Customize installation and runtime properties to match your environment. Edit the appropriate properties files in the Infogix/config/<myConfigName> directory before running deployment scripts; see each section below for details.
Overview
Some property values are populated automatically during deployment; you do not need to edit
properties that begin with $. For general guidance on property formats and
encryption, see the Properties Guide. If you want to encrypt property values, we
recommend running the encryption script after deployment for easier debugging. See Encrypt
Passwords.
Application server properties
The deployment script references application server properties. Before running the script:
-
Open
<install_folder>/Infogix/config/<myConfigName> - Edit
appserver.propertiesto match your environment. - Use a single forward slash (
/) as the file separator. - Do not edit
appserver.advance.propertiesunless Customer Support instructs you to do so.
Before running the deployment script, configure OKTA as a prerequisite:
-
OKTA setup
- Add callback URLs to the OKTA Admin Console.
-
Provide the OKTA certificate at:
<liberty-install>/usr/servers/<server-name>/resources/security/
-
Update properties
Add the following properties inappserver.properties:# Enable OKTA Authentication ENABLE_OKTA_AUTH=true # OKTA Client ID OKTA_CLIENT_ID=<your-client-id> # OKTA Client Secret OKTA_CLIENT_SECRET=<your-client-secret> # OKTA Discovery Endpoint URL OKTA_DISCOVERY_ENDPOINT_URL=https://your-domain.okta.com/oauth2/default/.well-known/openid-configuration # OKTA Signature Algorithm OKTA_SIGNATURE_ALGORITHM=RS256 # Require HTTPS for OKTA OKTA_HTTPS_REQUIRED=true # OKTA User Identifier Claim OKTA_USER_IDENTIFIER=email # OKTA Scope OKTA_SCOPE=openid profile email # OKTA Truststore Settings OKTA_TRUSTSTORE_FILENAME=oktaTrust.jks OKTA_TRUSTSTORE_TYPE=JKS OKTA_TRUSTSTORE_PASSWORD=changeit
ENABLE_OKTA_AUTH=true. Place the
truststore file in /resources/security/. After configuring OKTA, proceed with the standard product installation process on Liberty.
LDAP Signing and Kerberos settings
appserver.properties and
appserver.advance.properties:
# Enable LDAP Signing
ENABLE_LDAP_SIGNING=true
# Kerberos Principal (replace with actual values)
KERBEROS_PRINCIPAL=HTTP/your-hostname@YOUR.REALM
# Kerberos Keytab File Path
KERBEROS_KEYTAB=/path/to/yourfile.keytab
# Kerberos Configuration File Path
- For Liberty: Place the keytab and configuration file in:
${server.config.dir}/resources/security/→<liberty-install>/usr/servers/<server-name> - WildFly: Ensure the files are accessible by the WildFly server.
Configure WildFly ports
This applies only to WildFly deployments. WildFly selects port sets using the port offset property (for example, WILDFLY.1.PORT_OFFSET). The table shows the typical HTTP/HTTPS ports for each offset.
| WildFly PORT_OFFSET | HTTP | HTTPS |
|---|---|---|
| 0 | 8080 | 8443 |
| 100 | 8180 | 8543 |
| 200 | 8280 | 8643 |
| 300 | 8380 | 8743 |
| 400 | 8480 | 8843 |
| 500 | 8580 | 8943 |
For WildFly port configuration instructions, see the Configure WildFly ports section in the Properties Guide.
Database properties
The database installation scripts reference a database properties file. Work with your DBA to obtain the required values and configure the file for each product you install.
- Open
<install_folder>/Infogix/config/<myConfigName>/<product>. - Edit
database.properties. Do not editdatabase.advanced.propertiesunless Customer Support advises you to do so.
Embedded security directory
For single-application deployments, embedded security settings are taken from the database properties file. If two or more Precisely applications share the embedded directory, configure the shared embedded directory using embedded.directory.properties. Configure this directory once per JVM.
- Open
<install_folder>/Infogix/config/<myConfigName>. - Edit
embedded.directory.propertiesto match your directory schema.
For shared embedded-security deployments, see Shared Embedded Security.
LDAP security directory (authentication)
If you use an enterprise LDAP directory for authentication, configure the application to use it so users can sign in with their directory credentials. Edit security.directory.properties to match your LDAP schema. If your LDAP server uses a self-signed certificate and SSL is enabled, import the certificate into a keystore.
- Open
<install_folder>/Infogix/config/<myConfigName>. - Edit
security.directory.properties. - Import any self-signed certificates into the keystore if SSL is enabled.
LDAP Signing configuration for WildFly and Liberty
Use this procedure if your environment requires LDAP signing and Kerberos authentication for enhanced security.
Before you begin, confirm the following configurations are in place:
-
Active Directory Server Setup
-
Enable LDAP Signing
Configure LDAP signing on your Active Directory (AD) server. For detailed steps, see Microsoft’s guide:
-
Create Kerberos Service Principal and Keytab
Generate a Kerberos service principal and a keytab file for your application server. For instructions, see:
-
Configure Kerberos (krb5.conf)
Set up the Kerberos configuration file with your AD realm and KDC settings. Refer to:
-
-
Browser Configuration
Configure your browser to support Kerberos/SPNEGO authentication. For details, see:
Important: These steps must be carried out by your IT team or Active Directory (AD) administrators in accordance with your organization's security policies.
LDAP user information directory
To store user metadata (for example, email addresses) in an enterprise LDAP directory, configure userinfo.directory.properties. If you prefer embedded directories for user info, leave the user-info directory property pointed at the embedded directory in the application server properties.
- Open
<install_folder>/Infogix/config/<myConfigName>. - Edit
userinfo.directory.propertiesto match your LDAP schema. - Import self-signed certificates into a keystore if SSL is enabled.
External data sources (WildFly)
For WildFly deployments, external data sources are created from datasources.properties. Assure DQ and Perceive use these properties. You can define multiple external data sources; provide a separate properties set for each.
- Open
<install_folder>/Infogix/config/<myConfigName>/<product>. - Edit
datasources.propertiesfor each external data source.
Product-specific properties
Edit product-specific properties (role mappings and other settings) before running the deployment script.
- Open
<install_folder>/Infogix/config/<myConfigName>/<product>. - Edit the product properties file:
- Assure DQ —
IA.properties - ER —
ER.properties - Insight —
II.properties - Perceive —
IV.properties
- Assure DQ —
If you install multiple applications that must integrate, see the product integration procedures. If you use externalized queues on WebSphere, see Externalize Queues on WebSphere.
Adding external data sources in Liberty
For Liberty, define external Oracle and SQL Server data sources in external_datasource.xml inside the Liberty server instance configuration folder (for example, <path-to-liberty-server>/wlp/usr/servers/<your-server>/configuration/). The template contains placeholders for variables you must update with JNDI details.
- Locate the template
external_datasource.xmlin your distribution or documentation. - Edit the template: update JNDI names, driver paths, credentials, database host, port, and database name.
- Save the file and restart the Liberty server to apply the configuration.
external_datasource.xml file is removed by the clean command. Keep a backup copy and restore it after each clean operation if needed.Sample external_datasource.xml (template)
<server>
<!-- Oracle DataSource 1 Configuration -->
<variable name="oracle1.user" value=""/>
<variable name="oracle1.password" value=""/>
<variable name="oracle1.databaseName" value=""/>
<variable name="oracle1.serverName" value=""/>
<variable name="oracle1.portNumber" value=""/>
<variable name="oracle1.driver.path" value=""/>
<variable name="oracle1.jndiName" value=""/>
<authData id="INFOGIXDSAuthID1" password="${oracle1.password}" user="${oracle1.user}"/>
<jdbcDriver id="INFOGIXDSJDBCID1">
<library>
<file name="${oracle1.driver.path}"/>
</library>
</jdbcDriver>
<dataSource containerAuthDataRef="INFOGIXDSAuthID1" id="oracle1.id" jdbcDriverRef="INFOGIXDSJDBCID1" jndiName="${oracle1.jndiName}">
<properties.oracle databaseName="${oracle1.databaseName}" serverName="${oracle1.serverName}" portNumber="${oracle1.portNumber}"/>
<connectionManager connectionTimeout="180" enableContainerAuthForDirectLookups="true" maxPoolSize="100" minPoolSize="1"/>
</dataSource>
<!-- SQL Server DataSource 1 Configuration -->
<variable name="sqlserver1.user" value=""/>
<variable name="sqlserver1.password" value=""/>
<variable name="sqlserver1.databaseName" value=""/>
<variable name="sqlserver1.serverName" value=""/>
<variable name="sqlserver1.portNumber" value=""/>
<variable name="sqlserver1.driver.path" value=""/>
<variable name="sqlserver1.jndiName" value=""/>
<authData id="INFOGIXDSAuthID2" password="${sqlserver1.password}" user="${sqlserver1.user}"/>
<jdbcDriver id="INFOGIXDSJDBCID2">
<library>
<file name="${sqlserver1.driver.path}"/>
</library>
</jdbcDriver>
<dataSource containerAuthDataRef="INFOGIXDSAuthID2" id="sqlserver1.id" jdbcDriverRef="INFOGIXDSJDBCID2" jndiName="${sqlserver1.jndiName}">
<properties.microsoft.sqlserver databaseName="${sqlserver1.databaseName}" serverName="${sqlserver1.serverName}" portNumber="${sqlserver1.portNumber}"/>
<connectionManager connectionTimeout="180" enableContainerAuthForDirectLookups="true" maxPoolSize="100" minPoolSize="1"/>
</dataSource>
</server>
value attributes for each <variable> element with your database connection details.Data-source variable reference
Oracle DataSource variables
oracle1.user: Oracle database usernameoracle1.password: Oracle database passwordoracle1.databaseName: Oracle database nameoracle1.serverName: Oracle host or IPoracle1.portNumber: Oracle listener portoracle1.driver.path: Path to Oracle JDBC driver JARoracle1.jndiName: JNDI name for the Oracle data source
SQL Server DataSource variables
sqlserver1.user: SQL Server usernamesqlserver1.password: SQL Server passwordsqlserver1.databaseName: SQL Server database namesqlserver1.serverName: SQL Server host or IPsqlserver1.portNumber: SQL Server portsqlserver1.driver.path: Path to SQL Server JDBC driver JARsqlserver1.jndiName: JNDI name for the SQL Server data source
Operational notes
- Keep backups of edited properties and any Liberty external_datasource.xml files that the clean command may remove.
- After editing properties, restart the affected servers (application server or Liberty) where required to apply changes.
- If you encrypt passwords, keep an unencrypted backup until you confirm the encrypted values work in environment.