS) > Web Server > Request Monitor
Health and Diagnostics >
Web Server (IIS) > Web Server > Static Content Compression
Performance >
Web Server (IIS) > Web Server > Request Filtering
Security >
Web Server (IIS) > Web Server > Basic Authentication
Security >
Web Server (IIS) > Web Server > Windows Authentication
Security >
Web Server (IIS) > Web Server > .NET Extensibility 3.5
Application Development >

Epicor HCM | 11
Chapter: 1

Roles Location Path Roles

Web Server (IIS) > Web Server > .NET Extensibility 4.5
Application Development >
Web Server (IIS) > Web Server > ASP.NET 3.5
Application Development >
Web Server (IIS) > Web Server > ASP.NET 4.5
Application Development >
Web Server (IIS) > Web Server > CGI
Application Development >
Web Server (IIS) > Web Server > ISAPI Extensions
Application Development >
Web Server (IIS) > Web Server > ISAPI Filters
Application Development >
Web Server (IIS) > Web Server > Server Side Includes
Application Development >
Web Server (IIS) > Management Tools > IIS Management Console
Web Server (IIS) > Management Tools > IIS 6 Metabase Compatibility
IIS 6 Management Compatibility >

7. Click Next.
8. On the Select features page, select the following items:
Features Location Path Features
.NET Framework 3.5 Features > .NET Framework 3.5
.NET Framework 4.5 Features > .NET Framework 4.5
.NET Framework 4.5 Features > ASP.NET 4.5
.NET Framework 4.5 Features HTTP Activation
>WCF Services >
Message Queuing > Message Message Queuing Services
Queuing Services >
User Interface and Infrastructure > Graphical Management
Tools and Infrastructure
Windows Powershell > Windows Powershell 3.0
Windows Process Activation Process Model
Service >
Windows Process Activation Configuration APIs
Service >
WoW64Support
9. Click Next, and then click Install.

Enable and Configure IIS 7.5

Windows Server 2008 R2 SP1 ships and installs with Internet Information
Services 7.5; however, in a disabled state. Since IIS 7.5 is a necessary com-
ponent to run Epicor HCM products, it must be enabled prior to installation.

12 | Epicor Software Corporation

 Completing Prerequisite Tasks

This procedure also installs other software required by Epicor HCM

(ASP.NET, WWW Publishing Service, IIS Manager, and SMTP).
Complete the following steps from both the server that will be used as the IIS
web portal server and, if applicable, the Reporting Services server.
1. Click Start Administrative Tools Server Manager. The Server
Manager window opens, as shown in Figure 1-4.

Figure 1-4: Server Manager window

2. Select the Roles node in the left pane.

3. In the right pane, click Add Roles. The Add Roles Wizard displays.
4. Click Next, and then select the Web Server (IIS) check box.
5. Click Add Required Role Services. This adds Window Process
Activation Service (WAS) for install.
6. Click Next twice. The Add Roles Wizard displays, as shown in Figure
1-5, with a list of IIS available features some of which are selected by
default.

Epicor HCM | 13
Chapter: 1

Figure 1-5: Add Roles Wizard

NOTE: You do not need to clear any default selections.

When a default selection is mentioned in these instructions,
just verify that the box is selected. For further information on
Available Web Server (IIS) Role Services refer to Microsoft
TechNet online resource.

7. Under the Common HTTP Features node, verify that Static Con-
tent, Directory Browsing and HTTP Errors are selected as these
are default options.
8. Select all check boxes under the Application Development node.
9. Select Logging Tools check box under the Health and Dia-
gnostics node.
10. Select Basic Authentication check box and Windows Authentic-
ation check box under the Security node.
11. Select all check boxes under the Management Tools node.
12. Scroll down to Web Server Management Tools.
13. Select IIS 6 Management Compatibility.

This will also select associated features – IIS 6 Metabase Com-

patibility, IIS 6 WMI Compatibility, IIS 6 Scripting Tools, and IIS 6 Man-
agement Console. Verify that all these are selected.
14. Click Next. Confirm your installation selections.

14 | Epicor Software Corporation

 Completing Prerequisite Tasks

15. Click Install.

16. When the installation finishes, click Close. This correctly configures
IIS to work with your Epicor HCM product.

Epicor HCM | 15
Chapter: 1

SQL Server Prerequisite

The next task is to run the SQL Server setup process on each server that will
have Epicor HCM components installed and select the appropriate features.
It is important to note that options available during setup and the con-
figuration needed proceed based on to the features selected.

NOTE: These instructions are assuming a clean install of SQL

Server and not an upgrade to a newer version.

This guide does not list step-by-step SQL Server installation instructions but
gives instruction that is specific to your Epicor HCM configuration. For
detailed SQL Server setup instructions refer to the Microsoft SQL Server
Library at http://msdn.microsoft.com.

NOTE: If using SQL Server 2012 SP1, you also need to download
and install the Cumulative update package 6 for SQL Server
2012 SP1 found at .http://support.microsoft.com/kb/2874879.

SQL Server Database and Shared Features

Begin SQL Server setup using the SQL Server installation disk and continue
to the Features Selection. For all supported versions of SQL Server, these
instructions are the same.
The specific features needed for each server are contingent on the Epicor
HCM components being installed on the server. For a single-server con-
figuration all of the features denoted in these instructions will be installed on
the one server. For split-server configurations only certain features are
installed on each server.

NOTE: The split-server installation instructions described in this

guide would require that you would install the features on Server 1
necessary for the Epicor HCM Web application. Server 2 would
have the features necessary for Epicor HCM Database, Epicor
HCM Reports, and Epicor HCM Analysis Services.

The following table lists the Database and Shared Features to select. You
would select all of the listed items, except for Integration Services, to prepare
for a single-server Epicor HCM installation. For a split-server Epicor HCM
install, you would select the appropriate items based the Epicor HCM applic-
ation being installed on the server.

16 | Epicor Software Corporation

 Completing Prerequisite Tasks

Split-Server
Shared Feature Single-Server
Web Database Reports Analysis Services
Database Engine Services √ √
SQL Server Replication √ √ √
Full-Text Search √ √ √
Analysis Services √ √ √
Reporting Services- Native √ √
Client Tools Connectivity √ √ √ √ √
Integration Services √ √
Management Tools - Basic √ √ √ √ √
SQL Server Books Online √ √ √ √ √

Instance Configuration
The Instance Configuration page prompts you to specify the name and ID for
the SQL Server instance. You may accept the Default instance, but best prac-
tices recommend that you further define instances by entering a value in the
Named instance box.
Some things to remember when defining your instances:
n This value is limited to 16 characters.
n If you are planning to run multiple instances — a production system
and a sample system, for example — define a named instance for
each (ie. EHCM50Prod and EHCM50Samp).
n If you name an instance for your Analysis Services or Reporting Ser-
vices servers, make sure you use the same name for your SQL
server, as well.

Server Service Accounts Configuration

The SQL Server setup advances to the Server Configuration page. Accounts
listed on the Service Accounts tab are prefilled, being based on the Features
previously selected. A Collation tab may also be available depending on the
features selected.
If the only Epicor HCM product component being run on the server is an IIS
web portal application, there should only be the Service Accounts tab dis-
played and no Collation tab.
Use the same account for all SQL Server services.

NOTE: There may be exceptions where your SQL needs dictate

the use of a domain user account. This instance is not covered in
these instructions.

Complete the Service Account configuration for the Services listed as fol-
lows.

Epicor HCM | 17
Chapter: 1

1. In Account Name, select NT AUTHORITY\NETWORK SERVICE

from list.
2. Enter a Password.
3. Click OK.

Server Collation Configuration

The Collation tab may display on the Server Configuration page. Configuring
the database collation is unnecessary and doing so can create database
issues once you install Epicor HCM. If you feel you must verify this con-
figuration, be sure it is set to SQL_Latin1_General_CP1_CI_AS.

Database Engine Configuration

On the Server Configuration tab of the Database Engine Configuration page,
select Mixed Mode (SQL Server authentication and Windows authen-
tication) and enter a password for the Built-in SQL Server administrator
account.
Add appropriate users in the Specify SQL Server administrators box by click-
ing Add or Add Current User.
Install SQL as case insensitive. Epicor HCM products support only case
insensitive installs of SQL.

Reporting Services Configuration

Reporting Services is the engine that runs Epicor HCM’s powerful standard
and Ad Hoc reports functionality. Refer to Chapter 3 Configuring Epicor
HCM Install for additional information on steps that may be needed for
Reporting Services to function. The Reporting Services Configuration dialog
box displays during the SQL Server Setup to allow for install of the report
server database.
Select the appropriate SQL Reporting Services install option for Reporting
Services Native Mode.
n Select Install and configure – When Reporting Services instance is
being installed for the first time on the server, or for a single-server
install configuration of Epicor HCM.
n Select Install only – If this will be an additional Reporting Services
instance or a split-server configuration.

NOTE: If the option to Install only is selected, refer to the

section Configuring Reporting Services. This needs to be
done before Epicor HCM installation.

18 | Epicor Software Corporation

 Completing Prerequisite Tasks

Analysis Services Server Prerequisite

Setup of the Analysis Services server contains tasks that are specifically
designed for OLAP to function. The prerequisite tasks involve:
n Installation of SQL Server Native Client
n Installation of Microsoft® Excel 2010 or 2013

NOTE: Refer to Chapter 3 Configuring Epicor HCM Install for con-

figuration information that is be needed for OLAP to function.

Install Native Client on SQL Server

When you run a new install of SQL Server on the server in which Analysis
Services will reside, you need to install the Microsoft SQL Server Native
Client. Installation of the Native Client is required for OLAP to function.
The installation file for this component can be found on the Epicor HCM
installation CD. Choose the Microsoft SQL Server Native Client for your SQL
Server version (sqlncli.msi).

Install Excel
OLAP function for HCM reports using Microsoft® Excel. Microsoft® Excel
2010 or 2013 needs to be installed and configured on the server in which Ana-
lysis Services resides for the HCM installation configuration.
After you install Excel on the server and complete Epicor HCM installation,
then you can configure the DCOM settings for Excel. Refer to chapter 3, Con-
figuring Epicor HCM Install.

Epicor HCM | 19
Chapter: 1

Configuring Reporting Services

Installation of any split-server configuration of Epicor HCM requires Report-
ing Services configuration prior to installation. This entails creating a new
Reporting Services database and removal of an unneeded Report Server
URL.

Database Setup
On the server that will house Epicor HCM Reports, set up a new Report
Server database as follows.
1. Click Start All Programs Microsoft SQL Server 20xx Con-
figuration Tools Reporting Services Configuration Manager.
The Reporting Services Configuration Manager displays.
2. Click Connect to log in to the SQL Server 20xx instance.
3. Click Database in the left pane. The Report Server Database page
appears.
4. Click Change Database. The Report Server Database Con-
figuration Wizard appears.
5. Choose the Create a new report server database option.
6. Click Next twice.
7. Enter a new, unique value in the Database Name box.
8. Click Next twice.
9. Verify the summary details.
10. Click Next. The Report Server Database Configuration wizard sets
up the new report server.
11. When the configuration stops, click Finish.

20 | Epicor Software Corporation

 Completing Prerequisite Tasks

Verify and Remove

While still within Reporting Services Configuration Manager, locate the Web
Service and Report Manager URLs in the left pane. Verify and remove any
unneeded Reporting Services URLs as follows.
Select If... Then...
1. Web Service Only port 80 URL is listed. Verify Report Manager URL.
URL
The URL appears as

http://ServerInstance:80/
ReportServerVirtualDirectoryName
Multiple URLs are listed. a. Click Advanced.
The Advanced Multiple Web
Site Configuration window
appears and the extra URL (con-
figured for port 443) is located in
the Multiple SSL Identities for
the Report Service Web Server
box.
b. Highlight the URL, click
Remove, and then click OK.
c. Verify Report Manager URL.
2. Report Manager Only port 80 URL is listed. Click Exit to close.
URL
The URL appears as

http://ServerInstance:80/
ReportServerVirtualDirectoryName

Multiple URLs are listed. a. Click Advanced.

The Advanced Multiple Web
Site Configuration window
appears and the extra URL (con-
figured for port 443) is located in
the Multiple SSL Identities for
the Report Service Web Server
box.
b. Highlight the URL, click
Remove, and then click OK.
c. Click Exit to close.

Epicor HCM | 21
 Chapter 2

Installing Epicor HCM

Now that you have prepared the servers, in this chapter we will revisit the con-
figuration types and how it relates to the installation. Then you will complete
the installation steps for your selected configuration.

Concepts covered in this chapter include:

Overview of Epicor HCM Software 24

Installation Types 25
Install Order Exception 26
Installation Steps 27
Business Library 43
Verify the System License 44
Removing Epicor HCM 45

Epicor HCM | 23
Chapter: 2

Overview of Epicor HCM Software

The installation process creates the Epicor HCM Database, installs Epicor
HCM Reports, Analysis Services, and installs the Epicor HCM Web applic-
ation on your Internet Information Services (IIS) server.
A description of the Epicor HCM installation components are as follows:
n The Epicor HCM Web application on your IIS Server is your Epicor
HCM Web site located at a virtual directory that is created during
install. The virtual directory path that is created is the root directory
that contains the sequence of directories and file names for your Epi-
cor HCM Web site.
n The Epicor HCM Database, also called the main database, stores the
human resource data and codes for use by the Epicor HCM applic-
ation. When adding, deleting, or changing data within the Epicor
HCM application this impacts the Epicor HCM database.
n Epicor HCM Reports is a feature-rich business intelligence system
that powers the Epicor HCM enterprise reporting functionality. Epicor
HCM Reports can also utilize Report Builder, which is an easy-to-use
drag-and-drop tool to create ad-hoc reports in a matter of minutes.
Report Builder is a separate install that is covered in Chapter 4.
n Analysis Services is the software that gives Epicor HCM the power of
multi-dimensional data analysis via OLAP cubes. This is not an avail-
able feature when installing software that is licensed for the Express
version of the Epicor HCM software.

NOTE: The Epicor HCM installation process prompts for

several user names and passwords, some of which are cre-
ated on-the-fly. The SQL Server username and password
should have been created in advance.

To help you manage these, please use the Epicor HCM

Installation Usernames and Passwords worksheet, which is
found in Appendix A.

24 | Epicor Software Corporation

 Installing Epicor HCM

Installation Types
Epicor HCM Setup is similar to other software installations in that it is a con-
tinuous, wizard-style setup that steps you through the process.
This guide assists in addressing split-server and single-server installation
types. While this guide refers to a split-server install between two servers as
a typical installation configuration, the installation instructions can be followed
for any configuration type. If you still have questions about the complexity of
your configuration type you can contact Product Support for assistance.

Split Server versus Single Server

Implementing a split-server system means that selected Epicor HCM com-
ponents are installed on more than one server, such as for this guide’s pur-
pose, two different servers. For example, Epicor HCM IIS Web is installed on
machine 1, with Epicor HCM SQL Database, Reporting Services and Ana-
lysis Services being installed on machine 2. This is the typical split-server
installation type.
Conversely, conducting a single server Epicor HCM implementation will
install all components on one server.

Stop: When implementing a split-server system, the Epicor HCM

Setup CD must be run on each server machine.

In the typical installation that is addressed in this guide, the setup

CD would be run on machine 1 for installing IIS Web and Epicor
HCM database components. Then the CD would be run on
machine 2 for the remaining components.

IMPORTANT: Due to server security requirements, only users

with domain administrator rights to the IIS server and the SQL
server may run the Epicor HCM installation.

Epicor HCM | 25
Chapter: 2

Install Order Exception

Most often you will select and install both the Epicor HCM Web and Epicor
HCM Database options at the same time, as this is the recommended
method. When the install is done using this typical method there is not an
issue with the order of installation, because the setup will guide you.
However, your company may have different needs where you are not able to
install both Epicor HCM Web and Epicor HCM Database at the same time. If
for any reason your company business needs make it necessary to conduct a
separate install of the Epicor HCM Database component, then there is a cer-
tain order that the Epicor HCM components must be installed. To be clear,
this section is not referring solely to an Epicor HCM Database split-server
install, but is addressing a special need for running the Epicor HCM Data-
base setup separately from Epicor HCM Web.
If this is the case, that you will be installing Epicor HCM Database as a sep-
arate install, then you must run the setup for Epicor HCM Database on the
SQL database server prior to installing the Epicor HCM Web component on
the IIS server. Reversing the order of these separate installs would prevent
you from completing the Epicor HCM Web setup.
Again, be aware that this explanation of installation order will not apply to the
majority of those running the installation. If you still have questions if this will
apply to your installation process, contact Epicor HCM Product Support.

26 | Epicor Software Corporation

 Installing Epicor HCM

Installation Steps
The installation steps covered in this guide can be used to address just about
any type of Epicor HCM installation that you may be doing, including installing
the HCM Express version. Just remember to have a plan as to what Epicor
HCM components are to be installed on each server. Keep that plan in mind
during the installation process, as there will be different decisions to make
depending on which installation options were selected.
When running the installation CD, the steps follow sequentially and should
not be canceled unless absolutely necessary. The installation CD must be
run on each server being used for split-server installations.

NOTE: If you are also installing Candidate Connect, you can refer
to the Candidate Connect Implementation Guide for detailed install-
ation instructions.

IMPORTANT: If the server does not meet the prerequisite stand-

ards, as outlined in Chapter 1, the installation will be interrupted. It
is vital that Chapter 1 content is reviewed and the server meets the
required standards.

Previous Installations
If there are previous instances of Epicor HCM on the server, after you have
placed the installation CD in the CD drive, Epicor HCM Setup displays the
Installed Instances Detected window as shown in Figure 2 1.

Figure 2-1: Installed Instances Detected

Epicor HCM | 27
Chapter: 2

The options available are to continue with a New Installation or to select an

existing instance. By selecting an existing instance of Epicor HCM you will be
able to change or remove that instance. See "Removing Epicor HCM " on
page 45 before you proceed with uninstalling Epicor HCM. If you intend to
make changes to Epicor HCM in this manner, please consult with Epicor
Technical Support before making changes.

NOTE: When adding new instances of Epicor HCM, be aware that

there is a 76-instance limit to the number of Epicor HCM systems
you can keep on a machine. Please consult with Product Support if
you believe that you are going to exceed this limit.

Crossroads Decision Points

As you progress through the installation process, the steps in this guide will
follow along with what you are seeing on your screen and provide additional
instruction. There will be headings labeled Crossroads Checkpoints that are
followed by If/Then tables to assist you in determining if you should expect to
complete the following step or proceed to another section of the installation
instructions. The Crossroads Checkpoints guide the installation direction
mostly based on which Epicor HCM components you are installing at the
time. So, make note of the Epicor HCM components being installed at the
time, whether it be the:
n Web Application (IIS)
n Database
n Reports (Reporting Services)
n Epicor HCM Analysis Services

There are also decisions based on if you are installing Candidate Connect or
you can refer to the detailed installation instructions for Candidate Connect in
the Candidate Connect Implementation Guide.

NOTE: Although the Epicor HCM web is being installed on the web
server, you will also select to setup the Epicor HCM Database and
direct it to be installed on a separate server.

28 | Epicor Software Corporation

 Installing Epicor HCM

Beginning Installation Steps

Place the Epicor HCM Installation CD in the CD drive and then proceed with
the installation steps.

IMPORTANT: Epicor HCM Web Application must be completed

first in every split-server installation. Always select Epicor HCM
Database for installation when selecting Epicor HCM Web Applic-
ation.

Step Description Dialog Box

1 WELCOME DIALOG BOX
Click Next.

MISSING PREREQUISITES
DETECTED
This dialog box only appears if your
server does not meet the requirements
for installation. The boxes are marked
with the required components to install.

Click Install to begin installing the

required components.
Note: You do not have to use this tool to
install these components. You can
Cancel the installation and install the
components manually. Also, you can
proceed with the Epicor HCM install-
ation without Windows SDK, but you
have to install it prior to using Epicor
HCM.
Note: If you only have the client version
of .Net Framework 4.0 and not the full
version, you will upgrade to the full ver-
sion. You encounter a dialog box where
you select the option to Repair .Net
Framework to it original state. (see

Epicor HCM | 29
Chapter: 2

Step Description Dialog Box

dialog box image in Chapter 1).

Step Description Dialog Box

2 LICENSE KEY AND CUSTOMER ID
ENTRY

Obtain Key and ID from the installation

package.

a. Enter License Key and Customer ID.

b. Press the TAB key
c. Click Next.

Crossroads Checkpoint

Be aware that the installation may advance to a different dialog box than the
next step listed. Check the following decision table.
If... Then...
Your License Key allows for module installs, The Portal Selection dialog box displays, as
such as Candidate Connect shown in step 3. Otherwise, continue to step
4; Install Options Dialog Box.

Step Description Dialog Box

3 PORTAL SELECTION

You may get a Portal Selection dialog

box depending on Licensing.

In the portal Name list, select desired

installation portal, and then click Next.

30 | Epicor Software Corporation

 Installing Epicor HCM

Step Description Dialog Box

4 INSTALL OPTIONS DIALOG BOX

a. Select the desired options.

Note: Licensing and Portal selection
determine which options are available.

If you are licensed for the Express ver-

sion of Epicor HCM or are installing the
Candidate portal then you will have the
Web Application, the Database, and
Reports. You will not have the Analysis
Services option.

b. Click Next.
5 SYSTEM PREREQUISITE TEST
a. Verify all items have green check
marks.
b. Click Next.

A red Failed sign means the server

does not meet the installation pre-
requisite and you cannot continue. You
must cancel the installation, correct the
system issue and then start the install-
ation again.
A yellow Warning sign will still allow
you to continue, but you must resolve
the item after install. In some cases, the
item may be resolved during installation.
Make note of the item before continuing.
6 SERVER SETUP INFORMATION
a. Select or enter the SQL Server Name.
Note: If the database server name is not
in the list, enter as
servername\instancename
Split-Server Note: When using a split-
server configuration, the server name on
this step must be the same for each
install.
b. Enter the Login and Password for this
server.
Note: The option to Use Integrated
Security forgoes the need for Login and
Password, using the current Windows
identity. The current identity must have

Epicor HCM | 31
Chapter: 2

Step Description Dialog Box

sufficient server and database security
access.
c. Click Next.

32 | Epicor Software Corporation

 Installing Epicor HCM

Database Setup
The installation continues with the database setup. These steps establish the
Epicor HCM database name and location. In addition, Epicor HCM is granted
access to SQL server.
In step 6, if you have selected a database server that is not the Epicor HCM
web server, the Epicor HCM installer determines the correct Data and Log
path and therefore these cannot be changed, as shown in the image of Dia-
log Box 1a.
Split-Server Note: If Split-server configuration, you may get Dialog Box
Type 2 after the initial install on server 1. Enter the database name that was
established on the initial server setup.
Step Description Dialog Box
7 DATABASE SETUP
a. In Database Name, enter a name for
the database, such as EpicorHCM or
EpicorHCMcandidate.
Note: You will use this database name
for the virtual directory name or the Web
site name in a later step.
b. In Data File Path and Log File Path,
enter the path to the database on the
database server. Notes:A default Data
and Log path will auto-complete in the
boxes. Alternatively, you can enter a
path for each. Dialog Box 1
Typically the path to your database on
the SQL server would be
C:\Program Files\
Microsoft SQLServer\
MSSQL10.MSSQLSERVER\
MSSQL\DATA.

The Install sample data? selection is

only for setting up a sample Epicor HCM
system.
c. Click Next.

Dialog Box 1a

Epicor HCM | 33
Chapter: 2

Step Description Dialog Box

Dialog Box 2

Step Description Dialog Box

8 EPICOR HCM LOGIN SETUP
a. Enter SQL Login for Epicor HCM
application use.
Split-Server Note: When using a split-
server configuration, the SQL Login and
Password is the same for each server
setup.
b. In SQL Password, enter a password.
c. In Confirm Password, re-type the pass-
word.
c. Click Next.

Reporting Services Setup

Reporting Services are the next dialog boxes in the process that establish the
Reports server location.

Crossroads Checkpoint

Be aware that the installation may advance to a different dialog box than the
next step listed. Check the following decision table.
If... Then...
Database or Reports are selected for install Reporting Services Server Setup dialog box
or if this is a Candidate Connect install displays. Otherwise, proceed to E-Mail
Setup Crossroads Checkpoint.

Split-Server Note: If a split-server configuration, the information entered

must be identical to that which was established initial server setup.

34 | Epicor Software Corporation

 Installing Epicor HCM

Step Description Dialog Box

9 REPORTING SERVICES SERVER
SETUP

a. Select or enter the Server Name.

Note: You can enter a Named Instance,
if applicable, as Server-
Name\NameOfInstance.
b. Enter an RS Domain, which will be a
virtual folder in Reporting Services.
c. Click Next.

10 REPORTING SERVICES URL SETUP

a. Select or enter the Server URL.

The URL format should be either
http://servername:80
Or
https:// fullyqualifieddomainname:443

Note:Use the port 443 URL for SSL, if

you have a SSL certificate. Refer to
Chapter 3, for instructions on SSL
setup.
Split-Server Note:For a split-server con-
figuration, the URL entered must be
identical on each server setup.
b. Click Next.
11 REPORTING SERVICES ADMIN
SETUP

Note: Admin dialog box only displays

when Reporting Services has been
selected as an install option.
a. Enter a User Name for Reporting Ser-
vices administrative use.
b. In Password, enter a password.
c. In Confirm Password, re-type the pass-
word.
d. Click Next.

Epicor HCM | 35
Chapter: 2

E-Mail Setup
The E-mail SMTP server information can be setup at this time or this step can
be skipped and done through Epicor HCM after the install.

Crossroads Checkpoint

Be aware that the installation may advance to a different dialog box than the
next step listed. Check the following decision table.
If... Then...
Database is selected as an install option E-Mail Setup displays. Otherwise, proceed
Candidate Connect is selected through the to Analysis Services Crossroads Check-
portal point.

Step Description Dialog Box

12 EMAIL SETUP

a. Enter an SMTP Server name.

b. In the User box, enter a user name with
access to the SMTP server
c. Enter the Password.
d. Enter a test e-mail address.
e. Press the TAB key.
f. Click Next.

Alternatively, skip this step and after the

installation use Epicor HCM E-mail Pro-
files task located on the Utilities tab.

36 | Epicor Software Corporation

 Installing Epicor HCM

Analysis Services Setup

Analysis Services dialog box provides database location information to Epi-
cor HCM. This dialog box does not display for Candidate Connect installs.

Crossroads Checkpoint

Be aware that the installation may advance to a different dialog box than the
next step listed. Check the following decision table.
If... Then...
Database and/or Analysis Services is selec- Analysis Services Server Setup dialog box
ted as an install option displays. Otherwise, proceed to IIS Web Ser-
vices Crossroads Checkpoint.

Split-Server Note: The Database Name should be the name entered during
Server 1 setup.
Step Description Dialog Box
13 ANALYSIS SERVICES SERVER
SETUP

Note: The Skip Analysis Services

check box displays if Analysis Services
was not selected as an install option or if
you are installing the Express version. If
not an Express install,the server and
database name still needs to be entered
prior to check marking the box. Analysis
Services is not an install option for the
Express version.
a. Select or enter the Server Name.
Dialog Box Type 3
Note: This should be the server name
where the Analysis Services database
will reside.
b. Enter the Database Name.
Split-Server Note: Use the same data-
base name for each server setup.
c. If Skip Analysis Services check box
displays, select it.
d. For the Is the Analysis Services
server in an untrusted domain check
box, only select it for a split-server
setup where the Analysis Services
server is on an untrusted domain.
d. Press the TAB key.

Epicor HCM | 37
Chapter: 2

Step Description Dialog Box

e. Click Next.

Dialog Box Type 4

IIS Web Setup and Epicor HCM Admin

The IIS Setup steps allow the Epicor HCM Web application to be identified
and configured on the web server. The Administrative dialog box creates the
Epicor HCM Admin name and password. A Domain Identity path can be
used for Windows authentication. This would be used for Epicor HCM first-
time log in.

Crossroads Checkpoint

Be aware that the installation may advance to a different dialog box than the
next step listed. Check the following decision table.
If... Then...
Installing Web Application IIS Setup and Epicor HCM Admin Setup
screens display. Otherwise, proceed to final-
Installing Candidate Connect izing the installation. (Refer to Verify and
Install.)

38 | Epicor Software Corporation

 Installing Epicor HCM

Step Description Dialog Box

14 IIS CONFIGURE SELECTION

a. Select either to use the default Web site

or to create a new Web site.
Note: App Pool Name can remain the
default name for a single installation of
Epicor HCM.
b. Select Windows Authentication, if
desired.
c. Click Next.

Epicor HCM | 39
Chapter: 2

Step Description Dialog Box

15 VIRTUAL DIRECTORY SETUP

The Name box auto-populates. Verify

that the virtual directory name is the
same name as was used previously in
the database setup. If not, change it to
the same name as the database name.
a. Press the TAB key.
b. Click Next.

OR

NEW WEBSITE SETUP

This is an advanced user feature and it

is required to know information about the
Web site name, the available ports, and
possibly the IP address of the Web site.
a. Type your Epicor HCM Website Name.
Note: The Web site name needs to be
the same as the database name used
previously in the database setup.
b. Check mark Use http and/or
Use https.
Note: At least one must be checked.
c. Use default port number, if desired and
not used by another Web site, or enter
new port number in Port box and/or
Https Port box.
d. If desired, click Use IP and enter IP
Address.
e. Click Next.

40 | Epicor Software Corporation

 Installing Epicor HCM

Step Description Dialog Box

16 EPICOR HCM USER FOR WINDOWS
AND IIS

Note: This window does not appear if

Windows Authentication was previously
selected.

a. Leave as the current machine name or

enter a Domain name.
b. In User Name, enter a user name for
Epicor HCM application rights.
Note:Alternatively, you can select to
Use Existing User from the specified
domain.
b. In Password, enter a password.
c. In Confirm Password, re-type the pass-
word.
d. Click Next.

Crossroads Checkpoint

Be aware that the installation may advance to a different dialog box than the
next step listed. Check the following decision table.
If... Then...
Database was selected as an install option Epicor HCM Administrator dialog box dis-
Candidate Connect was selected in the plays. Otherwise, proceed to the next step
portal for installation and finalize the installation.

Step Description Dialog Box

17 EPICOR HCM ADMIN SETUP
a. In User Name, enter a user name for
Epicor HCM administrative rights.
b. In Password, enter a password.
c. In Confirm Password, re-type the pass-
word.
d. Enter the Domain Identity login path
ONLY if Windows authentication was
previously selected.
e. Click Next.

Epicor HCM | 41
Chapter: 2

Verify and Install

Verify that the Epicor HCM files are to be installed in the desired location. The
location can be changed using the Browse button.
Note: If installing only Reporting Services and/or Analysis Services, the
Browse button is disabled, as the install locations need to be fixed for these
features.
This concludes this installation of the Epicor HCM product on the server.
There are additional post-installation tasks to be completed. Refer to the next
section in this guide to determine what tasks those may be. The Epicor HCM
system administrator should also refer to the configuration documentation in
Chapter 3.
Split-Server Note: The installation process must be run on each server that
is being used for your Epicor HCM product.
Step Description Dialog Box
18 VERIFY INSTALLATION
FEATURES
a. Verify that the appropriate features and
install location are selected.
b. Click Next and then at the next window
click Install.

The installation begins.

42 | Epicor Software Corporation

 Installing Epicor HCM

Business Library
After installing Epicor HCM, the business library should be generated for the
first time. This initial generation ensures that the database is properly
updated and functioning.

Generate Business Library

Generate the Business Library as follows:
1. Log on to your Epicor HCM system as a Super Admin using the Epi-
cor HCM Administrator username and password that was estab-
lished during setup.
2. On the Utilities tab, navigate to System Configuration Generate
Business Library.
3. Select the Update Reporting Model check box.
4. Click Regenerate Business Objects.

Epicor HCM | 43
Chapter: 2

Verify the System License

Epicor recommends that you verify the Epicor HCM system is licensed prop-
erly.
Verify your system license by logging on to your Epicor HCM system as a
Super Admin. On the Utilities tab, navigate to Licensing Display Licens-
ing Information. The Current Licensing page displays, as shown in Figure
2-2.

Figure 2-2: Current Licensing page

Verify that all information about the number of users and Epicor HCM mod-
ules for which you are licensed is correct.

NOTE: If the counts for any current license agreement item on the
Current Licensing page are incorrect, or if your users are using any
module functionality not listed, please contact Epicor to upgrade
you license agreement.

All HR or Admin users receive warning messages until license dis-

crepancies are resolved.

44 | Epicor Software Corporation

 Installing Epicor HCM

Removing Epicor HCM

Complete one of the following methods to remove Epicor HCM. These pro-
cesses remove all Epicor HCM databases from your SQL Server and the vir-
tual directory and Web components from your IIS Server.
n Method One – Uninstall multiple instances of Epicor HCM.
n Method Two – Uninstall one instance of Epicor HCM.

IMPORTANT: The Epicor HCM uninstall process wipes out all

files, folders, and databases. Before you begin removing Epicor
HCM, be sure to back up both the Epicor HCM and Analysis Ser-
vices databases.

Method One
Use Method One for uninstalling Epicor HCM if you installed more than one
instance of Epicor HCM. Before you begin this uninstall process Epicor
recommends that you copy the entire contents of the installation CD to your
IIS server. After this, then the uninstall process can be run from the file on the
server. DO NOT run uninstall from the CD.
1. Browse to the location on your IIS server where you copied the con-
tents of your Epicor HCM installation CD.
2. Find the setup.exe file and double-click it.
3. Select the unwanted instance and click Remove. The uninstall pro-
gram removes all Epicor HCM-related files, folders, and databases
for the selected instance.

Method Two
Use Method Two for uninstalling Epicor HCM if you had installed only a
single instance of Epicor HCM.

IMPORTANT: If you installed more than one instance of Epicor

HCM then complete the procedure for Method One above.

1. Click Start Control Panel Programs and Features on the IIS

server where you installed Epicor HCM. Windows displays the Pro-
grams and Features window.
2. Select Epicor HCM.
3. Click Uninstall. The uninstall program removes all Epicor HCM-
related files, folders, and databases.

Epicor HCM | 45
 Chapter 3

Configuring Epicor HCM Install

Now that you have successfully installed Epicor HCM, going through this
chapter you will perform the configuration tasks needed so that data can be
shared across Epicor HCM and related software. These configuration steps
involve reviewing or modifying settings in Epicor HCM and in third-party soft-
ware to meet the needs of your organization.

Concepts covered in this chapter are:

Epicor HCM Configuration Overview 48

Configuring Secure Sockets Layer 49
Configuring Analysis Services 55
Configure OLAP Parameters for Untrusted Domain 61
Domain Connectivity and Windows Authentication 62

Epicor HCM | 47
Chapter: 3

Epicor HCM Configuration Overview

Before implementing Epicor HCM, you may need to complete a few post-
installation tasks that include modifying and reviewing settings in Epicor HCM
and its required third-party software.

48 | Epicor Software Corporation

 Configuring Epicor HCM Install

Configuring Secure Sockets Layer

Using Secure Sockets Layer (SSL) with Epicor HCM Reporting Services
requires that you own and install a digital authenticating certificate issued by
a reputable and trusted third-party issuer. Provided you’ve installed a cer-
tificate on your IIS server prior to installing Epicor HCM, no additional con-
figuration should be necessary.

NOTE: Depending on the provider you choose, you may need to

import their certificate authority’s certificate into the IIS server’s
Intermediate Certificate Authorities local computer subfolder of that
store. Consult your certificate provider for specific documentation
on this process.

If you are installing your SSL after you’ve installed Epicor HCM there is some
configuration that is needed.

Import the Certificate into IIS Server

Complete the following procedure to properly configure SSL with the IIS
server.
1. Click Start Administrative Tools Internet Information Ser-
vices (IIS) Manager. The Internet Information Services (IIS) window
appears.
2. In the left pane, choose your Epicor HCM IIS server (not the Epicor
HCM Web site), as shown in Figure 3-1.

Figure 3-1: Internet Information Services (IIS) Manager window

3. In the center pane, find the IIS section and double-click Server Cer-
tificates.

Epicor HCM | 49
Chapter: 3

4. In the right pane, click Import. The Import Certificate displays.

5. Click the Browse button . Locate and select the certificate’s .pfx
file.
6. Click OK. The Password entry box displays.
7. Enter the Password, and verify that the Allow this certificate to be
exported check box is selected.
8. Click OK.

The certificate is now available on the IIS server.

Configure the Certificate for Reporting Services

Working from the server on which you had installed Reporting Services, com-
plete the following procedure to properly configure SSL with Epicor HCM
Reporting Services.
1. Click Start All Programs Microsoft SQL Server 20xx Con-
figuration Tools Reporting Services Configuration Manager.
The Reporting Services Configuration Manager window displays, as
shown in Figure 3-2.

Figure 3-2: Reporting Services Configuration Manager

2. Click Find to locate the correct Epicor HCM Reporting Services

server instance, and then click Connect.
3. In the left pane, click Web Service URL.

50 | Epicor Software Corporation

 Configuring Epicor HCM Install

4. Select from the SSL Certificate list the certificate that was imported
into IIS — it should reference your domain name. The SSL Port box
displays.
5. Verify that the value in the SSL Port box is 443, and then click
Apply.
6. In the left pane, click Report Manager URL.
7. Click Advanced. The Advanced Multiple Web Site Configuration win-
dow displays.
8. In the Multiple SSL Identities for the Report Manager section,
click Add. The Add a Report Manager SSL Binding window displays,
as shown in Figure 3-3.

Figure 3-3: Add a Report Manager SSL Binding window

9. Select from the Certificate list the SSL certificate that was imported
into IIS.
10. Click OK.
11. Repeat steps 8 and 9, but this time select IPv6 from the IP Address
list.
12. Leave the Report Manager URL page of the Reporting Services Con-
figuration Manager window open, as shown in Figure 3-4. You will
return to this application in steps 16 and 22.

Epicor HCM | 51
Chapter: 3

Figure 3-4: Report Manager URL window

13. Open Windows Explorer and browse to the location on your machine
where you installed Reporting Services.
NOTE: By default, this path is DriveLetter:\ Program
Files\Microsoft SQL Server, where DriveLetter is the
machine’s primary hard drive.

14. Open the folders named in the following path sequence:

MSRS10.InstanceName Reporting Services ReportServer

(Where InstanceName is the name of Reporting Services server’s
instance name.)
15. Find and double-click the file named web.config.
16. Find the ReportServerPath key. It should read something like this:

<add key=“ReportServerPath” value=

“http://SERVERNAME:80/VIRTUALDIRECTORY”/>
(Where SERVERNAME is the name of the server in which Reporting
Services was installed, and VIRTUALDIRECTORY is the name of
Reporting Services virtual directory).
17. In the value portion of the string, edit the URL. The edited value
should be the URL used when accessing Reporting Services with
SSL. This URL is found on the open Reporting Services Con-
figuration Manager window, as shown in Figure 3 4.

It reads something like this:

value=“https://SERVERNAME.DOMAIN.TLD:443/
VIRTUALDIRECTORY”

52 | Epicor Software Corporation

 Configuring Epicor HCM Install

(Where SERVERNAME is the name of the server in which Reporting

Services was installed, DOMAIN is the server’s domain name, TLD is
the top level domain, such as “local” or “com,” and
VIRTUALDIRECTORY is the name of the Reporting Services virtual
directory).
18. Next, find the SecureConnectionLevel key and edit its value from 0
to 3. This setting ensures all report data requires SSL.
19. Return to Windows Explorer and open the folders named in the fol-
lowing path sequence:
MSRS10. InstanceName Reporting Services ReportManager
(Where InstanceName is the name of your Reporting Services
server’s instance name.)
20. Find and double-click the file named Web.config.
21. Repeat steps 16 and 17 exactly.
22. Close the application used to edit these configuration files.
23. Return to the Reporting Services Configuration Manager window
and click your Reporting Services server name at the top of menu on
the left-hand side. The Report Server Status window displays, as
shown in Figure 3-5.

Figure 3-5: Report Server Status window

24. Click Stop, and then click Start.

25. Click Exit.

Epicor HCM | 53
Chapter: 3

Finally, the server must be able to resolve the SSL Reporting Services URL
to an IP address that it can reach. In other words, it must be able to browse to
itself using that URL
(i.e. https://SERVERNAME.DOMAIN. TLD:443/VIRTUALDIRECTORY).
Resolve the URL using one of the following methods:
n Create a host record for it in the forward lookup zone for DOMAIN.
TLD on your internal DNS server (where DOMAIN is the server’s
domain name, and TLD is the top level domain, such as “local” or
“com”).
n You could add an entry in the hosts file on the server to resolve that
URL to the local IP address or loopback IP address.

Setting Global Constant for Reporting Services

1. Log in to Epicor HCM as an Administrator and click the Utilities tab.
2. Locate System Configuration and click Configure Global Con-
stants.
3. Using the search within the Configure Global Constants task window,
type report in the search bar, as shown in Figure 3-6, and click the
search button to narrow the list.

Figure 3-6: Configure Global Constants task

4. Click ReportingServices_Path.
5. In the Value box, enter the SSL secure URL you have previously
established.
6. Click Submit.

54 | Epicor Software Corporation

 Configuring Epicor HCM Install

Configuring Analysis Services

Read this section only if your organization plans to use the Analysis Services
(OLAP) feature in Epicor HCM. This section does not apply to you if have
installed the Express version of the Epicor HCM software. OLAP (Online Ana-
lytical Processing) cubes are designed to increase the speed of data analysis
and reporting. OLAP capability has been included in Epicor HCM to provide
you with a powerful data analysis tool.
When you had configured SQL Server 20xx for Analysis Services and
installed Epicor HCM Analysis Services, you had prepared your system to
run the Epicor HCM Analysis Services OLAP feature. Now there are just a
few more steps to take to complete the Analysis Services setup.
n Designate users who will be allowed to operate the Analysis Services
feature.
n Copy and paste OLAP service file folder contents (Analysis Services
untrusted domain setup only.)
n Configure OLAP Data Source connection.
n Configure DCOM for Microsoft® Excel.
n Verify that Excel 2010 or 2013 is being used on those user’s work-
stations, even workstations accessing Epicor HCM Analysis Services
OLAP over the internet. (Refer to Chapter 4 Configuring Epicor HCM
Workstations.)
n Configure each workstation with required files. (Refer to Chapter 4
Configuring Epicor HCM Workstations.)

IMPORTANT: After configuration for Analysis Services is com-

plete, test an OLAP report, which can be found in Epicor HCM at
Reports > Analytics > Analysis Services.

Configure Analysis Server Properties

The process of granting access to the Analysis Server allows only designated
users to view data in the Analysis Services database. Perform the task by
completing the following steps.
1. Click Start All Programs Microsoft SQL Server SQL Server
Management Studio.
2. Select Analysis Services from the Server Type list, and then
choose the server from the Server Name list.
3. Click Connect.
4. Right-click on the name of the server on which you had installed the
Epicor HCM Analysis Services database and then select Properties.

Epicor HCM | 55
Chapter: 3

The Analysis Server Properties dialog box displays.

3. From the Select a page pane on the left-hand side of the window,
click Security.
4. Click Add to select users who will have access to use the Analysis
server.
NOTE: Make certain to also select the Epicor HCM applic-
ation as an allowed user of the Analysis server. The Epicor
HCM application user name will be the name that was cre-
ated during install at the Create or Select Windows and IIS
Application User dialog box. You will need to enter both the
Windows domain and username here. If your IIS server and
AS server are on the same machine, the domain will be the
machine name; otherwise it should be your local Windows
domain.

7. When you’re finished selecting users, click OK to return to the Ana-

lysis Server Properties window, and then click OK.

56 | Epicor Software Corporation

 Configuring Epicor HCM Install

Configure OLAP Properties

The process of establishing Data Source properties allows OLAP to function
in HCM through Analysis Services. Perform the task by completing the fol-
lowing steps.
1. If you are still connected to the Analysis Services server in SQL
Server Management Studio proceed to step 2; otherwise, complete
the following steps:
a. Click Start All Programs Microsoft SQL Server SQL
Server Management Studio.
b. Select Analysis Services from the Server Type list, and then
choose the server from the Server Name list.
c. Click Connect.
2. In the Dtabases folder, locate the HCM OLAP database.
3. Expand the Data Sources folder.
4. Right-click the iVantage 50 data source, and then select Properties.
The Data Source Properties dialog box displays.

5. On the General page of the Data Source Properties dialog box,

change the Connection String numbers in the default setting from
10.1 to 11.1.

Epicor HCM | 57
Chapter: 3

6. Click the ellipsis button to display the Connection Manager dialog

box.

7. Verify the connection settings are appropriate as follows:

a. In the Provider list, review that the selection is for the appro-
priate Native Client. Choose another if it is not correct.
b. Verify Server name, User name, and the database name are
prepopulated.
8. In the SQL Server Authentication Password box, enter the pass-
word.
9. Select the Save my password check box.
10. Click the Test Connection button to verify the connection settings
work. Change the settings, if necessary.
11. Click OK, and then on the Data Source Properties dialog box, click
OK.

Process OLAP Cubes

After configuration, process the OLAP cubes as follows:

58 | Epicor Software Corporation

 Configuring Epicor HCM Install

1. In the Dtabases folder, locate the HCM OLAP database.

2. Right-click the HCM OLAP database, and then select Process.
3. Click OK to begin processing cubes.
4. Verify cubes processed without error.
5. Click the Close button when the process is complete.

Configure Role Properties for Untrusted Domains

Role properties need to be set, but only when you select to install HCM Ana-
lysis Services on an untrusted domain. After processing OLAP cubes, con-
figure role properties as follows:
1. Right-click the Roles folder, and then select New Role.
2. Enter a role name.
3. In the left pane, clcik the General page of the Role Properties dialog
box, and then select the Full control (Administrator check box.
4. In the left pane, click the Membership page, and click the Add but-
ton.
5. In Locations, add the IUSR user, which is found on the local
machine.
6. Click OK, and then on the next dialog box click OK.
7. Process the OLAP cubes again, as described in the Process OLAP
Cubes instruction.

Configure Excel
OLAP functions for HCM reports using Microsoft® Excel. Excel needs to be
installed and configured on the server in which Analysis Services resides for
the HCM installation configuration.
After you install Excel on the server, configure the DCOM settings for Excel
as follows:
1. From the Windows button search box, enter mmc -32 to locate and
run the Microsoft Management Console.
2. From the File menu. select Add/Remove Snap-in.
3. From the Available snap-ins, select and add Component Services.
4. Click OK.
5. In the left pane, expand Component Services until you see DCOM
Config.
6. Expand the DCOM Config folder.
7. Locate and right-click the Microsoft Excel Application component.

Epicor HCM | 59
Chapter: 3

8. Select Properties.
9. From the Microsoft Excel Application Properties dialog box, click the
Security tab.
10. On the Security tab, select Customize for each Permissions setting,
and then click Edit for each.
11. Within each Change Permission Configuration box, add the HCM
IIS user.
12. Click the Identity tab, and then select The interactive user.
13. Click OK.
14. Close the console. You do not need to save the console settings.

Additional Configuration for Excel 2013

If you are using Excel 2013 on the Analysis Services server, you need to per-
form additional configuration to allow OLAP to function.
1. After installing HCM and recycling the app pools, locate the iVant-
age.config file.
2. Open the file for editing and change the reference to Excel 14 to 15,
and then save your change. The line that you are looking for is similar
to the following:

<add key="AssemblyMetaData" value="AssemblyName=Microsoft.Office.

Interop.Excel;Version=14.0.0.0;PublicKeyToken=71e9bce111e9429c"/>

60 | Epicor Software Corporation

 Configuring Epicor HCM Install

Configure OLAP Parameters for Untrusted Domain

Using the OLAP Parameters task within Epicor HCM you will edit the server
name when Analysis Services server is set up as an untrusted domain.
Edit the parameters as follows:
1. On the Utilities tab, navigate to System Configuration > Con-
figure OLAP Parameters.
2. In Analysis Services Server Name, replace any text with the OLAP
http URL. For example, http://[SERVER NAME]/OLAP/ms-
mdpump.dll.
3. Click Submit to finish the task.

Epicor HCM | 61
Chapter: 3

Domain Connectivity and Windows Authentication

Active Directory must be used for certain split-server configurations. When
the SQL Server database and the IIS Web are located on different servers
AND Windows authentication is used to gain access to Epicor HCM, then Act-
ive Directory should be employed.

NOTE: In a single-server environment using Windows authen-

tication, you do not need to implement Active Directory.

After you’ve implemented Active Directory, you need to change two settings.
n Set the IIS and the SQL Servers as trusted for delegation.
n Set the domain user account as trusted for delegation.

Making IIS and SQL Trusted for Delegation

Perform the following steps to make the IIS and the SQL Servers trusted for
delegation:
1. Click Start All Programs Administrative Tools Component
Services on the machine that is acting as your domain controller.
The Component Services window opens.
2. Expand the Active Directory Users and Computers node in the
left frame of the window.
3. Expand the domain on which Epicor HCM is installed in the left frame
of the window, and then select Computers from the Active Dir-
ectory Users and Computers list.
4. Select the computer that is acting as your Epicor HCM SQL Server
from the list in the right frame of the window.
5. Right-click the server and select Properties. The Properties dialog
box for the server appears.
6. Select the Delegation tab, as shown in Figure 3-7.

62 | Epicor Software Corporation

 Configuring Epicor HCM Install

Figure 3-7: Properties dialog box for the server

7. Click Trust this computer for delegation to any service (Ker-

beros only).
8. Click Apply, and then click OK to return to the Active Directory Users
and Computers window.
9. Repeat steps 4 through 8 for your Epicor HCM IIS Server.

Making Domain User Accounts Trusted for Delegation

Perform the following steps to make the domain user accounts trusted for del-
egation.
1. Click Start All Programs Administrative Tools Component
Services on the machine that is acting as your domain controller.
The Component Services window opens.
2. Expand the Active Directory Users and Computers node in the
left frame of the window.
3. Expand the domain on which Epicor HCM is installed in the left frame
of the window, and then select Users from the Active Directory
Users and Computers list.
4. Select the domain user who will access Epicor HCM from the Name
list in the right frame of the window.
5. Right-click the domain user name and select Properties. The Prop-
erties dialog box for the domain user appears.
6. Click the Delegation tab, as shown in Figure 3-8.

Epicor HCM | 63
Chapter: 3

Figure 3-8: Properties dialog box for the domain user

7. Click Trust this computer for delegation to any service (Ker-

beros only).
8. Click Apply, and then click OK to return to the Active Directory Users
and Computers window.
9. Repeat steps 4 through 8 for your Epicor HCM IIS Server.

64 | Epicor Software Corporation

 Chapter 4

Configuring Epicor HCM

Workstations

In the previous chapter, Epicor HCM configuration tasks were presented for
completion. Now, this chapter delves into what is needed to configure indi-
vidual workstations before your users can access Epicor HCM.

Concepts covered in this chapter include:

Log On to Epicor HCM 66

Install Report Builder 68
Analysis Services Users 70

Epicor HCM | 65
Chapter: 4

Log On to Epicor HCM

There are two ways to log on to Epicor HCM, by either using Forms authen-
tication or Windows authentication. Forms authentication lets you use an Epi-
cor HCM user name and password to access Epicor HCM. Windows
authentication allows a user to access Epicor HCM using a Windows domain
user name and password, which typically is entered when logging on to their
PC. The preferred log on method was determined during the installation
steps. In either case, the Epicor HCM URL should be provided by your com-
pany’s designated system administrator to each Epicor HCM user.

Log on to Epicor HCM Using Forms Authentication

To log on to Epicor HCM using Forms authentication:
1. Open your Web browser and enter the Epicor HCM URL in the
browser’s Address bar.
2. Press ENTER. The Epicor HCM Home Log On page appears.
NOTE: You should save this page as a Favorite site in your
web browser or as your home page.

3. In Username, enter your user name.

4. In Password, enter your password.
NOTE: Most Web browsers have a feature that stores user
names and passwords for each Internet logon page. This is
a convenient way to store your log on information.

However, if you use this feature, any person using your com-
puter can log on to Epicor HCM using your permissions. If
you want to take advantage of these features, make sure
that you do not compromise the security guidelines estab-
lished by your company.

5. Click Log On.

Once the user name and password are verified as being correct, then
the Epicor HCM My Home page displays by default. You can now
access Epicor HCM and work with tasks and data as your per-
missions allow.

66 | Epicor Software Corporation

 Configuring Epicor HCM Workstations

Log On to Epicor HCM Using Window Authentication

To log on to Epicor HCM using Windows authentication:
1. Open your Web browser.
2. Enter the Epicor HCM URL in the browser’s Address bar and then
press ENTER. Epicor HCM logs you on automatically.
NOTE: You should save this page as a Favorite site in your
web browser or as your home page.

Epicor HCM | 67
Chapter: 4

Install Report Builder

Epicor HCM comes standard with more than seventy reports; however, cus-
tom reports can be created using Report Builder. Report Builder is com-
panion software to Reporting Services that lets you create powerful ad hoc
reports by simply dragging-and-dropping. Install this software on employee
workstations that need to create ad hoc reports. The following instructions
are valid for Report Builder 2.0 and 3.0. One of these versions is supplied on
your Epicor HCM installation CD.

NOTE: Report Builder is optional and intended for advanced Epi-

cor HCM users only. Also, before installing this software, you must
have previously installed and correctly configured Reporting Ser-
vices for Epicor HCM.

To install Report Builder on the workstation:

1. Place the Epicor HCM Installation CD in the CD drive while holding
down the SHIFT key.
2. Use Windows Explorer to browse to the CD drive.
3. Open the Reporting folder, and then click ReportBuilder.msi or
ReportBuilder3.msi.
4. The Welcome to the Installation Wizard for Report Builder Setup win-
dow appears, as shown in Figure 4-1.

Figure 4-1: Welcome to Report Builder 3.0 Setup window

5. Click Next and accept the license agreement.

6. Click Next until you advance to the Default Target Server window, as
shown in Figure 4-2.

68 | Epicor Software Corporation

 Configuring Epicor HCM Workstations

Figure 4-2: Default Target Server window

7. In Default target server URL, enter your Epicor HCM Reporting

Services server URL location or leave the box blank.
NOTE: If you do not want to establish your Epicor HCM
Reporting Services server at this time, leave the box blank.
This can be set up later within Report Builder under
Options.

8. Click Next.
9. Click Install. The Report Builder Setup begins the install process.
This may take several minutes.
10. Once the installation process is complete, click Finish.

Epicor HCM | 69
Chapter: 4

Analysis Services Users

Complete the tasks in this section only for users in your organization that will
have access to the Analysis Services OLAP (Online Analytical Processing)
cubes feature in Epicor HCM. OLAP capability is designed to increase the
speed and power of your Epicor HCM data analysis.
During the Epicor HCM configuration in the last chapter, the users who were
authorized to use Analysis Services were designated through the SQL
Server Management Studio. Now, complete a few more tasks to allow Ana-
lysis Services to fully function on those users workstations.
n Verify that Excel 2010 or 2013 is being used on those workstations,
even workstations accessing Epicor HCM Analysis Services OLAP
over the internet.
n Install required files and configure Internet Explorer on those work-
stations.

Configuring Client Workstations

Client workstations using Epicor HCM Analysis Services must have Excel
2010 or 2013 installed to work with OLAPS cubes. If your company has Epi-
cor hosting their Epicor HCM system you will still need to have Excel 2010 or
2013 installed on workstations that need to work with Analysis Services
OLAP cubes over the internet. The next two tasks also apply for self-hosted
or Epicor hosted systems.
The workstations being used for Analysis Services must also have Microsoft
Core XML Services (msxml6) and Microsoft Analysis Services OLE DB
Providers installed. In addition, Internet Explorer security settings should be
modified on those workstations.
Complete the following steps to install the necessary files to each client work-
station that will access Epicor HCM Analysis Services.
1. Locate the Reporting folder on your Epicor HCM Installation CD.
2. Copy the following two required files to a network location that is
accessible from the client workstations.
n msxml6_xxx.msi
n SQLServerxxxx_ASOLEDB10.msi
3. Install each file to the designated client workstations.

Modify Internet Explorer security settings on each workstation as follows.

1. Click Tools Internet Options from the menu bar in the Internet
Explorer application. The Internet Options dialog box appears.
2. Click the Security tab, select a zone, and then click the Custom
level... button.

70 | Epicor Software Corporation

 Configuring Epicor HCM Workstations

3. In the Settings list, find the Miscellaneous section and verify that
the Access data sources across domains option is set to Enable.

Epicor HCM | 71
 Appendix A

Worksheets

This appendix contains several worksheets to assist you in installing Epicor

HCM. You can photocopy worksheets directly from this appendix.

You can also access worksheets from the EPICweb website. Complete the
EPICweb logon by entering your Username and Password. EPICweb
appears once you have entered your logon Information.
If you are accessing the EPICweb Web site for the first time, you will be
prompted to create a user account.

Epicor HCM | 73
Appendix: A

Epicor HCM Installation Worksheet

Windows Configuration Parameters1
Item Response
Make/Model

Example: Compaq, Dell, and so on

Processor

Example: 1.83 GHz Pentium® 4

RAM

Example: 2 GB

Disk storage capacity

Example: 30 GB

RAID level

Example: Level = 5

Microsoft Windows Server version

Example: Windows Server 2008 R2 SP1

Remote connectivity methodology

Example: T1 to ISP, ISDN to ISP, Dial-up to ISP

Varies based on enterprise needs

Backup device

Example: Tape, Optical

Backup Software -- Arcserve, Backup Exec,
Legato, and so on

1You can view certain parameters listed on this worksheet using the Computer Management utility on your
server. Click Start All Programs Administrative Tools Computer Management. The Computer Man-
agement application appears. Expand the System Tools folder if it’s not already expanded. Then expand
the System Information folder and select System Summary. A summary of system parameters appears.

74 | Epicor Software Corporation

 Worksheets

Epicor HCM Installation Worksheet

SQL Server Configuration Parameters1
Item Response
Character set

Example: No impact as long as selection is

consistent on the server and all workstations

Sort order

Example: Not case-sensitive

Security

Example: Integrated security

Microsoft SQL Server version

Example: SQL Server 2008

Master database size

(Refer to SQL Books Online)

Temp database size

(Refer to SQL Books Online)

Allocation of RAM to Windows

and SQL Server

(Refer to SQL Books Online)

Number of connections

(Refer to SQL Books Online)

1You can view certain parameters listed on this worksheet using the Enterprise Manager utility on your
SQL server. Click Start All Programs Microsoft SQL Server Enterprise Manager. The SQL Server Enter-
prise Manager application appears. Expand the Microsoft SQL Servers folder, then the SQL Server Group
folder. Select and then right-click the server on which you will install Epicor HCM. Select Properties. The
SQL Server Properties (Configure) - <Server Name> dialog box appears. Select the appropriate tab to
view parameters for the items on this page.

Epicor HCM | 75
Appendix: A

Epicor HCM Installation Worksheet

Network Architecture
(provide diagram)
Item Response
Network locations and physical topology

Example: Describe locations of users on the

network and how they are connected to
the network.

Vendor and version

Example: Cisco, Intel, Nortel, and so on

Protocols

Example: TCP/IP

Topology

Example: Ethernet or Token Ring

WAN Connectivity

Example: T1, T3, ISDN, Frame Relay,

Dial-Up

Internet Service Provider

Example: AT&T, MCI, and so on

76 | Epicor Software Corporation

 Worksheets

Epicor HCM Installation Worksheet

Usernames and Passwords
System Type Username and Password
Username:
SQL Server 1
Password:

Username:
Reporting Services Server2
Password:

Username:
Epicor HCM Administrator User Login 3
Password:

Username:
SQL Database Application Login 4
(used for Analysis Services) Password:

Username:
Windows and IIS Application User Login
Password:

1This is the credential you established when you set up your Epicor HCM SQL Server database prior to
beginning the Epicor HCM installation.
2If you set up Reporting Services prior to beginning the Epicor HCM installation, enter that credential here.
3This credential is your initial Epicor HCM “Super Admin” and is required to log in to your system for the
first time.
4This credential’s prompt appears only if you’re using Analysis Services with Epicor HCM.

Epicor HCM | 77
 Appendix B

Configuring Windows Authentication

This appendix describes the tasks necessary to configure Windows authen-

tication for Epicor HCM.

Concepts covered in this appendix include:

Overview and Checklist 80

Epicor HCM | 79
Appendix: B

Overview and Checklist

Epicor recommends that clients using Windows authentication configure two
virtual directories, one for Anonymous Access (this is created by default dur-
ing the Epicor HCM installation) and the second created for Windows authen-
tication.
The following steps are necessary to enable Windows authentication for Epi-
cor HCM:

Configuring Windows Authentication for Epicor HCM Checklist

Task Order Tasks to Complete Completed?
1 Create Epicor HCM Users
q
2 IE Security Settings on Workstations
q
3 Manager Self-Register and Windows Authentication
q

80 | Epicor Software Corporation

 Configuring Windows Authentication

Create Epicor HCM Users

When creating Epicor HCM users for Windows authentication, you must spe-
cify Windows authenticated logins. This procedure is only necessary and the
option within Epicor HCM is only available if Windows authentication was
selected as the preferred log on method during installation.
To create new Windows authenticated accounts for each user:
1. Log on to Epicor HCM as an Admin user.
2. Click the Utilities tab and expand the Security section.
3. Click User Maintenance. The User Maintenance task page opens.
4. Click the New button to add a new user.
5. Enter a name in the User name box.
6. Enter password information in the New Password and Confirm
Password boxes.
7. From the Person list, select the person tied to the new user.
8. Assign roles to the new user.
9. Enter the user’s Domain and User Name, and then click Submit.
IMPORTANT: Be sure that the User Name entered in this
step matches the Epicor HCM Login User Name entered in
step 5.

Epicor HCM | 81
Appendix: B

IE Security Settings on Workstations

To ensure client workstations can access Epicor HCM properly when using
Windows authentication for Log on, configure Internet Explorer as follow.
1. Open Internet Explorer
2. On the menu bar, click Tools Internet Options. The Internet
Options dialog box opens.
3. Select the Security tab.
4. Select the zone from which you access Epicor HCM.
5. Click Custom Level.
6. In the Settings list, find the User Authentication section and under
Logon verify that Automatic Logon with current username and
password is selected.
7. Click OK.
NOTE: If you or your users access Epicor HCM from more
than one zone, you must repeat steps 4 through 7 for each
zone.

8. Select the Advanced tab.

9. In the Settings list, find the Security section and clear the Enable
Integrated Windows Authentication check box.
10. Click OK
11. Restart Internet Explorer.

82 | Epicor Software Corporation

 Configuring Windows Authentication

Manager Self-Register and Windows Authentication

When using Windows Authentication for log on to Epicor HCM create man-
ager users as follows.
1. Log on to Epicor HCM as an Admin user.
2. Click the Utilities tab and expand the Security section.
3. Expand the Manager Users section, and then click Configure Man-
ager Self Registration Parameters.
4. Select from the Identification field for self-registering manager
users list a self-register data option (such as PersonID, SSN). This
option type is associated with data found in an Identification box on
the employees Person page.
5. Select the Include internal applicants in manager row security?
check box, if desired.
6. Click Submit.
7. Click Allow Manager Self Register Access. The Allow Manager
Self Register Access task appears.
8. Select Enable access to Manager self-registration.
9. Click Add to display a Person Picker search criteria box or use the
individual person list to select Managers.
10. Click Submit.

Now, managers self-register for Epicor HCM by navigating to the Epicor

HCM Home Log on page that is provided by the system administrator.
Epicor HCM prompts users for their Last Name and data type required for
manager self-registration. The system then does a third check behind-the-
scenes to verify whether this user has subordinates. If Epicor HCM properly
verifies the user, they are immediately logged into the system.

Epicor HCM | 83
 Appendix C

Configuring Deferred Authentication

This appendix describes the tasks necessary to configure deferred authen-

tication for Epicor HCM.

Concepts covered in this appendix include:

Introduction 86
Application Server Setup 87
Enable Deferred Authentication 91
Self-Registration Parameters 92
Setup Users in User Maintenance 93
Deferred Authentication User Access 95
Troubleshooting 97

Epicor HCM | 85
Appendix: C

Introduction
Deferred Authentication is a hybrid between forms and windows authen-
tication. The user can enter their HCM user ID and password or a domain
name, domain username, and domain password to login to Epicor HCM. If
the user is logging in using HCM credentials, then the credentials are verified
against the Epicor HCM database; if the user is logging in using Active Dir-
ectory credentials, then the supplied domain credentials are encrypted and
then validated against a domain controller using a web service.

Setup Overview
The setup of Deferred Authentication consists of configuring your Active Dir-
ectory server, enabling Deferred Authentication in Epicor HCM, and setting
up users.

NOTE: Following the sections about setting up Deferred Authentic-

ation there is also a section about user access to an Epicor HCM
system that is setup with Deferred Authentication.

86 | Epicor Software Corporation

 Configuring Deferred Authentication

Application Server Setup

It is recommended that the deferred authentication service needs to be set up
on your HCM application server and needs access to your Active Server. The
basic setup consists of establishing a folder location for the Epicor HCM files
and creating a Web site location in IIS.

Create EHDA Service Location and Configure

Setup the Web service folder on your Active Directoyr server as follows:
1. Create a folder for the Web service files.
(we suggest C:\Program Files\Epicor\HCM, but it can be installed
anywhere that makes sense to your organization).
2. Locate the deferred authentication files on your Epicor HCM CD in a
folder labeled EHDAService.
3. Copy and paste the EHDAService folder and its contents into the
new folder that you previously created.
4. Right-click on the EHDAService folder, select Properties, and then
select the Security tab.
5. Add the user Network Service.
6. Give the Network Service user Full Control.
7. In the EHDAService folder, there is an iVantage.config file. Open
this file in a text editor (such as Notepad), and find the line about the
CUSTOMER_ID value that needs to be replaced.
8. On your application server, find the HCM application folders that
were created during install.
9. In the iVantage folder, locate the iVantage.config file, and then open
this file with a text editor.
10. Scroll to the bottom of this file, locate the CUSTOMER_ID line.
11. Copy and past the CUSTOMER_ID line from the application iVant-
age.config file into the EHDA iVantage.config file.
12. Close both files, saving the change to the EHDA iVantage.config file.

Epicor HCM | 87
Appendix: C

IIS Manager
Before working with Internet Information Services (IIS) Manager, you should
know which Windows server version with which you are working. The Win-
dows server version will also determine which IIS version you are using. For
Windows server 2008 R2 SP1 you should be using IIS 7.5.

Configure the Web Service

Using the appropriate version of IIS Manager, configure the Web service as
follows:

IIS 7.5

1. Open Internet Information Services (IIS) Manager.

2. For IIS 7.5 create an application pool for the EHDA Service .
Create an application pool in IIS 7.5 as follows.

a. In the Connections pane, expand the Sites node tree

and select Application Pools.
b. From the top of the Actions window, select Add Applic-
ation Pool.
c. In the Add Application Pool dialog window, enter the fol-
lowing values:

In the box labeled ... Type ...

Name EHDAService
.Net Framework Version .Net Framework v4.0.30319
Managed pipeline mode Integrated
Start application pool immediately Checked

3. Create the Web application using Internet Information Services (IIS)

Manager for the desired type of Web stie type using the following
instructions:
Type Steps
Existing a. Open IIS Manager, to create a Web application underneath an existing
Web Web site.
site
b. In the Connections pane, expand the Sites node tree
c. Right-click the Web site node.
d. Select Add Application.
e. Specify an Alias (such as EHDAService).
f. Click Select.
g. In Application pool, select EHDAService.

88 | Epicor Software Corporation

 Configuring Deferred Authentication

Type Steps
h. Set the Physical path to the location of the folder you had previously
copied for the Web service.
New a. Open IIS Manager, to create a new Web site.
Web
b. Right-click on Sites and select Add Web Site.
site
c. Enter a Site name, and then click Select.
d. In Application pool, select EHDAService.
e. Set the Physical path to the location of the folder you had previously
copied for the Web service, and then configure the appropriate Binding
settings.

Epicor HCM | 89
Appendix: C

Test the Web Service

Test the Web service from the server that it was installed on to make sure it is
running correctly. Conduct the test as follows:
1. In a Web browser, type the address to your EHDA Web service. The
URL format should be similar to either:
n Unsecured
http://servername/EHDAService/EHDAService.asmx
n Secured
https://servername/EHDAService/EHDAService.asmx

NOTE: The server name, localhost, IP address, or DNS

can be used when testing this.

2. Press Enter. The result should be the following Web page if the ser-
vice is running correctly.

90 | Epicor Software Corporation

 Configuring Deferred Authentication

Enable Deferred Authentication

The next step is to enable deferred authentication in Epicor HCM. Enable
deferred authentication as follows.
1. Verify that the latest development patches are installed for your Epi-
cor HCM system.
2. Launch Epicor HCM in a Web browser and login as a forms user that
is a member of the Admins role.
3. Select the Utilities tab.
4. Open the Configure Login Parameters task.
NOTE: Alternatively, you could also set this through the
Configure Global Constants task. The Parameter Name
you would edit is DeferredAuthenticationURL. You
would enter the Deferred Authentication URL in the Value
box.

5. Scroll down to the bottom, and then enter the Deferred Authentic-
ation URL that you have previously established.

The URL format should be either:

n Unsecured
http://servername/EHDAService/EHDAService.asmx
n Secured
https://servername/EHDAService/EHDAService.asmx

6. Click Submit to complete the task.

You are now able to setup deferred authentication for users by utilizing the
User Maintenance task. We suggest keeping at least one forms user in the
Admins role to ensure continuity in system access if the deferred authen-
tication server or Web site goes offline for any reason.

Epicor HCM | 91
Appendix: C

Self-Registration Parameters
Epicor HCM is installed with default settings in the Configure Self Regis-
tration Parameters task. Two parameters you will want to review in this task
are the Self-Service Registration Parameters and the Registration Email
Parameters. If you want to review the parameters or change them, the task is
found within the Utilities tab.
The Self-Service Registration Parameters are set as the default value of
Employee ID. This unique employee value is used during the initial login pro-
cess to identify a user. The type of parameter that you select must have a
unique entry for each employee.
Since deferred authenticated users login with their Active Directory cre-
dentials, the email that welcomes the new user to Epicor HCM and includes
the login name and password will not include a password. You should con-
sider changing the Self-Service Registration Email Body to a more cus-
tomized message. You will want to keep in mind if you will also have new
Forms users who will need to have the password within the email.

Configure Registration Parameters

Complete the following steps to configure Employee Connect registration
parameters:
1. Select a value from Select the Person field you want to use to
identify new users when they register for Employee Self-Ser-
vice.
2. Enter text in Self-Service Registration Email Subject. This serves
as the e-mail's subject line.
3. Enter text in Self Service Registration Email Body. This serves as
the e-mail's body text.
IMPORTANT: The %USERID% and %PASSWORD%
text is used to automatically include the log on information in
the body of the e-mail. Only delete the password reference
if all of your users will be set up with a deferred authen-
tication account.

4. Click Submit to finish the task.

92 | Epicor Software Corporation

 Configuring Deferred Authentication

Setup Users in User Maintenance

When deferred authentication is enabled, the system will accept both forms
users and deferred authentication users. When a Forms user logs in, the
username and password provided are validated against information in the
Epicor HCM database.
There may still remain reasons to activate a user with a Forms account
instead of a Deferred Authentication account. Three of the main reasons
might be:
n The user is not setup in Active Directory – for example, a con-
tractor may be provided access to Epicor HCM in an organization that
only creates Active Directory accounts for employees.
n The user is building custom reports – only Forms authenticated
users can use Report Builder and Report Manager. Report Builder
and Report Manager are used specifically for custom reports. So, if
your business has a need to build custom reports in Epicor HCM, this
requires a Forms user account. Once a report is added to the Epicor
HCM menu, it can be run by any user with access to the report.
n The deferred authentication Web service is offline – if the Web
service created above is not available, users will not be able to login.
So you may want to grant a specific user access by setting them up
with a Forms account.

Create User Login Account

Access the User Maintenance task through the Utilities tab in Epicor HCM.
With deferred authentication enabled, you can use the User Maintenance
task to setup users for both deferred and forms authentication.
Instructions for setting up a deferred login account are similar to what is found
in Creating a User Login Account found in the Epicor HCM Project Man-
agement Workbook. However, there are a few differences to the setup of a
deferred authentication account. The ability to set a password is not available
for deferred authenticated users since deferred authenticated users’ pass-
words are maintained in Active Directory.
With the User Maintenance task open, create a new deferred authentication
user account as follows:
1. Click New. A blank form displays, allowing you to enter new inform-
ation.
2. Select Deferred Authentication.
3. Enter a User Name with both the user’s domain and username (for
example, mydomain\jdoe. The backslash is required.)

Epicor HCM | 93
Appendix: C

4. In Person Name, select a user from the list to associate with the user
name. These are people already in your Epicor HCM database.
5. In the check box below the Person Name list, select this check box
only if you want the user to have access to all of their records, even
overriding any row security restrictions.
6. If you want to restrict the user from logging in to Epicor HCM, select
the Account Locked check box.
NOTE: The Account Locked check box is automatically
selected if a user exceeds the threshold of allowed incorrect
login attempts that has been set in your system.

7. If you want to deactivate a user account, clear the Active check box.
8. Select the user’s system Language preference from the list.
9. Select and add desired Available Items to the right window, Selec-
ted Items, thereby assigning roles to the user.
10. Click Submit to save the new user.

94 | Epicor Software Corporation

 Configuring Deferred Authentication

Deferred Authentication User Access

Now that you have completed the setup of Deferred Authentication, you can
examine how users access an Epicor HCM system that uses Deferred
Authentication.

Manager and Employee Self Registration

When deferred authentication is setup for an Epicor HCM Web site, you will
then be able to create new users with deferred authenticated accounts. After
the users are set up they will be able to go through the self-registration pro-
cess.
As a user accesses Epicor HCM for the first time, the user is prompted for the
login information. The login for self-registration proceeds as follows:
1. Access Epicor HCM login page.
2. Click Log on for first time.
3. On the Create a New Account page, enter the Last Name.
4. Enter the unique employee identifier. The type of identifier was set in
the Configure Self Registration Parameters task. By default this
would be Employee ID.
5. Enter Username You Want to Use as the active directory domain
and username (for example, “mydomain\jdoe”).
6. Enter the Password that is stored in the Active Directory server.
7. Click Register Me.

Create Manager Users Task is for Forms User

Epicor HCM needs the user to provide usernames (and when logging in,
passwords) to create deferred authenticated accounts. Epicor therefore sug-
gests managers self-register to generate their user accounts instead of gen-
erating user accounts in the Create Manager Users task. If you use the
Create Manager Users task to setup a manager account in a deferred authen-
ticated system, the manager account is created as Forms user. A warning
appears prior to generating the user account to confirm that a Forms-based
account may be created in lieu of using self-registration.

Changing Your Password

Epicor HCM has two tasks where a user may change their own password –
one in Employee Self-Service and another on the Utilities menu (under the
heading “My Utilities”). Only Forms-authenticated users have the ability to
change their passwords using these tasks. Since Active Directory is the sys-
tem of record for deferred authenticated user accounts, these tasks will not
offer a password change option. When a deferred authenticated user is

Epicor HCM | 95
Appendix: C

logged in, the button for changing the user’s password in Employee Self-Ser-
vice will be replaced with text asking the user to contact IT for assistance.
Likewise, when the task on the Utilities menu is selected, the task does not
open and instead a similar message appears.

Disabling the Forgot Password Button

The login page has a Forgot Password button that resets a forms-authen-
ticated user’s password and sends the new password to their email address.
Since Epicor HCM cannot reset passwords for deferred authenticated users,
this button may be unnecessary in systems where a majority of users login to
Epicor HCM using deferred authentication. (Forms-authenticated user
account passwords can still be reset by having an administrator change the
password using the User Maintenance task.)
To toggle the display of the Forgot Password button on the login page:
1. Login to Epicor HCM as a user with Admin rights.
2. Select the Utilities tab.
3. Open the Configure Login Parameters task.
4. Check or uncheck the Display Forgot Password box in the Login
Parameters group.
5. Click Submit to complete the task.

96 | Epicor Software Corporation

 Configuring Deferred Authentication

Troubleshooting
If a deferred authenticated user has problems logging into Epicor HCM,
please check the following:
1. Ensure the user is entering their domain name followed by a back-
slash and then their username (ex. domain\jdoe).
2. Confirm the user account exists in User Maintenance. If the account
does not exist, then the user can create an account by clicking the
“Log on for the first time” button (if enabled) and providing the reques-
ted details.
3. Confirm the user is not locked out in User Maintenance.
4. Confirm the user account is active in User Maintenance.
5. If the user account has a person assigned, ensure the person’s Allow
Access To System flag is checked by navigating to People >
Employee > Person, selecting the System Access tab, and ensuring
the “Allow Access To System” option is checked.
6. If the user account has a person assigned who is an employee, con-
firm the current status code for the employee has its “Allow Access
To System” flag checked.
7. Review the EHDAService.log for errors returned by the deferred
authentication Web service. The EHDAService.log is found in the
EHDAService/logs folder. If errors exist, contact IT to have the prob-
lems resolved.
8. Have the user contact IT to confirm the user’s domain and username
are valid. If they are, ask IT to confirm the user account is not locked
in Active Directory.

Epicor HCM | 97