Chat now with support
Chat with Support

Stat 7.0 - Upgrade Notes

Configuring the Stat Central Agent character map

The Stat® Central Agent defaults to a character map of ISO-8859-1, which is compatible with sites that are upgrading from older versions of Stat. If desirable, the agent can be configured to use UTF-8.

If the Stat Central Agent is running on Windows:
1
Open <STAT_HOME>\app\bin\standalone.conf.bat.
2
Locate the following:
set "JAVA_OPTS=%JAVA_OPTS% -Dstat.home="%STAT_HOME%" -Dstat.server.config.file=%SERVER_CONFIG% -Djboss.socket.binding.port-offset=0 -Dmail.mime.charset=ISO-8859-1 -Duser.language=en -Duser.region=US -Dcom.microsoft.tfs.jni.native.base-directory="%STAT_HOME%/tfs-native-dlls" -Doracle.jdbc.V8Compatible=true -Djava.security.properties=%STAT_HOME%\app\standalone\configuration\stat.java.security.properties"
3
At the end of the line and included inside the final quote mark, add:
-Dweb.charset=UTF-8
The final edit will look like this:
set "JAVA_OPTS=%JAVA_OPTS% -Dstat.home="%STAT_HOME%" -Dstat.server.config.file=%SERVER_CONFIG% -Djboss.socket.binding.port-offset=0 -Dmail.mime.charset=ISO-8859-1 -Duser.language=en -Duser.region=US -Dcom.microsoft.tfs.jni.native.base-directory="%STAT_HOME%/tfs-native-dlls" -Doracle.jdbc.V8Compatible=true -Djava.security.properties=%STAT_HOME%\app\standalone\configuration\stat.java.security.properties -Dweb.charset=UTF-8"
4
Restart the Stat Central Agent.
If the Stat Central Agent is running on Unix®:
1
Open <STAT_HOME>/app/bin/standalone.conf.
2
Locate the following:
JAVA_OPTS="$JAVA_OPTS -Dstat.home=$STAT_HOME -Dstat.server.config.file=$SERVER_CONFIG -Djboss.socket.binding.port-offset=0 -Dmail.mime.charset=ISO-8859-1 -Duser.language=en -Duser.region=US -Dcom.microsoft.tfs.jni.native.base-directory=$STAT_HOME/tfs-native-dlls -Doracle.jdbc.V8Compatible=true -Djava.security.properties=$STAT_HOME/app/standalone/configuration/stat.java.security.properties"
3
At the end of the line and included inside the final quote mark, add:
Add -Dweb.charset=UTF-8
The final edit will look like this:
JAVA_OPTS="$JAVA_OPTS -Dstat.home=$STAT_HOME -Dstat.server.config.file=$SERVER_CONFIG -Djboss.socket.binding.port-offset=0 -Dmail.mime.charset=ISO-8859-1 -Duser.language=en -Duser.region=US -Dcom.microsoft.tfs.jni.native.base-directory=$STAT_HOME/tfs-native-dlls -Doracle.jdbc.V8Compatible=true -Djava.security.properties=$STAT_HOME/app/standalone/configuration/stat.java.security.properties -Dweb.charset=UTF-8"
4
Restart the Stat Central Agent.

Setting up support for AES256 ciphers for SFTP

The configuration of your SSH server determines which ciphers are used when connecting to the Stat™ Central Agent. The Stat Central Agent currently supports the following cipher configurations:

•
Blowfish
•
Triple DES
•
AES128
•
AES192
•
AES256

To configure J2SE 1.8 to support AES256, you need to download and apply the Java® Cryptography Extension (JCE).

To download and apply the Java Cryptography Extension (JCE):
* 
NOTE: As JDK 9 and later offers the stronger cryptographic algorithms by default, you can skip the following steps if you are using JDK 9 or above.
1
Go to the following url: http://www.oracle.com/technetwork/java/javase/downloads/index.html
2
Download the Java Cryptography Extension (JCE), which is contained in the appropriate zip file (jce_policy-8.zip) to a temp folder and unzip the file.
3
Browse to the JAVA_HOME/jre/lib/security directory under your installation of JAVA_HOME.
4
Rename local_policy.jar to local_policy.jar.strong.
5
Rename US_export_policy.jar to US_export_policy.jar.strong.
6
Go to the temp folder where you unzipped the jce_policy file and copy local_policy.jar and US_export_policy.jar.
7
Paste both files into the JAVA_HOME/jre/lib/security folder.

Configuring the Web Client to use HTTPS

To configure the Web Client to use HTTPS:
1
Ensure the agent is shut down.
2
Delete /app/standalone/tmp and /app/standalone/data if one exists.
3
Obtain a keystore with a self-signed certificate from your security group or build it yourself, if authorized.
You need to know the keystore file name and the password that opens it.
4
Once you have the keystore, move it to <STAT_HOME>/ app/standalone/configuration.
5
Go to <STAT_HOME>/ app/ standalone/standalone-full-https.xml to point to your keystore.
Look for this block in the file:
<key-store name="StatSSLKeyStore">
<credential-reference clear-text="keystorepassword"/>
<implementation type="JKS"/>
<file path=" keystore.jks" relative-to="jboss.server.config.dir"/>
</key-store>
6
Modify the keystore.jks with the name of your keystore and modify the keystore-password with the password for your keystore.
7
Search for this block in <STAT_HOME>/app/standalone/standalone-full-https.xml
<key-manager key-store="StatSSLKeyStore" name="StatSSLKeyManager">
<credential-reference clear-text=" keystorepassword"/>
</key-manager>
8
Modify the keystore-password with the password for your keystore.
9
Go to the <STAT_HOME>/app/bin directory and locate the run.bat (for Unix, run.sh) file.
a
Uncomment the JAVA_HOME statement and point it to your Java Home location.
b
Uncomment the STAT_HOME statement and point it to your Stat Home.
c
Locate the SERVER_CONFIG variable and uncomment one of the following 2 lines:
•
For http, uncomment the line: SERVER_CONFIG=standalone-full.xml. Make sure the line SERVER_CONFIG=standalone-full-https.xml is commented out.
•
For https, uncomment the line: SERVER_CONFIG=standalone-full-https.xml. Make sure the line SERVER_CONFIG=standalone-full.xml is commented out.
10
Keep in mind that if you had already configured a datasource for the agent using http configuration, you need to define the database again for the https configuration file. In this case, when you start the agent, you may receive some errors, but you are still able to enter the datasource information using the https://<agent_hostname>:port/stat-config URL. Once the datasource is saved, you need to restart the agent again.
11
At this point users can login as https://servername:8443 if the port from the agent is zero.
Additional Steps for Oracle EBusiness customers:

After configuring the Stat Central agent to run in https mode, http protocol is completely removed from the Wildfly configuration file. This means that the messaging protocol used between the Stat Central agent and all Stat Oracle Agents must use secure messaging over https. This means that the certificate stored in your keystore file must be imported into the JAVA_HOME installation of your Stat Oracle Agents.

1
On your Oracle Ebusiness machine, go to the <STAT_JAVA_HOME>/jre/lib/security directory.
2
Import your certificate into your jssecacerts file. (If file does not exist, you can create it.) One way to do this is by using the java keytool command.
keytool -import -keystore jssecacerts -file mycert.cert -alias stat_https_client –trustcacerts
3
Finally you need to tell the Stat Oracle Agent to use https protocol for its communications. Edit the <STAT_HOME>/conf/stat.conf file and uncomment the following property:
stat.central_agent.protocol:https

Modifying connection pool idle time

This feature allows the site to define the length of time before the Stat™ Central Agent connection pool times out database connections. The default is 15 minutes. However, Java® could take up to twice as long to actually disconnect from the environment.

* 
IMPORTANT: Shorter times could adversely affect agent performance.
To modify pool idle time:
1
Open <STAT_HOME>/config/stat.properties.
2
Locate the parameter CONNECTION_IDLE_TIME=15, and modify the time.
3
Stop and restart the agent.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating