Setup Location and Users

Setup Security Environment

Final Configuration Steps

java -jar jboss-bpms-installer-VERSION.GA-redhat-x.jar -console

press 1 to continue, 2 to quit, 3 to redisplay.

If you wish to install on an existing EAP installation, the parent directory of that EAP installation should be specified. [/home/user] 

press 1 to continue, 2 to quit, 3 to redisplay.

Create an administrative user
This user will be added to the host container's management realm for administrative purposes. It can be used to access the management console, the management CLI or other applications secured in this realm.

Admin username: [admin] 

The password must have at least 8 characters, and contain at least one number and one non-alphanumeric symbol.
			
Admin password: [] 

Confirm admin password: [******************************] 

press 1 to continue, 2 to quit, 3 to redisplay.

Create a Business Process Management Suite User
Create a BPM Suite user. The user will be added to the ApplicationRealm, and can be used to access the Business Central Console. The User will be assigned the 'admin' application roles. The BPMS username cannot be any of the following: 'admin', 'analyst', 'user', 'manager' or 'developer'.

BPMS username: [bpmsAdmin] 

The password must have at least 8 characters, and contain at least one number and one non-alphanumeric symbol.

BPMS password: [] 

Confirm BPMS password: [****************]

press 1 to continue, 2 to quit, 3 to redisplay.

Configure the Java Security Manager
A Java security manager offers JVM level security beyond what is provided by the application container. It enforces access rules at the JVM runtime based on one or more security policies.

This installer will place two security policies in the installation directory with the filenames 'security.policy' and 'kie.policy' regardless of choice. Those policies will be enabled at runtime if the option below is selected. 

Please note that a security manager imposes a significant performance overhead when enabled. It is suggested the included policies be applied in production if user requirements call for a stronger measure than what is already provided by the application container's authentication and authorization mechanism. 

Please see the JBoss Business Process Management Suite administrative documentation for further details and consideration.
  [x] Enable the Java security manager
Input 1 to select, 0 to deselect:

press 1 to continue, 2 to quit, 3 to redisplay.

Configure JMS SSL keystores
Some JMS messages sent to BPMS can contain password information. In order to make sure that this information is sent safely, SSL must be used, which uses public/private key encryption to set up an encrypted connection between the client and the server.

Please supply the private passwords to use with BPMS. These passwords should not be shared with others.

If multiple distinct clients are necessary, the number of distinct client keystores can also be indicated. The server's keystore certificate will automatically be imported into the client keystores.

Passwords to use for the generated keystores. They must have at least 6 characters.

Server keystore password: [] 

Re-enter server keystore password: [**********] 

Client keystores password: [**********] 

Re-enter client keystores password: [**********] 

Number of client keystores to generate: [1]

press 1 to continue, 2 to quit, 3 to redisplay.

IPv6 configuration

If this computer is using a pure IPv6 configuration, please check the box below. A pure IPv6 setup requires additional configuration at runtime to ensure the proper bindings of the management and http interfaces.
  [ ] Enable pure IPv6 configuration
Input 1 to select, 0 to deselect:

press 1 to continue, 2 to quit, 3 to redisplay.

Configure runtime environment
Red Hat JBoss Business Process Management Suite can be further customized at this time.
0  [x] Perform default configuration
1  [ ] Perform advanced configuration
Input Selection: 

  [ ] Install password vault
Input 1 to select, 0 to deselect:

  [ ] Enable SSL security
Input 1 to select, 0 to deselect:

  [ ] Enable LDAP authentication
Input 1 to select, 0 to deselect:

  [ ] Add a security-domain
Input 1 to select, 0 to deselect:

press 1 to continue, 2 to quit, 3 to redisplay.

Configure password vault
A password vault encrypts sensitive strings and stores them in an encrypted keystore. The vault mechanism manages decrypting the strings for use with security domains, security realms, or other verification systems.

Please make note of your entry below in order to mask any subsequent passwords. See EAP 6 documentation for further details.

The password must have no fewer than 6 characters.

Vault keystore password: [] 

Re-enter vault keystore password: [**********] 

press 1 to continue, 2 to quit, 3 to redisplay.

Installation has completed successfully.
Application installed on /home/user/Documents/BPMS_Installer
Would you like to generate an automatic intallation script and properties file? 
(y/n) [n]:

Select path for the automatic installation script: [/home/user/Documents/BPMS_Installer/<auto script filename>] 

java -jar jboss-bpms-installer.jar <auto script filename>

-variablefile <variable filename>

-variables key1=value1,key2=value2

XML written successfully.
[ Console installation done ]
[BPMS_Installer]$

./standalone.sh