000035603 - How to install and reinstall the Access Fulfillment Express (AFX) server on an RSA Identity Governance and Lifecycle hardware or software appliance

Document created by RSA Customer Support Employee on Oct 9, 2017
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000035603
Applies To
RSA Product Set: RSA Identity Governance and Lifecycle
   RSA Version/Condition: 7.0.1 and 7.0.2
IssueThis article is a step by step instruction on how to install and reinstall the Access Fulfillment  Express (AFX) server on an RSA Identity Governance and Lifecycle hardware or software appliance
TasksThese are the steps for installing or re-installing the AFX server component on an RSA Identity Governance and Lifecycle Appliance using the AFXServer.zip generated from the Administrative console.
  1. Login to the RSA Governance and Lifecycle Administration Interface (e. g., https://rsa-access.yourcompany.com/aveksa/main).
  2. Download the AFXServer.zip from the UI under AFXServers > AFX ServerDownload Server Archive.
  3. Download server.keystore from the UI under Admin > System > Security  >Download 'Server Certificate Store for Agent SSL Connections.
  4. Transfer AveksaServer.zip, server.keystore from your PC to the RSA Identity Governance and Lifecycle Appliance using a tool like WinSCP or another SFTP client and place them under /tmp  
  5. Backup the preexisting AFX, unpack the AFXServer.zip, set permissions, and configure the system service.
Steps to complete the tasks are as follows (Note:  This assumes the afxuser is the 'oracle' user. A separate afxuser can be created. See the RSA Identity Governance and Lifecycle Installation Guide for more information). As the root user:

cd /home/oracle
service afx_server stop
mv AFX AFX.old
unzip /tmp/AFXServer.zip
chown -R oracle:oinstall AFX
cd AFX/bin
sh ./setPerms.sh
ln -s afx_server /etc/init.d/afx_server    (if it does not exist)
chkconfig afx_server on

  1. Configure the AFX environment by editing /home/oracle/AFX/bin/setAFXEnv.sh and set the AFX home directory from AFX_HOME= to AFX_HOME=/home/oracle/AFX

cp /home/oracle/AFX/bin/setAFXEnv.sh /home/oracle
cp /home/oracle/AFX/bin/setAFXEnv.sh /root
chown oracle:oinstall /home/oracle/setAFXEnv.sh

  1. Start AFX as the 'oracle' user

service afx_server start

Attachments

    Outcomes