You can configure BizTalk Server on multiple computers. The following diagram shows a multiple computer configuration (specifically, four computers) with all BizTalk Server-related components installed.

On computer 4, you must first verify installation of SQL Server 2000 components consisting of:

• SQL Server 2000
• SQL Server 2000 Service Pack 3a (SP3a)
• SQL Server Analysis Services
• SQL Server Analysis Services SP3a

To verify if SQL Server 2000 is running on your computer, see the BizTalk Server Installation Guide at http://go.microsoft.com/fwlink/?linkid=22120.

You must also enable network clients DTC access before configuring BizTalk Server in a multiple computer configuration or the configuration fails. This is required for the distributed transactions performed by BizTalk Server components to work.

Important  The following procedure must be run on each of the BizTalk Server runtime, SSO Server and SQL Server computers in the multiple computer configuration.

To turn on DTC access (for Windows Server 2003 computers only)

1. From the Start menu, point to Control Panel, point to Administrative Tools, and then select Component Services.
2. Expand Component Services, and then expand Computers.
3. Right-click the computer you need to set, and from the context menu select Properties.
4. In the Properties window, select the MSDTC tab.
5. In the Transaction Configuration area, click Security Configuration.
6. In the Security Settings area, select the Network DTC Access check box.
7. In the Security Settings area, check the Network Clients check box.
8. Click OK on each open dialog box.
9. Restart your computer to enable the remote DTC option.

Warning  Your computer could take several minutes to enable the remote DTC option.

To configure Enterprise Single Sign-On (SSO) on computer 1

In a multiple computer configuration, you need to configure the Single Sign-On (SSO) computer first. Start the BizTalk Server Configuration Wizard as follows:

1. Browse to the BizTalk Server installation directory (the default location is <system drive>:\Program Files\Microsoft BizTalk Server\) and double-click ConfigFramework.exe.
2. On the Welcome to the Microsoft BizTalk Server Configuration Wizard page, click Next.
3. On the Configuration options page, do the following:

   Use this

   To do this

   Will this Single Sign-On server (SSO) hold the master secret key?

   Select Yes from the drop-down list if this is the first SSO server you configure in your SSO system. Select No from the drop-down list for configuring subsequent SSO Servers in the SSO system. These servers are the processing servers and administration servers. Selecting Yes creates and configures the SSO Credential database. You must back up the master secret on this secret server after completing configuration. You can also back up the master secret using the SSO command line utility, ssoconfig.exe located at \Program Files\Common Files\Enterprise Single Sign-On\.  Security  Configure the master secret server as a stand-alone server. You must be an SSO administrator while performing this configuration task. Selecting No enables you to re-use existing data and configure a master secret server without re-creating the SSO database. If you do this, you must restore the master secret that you backed up on this secret server after completing configuration. You can restore the master secret using the SSO command line utility, ssoconfig.exe.

4. Click Next.
5. On the Windows accounts page, review the Microsoft Windows NT Services (credentials). By default, the Windows accounts are local groups.

   You can see a description of each group and its function in the panel below the configuration details.

   1. To configure the Windows accounts for domain access control, you must ensure that the domain pathname appears in front of the account. Select the SSO Administrators group name and click Edit.
   2. On the SSO Administrators Properties page, click Browse. The Select Group page appears.
   3. In the Look in drop-down list, select your domain.
   4. Select SSO Administrators and click OK. Click OK again on the SSO Administrator(s) Properties page. The Windows accounts page reappears.
   5. Observe that the pathname appears in front of the account. Follow the same steps for the SSO Affiliate Administrator(s) group. Click Next to continue.
6. On the Database configurations page, select any item that has an insufficient configuration icon .
   1. Click Edit to configure your database connection settings.
   2. In the Server drop-down list, select the SQL Server that will contain your database. By default, your database name already appears. Click OK. The insufficient icon disappears from the Database configurations page.
   3. Click Next to continue.

   Caution  After initially configuring these databases, you are unable to change the database or database server names.

   Warning   You must enter the NetBIOS name (valid server name) when the Configuration Wizard prompts you to enter SQL Server Computer information. If you do not enter a valid server name, the Configuration Wizard prevents you from continuing because it cannot validate the SQL Server connections.

7. On the Windows Service Configurations page, click Next if there are no insufficient configuration icons. Otherwise, select any item that has an insufficient configuration icon.
   1. Click Edit to configure your Windows Service settings.
   2. In the User name text box, click Browse. The Select User or Group page appears.
   3. In the Look in drop-down list, select your domain.
   4. Select the <Enterprise Single Sign-On Service> account and click OK.
   5. In the Password text box, enter the <Enterprise Single Sign-On Service> password. Click OK.
   6. Click Next.
8. On the Summary page, review the components to be configured, click Save to save the configuration XML, and then click Next. (If you do not click Save, you do not back up your system configuration for use later.) Configuration begins as shown on the Configuration Progress page.

   Note  When configuring BizTalk Server in Windows Server 2003, you must comply with the prompt to enter your username and password if you have not removed Internet Explorer Enhanced Security Configuration. Type your username and password to continue.

9. On the Configuration completed page, click Logfile to view the log file, and then click Finish.

Important  When you complete BizTalk Server configuration, you must back up the master secret on the master secret server. If you do not do this, you risk losing data. For more information see, Backing Up the Master Secret.

Important  When you complete BizTalk Server configuration, you must log off BizTalk BAS Administrators, BizTalk BAS Managers, BizTalk BAS Users, and BizTalk BAS Web Services groups and then log on again in order to access parts of the BAS site.

To configure BizTalk Server (runtime) on computer 2

1. In a multiple computer configuration, you need to configure BizTalk Server (runtime) on computer 2 after configuring the SSO server on computer 1. If the BizTalk Server Configuration Wizard is not started, browse to the BizTalk Server installation directory (the default location is <system drive>:\Program Files\Microsoft BizTalk Server\) and double-click ConfigFramework.exe.
2. On the Welcome to the Microsoft BizTalk Server Configuration Wizard page, click Next.
3. On the Configuration options page, do the following:

   Use this	To do this
   Do you want to create or join a BizTalk Server group?	Select Create from the drop-down list to create the BizTalk group to use to administer all the BizTalk databases. Note  If you Join a BizTalk group, the BizTalk group and the Configuration database must already exist. In addition, you must be a member of the existing group. Important  If you performed a custom installation including Development-only or Administration Tools-only, you must Join rather than Create a BizTalk group during configuration. Select Join from the drop-down list to join a BizTalk group that already exists and which you are a member. If you already have a Configuration database installed and plan to use that database, you must join the BizTalk group you created with that database.
   Will this Single Sign-On server (SSO) hold the master secret key?	Select Yes from the drop-down list if this is the first SSO server you configure in your SSO system. Select No from the drop-down list for configuring subsequent SSO Servers in the SSO system. These servers are the processing servers and administration servers. Selecting Yes creates and configures the SSO Credential database. You must back up the master secret (an encryption key) on this secret server after completing configuration. You can also back up the master secret using the SSO command line utility, ssoconfig.exe located at \Program Files\Common Files\Enterprise Single Sign-On\.  Security  Configure the master secret server as a stand-alone server. You must be an SSO administrator while performing this configuration task. Selecting No enables you to re-use existing data and configure a master secret server without re-creating the SSO database. If you do this, you must restore the master secret (an encryption key) that you backed up on this secret server after completing configuration. You can restore the master secret using the SSO command line utility, ssoconfig.exe.
   Do you want to Create a BizTalk Host Application?	Select Trusted from the drop-down list if you want to enable the host to submit messages into the MessageBox database with a sender security identifier (SSID) that is different from the Windows Security ID of the BTS Host Instance account. Caution  This is equivalent to creating a trust relationship between the servers. Select UnTrusted from the drop-down list if you want to pass the SSID of the BTS Host Instance account to the MessageBox database. Select No from the drop-down list if you do not want to create a BizTalk Host Application.
   Do you want to create a BizTalk Isolated Host Application? You create this host exclusively to support Hyper Text Transfer Protocol (HTTP) and Simple Object Access Protocol (SOAP) adapters.	Select Trusted from the drop-down list if you want to enable the host to submit messages into the MessageBox database with a sender security identifier (SSID) that is different from the Windows Security ID of the BTS Host Instance account. Caution  This is equivalent to creating a trust relationship between the servers. Select UnTrusted from the drop-down list if you want to pass the SSID of the BTS Host Instance account to the MessageBox database. Select No from the drop-down list if you do not want to create a BizTalk Isolated Host Application. Click Next.
   Do you want to create an Analysis database drop-down list for tracking aggregations? This database stores both business and health monitoring OLAP cubes.	Select Yes from the drop-down list if you have installed SQL Server Analysis Services and SQL Server Analysis Services SP3a, and you want to track and store health monitoring OLAP cubes. Select No from the drop-down list if you have not installed SQL Server Analysis Services and SQL Server Analysis Services SP3a.
   Do you want to use an Analysis Server for BAM aggregations? You use the SQL Server Analysis Services database to keep the aggregated historical data for Business Activities.	Select Yes from the drop-down list if you have installed SQL Server Analysis Services and SQL Server Analysis Services SP3a, and you want to create an Analysis Services database that keeps the aggregated data for Business Activities. Select No from the drop-down list if you have not installed SQL Server Analysis Services and SQL Server Analysis Services SP3a. Click Next. Warning  You are not able to configure SQL Server Analysis Services after initially configuring BizTalk Server. It must be done when you create the BizTalk group.
   Do you want to create an Analysis database drop-down list for tracking aggregations? This database stores both business and health monitoring OLAP cubes.	Select Yes from the drop-down list if you have installed SQL Server Analysis Services SP3a, and you want to track and store health monitoring OLAP cubes. Select No from the drop-down list if you have not installed SQL Server Analysis Services SP3a.
   Do you want to use an Analysis Server for BAM aggregations?	Select Yes from the drop-down list if you have installed SQL Server Analysis Services SP3a, and you want to create an Analysis Services database that keeps the aggregated data for Business Activities. Select No from the drop-down list if you have not installed SQL Server Analysis Services and SQL Server Analysis Services SP3a. Warning  You are not able to configure SQL Server Analysis Services after initially configuring BizTalk Server. It must be done when you create the BizTalk group.
   Is a Rule Engine database already configured for the BizTalk Server group? Note  You only see this prompt if you select the option to Join a BizTalk Server Group.	Select Yes from the drop-down list if a Rule Engine database already exists for this BizTalk group. Select No from the drop-down list to create the Rule Engine database if the initial installation of BizTalk Server did not include a Rule Engine database.

4. Click Next.
5. On the Windows accounts page, review the Microsoft Windows NT Services (credentials). By default, the Windows accounts are local groups.
   1. To configure the Windows accounts for domain access control, you must ensure that the domain pathname appears in front of the account. Select the group name in the list and click Edit.
   2. In the <group name> Properties page, click Browse. The Select Group page appears.
   3. Click Locations to change the domain location. The Select Group page reappears. For each group, enter the user account.

      Note  Hint: For speedier results, enter the first few letters of the user account and click Check Names.

      Click OK. The <group name> Properties page re-appears.

   4. Click OK. The Windows accounts page re-appears. Observe that the domain pathname appears in front of the account. Continue selecting each group name and edit properties similarly.

   You can see a description of each group and its function in the panel below the configuration details.

   Note  You cannot specify the User Principal Name (UPN) format such as name@domain.company.com for an account name.

   Note  If you configure Business Activity Services (BAS), local groups are automatically added to the roles of BizTalk BAS Administrators, BizTalk BAS Managers, BizTalk BAS Users, and BizTalk BAS Web Services. You can use these local groups or you can replace them with domain groups.

   Note  You cannot use built-in groups, such as administrators, for any of the four groups previously described.

   Note  When configuring BAS, the Configuration Wizard prompts you for credentials if Internet Explorer Enhanced Security is enabled. Enter the administrator's credentials on this computer.

   Click Next.

6. On the Addresses page, review the URL location, and click Edit to make changes, or click Next to continue.

   If you are configuring BAS, the default site is BASSite. You can enter any valid URL for a local virtual directory that has Windows SharePoint Services extended on it, and change the site name. If you enter an IP address, a dialog appears prompting you to authenticate the user account and password. For more information about changing passwords in BAS, see Changing BAS Service Account Passwords.

   Note  In some installation and operating system upgrade scenarios (for example, running a computer with Microsoft Content Management Server or Microsoft SharePoint Portal Server before installing BizTalk Server, or upgrading a computer from Windows Server 2000 to Windows Server 2003), you must manually extend Windows SharePoint Services. To do this, delete the registry key and file described in the following error:

   The virtual server http://xxx/ has already been extended. The registry key "HKLM\Software\Microsoft\Shared Tools\Web Server Extensions\Ports\Port /LM/W3SVC/1:" and file "c:\inetpub\wwwroot\_vti_pvt\service.cnf" indicate that the virtual server has been extended. If you are sure the virtual server has not been extended with Windows SharePoint Services, delete the registry key and file, and then try extending the virtual server again.

   http://go.microsoft.com/fwlink/?LinkId=18110

   Note  If you want to use an existing site, it must be a BAS site.

7. On the Configuration property values page, review the configuration names and click Edit to make changes to the property's value. Click Next to continue.
   1. On the Web sites page, review the Web site locations that you use for each BizTalk Server virtual directory that you create during configuration. A description of the Web site appears when you select the Web site name. Click Edit to change the settings for the Web site that you select. Human Workflow Services (HWS) enables you to select an existing Web site in which the HWS Web service resides. Your selection pre-populates with the default Web site of the computer. However, you can change it to different Web sites if you have configured your computer to run more than one Web site. Otherwise, click Next to accept the default Web site.
8. On the Database configurations page, select any item that has an insufficient configuration icon .
   1. Click Edit to configure your database connection settings.
   2. In the Server drop-down list, select or enter the SQL Server that will contain your database. By default, your database names already appear. Click OK. The insufficient icon disappears from the Database configurations page. Continue selecting each group name and edit properties similarly.
   3. Click Next to continue.

   Caution  After initially configuring these databases, you are not able to change the database or database server names.

   Warning   You must enter the NetBIOS name (valid server name) when the Configuration Wizard prompts you to enter SQL Server Computer information. If you do not enter a valid server name, the Configuration Wizard does not allow you to continue because it cannot validate the SQL connections.

9. On the Windows Service Configurations page, click Next if there are no insufficient configuration icons. Otherwise, select any item that has an insufficient configuration icon.
   1. Click Edit to configure your Windows Service settings.
   2. In the User name text box, click Browse. The Select User page appears.
   3. Click Location to specify your location.
   4. On the Enter the object name to select text box, enter the user account. Click OK.

   Note  Hint: For speedier results, enter the first few letters of the user account and click Check Names.

   1. In the Password text box, enter the <user account you just chose> password. Click OK.
   2. Click Next to go to the BizTalk Messaging page.
10. On the BizTalk Messaging page, click Next.

    Important  Keep the default settings for the initial configuration of BizTalk Server unless you are configuring MSMQT on a server that also has MSMQ installed and enabled. For more information, see BizTalk Message Queuing Adapter (MSMQT) Configuration.

11. On the Windows SharePoint Services site configuration page, perform the following tasks:

    Note  You only see this page if you are configuring Business Activity Services (BAS).

    Use this	To do this
    Title	Type a name for the Windows SharePoint Services site.
    Description	Type a description for the site.
    Site e-mail	Type an e-mail address for the site owner. The email address must be valid.

12. On the Summary page, review the components to be configured, click Save to save the configuration XML, and then click Next. (If you do not click Save, you do not back up your system configuration for use later.) Configuration begins as shown on the Configuration Progress page.

    Note  When configuring BizTalk Server in Windows Server 2003, you must comply with the prompt to enter your username and password if you have not removed Internet Explorer Enhanced Security Configuration. Type your username and password to continue.

13. On the Configuration completed page, click Logfile to view the log file, and then click Finish.

Important  After configuring BizTalk Server, you must back up the master secret (an encryption key) on the master secret server. If you do not do this, you risk losing data. For more information see, Backing Up the Master Secret.

Important  After configuring BizTalk Server, you must log off BizTalk BAS Administrators, BizTalk BAS Managers, BizTalk BAS Users, and BizTalk BAS Web Services groups and then log on again in order to access some parts of the BAS site.

To configure BizTalk Server - (Administration Tools only) on computer 3

1. In a multiple computer configuration, you need to configure BizTalk Server (Administration Tools only) after configuring BizTalk Server (runtime) on computer 2. If the BizTalk Server Configuration Wizard is not started, browse to the BizTalk Server installation directory (the default location is <system drive>:\Program Files\Microsoft BizTalk Server\) and double-click ConfigFramework.exe.

   Important  If you performed a custom installation including Development-only or Administration Tools-only, you must Join rather than Create a BizTalk group during configuration.

2. On the Welcome to the Microsoft BizTalk Server Configuration Wizard page, click Next.
3. On the Database configurations page, select any item that has an insufficient configuration icon .
   1. Click Edit to configure your database connection settings.
   2. In the Server drop-down list, select the SQL Server that will contain your database. By default, your database name already appears. Click OK. The insufficient icon disappears from the Database configurations page.
   3. Click Next to continue.

   Caution  After initially configuring these databases, you are unable to change the database or database server names.

   Warning   You must enter the NetBIOS name (valid server name) when the Configuration Wizard prompts you to enter SQL Server Computer information. If you do not enter a valid server name, the Configuration Wizard prevents you from continuing because it cannot validate the SQL connections.

4. On the Summary page, review the components to be configured, click Save to save the configuration XML, and then click Next. (If you do not click Save, you do not back up your system configuration for use later.) Configuration begins as shown on the Configuration Progress page.

   Note  When configuring BizTalk Server in Windows Server 2003, you must comply with the prompt to enter your username and password if you have not removed Internet Explorer Enhanced Security Configuration. Type your username and password to continue.

5. On the Configuration completed page, click Logfile to view the log file, and then click Finish.

Important  After configuring BizTalk Server, you must log off BizTalk BAS Administrators, BizTalk BAS Managers, BizTalk BAS Users, and BizTalk BAS Web Services groups and then log on again in order to access some parts of the BAS site.

To verify SQL Server installation on computer 4

When first configuring your multiple computer configuration, verify installation of SQL Server 2000 components on computer 4 consisting of:

• SQL Server 2000
• SQL Server 2000 Service Pack 3a (SP3a)
• SQL Server Analysis Services
• SQL Server Analysis Services SP3a

To verify that SQL Server 2000 is running on your computer, you are not required to run any special configuration steps in the Configuration Wizard.

See Also

Security Recommendations for BizTalk Server Components