Introduction

Prerequisites

On-Premise

1. You have a firewall that supports PPTP (point-to-point) VPN or a VPN appliance
   
2. Your internal network is not running in the 172.31.0.0/16 IP address range
   
3. You have the CIDR IP range for your internal network available
   
4. You have identified the server the SQL Server runs on which contains your Viewpoint database and have its IP address available
   
5. You have identified the individual who is the Viewpoint Administrator who has administrative access to the SQL Server
   
6. Proceed to Configuring the VPN
   

ViewpointOne

1. Your Viewpoint environment is not hosted in ViewpointOne's legacy "VFC" (Viewpoint for Cloud) environment, if it is, you will need to contact Viewpoint Support to schedule environment isolation. There is a two-day minimum lead time and this process will make your environment unavailable for approximately 3 hours and usually starts after midnight PT.
   
2. You have identified the server the SQL Server runs on which contains your Viewpoint database and have its IP address available
   
3. You have identified the individual who is the Viewpoint Administrator who has administrative access to the SQL Server
   
4. Proceed to Configuring the VPN

Configuring the VPN

On-Premise

1. Once confirming you have access to your VPN appliance/firewall, please have your IT personnel submit this configuration form which upeon completion will provide a link to book a configuration meeting
   
2. The following items will be sent to you from Anterra during this meeting:
   
1. The Anterra internal network range (CIDR)
   
2. A pre-shared key that needs to be configured on your VPN
   
3. An endpoint (IP address) which your VPN appliance will communicate with to establish the connection
   
3. The following items will be needed from you during this meeting:
   
1. Your internal network's range (CIDR)
   
2. Your endpoint (IP address) which Anterra will communicate with to establish the connection
   
4. (Optional) A second tunnel configuration for redundancy
   
5. Proceed to Configuring SQL Server
   

ViewpointOne

1. Once confirming your environment is already isolated, open a support ticket with ViewpointOne support requesting a VPN be setup with Anterra Technology and send care-of 'Tony Roth'
   
2. Once the VPN is configured Anterra will contact the primary contact we have on file for your company and we can proceed to Configuring SQL Server

Configuring SQL Server

Determining SQL Server Address

Create Credentials for Anterra

1. Make sure you are connected to your Viewpoint environment (usually via Remote Desktop)
   
2. Open SQL Server Management Studio (SSMS)
   
3. Connect to your Viewpoint database (this is the same server shown as Vista Server during login)
4. Click  File > New > Query with Current Connection  or press CTRL + N
   
5. Use the query below to create a service account with a secure password for Anterra, be sure to:
   
1. Update the {ComplexPasswordHere} with a complex password containing upper case, lower case, digits, and symbols and having a minimum length of 10 characters.
   
2. If your main Viewpoint database is not called Viewpoint, be sure to update that in the first USE statement
   
3. If your Viewpoint attachments database is not called VPAttachments (it is sometimes calledViewpointAttachments), be sure to update that in the second USE statement
   

T-SQL to create Anterra Service Account

USE [master]
GO
CREATE LOGIN [svcAnterra] WITH PASSWORD=N'{ComplexPasswordHere}', DEFAULT_DATABASE=[Viewpoint], CHECK_EXPIRATION=OFF, CHECK_POLICY=OFF;
GO
USE [Viewpoint]
GO
CREATE USER [svcAnterra] FOR LOGIN [svcAnterra];
ALTER ROLE [db_datareader] ADD MEMBER [svcAnterra];
GRANT VIEW DEFINITION TO [svcAnterra];
GO
USE [VPAttachments]
GO
CREATE USER [svcAnterra] FOR LOGIN [svcAnterra];
ALTER ROLE [db_datareader] ADD MEMBER [svcAnterra];
GRANT VIEW DEFINITION TO [svcAnterra];
GO