added Code Analyser instructions to install guides

Donna-Marie Smith · Donna-Marie Smith · commit 142315a03804 · 2025-06-12T13:28:04.000+01:00
diff --git a/content/en/docs/2025.5/_shared/install-application-server/configure-code-analyser.md b/content/en/docs/2025.5/_shared/install-application-server/configure-code-analyser.md
@@ -0,0 +1,8 @@
+A Code Analyser used to restrict what C# code can be executed from flows within {{% ctx %}} has been installed. It is enabled and secure by default, restricting all C# data types and namespaces other than those required to run an empty flow.
+
+{{% alert title="Warning" color="warning" %}}This security feature WILL prevent any flows, other than an empty flow, from running.{{< /alert >}}
+
+It can either be [disabled][Disable Code Analyser], or it's configured Allowed list can be [updated][Update Code Analyser] to allow the required C# data types and namespaces.
+
+[Update Code Analyser]: {{< ref "#update-code-analyser-allowed-list" >}}
+[Disable Code Analyser]: {{< ref "#disable-code-analyser" >}}
diff --git a/content/en/docs/2025.5/_shared/install-application-server/multi-server/add-innovation-only/disable-code-analyser.md b/content/en/docs/2025.5/_shared/install-application-server/multi-server/add-innovation-only/disable-code-analyser.md
@@ -0,0 +1,18 @@
+1. Open a File Explorer.
+1. Navigate to the Execution service directory, e.g. `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\Applications\Cortex.Innovation.Execution_App<n>\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the `CustomerName` configured during [installation][Configure Installation Script], `<NodeName>` with the NETBIOS name of the server and `<n>` with the highest number in the directory.
+1. Open the `appsettings.json` file in a text editor.
+1. Locate the `"FeatureFlags"` line located under `"ExecutionEngine"` and set the value to `["f4fd94c0-a921-4b34-b82c-378b05e91555"]`.
+1. Save and close the file.
+1. In the File Explorer, navigate to `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\ImageCache\Store\Cortex.Innovation.Execution\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the Customer Name and `<NodeName>` with the NETBIOS name of the server specified in step 2.
+1. Repeat steps 3 - 5.
+1. Open a web browser.
+1. Navigate to `https://server.domain.com:9080/Explorer`, where `server.domain.com` is the fully qualified domain name of the server. Replace `9080` with new `httpGatewayEndpointPort` value if it was changed during configuration of the original installation.
+
+    {{% alert title="Note" %}}
+If a certificate error occurs, it will be necessary to import the client certificate used in the `ClientCertificatePath` parameter when {{< ahref path="Cortex.GettingStarted.OnPremise.InstallInnovationOnly.MultipleServerWithHA.ConfigureInstallationScriptNew" title="Configuring the Installation Script" >}}. Instructions on how to do this can be found {{< ahref path="Cortex.Faqs.ImportClientCertificate.MultiServer" title="here" >}}.
+    {{% /alert %}}
+
+1. Expand `Cluster` then `Nodes`.
+1. Restart the node by clicking on the drop down menu next to the node name and select `Restart`. Confirm node restart by following the on-screen instructions.
+
+[Configure Installation Script]: {{< ref "#configure-installation-script" >}}
diff --git a/content/en/docs/2025.5/_shared/install-application-server/multi-server/add-innovation-only/disable-debugger-code-analyser.md b/content/en/docs/2025.5/_shared/install-application-server/multi-server/add-innovation-only/disable-debugger-code-analyser.md
@@ -0,0 +1,18 @@
+1. Open a File Explorer.
+1. Navigate to the Execution service directory, e.g. `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\Applications\Cortex.Innovation.Execution_App<n>\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the `CustomerName` configured during [installation][Configure Installation Script], `<NodeName>` with the NETBIOS name of the server and `<n>` with the highest number in the directory.
+1. Open the `appsettings.json` file in a text editor.
+1. Locate the `"FeatureFlags"` line located under `"ExecutionEngine"` and set the value to `["f4fd94c0-a921-4b34-b82c-378b05e91555"]`.
+1. Save and close the file.
+1. In the File Explorer, navigate to `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\ImageCache\Store\Cortex.Innovation.Execution\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the Customer Name and `<NodeName>` with the NETBIOS name of the server specified in step 2.
+1. Repeat steps 3 - 5.
+1. Open a web browser.
+1. Navigate to `https://server.domain.com:9080/Explorer`, where `server.domain.com` is the fully qualified domain name of the server. Replace `9080` with new `httpGatewayEndpointPort` value if it was changed during configuration of the original installation.
+
+    {{% alert title="Note" %}}
+If a certificate error occurs, it will be necessary to import the certificate used in the `ServerCertificatePath` parameter when {{< ahref path="Cortex.GettingStarted.OnPremise.InstallInnovationOnly.MultipleServerWithHA.ConfigureDebuggerInstallationScript" title="Configuring the Installation Script" >}}. Instructions on how to do this can be found {{< ahref path="Cortex.Faqs.ImportClientCertificate.MultiServer" title="here" >}}.
+    {{% /alert %}}
+
+1. Expand `Cluster` then `Nodes`.
+1. Restart the node by clicking on the drop down menu next to the node name and select `Restart`. Confirm node restart by following the on-screen instructions.
+
+[Configure Installation Script]: {{< ref "#configure-installation-script" >}}
diff --git a/content/en/docs/2025.5/_shared/install-application-server/multi-server/add-innovation-to-7.2/disable-code-analyser.md b/content/en/docs/2025.5/_shared/install-application-server/multi-server/add-innovation-to-7.2/disable-code-analyser.md
@@ -0,0 +1,18 @@
+1. Open a File Explorer.
+1. Navigate to the Execution service directory, e.g. `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\Applications\Cortex.Innovation.Execution_App<n>\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the `CustomerName` configured during [installation][Configure Installation Script], `<NodeName>` with the NETBIOS name of the server and `<n>` with the highest number in the directory.
+1. Open the `appsettings.json` file in a text editor.
+1. Locate the `"FeatureFlags"` line located under `"ExecutionEngine"` and set the value to `["f4fd94c0-a921-4b34-b82c-378b05e91555"]`.
+1. Save and close the file.
+1. In the File Explorer, navigate to `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\ImageCache\Store\Cortex.Innovation.Execution\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the Customer Name and `<NodeName>` with the NETBIOS name of the server specified in step 2.
+1. Repeat steps 3 - 5.
+1. Open a web browser.
+1. Navigate to `https://server.domain.com:9080/Explorer`, where `server.domain.com` is the fully qualified domain name of the server. Replace `9080` with new `httpGatewayEndpointPort` value if it was changed during configuration of the original installation.
+
+    {{% alert title="Note" %}}
+If a certificate error occurs, it will be necessary to import the client certificate used in the `ClientCertificatePath` parameter when {{< ahref path="Cortex.GettingStarted.OnPremise.AddInnovationTo72.MultipleServerWithHA.ConfigureInstallationScriptNew" title="Configuring the Installation Script" >}}. Instructions on how to do this can be found {{< ahref path="Cortex.Faqs.ImportClientCertificate.MultiServer" title="here" >}}.
+    {{% /alert %}}
+
+1. Expand `Cluster` then `Nodes`.
+1. Restart the node by clicking on the drop down menu next to the node name and select `Restart`. Confirm node restart by following the on-screen instructions.
+
+[Configure Installation Script]: {{< ref "#configure-installation-script" >}}
diff --git a/content/en/docs/2025.5/_shared/install-application-server/multi-server/add-innovation-to-7.2/disable-debugger-code-analyser.md b/content/en/docs/2025.5/_shared/install-application-server/multi-server/add-innovation-to-7.2/disable-debugger-code-analyser.md
@@ -0,0 +1,18 @@
+1. Open a File Explorer.
+1. Navigate to the Execution service directory, e.g. `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\Applications\Cortex.Innovation.Execution_App<n>\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the `CustomerName` configured during [installation][Configure Installation Script], `<NodeName>` with the NETBIOS name of the server and `<n>` with the highest number in the directory.
+1. Open the `appsettings.json` file in a text editor.
+1. Locate the `"FeatureFlags"` line located under `"ExecutionEngine"` and set the value to `["f4fd94c0-a921-4b34-b82c-378b05e91555"]`.
+1. Save and close the file.
+1. In the File Explorer, navigate to `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\ImageCache\Store\Cortex.Innovation.Execution\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the Customer Name and `<NodeName>` with the NETBIOS name of the server specified in step 2.
+1. Repeat steps 3 - 5.
+1. Open a web browser.
+1. Navigate to `https://server.domain.com:9080/Explorer`, where `server.domain.com` is the fully qualified domain name of the server. Replace `9080` with new `httpGatewayEndpointPort` value if it was changed during configuration of the original installation.
+
+    {{% alert title="Note" %}}
+If a certificate error occurs, it will be necessary to import the certificate used in the `ServerCertificatePath` parameter when {{< ahref path="Cortex.GettingStarted.OnPremise.AddInnovationTo72.MultipleServerWithHA.ConfigureDebuggerInstallationScript" title="Configuring the Installation Script" >}}. Instructions on how to do this can be found {{< ahref path="Cortex.Faqs.ImportClientCertificate.MultiServer" title="here" >}}.
+    {{% /alert %}}
+
+1. Expand `Cluster` then `Nodes`.
+1. Restart the node by clicking on the drop down menu next to the node name and select `Restart`. Confirm node restart by following the on-screen instructions.
+
+[Configure Installation Script]: {{< ref "#configure-installation-script" >}}
diff --git a/content/en/docs/2025.5/_shared/install-application-server/single-server/add-innovation-only/disable-code-analyser.md b/content/en/docs/2025.5/_shared/install-application-server/single-server/add-innovation-only/disable-code-analyser.md
@@ -0,0 +1,18 @@
+1. Open a File Explorer.
+1. Navigate to the Execution service directory, e.g. `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\Applications\Cortex.Innovation.Execution_App<n>\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the `CustomerName` configured during [installation][Configure Installation Script], `<NodeName>` with the NETBIOS name of the server and `<n>` with the highest number in the directory.
+1. Open the `appsettings.json` file in a text editor.
+1. Locate the `"FeatureFlags"` line located under `"ExecutionEngine"` and set the value to `["f4fd94c0-a921-4b34-b82c-378b05e91555"]`.
+1. Save and close the file.
+1. In the File Explorer, navigate to `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\ImageCache\Store\Cortex.Innovation.Execution\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the Customer Name and `<NodeName>` with the NETBIOS name of the server specified in step 2.
+1. Repeat steps 3 - 5.
+1. Open a web browser.
+1. Navigate to `https://server.domain.com:9080/Explorer`, where `server.domain.com` is the fully qualified domain name of the server. Replace `9080` with new `httpGatewayEndpointPort` value if it was changed during configuration of the original installation.
+
+    {{% alert title="Note" %}}
+If a certificate error occurs, it will be necessary to import the certificate used in the `ServerCertificatePath` parameter when {{< ahref path="Cortex.GettingStarted.OnPremise.InstallInnovationOnly.SingleServerWithoutHA.ConfigureInstallationScriptNew" title="Configuring the Installation Script" >}}. Instructions on how to do this can be found {{< ahref path="Cortex.Faqs.ImportClientCertificate.SingleServer" title="here" >}}.
+    {{% /alert %}}
+
+1. Expand `Cluster` then `Nodes`.
+1. Restart the node by clicking on the drop down menu next to the node name and select `Restart`. Confirm node restart by following the on-screen instructions.
+
+[Configure Installation Script]: {{< ref "#configure-installation-script" >}}
diff --git a/content/en/docs/2025.5/_shared/install-application-server/single-server/add-innovation-to-7.2/disable-code-analyser.md b/content/en/docs/2025.5/_shared/install-application-server/single-server/add-innovation-to-7.2/disable-code-analyser.md
@@ -0,0 +1,18 @@
+1. Open a File Explorer.
+1. Navigate to the Execution service directory, e.g. `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\Applications\Cortex.Innovation.Execution_App<n>\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the `CustomerName` configured during [installation][Configure Installation Script], `<NodeName>` with the NETBIOS name of the server and `<n>` with the highest number in the directory.
+1. Open the `appsettings.json` file in a text editor.
+1. Locate the `"FeatureFlags"` line located under `"ExecutionEngine"` and set the value to `["f4fd94c0-a921-4b34-b82c-378b05e91555"]`.
+1. Save and close the file.
+1. In the File Explorer, navigate to `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\ImageCache\Store\Cortex.Innovation.Execution\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the Customer Name and `<NodeName>` with the NETBIOS name of the server specified in step 2.
+1. Repeat steps 3 - 5.
+1. Open a web browser.
+1. Navigate to `https://server.domain.com:9080/Explorer`, where `server.domain.com` is the fully qualified domain name of the server. Replace `9080` with new `httpGatewayEndpointPort` value if it was changed during configuration of the original installation.
+
+    {{% alert title="Note" %}}
+If a certificate error occurs, it will be necessary to import the certificate used in the `ServerCertificatePath` parameter when {{< ahref path="Cortex.GettingStarted.OnPremise.AddInnovationTo72.SingleServerWithoutHA.ConfigureInstallationScriptNew" title="Configuring the Installation Script" >}}. Instructions on how to do this can be found {{< ahref path="Cortex.Faqs.ImportClientCertificate.SingleServer" title="here" >}}.
+    {{% /alert %}}
+
+1. Expand `Cluster` then `Nodes`.
+1. Restart the node by clicking on the drop down menu next to the node name and select `Restart`. Confirm node restart by following the on-screen instructions.
+
+[Configure Installation Script]: {{< ref "#configure-installation-script" >}}
diff --git a/content/en/docs/2025.5/_shared/install-application-server/single-server/add-innovation-to-7.2/disable-debugger-code-analyser.md b/content/en/docs/2025.5/_shared/install-application-server/single-server/add-innovation-to-7.2/disable-debugger-code-analyser.md
@@ -0,0 +1,18 @@
+1. Open a File Explorer.
+1. Navigate to the Execution service directory, e.g. `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\Applications\Cortex.Innovation.Execution_App<n>\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the `CustomerName` configured during [installation][Configure Installation Script], `<NodeName>` with the NETBIOS name of the server and `<n>` with the highest number in the directory.
+1. Open the `appsettings.json` file in a text editor.
+1. Locate the `"FeatureFlags"` line located under `"ExecutionEngine"` and set the value to `["f4fd94c0-a921-4b34-b82c-378b05e91555"]`.
+1. Save and close the file.
+1. In the File Explorer, navigate to `%ProgramData%\SF\<CustomerName>.<NodeName>\Fabric\work\ImageCache\Store\Cortex.Innovation.Execution\ExecutionPkg.Code.27.3.0.25260` replacing `<CustomerName>` with the Customer Name and `<NodeName>` with the NETBIOS name of the server specified in step 2.
+1. Repeat steps 3 - 5.
+1. Open a web browser.
+1. Navigate to `https://server.domain.com:9080/Explorer`, where `server.domain.com` is the fully qualified domain name of the server. Replace `9080` with new `httpGatewayEndpointPort` value if it was changed during configuration of the original installation.
+
+    {{% alert title="Note" %}}
+If a certificate error occurs, it will be necessary to import the client certificate used in the `ServerCertificatePath` parameter when {{< ahref path="Cortex.GettingStarted.OnPremise.AddInnovationTo72.MultipleServerWithHA.ConfigureDebuggerInstallationScript" title="Configuring the Installation Script" >}}. Instructions on how to do this can be found {{< ahref path="Cortex.Faqs.ImportClientCertificate.SingleServer" title="here" >}}.
+    {{% /alert %}}
+
+1. Expand `Cluster` then `Nodes`.
+1. Restart the node by clicking on the drop down menu next to the node name and select `Restart`. Confirm node restart by following the on-screen instructions.
+
+[Configure Installation Script]: {{< ref "#configure-installation-script" >}}
diff --git a/content/en/docs/2025.5/_shared/install-application-server/update-code-analyser.md b/content/en/docs/2025.5/_shared/install-application-server/update-code-analyser.md
@@ -0,0 +1,3 @@
+For assistance with configuring the Allowed list for the Code Analyser, please raise a case in the [{{% ctx %}} Service Portal][].
+
+[{{% ctx %}} Service Portal]: {{< url path="Cortex.ServicePortal.MainDoc" >}}
diff --git a/content/en/docs/2025.5/getting-started/on-premise/add-innovation-to-72/multiple-server-with-ha/installation/install-application-and-loadbalancer-servers.md b/content/en/docs/2025.5/getting-started/on-premise/add-innovation-to-72/multiple-server-with-ha/installation/install-application-and-loadbalancer-servers.md
@@ -298,10 +298,24 @@ More advanced configuration (such as changing ports) can be undertaken by modify
 
     If the errors do not give any instructions on how to rectify, see [Troubleshooting During Installation][] for further information; if this does not help then please contact [{{% ctx %}} Service Portal][CORTEX Service Portal] for assistance.
 
+## Configure {{% ctx %}} Code Analyser
+
+{{< section "/install-application-server/configure-code-analyser.md" >}}
+
+### Update Code Analyser Allowed List
+
+{{< section "/install-application-server/update-code-analyser.md" >}}
+
+### Disable Code Analyser
+
+On each of the the Application Servers:
+
+{{< section "/install-application-server/multi-server/add-innovation-to-7.2/disable-code-analyser.md" >}}
+
 ## Check Application Services
 
 1. Log on to the Application Server.
-1. Import the client certificate, used in the `ClientCertificatePath` parameter of the [Configure Installation Script][] section, to your Current User certificate store. Instructions on how to do this can be found [here][Import Client Certificate].
+1. If not already done so, import the client certificate, used in the `ClientCertificatePath` parameter of the [Configure Installation Script][] section, to your Current User certificate store. Instructions on how to do this can be found [here][Import Client Certificate].
 1. Open a web browser.
 1. {{< section "/install-application-server/multi-server/check-application-services.md">}}
 
diff --git a/content/en/docs/2025.5/getting-started/on-premise/add-innovation-to-72/multiple-server-with-ha/installation/install-web-application-server/perform-debugger-installation.md b/content/en/docs/2025.5/getting-started/on-premise/add-innovation-to-72/multiple-server-with-ha/installation/install-web-application-server/perform-debugger-installation.md
@@ -43,10 +43,24 @@ If Windows Defender is not running on the server, ensure that the [Antivirus Exc
 
 {{< section "/install-application-server/single-server/add-permissions-to-crypto-folder.md">}}
 
+## Configure {{% ctx %}} Code Analyser
+
+{{< section "/install-application-server/configure-code-analyser.md" >}}
+
+### Update Code Analyser Allowed List
+
+{{< section "/install-application-server/update-code-analyser.md" >}}
+
+### Disable Code Analyser
+
+On the the Web Application Server:
+
+{{< section "/install-application-server/multi-server/add-innovation-to-7.2/disable-debugger-code-analyser.md" >}}
+
 ## Check Application Services
 
 1. Log on to the Web Application Server.
-1. Import the client certificate, used in the `ClientCertificatePath` parameter of the [Configure Installation Script][] section, to your Current User certificate store. Instructions on how to do this can be found [here][Import Client Certificate].
+1. If not already done so, import the certificate, used in the `ServerCertificatePath` parameter of the [Configure Installation Script][] section, to your Current User certificate store. Instructions on how to do this can be found [here][Import Client Certificate].
 1. Open a web browser.
 1. {{< section "/install-application-server/single-server/check-application-services.md">}}
 
diff --git a/content/en/docs/2025.5/getting-started/on-premise/add-innovation-to-72/single-server-without-ha/installation/install-application-server.md b/content/en/docs/2025.5/getting-started/on-premise/add-innovation-to-72/single-server-without-ha/installation/install-application-server.md
@@ -43,10 +43,24 @@ If Windows Defender is not running on the server, ensure that the [Antivirus Exc
 
 {{< section "/install-application-server/single-server/add-permissions-to-crypto-folder.md">}}
 
+## Configure {{% ctx %}} Code Analyser
+
+{{< section "/install-application-server/configure-code-analyser.md" >}}
+
+### Update Code Analyser Allowed List
+
+{{< section "/install-application-server/update-code-analyser.md" >}}
+
+### Disable Code Analyser
+
+On the the Application Server:
+
+{{< section "/install-application-server/single-server/add-innovation-to-7.2/disable-code-analyser.md" >}}
+
 ## Check Application Services
 
 1. Log on to the Application Server.
-1. Import the client certificate, used in the `ClientCertificatePath` parameter of the [Configure Installation Script][] section, to your Current User certificate store. Instructions on how to do this can be found [here][Import Client Certificate].
+1. If not already done so, import the certificate used in the `ServerCertificatePath` parameter of the [Configure Installation Script][] section, to your Current User certificate store. Instructions on how to do this can be found [here][Import Client Certificate].
 1. Open a web browser.
 1. {{< section "/install-application-server/single-server/check-application-services.md">}}
 
diff --git a/content/en/docs/2025.5/getting-started/on-premise/install-innovation-only/multiple-server-with-ha/installation/install-application-and-loadbalancer-servers.md b/content/en/docs/2025.5/getting-started/on-premise/install-innovation-only/multiple-server-with-ha/installation/install-application-and-loadbalancer-servers.md
diff --git a/content/en/docs/2025.5/getting-started/on-premise/install-innovation-only/multiple-server-with-ha/installation/install-web-application-server/perform-debugger-installation.md b/content/en/docs/2025.5/getting-started/on-premise/install-innovation-only/multiple-server-with-ha/installation/install-web-application-server/perform-debugger-installation.md
diff --git a/content/en/docs/2025.5/getting-started/on-premise/install-innovation-only/single-server-without-ha/installation/install-application-server.md b/content/en/docs/2025.5/getting-started/on-premise/install-innovation-only/single-server-without-ha/installation/install-application-server.md

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+For assistance with configuring the Allowed list for the Code Analyser, please raise a case in the [{{% ctx %}} Service Portal][].`
	`2`	`+`
	`3`	`+[{{% ctx %}} Service Portal]: {{< url path="Cortex.ServicePortal.MainDoc" >}}`