Cosmetri - Enterprise Private SaaS Setup

1. Cosmetri – Software User Manual [Version 1.01 | Last updated: 12 November 2015] support@cosmetri.com | www.cosmetri.com To download the latest version of this document: http://www.cosmetri.com/docs/Cosmetri-Enterprise-Private-SaaS-Setup.pdf [Enterprise Private SaaS Setup] The regulatory, formulation and manufacturing software for cosmetics businesses.

2. Enterprise Private SaaS Setup November 10, 2015 Enterprise Private SaaS Setup Enterprise Private SaaS users enjoy the full benefits of Cosmetri’s software-as-a-service (SaaS) with the additional privacy and flexibility of hosting their Cosmetri data in a dedicated database and directory on their own designated server. Enterprise Private SaaS users also receive unlimited users and products, with storage only restricted by the storage capacity of the FTP space provided. Server requirements Setup of an Enterprise Private SaaS plan requires the following resources: 1.Dedicated mySQL database assigned to a unique database user 2.Unique FTP user mapped to an empty directory 3.SSL certificate for connecting to files securely in the FTP directory Check that you have the above available resources on your server, or alternatively you can register a separate shared hosting account with a host of your choice. If you prefer you can also host the Cosmetri database and FTP directory on your current server but create a sub-domain such as cosmetri.mycompany.com with its own control panel access. Check that the FTP space you provide for Cosmetri is sufficient for your requirements. We recommend providing at least 5 Gb available storage, but for larger companies with over 500 products it may be necessary to allow 10 Gb or higher. The FTP user should be configured to only have access to a single, dedicated folder which when you login serves as the root for that FTP user, for example /cosmetri/

3. Enterprise Private SaaS Setup November 10, 2015 Important note about backup and security As an Enterprise Private SaaS user, you are responsible for the regular backup of your own Cosmetri data. Cosmetri cannot be held responsible for any loss of data or security breaches caused by insecure practices or vulnerable scripts and services run on your own server. We recommend that you setup an automatic backup schedule to backup up your Cosmetri documents and database, at least once every 24 hours. The backups should be stored on a separate backup server. Please also check the integrity of your backup files by conducting a test restore to ensure in the event of a critical server error, that you are able to recover your data to the last restore point. If the Cosmetri application is unable to connect to your database and FTP due to subsequent changes to your configuration or problems with your server or database, you will need to contact your own IT support to resolve any problems. Restrict access to your server For additional security you can restrict access to your server by adding 85.13.128.240 as the only allowed IP address for the FTP user you create. Set the permissions for the Cosmetri designated FTP folder to chmod 755 Database permissions Cosmetri application requires permission to perform the following on your database: select / delete / create / drop / update chmod 755. Test your database and FTP credentials To test your configuration, login under the FTP user you created, using any FTP client. You should be automatically logged in to the root of the folder that you designated when

4. Enterprise Private SaaS Setup November 10, 2015 creating the FTP user. Upload a file e.g. blank.gif and then attempt to access this file via a web browser. TIP TIP Create the directory on your server before you create the FTP user and set the directory as the default path for the FTP user. Example Example – you created the directory /cosmetri/ in your server’s public root and can successfully upload a file blank.gif using the FTP user you have created. Check in your FTP settings that there is no additional FTP required to be set (this should be defined when you create the FTP user in your control panel). Now check that you can access the file securely via a web browser, for example: https://www.mycompany.com/cosmetri/blank.gif Check that your browser does not show any security alert. In most browsers you can also look for a padlock icon which can be clicked on to verify that the file is being accessed securely, as shown in the example below: Sign up To activate your account you will first need to sign up via the following page: http://www.cosmetri.com/enterpise-private-saas/ TIP TIP The username and email address you specify during sign up will be the credentials for accessing your main Cosmetri account. We recommend therefore

5. Enterprise Private SaaS Setup November 10, 2015 that you use credentials that are not personal to one staff member, such as ‘mycompany’ as the username and info@mycompany.com as the registered email address. Once your account is activated you can add any number of user accounts for staff in your company. Once your payment has been verified you will receive a confirmation email with a link that you need to click on to access the configuration page. This link will only remain active until your account has been successfully setup. Configuration Click on the link in your activation email to access a secure configuration page:

6. Enterprise Private SaaS Setup November 10, 2015

7. Enterprise Private SaaS Setup November 10, 2015 Enter your credentials in the form: Password Password – enter a unique password for your main Cosmetri account. This must be at least 8 characters in length and consist of at least one digit, one UPPERCASE and one lower case character. Keep this password secure at all times. Keep this password secure at all times. Enter the password again in the ‘Confirm password’ field. Database Hostname Database Hostname – this is the external address for reaching your database. This should be obtainable from your control panel when creating the new database. Database Name Database Name – usually auto-generated when you create the database in your control panel. Database Username Database Username – usually auto-generated when you create the database in your control panel. It is sometimes the same as the database name. If you have the option to assign databases to different database users, the database user should be only assigned to the database used for Cosmetri. Database Password Database Password – you are advised to set a password of at least 12 characters and include a combination of special characters, UPPER and lower case, e.g. F%wlP05Bn$d1bM02 FTP Host FTP Host – enter FTP host. This may be an IP address, domain e.g. ftp.mycompany.com or the internal server address such as w013cf09.kasserver.com FTP Username FTP Username – enter the FTP username FTP Password FTP Password – enter the FTP password Secure URL to directory Secure URL to directory – include the full path to the directory that you assigned for storing your Cosmetri documents e.g. https://www.mycompany.com/cosmetri

8. Enterprise Private SaaS Setup November 10, 2015 Include https:// and do not include a trailing slash after the directory name do not include a trailing slash after the directory name. Once you are sure you have entered the correct details, click on ‘Submit’. You’re your browser open and wait up to 30 seconds while Cosmetri attempts to connect to your database, write a test file to your FTP directory and check that this is accessible securely. If any problem is discovered you will receive an error message, in which case please verify that the details you entered are correct. Contact Cosmetri support if you are unsure why you received the error and inform us of the exact error message. If successful, your account will be created and you will be immediately logged in. Testing your new account Once logged in for the first time, we recommend that you confirm that you can successfully add a new product and upload a document to the Product / Docs tab. Check that you can also download the same document from the Docs tab and that the browser shows a secure padlock icon and no security warnings are displayed.