Summary

This instruction includes two paths when installing a Fortified ID product on Windows.

1. You do NOT have internet access from your target Windows server. If you have internet access SKIP this step and go to step 2.

   1. Follow https://docs.fortifiedid.se/installation/windows/download-jre-and-artifact

2. If you have internet access or have completed step 1, then it is time to installation.

   1. Follow https://docs.fortifiedid.se/installation/windows/install-on-windows

Note! If you have internet access from the Windows server, skip this use case and go to next use case, "Install on Windows".

Prerequisite

• A host that support Powershell. (E.g. Windows 11 or Windows 2019)

• Download scripts to do an offline download of JRE and Fortified ID artifact. Contact Fortified ID on info@fortifiedid.se to get download scripts.

• Credential file to access Fortified ID product area. Contact Fortified ID on info@fortifiedid.se to get credentials.

• Correct download URL for the product you like to install. Contact Fortified ID a info@fortifiedid.se to get correct URL.

Download installation scripts

Download installation scripts

Note. You need a Windows host with a later version of Powershell as you download computer.

There are three files to use when downloading a Fortified ID product offline. If you do not have the three scripts, check the prerequisite section.

We will put the three files in c:\temp in this use case.

1. download_artifact_and_jre.ps1

2. download_artifact_and_jre.properties

3. customer_access_credentials.json

Download of installation data

Prepare download_artifact_and_jre.properties

Update download_artifact_and_jre.properties with the application you like to download.

1. Open download_artifact_and_jre.properties

2. Add the URL for the app to download. Locate the two lines below.
3. Change download location if you like. (we will use default in this use case)
4. The script also support use of proxy for access if you have that demand.
5. Save download_artifact_and_jre.properties

Run script to download installation data

Note. verify that you have the three files mentioned above in c:\temp.

1. Open a Windows PowerShell prompt on the Windows download computer. Make sure your run the prompt as an administrator.

2. In the PowerShell prompt, go to folder c:\temp. See command below.
3. In the PowerShell prompt, execute download_artifact_and_jre.ps1. See command below.
4. When script is completed you should two new files in c:\temp

   1. fortifiedid-jre.zip

   2. integrity-server-2.0.0-RC30-dist.zip (this is an example. You should see a zip-file with the name of the artificat you downloaded)

5. Move the two files to the windows server where you should do the installation.

To install a Fortified ID product on Windows, see use case Install on Windows

Requirements

A user name and a credentials file provided by Fortified ID or a, by Fortified ID, approved partner.

A user on local system with appropriate privileges or sudo access.

Installing java

By performing commands below you can installa Azul JAVA JRE

Adding trust to repo signature

In terminal run:

Selecting repo

3 repos are available:

https://fortifiedid.jfrog.io/artifactory/debian - includes both RC and stable

https://fortifiedid.jfrog.io/artifactory/release-debian-local - includes stable

https://fortifiedid.jfrog.io/artifactory/candiate-debian-local -includes RC's

Adding repo

In terminal run:

Adding authentication

In terminal run

Verify

Verify by running:

No errors should occur.

Prepare

Begin by obtaining authentication credentials from your Fortified ID representative. Use the credentials to log in to the FortifiedID Docker Registry by any available method, .

Example for Unix/Linux:

Transfer the token from customer_access_credentials.json to password.txt:

1. Open the customer_access_credentials.json file that you have received.

2. Locate and copy the access_token value.

3. Open or create the password.txt file.

4. Paste the access_token value into password.txt.

5. Replace <username> with your username that you have received in the following command and execute it.

Depending on your system configuration, you may need to run the logon command with different user rights, such as the root user and the current user account.

Verify

To verify the Docker setup, run the server:

Replace <container_display_name> with the container name and replace <product_name>:<version> with the image product name and version.

Parameter explanation:

Check the log to ensure that the server was successfully bootstrapped:

Note! This use case, "Install on Windows", will install a Fortified ID product online or using downloaded files. If you do not have internet access on the server which you are going to install on, go to use case "Download JRE and Artifact for Windows" to download requested files.

Prerequisite

• Windows server 2019 or later. Local or cloud instances like AWS or Azure for example.

• Installation scripts to do an Fortified ID product installation. Contact Fortified ID on info@fortifiedid.se for installation scripts.

• Credential file to access Fortified ID product area. Contact Fortified ID on info@fortifiedid.se to get credentials.

• Correct download URL for the product you like to install. Contact Fortified ID a info@fortifiedid.se to get correct URL.

Prepare for installation or upgrade

Installation scripts

There are three files to be used when installing a Fortified ID product

1. Note. You need a Windows host with a later version of Powershell as you download computer.

2. There are three files to use when downloading a Fortified ID product offline. If you do not have the three scripts, check the prerequisite section.

3. We will put the three files in c:\temp in this use case.

   1. install_fortifiedid_product.properties

   2. install_fortifiedid_product.ps1

   3. customer_access_credentials.json

Installation/upgrade

Prepare install_fortifiedid_product.properties

Update install_fortifiedid_product.properties with the application you like to install.

1. Open install_fortifiedid_product.properties

2. Verify installation path on your Windows server

   Copy

   ## JRE location
   ## Use link below if you have internet access. If you have downloaded the JRE, then add the file and path instead of the URL.
   JRE_LINK=https://share.fortifiedid.se/index.php/s/NMCwXXRMSpcFjtA/download

   1. Note. If you have downloaded the JRE in advanced the JRE_LINK should look like e.g.,: JRE_LINK=c:\temp\fortifiedid-jre.zip

3. Verify installation path on your Windows server

   Copy

   ## Path where the Fortified application will be installed
   INSTALLATION_PATH=C:\Program Files

4. Change memory for the application to use if needed.

   Copy

   ## Assign memory allowed to be used by application
   assignedMemory=1024
   threadStackSize=512

5. If you need to use a proxy, uncomment the three commented lines.

   Copy

   ## Proxy settings. Uncomment properties below to configure proxy settings.
   # PROXY_HOST=http://proxy:8080
   # PROXY_USER=username
   # PROXY_PASSWORD=password

6. Uncomment the product to install (not you can only install one product at time). You only uncomment four of the five rows. First row should not be uncomment. See example below where WEB should be installed

   Copy

   ## Install Fortified ID WEB
   # APP_LINK=URL or path and filename to pre downloaded file
   # APP_NAME_FOLDER=web
   # APP_NAME=Fortified ID Web
   # APP_DESCRIPTION=Fortified ID Web is an Identity Provider that manage authentitcation, authorization control and single sign-on.

   1. The APP_LINK value depend if you have online access or if you have predownloaded the artificat. Below is two examples how it can look like:

      1. APP_LINK=https://fortifiedid.jfrog.io/artifactory/default-fortifiedid-libs-release-local/fortifiedid/integrity-server/2.0.0-RC30/integrity-server-2.0.0-RC30-dist.zip

      2. APP_LINK=integrity-server-2.0.0-RC30-dist.zip

7. Save install_fortifiedid_product.properties

Install/upgrade application

To install/upgrade application we use a PowerShell script.

1. Open a Windows PowerShell prompt on the Windows server. Make sure your run the prompt as an administrator.

2. In the PowerShell prompt, go to folder C:\temp. See command below.

   Copy

   PS C:\Windows\system32> cd C:\temp

3. In the PowerShell prompt, execute install_fortifiedid_product.ps1. See command below.

   Copy

   PS C:\temp> .\install_fortifiedid_product.ps1

4. Type y to start installation. (Below we install Fortified ID Web as an example)

   Copy

   This will install/upgrade [Fortified ID RADIUS].
   All data in:
   C:\Program Files\FortifiedID\radius\application &
   C:\Program Files\FortifiedID\radius\jre will be replaced.
   Do you want to continue? (y/n):

5. If you doing an upgrade you will get a question to backup the /application and /JRE folder. The files will located in a zip-file in a /backup folder. Note. The customer folder will nerver be touched doing an upgrade. Those files are protected.

   Copy

   Do you want to backup application before proceeding with installation? (y/n):

6. Type y/n depending if you like to start service

   Copy

   Installation/upgrade is complete.
   Do you wish to start service: (y/n):

7. Installation is now complete!

Verify installation/upgrade

Verify when clean installation

Verify files

1. Open Windows Explorer

2. Go to C:\Program Files\FortifiedID\"app you installed"

3. You should find three folders

   1. jre

   2. application

   3. customer

   4. backup (you might have a backup folder depending on what you ansewerd during the upgrade and if you did an upgrade)

Verify service

1. Open Windows Services

2. Verify that service Fortified ID "app you installed" exists

Prerequisite

• Linux OS 64-bit.

• Unzip installed in the Linux OS.

• cURL installed in the Linux OS

• JAVA latest 21 JRE from Azul installed. Se documentation on how at:

  https://docs.azul.com/core/install

• Contact Fortified ID support to get the download credentials file, customer_access_credentials.json.

• Latest version of the Bash script and property file.

• Hardware requirement is depend on usage of the application

  • Minimum of 10 GB of drive space

  • Minimum 4 GB of RAM

  • Integrity is not CPU intensive; two virtual CPUs should work for most scenarios

Installation

Get installation package from Fortified ID.

Edit "FortifiedID_Online_Installation.properties":

Uncomment and enter values for:

APP_LINK=<url to product>

INSTALLATION_PATH=/opt/fortifiedid/web

DOWNLOADED_PRODUCT_FILENAME=<product_name>

Place "customer_access_credentials.json" in the same directory as "FortifiedID_Online_Installation.properties". Execute the "linuxinstaller.sh" script.

Installation error

Due to slight differences in Linux dialects, in some cases, errors may occur. In majority of cases it is related to updates to start.sh & stop.sh files.

Changes can be done manually after installation.

Contact FortifiedID if error you experience any installation errors

Upgrade

Update APP_LINK with new value and execute execute the linuxinstaller.sh script.

Folders, /application and /JRE, will be replaced during upgrade. Do not store any custom data there. The folder called /customer will not be replaced.

Clustering is achieved by sharing sessions between nodes in the system using Hazelcast technology. To ensure this works effectively, an external load balancer is required in front to manage the distribution of requests among the nodes. For optimal performance, the load balancer should be configured to use sticky sessions, ensuring that a user’s session is consistently directed to the same node. For more details on how Hazelcast facilitates clustering, please refer to the Hazelcast website.

Setup

Enabling cluster is done by editing the "config.json" file. At top level in the file add:

{
    "server": {
        "cluster": {
            "enabled": true,
            "config_path": "<path_to_cluster_config>/cluster.xml"
        }
    }
}

Example

Attached is an example configuration. Download, edit and place where not removed on upgrade.

Disabling Hazel cast phone home

By default hazel cast sends usage data. This can be disabled by setting "hazelcast.phone.home.enabled" property in cluster configuration file:

....
   <properties>
        <property name="hazelcast.phone.home.enabled">false</property>
    </properties>
....