You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/en-us/c4b-environments/quick-start-environment/chocolatey-for-business-quick-start-guide.mdx
+10-14Lines changed: 10 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ import Callout from '@choco/components/Callout.astro';
8
8
importIframefrom'@choco/components/Iframe.astro';
9
9
importXreffrom'@components/Xref.astro';
10
10
11
-
Welcome to the Chocolatey for Business (C4B) Quick-Start Guide! This guide will walk you through the basics of configuring a C4B Server on your VM infrastructure of choice. This includes the Chocolatey Licensed components, a NuGet V2 Repository (Nexus), Chocolatey Central Management (CCM), and an Automation Pipeline (Jenkins).
11
+
Welcome to the Chocolatey for Business (C4B) Quick-Start Guide! This guide will walk you through the basics of configuring a C4B Server on your VM infrastructure of choice. This includes the Chocolatey Licensed components, a NuGet V3 Repository (Nexus), Chocolatey Central Management (CCM), and an Automation Pipeline (Jenkins).
12
12
13
13
<Callouttype="info">
14
14
This quick-start guide is intended for customers who have recently purchased Chocolatey for Business (C4B), or are evaluating C4B as part of a proof-of-concept.
@@ -29,15 +29,15 @@ As illustrated in the diagram above, there are four main components to a Chocola
29
29
30
30
1.**C4B Licensed components**: A licensed version of Chocolatey includes:
31
31
- Installation of the Chocolatey OSS client package itself (`chocolatey`)
32
-
- Chocolatey license file (`chocolatey.license.xml`) installed in the correct directory (`ProgramData\chocolatey\license`)
32
+
-The Chocolatey license file (`chocolatey.license.xml`) installed in the correct directory (`ProgramData\chocolatey\license`)
33
33
- Installation of the Chocolatey Licensed extension (`chocolatey.extension`), giving you access to features like Package Builder, Package Internalizer, etc. (full list [here](https://docs.chocolatey.org/en-us/features/)).
34
34
<p></p>
35
35
36
-
1.**NuGet V3 Repository Server App (Nexus)**: Chocolatey works best with a NuGet V3 repository. This application hosts and manages versioning of your Chocolatey package artifacts, in their enhanced NuGet package (.nupkg) file format. The quick start guide helps you setup[Sonatype Nexus Repository Manager (OSS)](https://www.sonatype.com/products/nexus-repository).
36
+
1.**NuGet V3 Repository Server App (Nexus)**: Chocolatey works best with a NuGet V3 repository. This application hosts and manages the versioning of your Chocolatey package artifacts, in their enhanced NuGet package (.nupkg) file format. The quick start guide helps you set up[Sonatype Nexus Repository Manager (OSS)](https://www.sonatype.com/products/nexus-repository).
37
37
38
-
1.**Chocolatey Central Management (CCM)**: CCM is the Web UI portal for your entire Chocolatey environment. Your endpoints check-in to CCM to report their package status. This includes the Chocolatey packages they have installed, and whether any of these packages are outdated. And now, with CCM Deployments, you can also deploy packages or package updates to groups of endpoints, as well as ad-hoc PowerShell commands. CCM is backed by an MS SQL Database. This guide will set up MS SQL Express for you.
38
+
1.**Chocolatey Central Management (CCM)**: CCM is the Web UI portal for your entire Chocolatey environment. Your endpoints checkin to CCM to report their package status. This includes the Chocolatey packages they have installed, and whether any of these packages are outdated. And now, with CCM Deployments, you can also deploy packages or package updates to groups of endpoints, as well as ad-hoc PowerShell commands. CCM is backed by an MS SQL Database. This guide will set up MS SQL Express for you.
39
39
40
-
1.**Automation Pipeline (Jenkins)**: A pipeline tool will help you automate repetitive tasks, such checking for updates to a set of Chocolatey Packages from the Chocolatey Community Repository (CCR). If updates exist, the pipeline task will auto-internalize your list of packages, and push them into your NuGet repository for you. This guide will help you set up Jenkins as your automation pipeline.
40
+
1.**Automation Pipeline (Jenkins)**: A pipeline tool will help you automate repetitive tasks, such as checking for updates to a set of Chocolatey Packages from the Chocolatey Community Repository (CCR). If updates exist, the pipeline task will auto-internalize your list of packages, and push them into your NuGet repository for you. This guide will help you set up Jenkins as your automation pipeline.
41
41
42
42
## Requirements
43
43
@@ -67,7 +67,7 @@ Below are the minimum requirements for setting up your C4B server via this guide
67
67
68
68
1. Install all Windows Updates.
69
69
70
-
1. If you plan on joining this server to your Active Directory domain, do so now before beginning setup below.
70
+
1. If you plan on joining this server to your Active Directory domain, do so now before beginning the setup below.
71
71
72
72
1. If you plan to use a Purchased/Acquired or Domain SSL certificate, please ensure the CN/Subject value matches the DNS-resolvable Fully Qualified Domain Name (FQDN) of your C4B Server. Place this certificate in the `Local Machine > Personal` certificate store, and ensure that the private key is exportable.
> <li>Cleans up all demo repositories on Nexus</li>
151
+
> <li>Creates a "ChocolateyCore" NuGet repository</li>
151
152
> <li>Creates a "ChocolateyInternal" NuGet repository</li>
152
153
> <li>Creates a "ChocolateyTest" NuGet repository</li>
153
154
> <li>Creates a "choco-install" raw repository</li>
155
+
> <li>Sets up "ChocolateyCore" on C4B Server as source, with API key</li>
154
156
> <li>Sets up "ChocolateyInternal" on C4B Server as source, with API key</li>
155
157
> <li>Adds firewall rule for repository access</li>
156
158
> <li>Installs MS Edge, and disables first-run experience</li>
@@ -205,7 +207,7 @@ export const callout4 = {
205
207
.\Set-SslSecurity.ps1
206
208
```
207
209
208
-
**ALTERNATIVE 1: Custom SSL Certificate** - If you have your own custom SSL certificate (purchased/acquired, or from your Domain CA), you can paste and run the following script with the `Thumbprint` value of your SSL certificate specified:
210
+
**ALTERNATIVE 1: Custom SSL Certificate** - If you have your own custom SSL certificate (purchased/acquired, or from your Domain CA), you can paste and run the following script with the `Thumbprint` value of your SSL certificate specified:
209
211
210
212
```powershell
211
213
Set-Location "$env:SystemDrive\choco-setup\files"
@@ -220,7 +222,7 @@ export const callout4 = {
220
222
You may have noticed the `-Hardened` parameter we've added above. When using a custom SSL certificate, this parameter will further secure access to your C4B Server. A Role and User credential will be configured to limit access to your Nexus repositories. As well, CCM Client and Service Salts are configured to further encrypt your connection between CCM and your endpoint clients. These additional settings are also incorporated into your `Register-C4bEndpoint.ps1` script for onboarding endpoints. We do require you to enable this option if your C4B Server will be Internet-facing, with a FQDN that resolves to a public IP.
221
223
</Callout>
222
224
223
-
**ALTERNATIVE 2: Wildcard SSL Certificate** - If you have a wildcard certificate, you will also need to provide a DNS name you wish to use for that certificate:
225
+
**ALTERNATIVE 2: Wildcard SSL Certificate** - If you have a wildcard certificate, you will also need to provide a DNS name you wish to use for that certificate:
224
226
225
227
```powershell
226
228
Set-Location "$env:SystemDrive\choco-setup\files"
@@ -307,9 +309,3 @@ export const callout4 = {
307
309
Congratulations! If you followed all the steps detailed above, you should now have a fully functioning Chocolatey for Business implementation deployed in your environment.
308
310
309
311
It is worth mentioning that some customers may have a more bespoke environment, with the presence of proxies and additional configuration management applications. Chocolatey is engineered to be quite flexible, specifically to account for these scenarios. Please refer to the many options for installation referenced on the <Xreftitle="Installation page"value="setup-licensed"anchor="more-install-options" />. Again, If you have any questions or would like to discuss more involved implementations, please feel free to reach out to your Chocolatey representative.
310
-
311
-
### See it in Action
312
-
313
-
If you'd prefer to watch and follow along, here is a recording of our Chocolatey Team going through this guide live on our Twitch stream:
0 commit comments