Set-up Security Provider
Search
4.00.00 Analytics Security Provider Advanced Installation Guide (Windows) Rev01
Introduction
Introduction
Assumptions
Prerequisites
Pre-Installation Steps
Deployment Scenarios
Single Host/Private Network
Private Network
Public Network
Public Network with Reverse Proxy
Public Network with Reverse Proxy and HTTPS Termination
Private Network without a domain or Domain Name Server (DNS)
Using Hosts Files
Using IP Address and Self-signed Certificates
Set-up Security Provider
Extract the FactoryTalk Analytics Security Package
Scripts for Generating CA Signed Certificates
Install OpenSSL
Configure
openssl-env
openssl.cnf
Create Certificate Authority
Create and Sign Certificates
Create and Start the Security Service
Run the FactoryTalk Analytics Security Setup Scripts
Review the fta-setup-env Script
Single Host/Private Network
Private Network
Public Network
Public Network with Reverse Proxy
Public Network with Reverse Proxy and HTTPS Termination
Set Environment Variables
Run fta-create-postgresql-db
Run fta-setup-postgresql
Run fta-setup-admin
Run fta-setup-realm
Run fta-setup-dataview
Run fta-setup-flowml
Run fta-remove-admin (Optional)
Enable SSL for Security Provider
Run-fta-setup-vault-store
CA Public Key
Download CA Public Key
Import the CA Public Key
Configure FTASecurity User
SSL Settings
Disable HTTP Port 9099
Upgrade Security
Extract New Build
Preparation if HTTP is Disabled
Migration Steps
LDAP Groups for Edge
What the Migration Script Does
Configure LDAP-Kerberos
LDAP
LDAP Integration with TLS
LDAP Integration with SSL
Import LDAP User
Configure LDAP
Kerberos
Map LDAP User to Client Machine
Configure Keytab File
Configure LDAP-Kerberos with FTASecurity
Configure Kerberos with FTASecurity
Enable Kerberos Authentication in IE Browser
Configure HTTPS
Enable Kerberos Authentication in Firefox Browser
FTASecurity Scripts
fta-setup-env Settings
openssl-env Settings
Certificate Authority Directory Structure
troubleshooting
Troubleshooting
4.00.00 Analytics Security Provider Advanced Installation Guide (Windows) Rev01
⟩
Set-up Security Provider
Set-up Security Provider
Extract the FactoryTalk Analytics Security Package
Scripts for Generating CA Signed Certificates
Create and Start the Security Service
Enable SSL for Security Provider
SSL Settings
Disable HTTP Port 9099
Upgrade Security
Provide Feedback
Have questions or feedback about this documentation? Please
submit your feedback here
.
Normal
