Initial Configuration

6min
The base docuflow installation will come pre-configured with the core system, Filesystem, Box and SuccessFactors connectors. The main task to complete for initial setup is the configuration of connections for these connectors. 
The internal docuflow connectors and core components communicate through HTTPS/TLS encrypted connections. To enable these secure connections, x.509 certificates must be supplied. docuflow provides mechanisms to generate these certificates.
Options when generating certificates include:
Configuration of which connector certificates to create
Configuration of the server IP address/DNS entry when remote connectors are required
Creation of passwords for certificates generated
Settings are configured in the file <install location>\conifg\trex-certmgr-application.json
The trex-certmgr-application.json file contains the following sections:
"defaults"
 "defaults" : this section allows settings that will be used for all certificates generated. This can be overridden in the specifics of each individual certificate section
"master"
"master": This is the section for the master keystore for all configured connectors on the system. The default settings will be sufficient for a one box installation. 
For each connector, the value for "disabled" should be set to 'false' to have a certificate generated. 
If distributing a connector on a remote server, the "san" section can be used to define the remote server name and/or ip address.
An example snippet for the file system connector is shown below, including a "san" section.
JS
PowerShell
{
    "disabled": false,
	"alias": "trex.cnn-trex-fs.server",
		"dn": {
			"commonName": "VersaFile TRex File System Connector"
		},
        "san": {
            "dns": ["fully.qualified.name"],
            "ip": ["127.0.0.1"]
        }
}
{
    "disabled": false,
	"alias": "trex.cnn-trex-fs.server",
		"dn": {
			"commonName": "VersaFile TRex File System Connector"
		},
        "san": {
            "dns": ["fully.qualified.name"],
            "ip": ["127.0.0.1"]
        }
}
﻿
"keystores"
"keystores": The keystores section is where docuflow configuration for the p12 keystore certificates is done. Each connector must have an alias entry in the section "keystore": "trex.cnn.keystore.p12". The "storepass" entry is where a password for the keystore can be configured.
The section that will need configuration is the trex.cnn.keystore.p12. This contains references to each of the connectors being used.
"truststores"
"truststores": The truststores section is where docuflow configuration for the p12 truststore certificates is done. These trusts allow the connectors and core docuflow components to exchange their certificates. 
The "storepass" entry allows for configuration of the password for the truststore.
There are two sections that will need configuration:
trex.ngin.truststore.p12 (allows connections to the core d4i transformation engine)
trex.cfgmgr.truststore.p12 (allows connections to the d4i configuration UI engine)
 Both of these sections contain references to each of the connectors being used. Note: this should match the list from the keystore section.
An example of this section is shown below, with 5 connectors being setup:
JS
"truststores": [
		{
			"keystore": "trex.dao.truststore.p12",
			"storepass": "<password>",
			"aliases": [ "trex.cfgmgr.server", "trex.ngin.server" ]
		},
		{
			"keystore": "trex.ngin.truststore.p12",
			"storepass": "<password>",
			"aliases": [ 
				"trex.dao.server", 
				"trex.cfgmgr.server", 
				"trex.cnn-trex-fs.server", 
				"trex.cnn-cm8.server",
				"trex.cnn-elst.server",
				"trex.cnn-trex-util.server",
				"trex.cnn-ibm-p8ce.server"
			]
		},
		{
			"keystore": "trex.cfgmgr.truststore.p12",
			"storepass": "<password>",
			"aliases": [ 
				"trex.cfgmgr.client", 
				"trex.dao.server", 
				"trex.ngin.server", 
				"trex.cnn-trex-fs.server", 
				"trex.cnn-cm8.server",
				"trex.cnn-elst.server",
				"trex.cnn-trex-util.server",
				"trex.cnn-ibm-p8ce.server"
			]
		},
		{
			"keystore": "trex.cnn.truststore.p12",
			"storepass": "<password>",
			"aliases": [ "trex.cfgmgr.server","trex.ngin.server" ]
		}
	],
"truststores": [
		{
			"keystore": "trex.dao.truststore.p12",
			"storepass": "<password>",
			"aliases": [ "trex.cfgmgr.server", "trex.ngin.server" ]
		},
		{
			"keystore": "trex.ngin.truststore.p12",
			"storepass": "<password>",
			"aliases": [ 
				"trex.dao.server", 
				"trex.cfgmgr.server", 
				"trex.cnn-trex-fs.server", 
				"trex.cnn-cm8.server",
				"trex.cnn-elst.server",
				"trex.cnn-trex-util.server",
				"trex.cnn-ibm-p8ce.server"
			]
		},
		{
			"keystore": "trex.cfgmgr.truststore.p12",
			"storepass": "<password>",
			"aliases": [ 
				"trex.cfgmgr.client", 
				"trex.dao.server", 
				"trex.ngin.server", 
				"trex.cnn-trex-fs.server", 
				"trex.cnn-cm8.server",
				"trex.cnn-elst.server",
				"trex.cnn-trex-util.server",
				"trex.cnn-ibm-p8ce.server"
			]
		},
		{
			"keystore": "trex.cnn.truststore.p12",
			"storepass": "<password>",
			"aliases": [ "trex.cfgmgr.server","trex.ngin.server" ]
		}
	],
﻿
"exports"
"exports": The exports section configures the exported certificates for the system. Of note is the "privatekeys" section. This will generte a .p12 certificate that can be imported into a web browser to allow connectivity to the docuflow configuration service. Set a storepass that will be used. NOTE: Here you can configurate a separate certificate/password for different environments (DEV vs PROD etc).
start-cert-mgr.ps1
Once configuration is complete, the powershell script '<install location>\start-cert-mgr.ps1' should be run. This script will start a java application that will generate (or re-generate) the application certificates.
Unpacking ZIP Package
Setting up Firefox Certificate