Configure DAM to Use Azure Blob - Precisely_EnterWorks - EnterWorks - 11.0

EnterWorks Guide

Product type
Software
Portfolio
Verify
Product family
EnterWorks
Product
Precisely EnterWorks
Precisely EnterWorks > EnterWorks
Version
11.0
Language
English
Product name
Precisely EnterWorks
Title
EnterWorks Guide
Copyright
2024
First publish date
2007
Last updated
2025-01-07
Published on
2025-01-07T07:44:20.997000

Before you configure DAM to use Azure Blob, you need:

  • Azure Account subscription: This allows the user to set up and manipulate different Azure infrastructures such as security, monitoring systems, blobs, and containers.

  • Azure storage account name: The name of the account needed to establish connection.

  • Azure storage account key: The secret key needed to establish connection.

  • Blob container: A public or private place holder for all blobs and files.

The following variables are used in this section to describe the configuration parameters for Azure Blob. Replace them with your values.

  • <azBlobStorageAccount>: The name of the Blob Storage Account.

  • <azBlobAccessKey>: The key for accessing Azure Blob.

  • <azBlobContainerName>: The name of the container in which DAM is to be stored.

  • <azBlobDAMRootFolder>: The name of the folder in the designated container, for example: DAMRoot.

To configure EnterWorks to use Azure Blob:

  1. Stop EnterWorks services on all servers.
  2. Back up EnterWorks system folders. On any server that has at least one of the following folders:
    • <drive>:\Enterworks\EnableServer

    • <drive>:\Enterworks\enable2020

    • <drive>:\Enterworks\Utilities

    run the following script as an administrator:

    
                <drive>:\Enterworks\bin\BackupForDeployment.bat

    For more information, see Back Up EnterWorks Folders by Script.

  3. Open the DamConfig repository and set:
    DamAssetURL
    to:
    https://<azBlobStorageAccount>.blob.core.windows.net/<azBlobContainerName>
  4. Open the DamVariant repository and set:
    OutputPath
    to:
    
                <azBlobDAMRootFolder>/<VariantName>
  5. Configure the DAMReportUtility utility:
    1. Open for editing:
      <drive>:\Enterworks\Utilities\DAMReportUtility\DAMReportUtility-config.json
    2. Find the settings for non-local DAM storage:
      "awsBucketName": "@AWS_Bucket_Folder@",
      "awsDAMRootFolder": "@AWS_DAM Root_Folder@",
      "awsAccessKeyId": "@AWS_Access_Key_Id@",
      "awsAccessKey": "@AWS_Access_Key@",
      "awsRegion": "@AWS_Region@",
      "awsMode": "@AWS_IAM@",
      "azBlobStorageAccount": "@AZURE_BLOB_ACCOUNT_NAME@",
      "azBlobURL": "@OPTIONAL, FORMAT=https://<azBlobStorageAccount>.blob.core.windows.net/<azBlobContainerName>@",
      "azBlobAccessKey": "@AZURE_BLOB_ACCESS_KEY@",
      "azBlobContainerName": "AZURE_BLOB_CONTAINER_NAME",
      "azBlobDAMRootFolder": "@DAMROOT-FOLDER@"
    3. DAM can only be configured for one non-local storage at a time. If they are not already commented out, comment out the non-local settings that do not begin with azBlob.
    4. Uncomment out or add the following keys and specify their values:
      "azBlobStorageAccount": "<azBlobStorageAccount>",
      "azBlobURL": "@OPTIONAL, FORMAT=https://<azBlobStorageAccount>.blob.core.windows.net/<azBlobContainerName>@",
      "azBlobAccessKey": "",
      "azBlobContainerName": "<azBlobContainerName>",
      "azBlobDAMRootFolder": "<azBlobDAMRootFolder>",
    5. If "encryptedMode": "true" the DAMReport Utility is encrypted.
      1. Use EnterWorks encryption to encrypt <azBlobAccessKey>.
      2. Set:
        "azBlobAccessKey":"<encrypted-azBlobAccessKey>",
    6. Else, "encryptedMode": "false". The utility is not encrypted.

      Set:

      "azBlobAccessKey": "<azBlobAccessKey>",
    7. Save and exit the file.
  6. Update the shared configuration properties:
    1. Find the non-local DAM storage settings:
      ####################################################################### 
      # Amazon S3 web service support
      #######################################################################
      #amazon.s3.AWSBucketName= 
      #amazon.s3.AWSDAMRootFolder=
      #amazon.s3.isRoleBasedAuth= 
      #If S3 role based authentication is false add these additional keys: 
      #amazon.s3.AWSAccessKey= 
      #amazon.s3.AWSSecretKey=
      #amazon.s3.AWSRegion=
      ####################################################################### 
      # Azure Blob Storage support
      #######################################################################
      #Azure.Blob.AzBlobStorageAccount= 
      #Azure.Blob.AzBlobAccessKey=
      #Azure.Blob.AzBlobContainerName= 
      #Azure.Blob.AzBlobDAMRootFolder=
      #Azure.Blob.UseHttps=
    2. EnterWorks can only be configured for one type of non-local storage at a time. Comment out any non-local storage settings that do not begin with Azure.Blob.
    3. Set the following values:
      Azure.Blob.AzBlobStorageAccount=<azBlobStorageAccount>
      Azure.Blob.AzBlobAccessKey=<azBlobAccessKey>
      Azure.Blob.AzBlobContainerName=<azBlobContainerName>
      Azure.Blob.AzBlobDAMRootFolder=<azBlobDAMRootFolder>
      Azure.Blob.UseHttps=true
    4. Find dam.use.asset.url and set it to false.
      dam.use.asset.url=false
  7. Set Azure Blob configuration parameters for enable-dam-manager-service:
    1. Open enable-dam-manager-service's create script in an editor:
      <install-drive>:\Enterworks\enable2020\services\install\create-enable-dam-manager-service
    2. Find the non-local DAM settings:
      rem -azBlobStorageAccount= ^
      rem -azBlobAccessKey= ^
      rem -azBlobContainerName= ^
      rem -azBlobDAMRootFolder= ^
      
      rem -awsBucketName=  ^
      rem -awsDAMRootFolder=  ^
      rem -awsAccessKeyId=  ^
      rem -awsAccessKey=  ^
      rem -awsRegion=  ^
      rem -awsMode=  ^
      rem -awsS3PublicRead= ^
    3. DAM can only be configured for one non-local storage at a time. Comment out the non-local storage settings do not begin with azBlob.
    4. Set the following settings. If they don't exist, add them.
      -azBlobStorageAccount=<azBlobStorageAccount> ^
      -azBlobContainerName=<azBlobContainerName> ^
      -azBlobDAMRootFolder=<azBlobDAMRootFolder> ^
    5. If the create-file's -encryptedMode=true, the microservice is encrypted.
      1. Use EnterWorks encryption to encrypt <azBlobAccessKey>.
      2. Set:
        -azBlobAccessKey=<encrypted-azBlobAccessKey> ^
    6. Else the create-file's -encryptedMode=false and the microservice is not encrypted. Do not encrypt <azBlobAccessKey>. Set:

      -azBlobAccessKey=<azBlobAccessKey> ^
    7. Save and exit the file.
    8. Use the create-enable-dam-manager-service.cmd script.
  8. In order for your changes to take effect, you need to Restart EnterWorks Services.
  9. Perform DAM Operational Verification.