Securing your LAWTRAC.LTO File

Important Note: On-premise clients who are hosting their own Lawtrac instance will need to secure their file location and ensure that it is inaccessible to unauthorized users.

Depending on your web server application (IIS or Apache) you have different methods for taking steps to secure your LAWTRAC.LTO file (this should appear under the path C:\Inetpub\wwwroot, or C:\Program Files (x86)\Lawtrac).

IIS:

1. Open the root folder.
2. Locate the text template (this block of text contains a ".template" tag).
3. Copy the template and paste it at the top of the file. Note: You must remove the ".template" tag.

Apache:

1. Open the root folder.
2. Add the following block of text to either the vhosts.conf or httpd.conf files:

 <Files ~ LAWTRAC.LTO>
  Oder allow, deny
  Deny from all
  </Files>

Installing IIS 8.5

An IIS Server is required to be able to install the ColdFusion app server for Lawtrac.

Note: IIS 8 is the only version of IIS that can be installed on Windows Server 2012 and later.

Instructions

1. Open the Control Panel.
   1. In Server 2012, this can be accomplished in one of two ways:
      1.  Left click the Start button in the lower left and then locate and click on the square tile containing Control Panel.
      2. Right click the start button in the lower left, and left click the Control Panel option.
2. Start the Add Roles and Features Wizard. This option may be under Programs | Programs and Features.
   • Select Turn Windows Features On or Off.
   • Ensure the stated requirements are met, and then click Next to proceed to Installation Type section.
   • Role-based or Feature-based Installation should be checked here. Click Next to proceed to the Server Selection section.
   • Select a Server from the Server Pool should be selected, with the server on which IIS 8 is to be installed highlighted in the Server Pool box. Click Next to proceed to the Server Roles section.
   • In the Roles box, scroll to Web Server (IIS) and a pop-up should appear, asking if you want to "Add features that are required for Web Server (IIS)". Ensure that Include Management Tools (if applicable) is checked before clicking Add Features. Click Next to proceed to the Features section.
   • The default settings in the Features section are adequate, so click Next to proceed.
   • Click Next in the Web Server Role (IIS) section to proceed to Role Services.
   • In the Role Services box, Web Server should be checked, as well as a number of sub-sections. Not all of them need to be selected. Ensure that the following have check-marks next to them before clicking Next:
     • Common HTTP Features
       • Default Document
       • Directory Browsing
       • HTTP Errors
       • Static Content
     • Health and Diagnostics
       • HTTP Logging
       • Request Monitor
     • Performance
       • Static Content Compression
     • Security
       • Request Filtering
     • Management Tools
       • IIS Management Console
   • On the Confirmation page, verify the role services and features that are selected. Select Restart the Destination Server Automatically if Required to restart the destination server if the settings need to take immediate effect.
     1. To save the configuration information to an XML-based file that you can use for unattended installations with Windows PowerShell, select Export Configuration Settings, move to the appropriate path in the Save as Dialog box, enter a file name of your preference, then click Save.
   • When you are ready to start the installation process on the Confirmation page, click Install.
   • After the installation is complete, it is safe to click Close. Confirm that the Web server works by opening a Web browser, and verify\ that a blue “Internet Information Services” Web page is displayed when you use the http://localhost address.
3. Return to the Add Roles and Features Wizard again using the first few points outlined in Step 2 above.
   1. Proceed back to the Server Roles section by continually pressing Next until Server Roles is highlighted on the left.
   2. Scroll down to Web Server (IIS) and expand it by clicking on the arrow to the left of the checkbox.
   3. Expand Web Server.
   4. Click the checkbox next to Application Development and then check the boxes for the features listed below. Note that for some of them, the “Add features that are required…” box will appear when the box is checked. Simply click on the Add Features button to continue each time one pops up:
      1. .NET Extensibility 4.5
      2. ASP
      3. ASP.NET 4.5
      4. CGI
      5. ISAPI Extensions
      6. ISAPI Filters
   5. When finished, keep clicking on Next until the confirmation.
   6. After the installation is complete, it is safe to click Close.
4. To be able to show helpful error messages for errors within Lawtrac (rather than a "500 server error" page), a setting will need to be checked within the IIS Manager.
   1. Click the Start Menu.
   2. After the start screen appears, type "IIS" and a search entry for Internet Information Services (IIS) Manager should appear. Select that entry.
   3. In the navigational area to the left, in the Connections box, click the server name.
   4. The middle content pane should have a variety of icons displayed. Double-click the Error Pages icon.
   5. In the right Actions pane, select Edit Feature Settings...
   6. Select the Detailed Errors option in the middle and press OK. It is safe to dismiss any pop-up windows that appear asking for confirmation of this.

Technical Requirements

Lawtrac is a Web-based application. This application was developed using ColdFusion, an intuitive tag-based scripting language. It does not require the installation of any additional files on the local workstation. The back-end, ColdFusion software, along with the database and application files, must be installed on a server. ColdFusion is the Web server software that interprets and translates the Lawtrac application files. 

If customers opt for Mitratech to host their company's database (Managed Service Provider-MSP), the Lawtrac Support department handles and maintains the application setup. However, customers hosting their company's application (Intranet) must ensure that additional components are acquired (i.e., ColdFusion, SQL Server, etc.) and that adequate hardware is available for each component outlined. In addition, in-house database and Web administrators are required to perform installations and maintain the database and Web servers.

Notes for on-premise clients: Lawtrac requires DNS Setup as well as an SSL Certificate prior to implementation. Lawtrac only works on SSL (https://) and requires that these steps are already completed to function. 

Web & Application Server

• Windows 2019 Server
• 2 Intel® Pentium® 4 or AMD Athlon® processor (2.90GHz minimum each) 4 GB RAM
• 20 GB hard-disk space*

*Customers planning to use the Document Bank to store documents linked to matters must allocate a minimum of 80-200 GB of hard disk space. If your company already has documents that are to be linked to Lawtrac, the hard disk space should be increased to accommodate the current size of documents plus additional space (depending on how many documents users will be uploading).

Web Server Components

• IIS 10, only Coldfusion 2018 is supported in Lawtrac 4.3.6 and all later versions.
• Visit this site to see further detail on system requirements for ColdFusion Standard.

Database Server

• Windows 2012 Server, Windows 2012R2 Server, Windows 2016
• AMD Opteron, AMD Athlon 64, Intel Xeon with Intel EM64T support, Intel Pentium IV with EM64T support (2.90GHz minimum each)
• 4 GB RAM
• 50 GB hard-disk space

Database Software

• Microsoft SQL Server 2016
• Reference the Microsoft websites below for further detail on requirements for installing the 2016 Microsoft SQL servers.
• · 2016 Hardware and Software Requirements

For questions, contact the Lawtrac Support Department at lawtracsupport@mitratech.com or call +1 888 784 7224, then press 3.

User Workstation

• Internet Browser
  • Latest versions of Microsoft Internet Explorer 11, Mozilla Firefox, Google Chrome 
• System Specs
  • Minimum Requirements—512 MB RAM (1 GB RAM recommended)
• Email Integration (optional)
  • Microsoft Outlook 2013 and 2016

Setting up the Lawtrac Application

Requirements prior to setting up the Lawtrac application.

The following is required prior to installing the Lawtrac application:

• Web server has been installed with a successful HTTP connection
• ColdFusion has been installed with the ability to successfully log in to ColdFusion administrator
• ColdFusion has been connected to an SMTP (Send Mail) server (via ColdFusion Administrator | Server Settings | Mail)
• SQL Server has been installed on the database server
• Database and Web servers have been set up to allow for communication between both servers

In addition to documentation, the items sent to you contains one of two packages depending on your company’s preference:

1. Conversion Database Setup
   1. Custom Tags (Supporting DLL & Java Files)
   2. Application
   3. Lawtrac.LT file
   4. Converted Database
   5. Currency Database
   6. Client Storage Database
   7. Activity Database
2. Blank Database Setup
   1. Custom Tags (Supporting DLL & Java Files)
   2. Application
   3. LAWTRAC.LTO file
   4. Blank Database
   5. Currency Database
   6. Client Storage Database
   7. Activity Database (optional)

Installing Lawtrac

1. Create a backup of your Web server files, renaming the file to refer to the current version, if applicable.
2. Unzip the Lawtrac<version>.exe installation file into a temporary folder on the web server (i.e., Lawtrac4.3_2017) and then run the executable Lawtrac4.x.exe
   The setup screen appears.
3. Click Next.
   
4. The Select Application Folder screen appears.
   
5. Click Choose.
6. Browse to PATH:\inetpub\wwwroot folder and click on Make New Folder.
   The name of the folder should be the same as your existing Lawtrac application folder name.
   
7. Click Next.
   The application is now ready to be installed.
8. Click Install.
   The installation process commences.
   
   The installation is completed once the Completing the Lawtrac Online Setup Wizard appears.
9. Click Done.
   

Application Files

Once the installation is complete, the following application file structure should appear under the path C:\Inetpub\wwwroot, or C:\Program Files (x86)\Lawtrac.

Lawtrac Database

IMPORTANT NOTE: There are several required processes listed in this section.

Lawtrac Database Data Source Setup

Once the Lawtrac database has been restored, a data source must be created in ColdFusion Administrator for the application to communicate with the database.

Server Setting Upload Limits

This setting specifies the maximum upload file size for documents in the Lawtrac application. While the site administrator and super user can adjust upload limits within Lawtrac via Application Administration | Document Bank | Upload Limits, those limits cannot exceed the limits set in Adobe ColdFusion. It is recommended to set a maximum post data size that is generous enough to suit your matter management needs without the necessity of returning to ColdFusion Administration.

1. In ColdFusion Administrator, go to Server Settings | Settings.
   
2. In the Request Size Limits section, located at the bottom of the page, type an upload limit into the text field.
   You can set this number to any size, then regulate a new upload limit when adjusting application settings in Lawtrac. Mitratech recommends setting the maximum number of POST request parameters to 500, and the maximum number of post data to 105.
   
   For Collaborati users, it is suggested that the POST request parameters be set to 2,000.
   
    
3. Click Submit Changes to confirm.

Client Storage Client Variables Setup

1. In ColdFusion Administrator, go to Server Settings | Client Variables.
   
2. Under Select Data Source to Add as Client Store select ClientStorage.
3. Click Add.
   
   You are taken to the client data source creation screen.
4. If desired, type in a description.
5. Change the default "Purge Data Setting" to 1 day.
6. Click Submit Changes.
7. In the area entitled Select Default Storage Mechanism for Client Sessions, select ClientStorage.
8. Click Apply.
   

Activity Scheduled Task Setup

A scheduled task is required to clean up the data stored in the Activity database. Refer to the steps below to create this task.

1. In ColdFusion Administrator, select Server Settings | Scheduled Tasks.
   
2. Select Schedule New Task.
3. In the Task Name field, input "Activity".
4. Under Frequency, select the radio button for "Recurring". Select "Daily" from the drop-down and input the time you want the task to run (we recommend running the task when you know users will not be working in the application).
5. In the URL field, input the URL for your Lawtrac application with the suffix: /activity/activity_backup.cfm (for example, https://www.url.com/activity/activity_backup.cfm)
    
6. Click Submit

Document Bank Solr Setup

Solr is a collection of documents that the ColdFusion server indexes to allow you to use search tools for the document.

Note: A scheduled task must be created within the Lawtrac application to automate this process. Contact your company’s project manager or the LT Online Help Desk at Support@lawtrac.com for instructions on setting up a scheduled task.

1. In ColdFusion Administrator, go to Data & Services | ColdFusion Collections.
   
2. Input the collection name in the Name field. The name must match the VarietyName indicated in theLawtrac.LTO(item G in the Application Files section of the guide).
3. Keep the default Path.
4. Click Create Collection.
   

Collaborati Setup

To ensure a successful synchronization between Collaborati and Lawtrac 4.3, users must ensure certain property values within ColdFusion Administrator. New Collaborati clients will need to manually configure their scheduled task URL. See Scheduled Task URL Setup for more information.

Follow the steps below to run a change directory command for both Collaborati certificates.

1. In the ColdFusion Administrator sidebar, select Server Settings.
2. Select Settings.
   
3. Locate the property titled "Prefix serialized JSON with" and make sure the box is not checked.
4. Open a command prompt and use the cd command (change directory) into the\jre\bin folder located in your ColdFusion installation directory.
5. Click Submit Changes to confirm.

The next portion of the set-up covers how to download the Collaborati certificates and use a key tool to import CACERTS within the ColdFusion installation.

The default password for the CACERTS keystore is "changeit".

1. In an open Internet browser, go to https://help.teamconnect.com/SSL.
2. Click the link provided in Step 1 on the CSM Administrators: SSL Certifications form.
3. Open the wildcard.collaborati.net.zipand download all files contained within, starting withgd_bundle-g2-g1.crt.
4. Open the command prompt located in coldfusion/jre/bin and run the following command:
   keytool -import -v -trustcacerts -alias collaborati -file C:\path\to\your\cert.cer -
keystore F:\coldfusion\jre\lib\security\cacerts 
   
   The command prompt transfers the wildcard.collaborati.net.zip files to the application server where your ColdFusion application is stored. The files will be kept in the jre/lib/security folder.
5. Type "Y" to trust both certificates and add them to the keystore. Press [Enter] on your keyboard.
6. Restart the ColdFusion Administrator.

"Sticky Sessions" & J2EE Session Variables

To ensure the successful synchronization of invoices between Collaborati and Lawtrac 4.2, users must enable "sticky sessions" within their browser. If sticky sessions are unacceptable for a client's hosting environment, each environment must be checked to ensure that J2EE session variables are enabled.

Follow the steps below enable the J2EE session variables within ColdFusion Administrator.

1. In the ColdFusion Administrator sidebar, select Server Settings.
2. Select Memory Variables.
   
3. Ensure the following checkboxes are marked.
   • Use J2EE Session Variables
   • Enable Application Variables
   • Enable Session Variables

Logging into the Application

Use a Web browser to access the application. The following is a sample URL:http://ServerName/LAWTRAC43/.

Enter your application URL to display the Lawtrac sign-in screen.

Note: For security purposes, please contact lawtracsupport@mitratech.com for your credentials.

The following steps are required to complete the application setup:

1. Select Application Administration.
2. Select Application & Database.
3. Select Database Administration and click Run Upgrade Scripts.
4. Select Data Locations.
5. Update the Corporate Logo URL to reflect the location of your corporate logo file.
   Note: The URL should be the application URL with the file name as the suffix.
6. In the "Log-Out URL" field, input the URL of the re-direct site that is to be displayed after users log out of the application.

Data settings save automatically when you click outside of the text box or press [Tab] on your keyboard.

Setting up International Currency Exchange Feed

To use the international currency interface and receive daily rate updates, create an internal process to perform this task or go to www.XE.com to create an account for the receipt of a daily exchange feed. The Lawtrac application is already configured to work with the XE interface. Setup outside of Lawtrac will be required. XE will provide assistance with the required configuration to obtain the daily feed from their site.

Note: When setting up the feed with XE, ensure that the file type is .CSV. This ensures that the exchange rates can be read and populated in the Dailies table (contained in the CURRENCY database). In addition, the data feed must be directed to and return from your company’s IP address.

Once your company’s XE account is set up, refer to the steps below to configure Lawtrac for the receipt of the daily feed:

1. Copy the CurrencyWork directory from the CurrencyWork.zip file into the INETPUB\WWWROOT folder on the web server.
2. Open the currency.cfm file and update the sections highlighted in red to reflect your company’s Lawtrac and XE settings:
   <CFPARAM name="filesave" default="C#dateformat(now(),'dd-mm-yy')#">
<CFPARAM name="filepath" default="D:\inetpub\wwwroot\CurrencyWork">
<CFPARAM name="urlpath" default="https://www.lawtraconline.com/CurrencyWork/">
<!---  saves the file in its original form from the website    --->
<CFHTTP method="Get" url="http://www.xe.com/dfs/datafeed2.cgi"* path="#filepath#" file="#filesave#.csv">
   *This URL is provided by XE once your account is set up.
3. You can also update the section below if you are interested in getting an email once the exchange rates have been updated. Refer to the following example:
   <CFMAIL to="Ksacky@Lawtrac.com" from="CHolden@Lawtrac.com" cc="support@lawtrac.com, cholden@lawtrac.com" subject="Daily Exchange Rates Updated">

     Added Currencies

</CFMAIL>
4. Save the file.

Proceed with creating a scheduled task to populate the Currency database:

1. Log into ColdFusion Administrator.
2. Select Debugging & Logging | Scheduled Tasks.
3. Input the Task name of "Currency Feed".
4. The default Start date should be the current day.
5. Click the Recurring radio button and select "Daily" from the drop-down.
6. Enter the desired time you want the exchange rates to be updated.
7. In the "URL" field input your server URL or IP address with the suffix “currencywork/currency.cfm” (for example, http://yourURL/currencywork/currency.cfm).
8. Check Publish–Save output to file.
9. Specify a valid path and file name for an output file (i.e., D:\ColdFusion9\logs\currency.log).
10. Click Submit.

Additional Scripts Required for Backwards Compatibility

Lawtrac uses certain scripts that Coldfusion no longer comes packaged with but does provide for applications. You must download the YUI libraries from Adobe and place them here:

• [cfusion root]\cfscripts\scripts\ajax\yui
• [cfusion root]\cfscripts\scripts\ajax\resources\yui

The files and additional instructions are located at: 
https://helpx.adobe.com/coldfusion/deprecated-features.html

Support