Stat 6.2 - Install Notes

Tchater maintenant avec le support

Update the System Maintenance table Install the Stat Central Agent

Installing the Stat Central Agent Configuring the Stat Central Agent

Before starting the Stat Central Agent Resolving port and firewall conflicts Stopping the Stat Central Agent Configuring the Stat Central Agent as a Windows service Installing DB2 Support for the Stat Central Agent Configure the Stat Central Agent character map Setting up support for AES256 Ciphers for SFTP Configure Web Client to use HTTPS Connection pool idle time Installing multiple servers on one host computer

Testing Database and Server Connections

Install the Stat Oracle Agent (Oracle E- Business Suite only)

Configuration Administration Dynamically changing log level Stat Oracle Agent version Custom products and file locations Object compare support for form library files Base directory codes Verifying the Stat Oracle Agent

Configure the SYSTEM user account Update the PS Object Mover Instructions (PeopleSoft Only) Implement Stat

Configure the Stat Central Agent character map

The Stat® Central Agent defaults to a character map of ISO-8859-1, which is compatible with sites that are upgrading from older versions of Stat. If desirable, the agent can be configured to use UTF-8.

If the Stat Central Agent is running on Windows®:

Open <STAT_HOME>\app\bin\standalone.conf.bat.

Locate the following:

set "JAVA_OPTS=-Xms64M -Xmx512M -XX:MaxPermSize=256M -Dstat.home="%STAT_HOME%" -Dstat.server.config.file=%SERVER_CONFIG% -Djboss.socket.binding.port-offset=0 -Dmail.mime.charset=ISO-8859-1 -Duser.language=en -Duser.region=US -Dcom.microsoft.tfs.jni.native.base-directory="%STAT_HOME%/tfs-native-dlls" -Doracle.jdbc.V8Compatible=true"

At the end of the line and included inside the final quote mark, add:

-Dweb.charset=UTF-8

The final edit will look like this:

Restart the Stat Central Agent.

If the Stat Central Agent is running on UNIX®:

Open <STAT_HOME>/app/bin/standalone.conf.

Locate the following:

JAVA_OPTS="-Xms64m -Xmx512m -XX:MaxPermSize=256m -Djava.net.preferIPv4Stack=true -Djava.net.preferIPv4Stack=true -Dstat.home=$STAT_HOME -Dstat.server.config.file=$SERVER_CONFIG -Djboss.socket.binding.port-offset=0 -Dmail.mime.charset=ISO-8859-1 -Duser.language=en -Duser.region=US -Dcom.microsoft.tfs.jni.native.base-directory=$STAT_HOME/tfs-native-dlls -Doracle.jdbc.V8Compatible=true"

At the end of the line and included inside the final quote mark, add:

Add -Dweb.charset=UTF-8

The final edit will look like this:

Restart the Stat Central Agent.

Setting up support for AES256 Ciphers for SFTP

The configuration of your SSH server determines which ciphers are used when connecting to the Stat® Central Agent. The Stat Central Agent currently supports the following cipher configurations:

•

•

•

•

•

To configure J2SE 1.8 to support AES256, you need to download and apply the Java® Cryptography Extension (JCE). To do this:

Go to the following url: http://www.oracle.com/technetwork/java/javase/downloads/index.html

Download the Java Cryptography Extension (JCE), which is contained in the appropriate zip file (jce_policy-8.zip) to a temp folder and unzip the file.

Browse to the JAVA_HOME/jre/lib/security directory under your installation of JAVA_HOME.

Rename local_policy.jar to local_policy.jar.strong.

Rename US_export_policy.jar to US_export_policy.jar.strong.

Go to the temp folder where you unzipped the jce_policy file and copy local_policy.jar and US_export_policy.jar.

Paste both files into the JAVA_HOME/jre/lib/security folder.

Configure Web Client to use HTTPS

To configure Web Client to use HTTPS:

Ensure the agent is shut down.

Delete <STAT_HOME>/app/standalone/tmp and <STAT_HOME>/app/standalone/data if one exists.

Obtain a keystore with a self-signed certificate from your security group or build it yourself, if authorized.

You need to know the keystore file name and the password that opens it.

Once you have the keystore, move it to <STAT_HOME>/ app/standalone/configuration.

Go to <STAT_HOME>/ app/ standalone/standalone-full-https.xml to point to your keystore.

Look for this block in the file:

<security-realm name="SslRealm">

<server-identities>

<ssl>

<keystore path="keystore.jks"

relative-to="jboss.server.config.dir"

keystore-password="changeme"/>

</ssl>

</server-identities>

</security-realm>

Modify the keystore.jks with the name of your keystore and modify the keystore-password with the password for your keystore.

Go to the <STAT_HOME>/app/bin directory and locate the standalone.conf.bat (for Unix, standalone.conf) file.

Uncomment the JAVA_HOME statement and point it to your Java Home location.

Uncomment the STAT_HOME statement and point it to your Stat Home.

Locate the SERVER_CONFIG variable and uncomment one of the following 2 lines:

For http, uncomment the line: SERVER_CONFIG=standalone-full.xml. Make sure the line SERVER_CONFIG=standalone-full-https.xml is commented out.

For https, uncomment the line: SERVER_CONFIG=standalone-full-https.xml. Make sure the line SERVER_CONFIG=standalone-full.xml is commented out.

Keep in mind that if you had already configured a datasource for the agent using http configuration, you need to define the database again for the https configuration file. In this case, when you start the agent, you may receive some errors, but you are still able to enter the datasource information using the https://<agent_hostname>:port/stat-config URL. Once the datasource is saved, you need to restart the agent again.

At this point users can login as https://servername:8443 if the port from the agent is zero.

Additional Steps for Oracle EBusiness customers:

After configuring the Stat Central agent to run in https mode, http protocol is completely removed from the Wildfly configuration file. This means that the messaging protocol used between the Stat Central agent and all Stat Oracle Agents must use secure messaging over https. This means that the certificate stored in your keystore file must be imported into the JAVA_HOME installation of your Stat Oracle Agents.

On your Oracle Ebusiness machine, go to the <STAT_JAVA_HOME>/jre/lib/security directory.

Import your certificate into your jssecacerts file. (If file does not exist, you can create it.) One way to do this is by using the java keytool command.

keytool -import -keystore jssecacerts -file mycert.cert -alias stat_https_client –trustcacerts

Finally you need to tell the Stat Oracle Agent to use https protocol for its communications. Edit the <STAT_HOME>/conf/stat.conf file and uncomment the following property:

stat.central_agent.protocol:https

Connection pool idle time

This feature allows the site to define the length of time before the Stat® Central Agent connection pool times out database connections. The default is 15 minutes. However, Java® could take up to 2x as long to actually disconnect from the environment.

Open <STAT_HOME>/config/stat.properties.

Locate the parameter CONNECTION_IDLE_TIME=15 and modify the time.

Stop and restart the agent.