A WordPress.com site dedicated to System Center and Cloud Management

Archive for the ‘SCAC (App Controller)’ Category

SCAC 2012 SP1 in a LAB – Configuration Guide (Customize the Organization Logo)

You can customize the organization logo of the App Controller console.

To customize the organization logo

Navigate to the website root of the App Controller installation directory. By default, this is %PROGRAMFILES%\Microsoft System Center 2012\App Controller\wwwroot. AppC Customize Logo 01

Create a backup of the default organization logos by renaming the files as follows:

  1. Rename SC2012_WebHeaderLeft_AC.png to SC2012_WebHeaderLeft_AC.png.old
  2. Rename SC2012_WebHeaderRight_AC.png to SC2012_WebHeaderRight_AC.png.old

AppC Customize Logo 02

Copy your logo into the wwwroot folder.

The images must meet the following requirements:


Image Name


Top Left SC2012_WebHeaderLeft_AC.png 287×44
Top Right SC2012_WebHeaderRight_AC.png 108×16
NOTE: The format must be PNG with a transparent background.

The logos that you can change appear at the top of the App Controller site.

AppC Customize Logo 03






Here is a video walk through:

SCAC 2012 SP1 in a LAB – Configuration Guide (Connect App Controller to A VMM Management Server)

On the App Controller server, open a browser and navigate to the app controller site (in this lab example my site URL is https://SCSM.SC.LAB). Click on the ‘Connect a Virtual Machine Manager server and…’ link.

Connect AppC to VMM 01

In the Connect dialog box, enter a name for this connection. This name is displayed in the Name column of Clouds page. Add an optional description in the Description text box. In the Server name text box, enter the fully qualified domain name (FQDN) of the VMM management server. In the Port field, enter a port number that matches the port used by the VMM management server (default: 8100). Check Automatically import SSL certificates if you plan to copy files and templates to and from VMM cloud libraries.

NOTE: SSL certificates must be imported to the App Controller server in order to copy files or templates to and from VMM cloud libraries. In order for the import to succeed, users need to be part of all of the following roles: the local administrator of the App Controller server, local administrator of the VMM server, and VMM administrator.

Click OK to create the connection.

Connect AppC to VMM 02

You may then be asked to select which VMM user role to use from the new VMM server connection for the current session.

NOTE: You may encounter the following error.

Connect AppC to VMM 03

See the following TechNet thread: http://social.technet.microsoft.com/Forums/en-US/047ba638-81de-4870-a3fd-6f2390633685/app-controller-2012-sp1-rtm-connection-failed-with-virtual-machine-manager-2012-sp1-rtm.

Excerpt: “If System Center App Controller and the VMM Server are installed on separate servers, single sign-on does not work when App Controller is used. So, in UR1 for SC 2012 issue was fixed, but in SP1 present again. Solution is to disable SSO and use Basic Authentication or install App Controller on VMM server, but be aware 443 port VMM used for BITS.”

Here is a video walk through:

SCAC 2012 SP1 in a LAB – Configuration Guide (Enable Single Sign-On)

How to Enable Single Sign-On for App Controller

By default, App Controller is enabled to prompt users to sign in by entering their Active Directory user name and password. The following procedures describe how to configure App Controller to use the user’s current Windows credentials to automatically sign on.

To verify or change the authentication method

Open IIS manager on the App Controller server.

Single Sign On 01

Select the App Controller website.

Single Sign On 02

Expand the website and select the /api node.

Single Sign On 03

Click Authentication.

Single Sign On 04

Enable Windows Integrated Authentication.

Single Sign On 05

Disable Basic Authentication.

Single Sign On 06


Here is a video walk through:


To turn on constrained delegation

Log on using an account that has OU Administrator privileges in Active Directory Domain Services. Ensure that this account is also granted the SeEnableDelegationPrivilege user right (for example, a domain administrator could run the command ntrights -u domain\user +r SeEnableDelegationPrivilege on a domain controller, where domain/user represent the domain and account name for the account).

In Active Directory Users and Computers, right-click the App Controller system and click Properties.

AppC Constrained Delegation 01

Click the Delegation tab.

AppC Constrained Delegation 02

Select the Trust this computer for delegation to specified services only option.

AppC Constrained Delegation 03

Select the Use any authentication protocol option.

AppC Constrained Delegation 04

Click Add and then do one of the following:

  1. If the VMM management server is running under the Local System account, enter the name of the VMM management server and select HOST, and then click OK.
  2. If the VMM management server is running under a domain account, enter the name of domain account and select SCVMM, and then click OK.

AppC Constrained Delegation 05

AppC Constrained Delegation 06

AppC Constrained Delegation 07

Restart the App Controller management server.

Here is a video walk through:

In my video above, you will see that the pass-through authentication didn’t work; as I was still prompted for a username and password. Below is an additional video showing the additional changes I had to make in Internet Information Services (IIS) to make the single sign-on / pass-through authentication to work.

Tag Cloud

%d bloggers like this: