---
schema_version: "1"
id: b8bdc6562b5eed2f54fcc4a37a38edf87e4758ef21d3b9a09c5b60b7e930eb7b
title: Digital Commerce Server SDK Installation
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/industries/cme/guides/comms-t-server-sdk-installation.md
canonical_url: https://developer.salesforce.com/docs/industries/cme/guide/comms-t-server-sdk-installation.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: 9b2fcd33c43afa3ab5311dc909944b41308d2e5e9afaefcee7db4d8bc6acec24
products:
  - Communications, Media, Energy and Utilities APIs (Managed Package)
  - Industries Developer Documentation
---
# Digital Commerce Server SDK Installation

After running the steps in this topic, you can host or deploy the ServerSDK to a Node.js server, or you can run ServerSDK in local mode.

1.  Navigate to the [Salesforce Industries Process Library](https://github.com/Salesforce-Industries-Process-Library/Industries-CPQ/tree/samples) and download the serverSDK reference app zip file.

2.  Unzip the folder and add it to your IDE.

    Navigate to `vop_server_sdk/secure-server-reference-app`; this will be the root folder.

3.  Set up the org.

    ServerSDK uses OAuth 2.0 JSON Web Token (JWT) bearer flow to authenticate the server. Therefore, you must generate a public/private key pair and create a Connected App. See [https://github.com/lekkimworld/salesforce-jwt-generator](https://github.com/lekkimworld/salesforce-jwt-generator).

    1.  Generate a public/private key pair.

        Generate a public/private key pair using `openssl` and fill in the required information when you generate the certificate, as shown here:

        ```nolang
        openssl req -newkey rsa:2048 -nodes -keyout private_key.pem -x509 -days 365 -out certificate.pem
        openssl x509 -outform der -in certificate.pem -out public_key.der
        openssl x509 -in certificate.pem -pubkey > public_key.pem
        ```

    2.  Create connected APP and upload the CER (certificate) file to SFDC.

        In Salesforce, create a Connected App using the App Manager in Setup and upload the public key (public_key.cer) to the app. Be sure to select the offline_access scope as well as other required scopes. Save the Connected App and make a note of the consumer key (issuer_id).

4.  Configure Authentication

    The ServerSDK application has an authentication layer which is responsible for validating a user identity against an authentication server such as Firebase, Cognito and so on. A reference implementation using Firebase as an authentication strategy has been used in the app by default. However, you may easily swap Firebase for any other third-party authentication system by creating a custom authentication strategy.

    - Create a folder in the `vop_server_sdk/secure-server-reference-app/authentication/strategies` directory. In the folder, create a file and Implement the IAuthenticationStrategy interface. The implementing class should define the properties with the corresponding method of the third-party authentication system. For example, the implementation of sign-In method should have the sign-In logic of the third-party authentication system you want to use.

    - After you have created your custom authentication strategy, open the `AuthenticationStrategy.ts` file and import your customize strategy and initialize it inside the constructor.

5.  Set up the `config.json` file.

    Locate the `config.json` file in `vop_server_sdk/secure-server-reference-app/config.json`

    ![Server SDK Installation](https://developer.salesforce.com/docs/media/sdk_config_json.png)

    1.  Enter the consumer key (issuer_id) that you noted in step 2.

    2.  In the org Id field, enter the username of the salesforce user.org namespace.

    3.  In the org.namespace field, enter the SF org namespace.

6.  Configure the `sdkConfig.ts` file.

    Locate the `sdkConfig.ts` file located in `vop_server_sdk/secure-server-reference-app/sdkConfig.ts`.

    Make the following changes in the section indicated:

    _strategyConfig_ - If you are using Firebase as the authentication server then set a strategyConfig object.

    _jwtConfig_ - Paste the `private_key.pem` and `public_key.pem` files generated from step2 in vop_server_sdk/secure-server-reference-app/certificates folder for JWT sign

    _remoteSite_ - For anonymous users, the URL is an anonymous URL of the org and namespace will be the org namespace.

    _allowlist_ - When you are requesting from a CORS domain, you must specify the domain here.

    ![Server SDK Installation - Configure](https://developer.salesforce.com/docs/media/sdk_sdkconfig.png)

7.  Configure the `package.json` file.

    In the `vop_server_sdk/secure-server-reference-app/package.json` file, under the dependencies object, update SDKs with version 109, as shown here:

    ![Server SDK Installation - configure package JSON](https://developer.salesforce.com/docs/media/sdk_109_version.png)

    **note:** Ensure that you add the `.npmrc` file. The `.npmrc` file is required to authenticate with the Vlocity private npm registry. For public access, use the default access token.