Forums » Interstage BPM Analytics Knowledgebase Articles

• Yuuki Tada

  

  • 4 posts
   

  August 31, 2011 8:59:00 AM PDT

  Analytics Version: V11.1
  
  Problem Description:
  
  Analytics Server and Analytics Studio need to configure SSL settings when running on SSL environment.  If Analytics components were not enabled SSL on the SSL environment, Analytics Management Console cannot authenticate users.
  
  Solution:
  
  Before enable SSL,
  1. Go to Analytics Management Console > IBPM Analytics -> Server Management -> BPM Analytics Server page and click on Connection tab.
  Then, change the URL from http://<servername>:<port> to https://<servername>:<port>
  Press Modify button.
  
  
  2. Go to IBPM Analytics -> Sensor Management -> <Sensor Name> page
  and change Sensor URL from http://<servername>:<port> to https://<servername>:<port>
  Press Modify button.
  
  
  3. Stop Analytics Server and Analytics Studio
  
  4. Change (or Add) the property 'isEnableSSL' to 'true' in the following files:
    a. <Interstage Analytics deployed folder or ibpmm.war>/conf/RepClientConfig.properties
    b. (If Analytics Studio plugin is installed on BPM Studio)
      InterstageBPM_studio/bin/plugins/com.fujitsu.bpm.designer_11.1.0/conf/RepClientConfig.properties
    c. (If Analytics Studio plugin is installed on eclipse)
      eclipse/plugins/com.fujitsu.bpm.designer_11.1.0/conf/RepClientConfig.properties
  
  5. Enable SSL for both Analytics' application server and Analytics Studio
  
  For example,
    a. Set JRE/bin path to PATH environment variable
  
    For Analytics Server,
    b. Open Command Prompt and go to <JBoss Installation Folder>/server/default/conf
    c. keytool -genkey -alias jbosskey -key pass changeit -keyalg RSA -keystore server.keystore
        And answer questions.  *Please make sure to use HOSTNAME when asked first/last name.
    d. keytool -export -alias jbosskey -keypass changeit -file server.crt -keystore server.keystore
    e. keytool -import -alias jbosscert -keypass changeit -file server.crt -keystore server.keystore
  
    For Analytics Studio,
    f. Make sure which JRE eclipse/BPM Studio using by opening Help -> About Eclipse SDK -> Configuration Details and confirm 'java.home' property
    g. Go to 'java.home'/lib/security
    h. Copy server.crt to current folder
    i. keytool -import -alias jbosscert -keypass changeit -file server.crt -keystore cacert
  
    JBoss settings,
    j. Open server.xml located in <JBoss Installation Folder>/server/default/deploy/ibossweb.sar/
    k. Uncomment SSL/TLS Connector configuration settings and update each parameters properly
    l. Open <JBoss Installation Folder>binrun.conf.bat with text editor
    m. Add SET "JAVA_OPTS=%JAVA_OPTS% -Djavax.net.ssl.trustStore=<JBoss Installation Folder>serverdefaultconfserver.keystore" before the line ':JAVA_OPTS_SET'
  
  6. Restart Analytics Server and Analytics Studio
  
  Last reviewed: 08/31/2011
  
  
  
  
  

  Author: yuukitada
  Attachment: sensorssl.jpg
  serverssl.jpg