Kony Fabric Installation Guide Linux · KonyFabricInstallationGuide-Linux Version1.11 RevisionHistory Date DocumentVersion DescriptionofModifications/Release 01/26/2020 1.12 DocumentpublishedforaddingUpgrading

Kony Fabric

Installation Guide - Linux

On-Premises

Release V8 SP4 FP1Document Relevance and Accuracy

This document is considered relevant to the Release stated on this title page and the document version stated on the

Revision History page. Remember to always view and download the latest document version relevant to the software

release you are using.

© 2020 by Kony, Inc. All rights reserved 1 of 469

Kony Fabric Installation Guide - LinuxVersion1.11

Copyright © 2014 by Kony, Inc.

All rights reserved.

February, 2020

This document contains information proprietary to Kony, Inc., is bound by the Kony license

agreements, andmay not be used except in the context of understanding the use andmethods of

Kony, Inc., software without prior, express, written permission. Kony, Empowering Everywhere, Kony

Fabric, KonyNitro, and Kony Visualizer are trademarks of Kony, Inc. MobileFabric is a registered

trademark of Kony, Inc. Microsoft, theMicrosoft logo, Internet Explorer, Windows, andWindowsVista

are registered trademarks of Microsoft Corporation. Apple, the Apple logo, iTunes, iPhone, iPad, OS

X, Objective-C, Safari, Apple Pay, AppleWatch, and Xcode are trademarks or registered trademarks

of Apple, Inc. Google, the Google logo, Android, and the Android logo are registered trademarks of

Google, Inc. Chrome is a trademark of Google, Inc. BlackBerry, PlayBook, Research inMotion, and

RIM are registered trademarks of BlackBerry. SAP® and SAP® Business Suite® are registered

trademarks of SAP SE in Germany and in several other countries. All other terms, trademarks, or

servicemarksmentioned in this document have been capitalized and are to be considered the

property of their respective owners



Revision History

Date Document Version Description of Modifications/Release

01/26/2020 1.12 Document published for adding Upgrading

CustomMetrics Component.

10/18/2019 1.11 Document published for adding Upgrade from

Kony Fabric 8.2.

09/26/2019 1.10 Document published for adding Prerequisites for

Upgrade fromMobileFabric 7.x to Kony Fabric

8.x.

08/05/2019 1.9 Document published after modifying the -DKMS_

CORE_VERSION for JBoss, WebLogic, and

WebSphere.

06/24/2019 1.8 Document published after modifying Application

Servers Pre-installation Tasks for JBoss,

WebLogic, andWebSphere.

06/20/2019 1.7 Document published after modifying Corporate

Firewall Settings - Engagement Services

04/18/2019 1.6 Document published for V8 SP4 FP1HF1

02/27/2019 1.5 Document published for V8 SP4 FP1

09/24/2018 1.4 Document published for V8 SP3



09/19/2017 1.0 Document published for V8GA



Table of Contents

1. Preface 9

1.1 Purpose 10

1.2 Intended Audience 10

1.3 Formatting ConventionsUsed in ThisGuide 11

1.4 Related Documents 12

1.5 Contact Us 12

2. Prerequisites 13

2.1 Software Requirements 13

2.2 Hardware Requirements 13

2.3 Network Settings 14

2.4 Creating the Installation User for Linux 20

2.5 Database Prerequisites 21

2.6 Application Servers Prerequisites 30

3. Kony Fabric Topology and Components 43

3.1 Developer Environment 48

3.2 Production Environment 49

4. Kony Fabric Installation on Single Node and Multinode 50

5. Pre-Installation Tasks 51

5.1 Download Kony Fabric Installer 51

5.2 Steps before installing (or) upgrading Kony Fabric with the existing database 51



5.3 Create /tmp Folder 52

5.4 Install Memcached Server 52

5.5 libevent (memcached dependency) 52

5.6 Memcached Server 53

5.7 Configure Load Balancers for Sending Host Information inMultinode 54

5.8 Download and Install the Unrestricted JCE Policy Files 56

5.9 Database Pre-installation Tasks 58

5.10 Application Servers Pre-Installation Tasks 61

6. Installation Modes - Kony Fabric 70

6.1 Installing Kony Fabric - Console-mode (for command-line-driven installations) 71

6.2 Installing Kony Fabric - Silent-mode 360

7. Installing Kony Fabric on IBM AIX 362

7.1 Prerequisites 362

7.2 Download Kony Fabric installers for AIX platform 362

7.3 Installing Kony Fabric on IBMAIX 363

7.4 Post Installation 363

7.5 Upgrading Kony Fabric 364

8. How to Stop and Start Kony Fabric 366

8.1 Tomcat Server 366

8.2 JBoss Server 366

8.3 WebLogic Server 366



8.4 WebSphere Server 367

9. Upgrading Kony Fabric 368

9.1 Prerequisites for Upgrade fromMobileFabric 7.x to Kony Fabric 8.x 368

9.2 Upgrading Kony Fabric using V8 370

9.3 Upgrading Kony Fabric to V8 SP4 380

9.4 Upgrade fromKony Fabric V8 SP2 to V8 SP4 391

9.5 Upgrading CustomMetrics Component 391

10. Installing Hotfix Archives for Kony Fabric - Linux 393

10.1 Patch Installer GA Versions 393

10.2 Prerequisites 394

11. Uninstalling Kony Fabric 401

12. Post-Installation Tasks 405

12.1 Configuring Secure Sockets Layer (SSL) Certificate 405

12.2 JDK Version Compatibility 407

12.3 How to ConfigureMemcached for Integration Services 408

12.4 Configure Deployment of mbaasportal.war File for Multi-Node 410

12.5 Remote Installation Pre-requisites 410

12.6 How to Turn off the Send usage data anonymously feature 411

12.7 Configuring Datasource for performance improvements for JBoss pre-existing and

DomainMode 412

12.8 Health CheckURL 413



12.9 Steps to enable SAPJCo 413

13. FAQs and Troubleshooting 418

13.1 Hostname/Port changes for Tomcat Application Server 439

13.2 Hostname/Port changes for JBoss Application Server 439

13.3 How to Configure JBossCluster 440

13.4 How to Configure a Custom JAR File onWebLogic 440

13.5 How to Configure Heap and PermGen Size 441

13.6 How to Configure Kony Fabric Behind a Reverse Proxy 442

13.7 Preserving Proxy if Load Balancer or Proxy Server is Configured 444

13.8 How to Configure Frontend HTTPS to Tomcat HTTP Redirection 445

13.9 WebSphere FAQs 445

13.10 How to Change Log Levels 445

13.11 Context Root-path 447


1. Preface Kony Fabric Installation Guide - LinuxVersion1.11

1. Preface

Kony Fabric is aMobile Back-end as a Service (MBaaS) provider that helps developers build native

and web apps for mobile. Kony Fabric allows you to define the back-end to build nativemobile apps for

iOS, Android, and HTML5-based apps for modern browsers. Kony Fabric ensures that developers

build mobile applications quickly by focusing on core areas and obtaining secured back-end services

instantly. Kony Fabric hasmultiple features that can be used - Identity, Integration, Objects,

Orchestration, and Engagement Services. These features can be accessed through a common,

centralized console.

For successful authentication with users, and to access centralized features of Kony Fabric, Kony

recommends that you install the following Kony Fabric features on premises:

l Kony Fabric Identity and Console

l API Developer Portal

l Kony Fabric Integration

l Kony Fabric Engagement Services

Kony Fabric supports the following back-end services for your applications:

l Identity: This feature allows you to define the type of authentication used for granting access to

your application. Kony Fabric supports the following authentication services:

o Enterprise Identity: Microsoft Active Directory, Open LDAP, Salesforce, Security

AssertionMarkup Language (SAML), Kony SAP Gateway, OAuth 2.0, Okta, Custom,

andOAuth Provider.

o Social Identity: Google, Instagram, Microsoft, BOX, Facebook, LinkedIn, Amazon, and

Yahoo.

l API Developer Portal: This feature allows you create a Portal for exposing APIs created using

Kony Fabric. Developers from internal and external partner teams can access the portal created

to explore and test the APIs



l Integration: This feature allows you to define various back-end services for your application.

You can define the following integration services:

o Technology Adapters: XML, SOAP, JSON, Java, JavaScript, and APIProxy.

o Business Adapters: Kony SAP Gateway, MuleSoft, AWSAPIGateway, Relational

Database, MongoDB, RAML, OpenAPI (Swagger), Salesforce, and IBMMQ.

l Orchestration: Service orchestration is the coordination or integration of several services and

exposing them as a single service. This feature allows you to create two types of orchestration

services. They are:

o Composite: Allows you to run two or more services concurrently or sequentially.

o Looping: Allows you to run a single service in a loop until the loop ends or an exit criteria is

met.

l Objects: Allows you to create appmodels for LOB objects, storage objects, and Service-Driven

Objects.

l Offline sync: This feature allows you to define the synchronization services for your application.

Sync supports onlyWeb Services, except SAP Sky.

l Logic: The logic services feature in Kony Fabric helps you import and integrate Node.js services

(APIs) directly into Kony Fabric for developing server-side and networking applications.

l Engagement: This feature allows you to send push notifications, email, SMS and passes to

subscribed applications.

1.1 Purpose

This document helps you install and configure Kony Fabric using the installer on Linux.

1.2 Intended Audience

This document is intended for engineers or developers who are responsible for installing and

configuring Kony Fabric. We assume that the reader of this document is familiar with installing

applications in a Linux environment.



1.3 Formatting Conventions Used in This Guide

The following formatting conventions are used throughout the document:

Convention Explanation

Monospace l User input text, system prompts, and responses

l File path

l Commands

l Program code

l File names

Italic l Emphasis

l Names of books and documents

l New terminology

Bold l Windows

l Menus

l Buttons

l Icons

l Fields

l Tabs

URL Active link to a URL

Note:Provides helpful hints or additional information



Convention Explanation

Important:Highlights actions or information that might cause problems to systems or

data

1.4 Related Documents

Document Purpose

Kony Fabric User

Guide

This guide helps you understand how to create a Kony Fabric account, add

services, and publish apps.

1.5 Contact Us

Wewelcome your feedback on our documentation. Email us at [email protected].

For technical questions, suggestions, and comments or to report problems on Kony's product line,

contact [email protected].


mailto:[email protected]?subject=Documentation Feedbackmailto:[email protected]

2. Prerequisites Kony Fabric Installation Guide - LinuxVersion1.11

2. Prerequisites

The following sections provide information about the software and hardware required to install Kony

Fabric Console.

2.1 Software Requirements

For software system requirements, click here.

2.2 Hardware Requirements

Component Requirement

Processor Quad-core processor

Memory 16GB

Internal Storage 150GB

Network 100Mbps Ethernet interface card


http://docs.kony.com/konylibrary/general/konyfabric_supported_devices_os_browsers/Default.htm#MobileFabric.htm?TocPath=Kony%2520MobileFabric|_____0


2.3 Network Settings

2.3.1 Corporate Firewall Settings - Engagement Services

Source Destination Ports

Protocol

Direction

Action

Description

Engageme

nt Server

https://api.push.apple.com:443/3/devi

ce/

443 TCP Both Allow Allow the

Engageme

nt Server

to access

Apple

APNS

HTTP2

production

URL

Engageme

nt Server

https://api.jpush.cn/v3/push 443 TCP Outboun

d

Allow Allow the

Engageme

nt Server

to access

the JPush

notification

server

URL

Engageme

nt Server

https://api.development.push.apple.co

m:443/3/device/

443 TCP Both Allow Allow the

Engageme

nt Server

to access

Apple

APNS

HTTP2

developme

nt URL




Protocol

Direction

Action

Description

Engage

ment

Server

https://fcm.googleapis.com 44

3

TCP Outb

ound

All

o

w

Allow

the

Engage

ment

Server

to

access

Firebas

e Cloud

Messa

ging

(FCM)

service

Engage

ment

Server

feedback.push.apple.com,

feedback.sandbox.push.apple.co

m, 17.0.0.0/8 (17.0.0.1 to

17.255.255.254)

21

96

TCP Outb

ound

All

o

w

Allow

the

Engage

ment

Server

to

access

APNS

feedba

ck

service




Protocol

Direction

Action

Description

Engage

ment

Server

gateway.push.apple.com,

gateway.sandbox.push.apple.com,

17.0.0.0/8 (17.0.0.1 to

17.255.255.254)

21

95

TCP Outb

ound

All

o

w

Allow

the

Engage

ment

Server

to

access

Apple's

APNS

Engage

ment

Server

All subdomains of

pushapi.eval.blackberry.com

Sample Push URL:

https://cpxxxxxxxxxxxxxxxxxxxxx

x. pushapi.eval.blackberry.co

m/mss/PD_pushRequest

44

3

TCP Outb

ound

All

o

w

Allow

connec

t to

Blackb

erry

Cloud

through

this

port

Engage

ment

Server

http://sn1.notify.live.net 44

3

TCP Outb

ound

All

o

w

Allow

connec

t to

Windo

ws

Cloud

(MPN

S)

through

this

port




Protocol

Direction

Action

Description

Engage

ment

Server

https://login.live.com 44

3

TCP Outb

ound

All

o

w

Allow

connec

t to

Windo

ws

Cloud

(WNS)

through

this

port

Internal

Corpor

ate

WiFi

router

for

Android

Mobile

Device

s

Allow your firewall to accept

outgoing connections to all IP

addresses contained in the IP

blocks listed in Google's ASN of

15169. Reference link for the IP

Addresses

http://bgp.he.net/AS15169

52

2

8,

52

2

9,

52

30

TC

P,

HTT

P,

HTT

PS,

UD

P

Both All

o

w

Android

device

s will

connec

t to

GCM

through

this

port

Internal

Corpor

ate

WiFi

router

for iOS

Device

s

gateway.push.apple.com,

feedback.push.apple.com,

gateway.sandbox.push.apple.com,

feedback.sandbox.push.apple.co

m, 17.0.0.0/8 (17.0.0.1 to

17.255.255.254)

52

23

TCP Both All

o

w

Apple

device

s

connec

t to

APNS

servers

through

this

port


http://bgp.he.net/AS15169



Protocol

Direction

Action

Description

Internal

Corpor

ate

WiFi

router

for iOS

Device

s

ax.init.itunes.apple.com,

ocsp.apple.com

8

0,

44

3

TCP Both All

o

w

Apple

device

s will

connec

t to

public

Apple

OCSP

and

iTunes

service

through

this

port

Internal

Corpor

ate

WiFi

router

for

Windo

w

Device

s

Add the list IPs specified in the

followingWNS URL

http://www.microsoft.com/en-

us/download/details.aspx?id=4423

8

TC

P,

HTT

P,

HTT

PS,

UD

P

Both All

o

w

Windo

ws

device

s will

connec

t to

WNS

through

this

port


http://www.microsoft.com/en-us/download/details.aspx?id=44238http://www.microsoft.com/en-us/download/details.aspx?id=44238http://www.microsoft.com/en-us/download/details.aspx?id=44238



Protocol

Direction

Action

Description

Internal

Corpor

ate

WiFi

router

for

Windo

w

Device

s

Add the list IPs specified in the

followingMPNS URL:

https://www.microsoft.com/en-

us/download/details.aspx?id=4453

5

TC

P,

HTT

P,

HTT

PS,

UD

P

Both All

o

w

Windo

ws

device

s will

connec

t to

MPNS

through

this

port

2.3.2 Proxy Settings for Integration Service

To add an Integration Service Environment when the proxy is set at an App Server level, enable the

following proxy settings at the JVM level:

l Dkony.http.proxyHost= 10.0.4.29

l Dkony.http.proxyPort= 2080

l Dkony.http.proxyUser= websphere

l Dkony.http.proxyPassword= 3MqGU9e5nv3B

2.3.3 Network Settings - Licensing

The on-premises server should allow outbound requests to https://manage.kony.com and allow

inbound requests from our License servers (IPs, mentioned at the end, can be whitelisted in a

customer’s firewall).


https://www.microsoft.com/en-us/download/details.aspx?id=44535https://www.microsoft.com/en-us/download/details.aspx?id=44535https://www.microsoft.com/en-us/download/details.aspx?id=44535https://manage.kony.com/


An on-premises Fabric 'development' or 'non-production' license can be activated without making the

on-premises Identity URL available to our License servers. However, a 'production' license requires

the Identity URL to be available to our License servers at the time of activation and thereafter as the

license is validated on a weekly frequency. Each time that a production license is validated, the license

validity is good for 30 days from the last successful validation. The Identity URL is expected to remain

available to our License server for the entirety of their licensing term.

The Fabric Identity account tenant must be accessible on the internet. The Cloud license activation

screen displays the Identity tenant configured in on-premise console. (For example,

https:konyfabric.mycompany.com/authService)

Cloud license activation flow appends “/accounts” to the Identity URL. (For example,

https:konymobilefabric.mycompany.com/authService/accounts). The URLmust be accessible on the

public internet for license activation to work. The response of the URL should be “Welcome to Test

Auth Service”.

Communication fromKony's License servers will originate from the following IP addresses, which can

be whitelisted in an organization's firewall configuration:

l 54.208.192.84

l 54.208.192.248

2.4 Creating the Installation User for Linux

To create a user, follow these steps:

1. From your Kony Fabric install system, open Linux terminal.

Note: For security and administrative reasons, install and run Kony Fabric Installer as a

non-root user.



2. Run the following commands:

# adduser core

# passwd core

2.5 Database Prerequisites

Before you install Kony Fabric Console Installer, youmust perform the following pre-installation tasks:

l Ensure access to a database server.

l A database user should be granted all required permissions as per this document.

l To use your existing SSL certificate, map the SSL certificate to the domain name you want to

use.

l To install in domain (multi-node) mode, the JBoss cluster should be preconfigured.

2.5.1 Prerequisites for Kony Fabric with Oracle

For installing Kony Fabric Database for Oracle, complete the following steps:

Note: Only a qualified Oracle Database Administrator (DBA) must handle the Oracle Database

setup in order to successfully complete the Kony Fabric database deployment. Oracle software

must be installed and basic databasemust be created before to continue with Kony Fabric

database schema setup.

Important: Ensure that a dedicated database user must not be an application user for installation

of database. A dedicated user gets logged into audit logs.

After granting privileges, disconnect existing session, and use new session in order to get the new

privileges loaded to the user.

l Unicode support needs to be enabled in Database. This is possible only while creating a database



needed for Kony Fabric with a Unicode character set with the properties for Database character set as

AL32UTF8 and National character set as AL16UTF16.

l Create the following three tablespaces. These tablespaces will be used to create Kony Fabric database

objects:

o Tables and data tablespace: MF_DATA

o Index tablespace: MF_INDEX

o Lob tablespace: MF_LOB_DATA

l Using an SQLPlus or another Database client, connect to youOracle database as Sysdba.

Replace the with actual data file path on the Oracle database server.

CREATE TABLESPACE MF_DATA DATAFILE '/MF_DATA_01.DBF'

SIZE 2048M AUTOEXTEND ON NEXT 100M MAXSIZE 5120M;

CREATE TABLESPACE MF_INDEX DATAFILE '/MF_INDEX_01.DBF'

SIZE 2048M AUTOEXTEND ON NEXT 100M MAXSIZE 5120M;

CREATE TABLESPACE MF_LOB_DATA DATAFILE '/MF_LOB_DATA_

01.DBF' SIZE 2048M AUTOEXTEND ON NEXT 100M MAXSIZE 5120M;

l Create a dedicated database user with default tablespaces (MF_DATA) and grant quota to two other

tablespaces (MF_INDEX andMF_LOB_DATA tablespaces).

o To create a user based on your Oracle 11g or 12c without PDB, which will be used in the JDBC.

CREATE USER IDENTIFIED BY DEFAULT

TABLESPACE MF_DATA TEMPORARY TABLESPACE TEM PROFILE DEFAULT;

GRANT DBA TO ;

ALTER USER QUOTA UNLIMITED ON MF_DATA;

ALTER USER QUOTA UNLIMITED ON MF_INDEX;

ALTER USER QUOTA UNLIMITED ON MF_LOB_DATA;

o To create a dedicated database user based on your Oracle 12c with PDB, then create a

dedicated database local user inside PDB, which will be used in the Java

Database Connectivity (JDBC) authentication.



Alter session set container = PDB ;

CREATE USER IDENTIFIED BY

DEFAULT TABLESPACE MF_DATA TEMPORARY TABLESPACE TEMP

PROFILE DEFAULT CONTAINER=CURRENT;

GRANT DBA TO CONTAINER=CURRENT;

ALTER USER QUOTA UNLIMITED ON MF_DATA

CONTAINER=CURRENT;

ALTER USER QUOTA UNLIMITED ON MF_INDEX

CONTAINER=CURRENT;

ALTER USER QUOTA UNLIMITED ON MF_LOB_DATA

CONTAINER=CURRENT;

l If you are using Kony Fabric installer to setup Kony Fabric database, then please choose the below

options based on your Oracle database version.

o If Oracle database is created with PDB option of Oracle 12c, use service name pointing to PDB in

the JDBC URL such as pdborcl orpdbmfdb

jdbc:oracle:thin:@:1521/pdbmfdb

For example: jdbc:oracle:thin:@192.168.1.2:1521/pdbmfdb

o But if your database is 11g or 12c without PDB, then you can useORACLE_SID in the JDBC

URL such as orcl or mfdb.

jdbc:oracle:thin:@:1521:mfdb

For example: jdbc:oracle:thin:@192.168.1.2:1521:mfdb

2.5.2 Prerequisites for Kony Fabric with DB2

Note: FromV8 SP4 FP1HF1 onwards, DB2 is not supported for bundled Tomcat and JBoss

servers.



Important: Download the following DB2 JARs from IBM download site:

- IBMDB2 Type 4 Driver (db2jcc4.jar)

- DB2 JDBC Driver licence (db2jcc_license_cu.jar)

The version of the downloaded JARs should be compatible with your installed DB2Database

version.

For IBMDB2, while creating database, choose 32k page size as default tablespace. Because after a

database with page size as default tablespace is created, you will not be able tomodify the page size

of the default tablespace. Additionally you need to create three tablespaces: one for tables and data,

one for index, and the other tablespace for Large objects (LOBs). For creating tablespace, the details

are provided int he below sections.

Create the Big tablespace with big bufferpool of 32K page size. Only DB2 database administrator (DBA) or

equivalent DB user will have access to create database with default tablespace with particular

pagesize/bufferpool. In DB2, whenever Binary LargeObject (BLOB) and Character LargeObject (CLOB) are

used, you need to have the database created with default tablespace as well as default temp tablespace with

big pagesize of 32k.

-- Replace with your actual database name.

CONNECT TO ;

CREATE BUFFERPOOL BIGBUFFERPOOL IMMEDIATE ALL DBPARTITIONNUMS

SIZE AUTOMATIC NUMBLOCKPAGES 100 BLOCKSIZE 100 PAGESIZE 32K;

COMMIT;

-- To create a tablespace for tables and Data

CREATE LARGE TABLESPACE IN DATABASE PARTITION GROUP

IBMDEFAULTGROUP

PAGESIZE 32K MANAGED BY AUTOMATIC STORAGE EXTENTSIZE 32 PREFETCHSIZE

AUTOMATIC

BUFFERPOOL BIGBUFFERPOOL OVERHEAD 7.5 TRANSFERRATE 0.06 AUTORESIZE YES

INITIALSIZE 32M NO FILE SYSTEM CACHING;

COMMIT;



-- To create an index tablespace


IBMDEFAULTGROUP


AUTOMATIC



COMMIT;

-- To create a LOB tablespace


IBMDEFAULTGROUP


AUTOMATIC



COMMIT;

CREATE SYSTEM TEMPORARY TABLESPACE "BIGTEMP" IN DATABASE PARTITION GROUP

IBMTEMPGROUP

PAGESIZE 32K MANAGED BY AUTOMATIC STORAGE USING STOGROUP IBMSTOGROUP

EXTENTSIZE 1M

PREFETCHSIZE AUTOMATIC BUFFERPOOL BIGBUFFERPOOL;

COMMIT;

CONNECT RESET;

Note: If Kony Fabric installation with DB2 fails, youmust verify the following settings:.

db2set DB2_COMPATIBILITY_VECTOR=ORA

db2set DB2_DEFERRED_PREPARE_SEMANTICS=YES



2.5.3 Prerequisites for Kony Fabric with SQL Server

l Database User security role: Create a database login dbclient using SQL server

authenticationwith server roles as sysadmin and public

l Database and schema access: Installer will make use of the above login to create necessary

databases and schemas required for the selected Kony Fabric components.

l Database Growth sizing: Refer to Kony Fabric Deployment Guide > DatabaseGrowth Sizing

l Database Transaction log size: Allocate sufficient space for the Transaction log file based on

all the transactions activity of all the Kony Fabric components installed and as per your database

backup policy. Because transaction log sizing is linked to database backup. If additional

application logging/events are enabled inmultiple components of Kony Fabric, then youmay

need to consider additional size for the transaction log.

l Temp Database and temp log: This is based on usage of all the databases on the server

instance, by all applications connecting to these databases. In case of Kony Fabric, for sizing of

the temp database, consider auto growth with increment size should be of 100MB andwith

maximum size to 10GB. But if application logging/events are enabled inmultiple components of

Kony Fabric, then themaximum size should be increased upto 20GB. This size will get

reclaimed as and when the DB is restarted.

l Database versions: You can use SQL Server Standard Edition or SQL Server Enterprise

Edition database for installing Kony Fabric. Kony Fabric is compatible with these editions.

There are no prerequisites specific to these editions as Kony Fabric uses features common to

both editions.

l Backup plan: Youmust use your organization's defined backup and retention policies for

Backup strategies for your database.


http://docs.kony.com/konylibrary/konyfabric/kony_Fabric_deployment_guide/Default.htm#Deployment.htm%23DBSizing?TocPath=_____8


2.5.4 Prerequisites for Kony Fabric with MSSQL - Applicable for Engagement Services

Database collation needs to be set for a database. This is possible while creating a database with your

required language as database collation. For example, use Database collation as Arabic_100_CI_AS

for Arabic language support. Similarly for other languages use appropriate collation for support. Use

SQL Server Management Studio to create a database with the name as kpnsdb and with appropriate

collation support.

2.5.5 Prerequisites for Kony Fabric with MySQL

2.5.6 Applicable for Engagement Services

1. Create the database needed for Engagement Serviceswith unicode character set as UTF8.

Also ensure that youmodify the my.cnf or my.ini with the following parameters:

[client]

default-character-set = utf8

[mysql]

default-character-set = utf8

[mysqld]|

character-set-client-handshake = FALSE

collation_server='utf8_unicode_ci'

character_set_server='utf8'

2. Next, restart theMySQL service and run the following query to verify the details:

mysql> show variables like '%coll%';

+----------------------+-----------------+

| Variable_name | Value |

+----------------------+-----------------+

| collation_connection | utf8_unicode_ci |

| collation_database | utf8_unicode_ci |

| collation_server | utf8_unicode_ci |

+----------------------+-----------------+

3 rows in set (0.00 sec)



mysql> show variables like '%char%';

+--------------------------+----------------------------+

| Variable_name | Value |

+--------------------------+----------------------------+

| character_set_client | utf8 |

| character_set_connection | utf8 |

| character_set_database | utf8 |

| character_set_filesystem | binary |

| character_set_results | utf8 |

| character_set_server | utf8 |

| character_set_system | utf8 |

| character_sets_dir | /usr/share/mysql/charsets/ |

+--------------------------+----------------------------+

2.5.6.1 Applicable for Identity Services

If you are using any lower versions of MySQL 5.7 such as v5.7.12 or lower during installation, youmay

encounter an error due to which the installation rolls back. This error occurs due to a bug in theMySQL

database.

For more information, refer MySQLBugs

Following are the error details:

l Error: Migration V810_27_01__

DeleteDuplicateAcsUserIdProviderGuidRowsAddUniqueConstraint.sql failed

l SQL State: HY000

l Error Code: 1093

l Error Message: You can't specify target table 'users' for update in FROMclause

l Location:

To resolve this error, run the following commands in theMySQLServer:


https://bugs.mysql.com/bug.php?id=79286


1. Execute the following command before running the installer:

SET GLOBAL optimizer_switch = 'derived_merge=off';

2. Once the installation is done, set derived_mergeON using the following command:

SET GLOBAL optimizer_switch = 'derived_merge=on';

2.5.7 Steps before installing (or) upgrading Kony Fabric with the existing database

Perform the following activities before installing (or) upgrading Kony Fabric with the existing database:

l Take database backup

l Make sure you have previously installed directory

l Take a backup of applications deployed at the server level. (Post installation, take backup of the

changes done to the binaries).

l Post installation (or) upgrade process, replace old authService.key, workspaceService.key, and

ACCOUNTS_ENCRYPTION_KEY (applicable only for identity and workspace components).

2.5.8 Create /tmp Folder

Kony Fabric Installer required a /tmp folder in Linux environment to unpack installer. When the /tmp

folder is not found, the Installer shows I/O exception at the time of unpack exception, shown below:

This must specify in the pre-req of installation. Installation must

required temp folder to unpack MF installer (either default / custom

temp folder).



2.6 Application Servers Prerequisites

2.6.1 Tomcat Prerequisites

2.6.1.1 How to Disable Weak Ciphers

To disable weak ciphers, modify the SSLConnector container attribute inside the server.xml with

the required https connector tag details. The server.xml is located in the \tomcat\conf folder.

Add the following is a sample details to SSL connector tag:

SSLEnabled="true" sslEnabledProtocols="TLSv1.2" ciphers="TLS_ECDHE_

RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_

ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_

SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_

SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,

TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA"

For example, the following is a samplemodified https connector tag:

;

Note: Upgrade the SSLCipher list to the latest available versions.



2.6.1.2 Heap and PermGen Settings

For Oracle Java 7 and Java 8, configure the heap settings for your application servers. In case of

Oracle Java 7, you also need to configure PermGen settings. Tomcat heap and PermGen settings.

Note: FromV8 SP4 FP1HF1 onwards, Java 11 is supported for bundled Tomcat and JBoss

servers.

2.6.2 JBoss Prerequisites



Oracle Java 7, you also need to configure PermGen settings. JBoss heap and PermGen settings.

Note: FromV8 SP4 FP1HF1 onwards, Java 11 is supported for bundled Tomcat and JBoss

servers.

2.6.2.2 Configuration of Database Driver Module

1. Extract the com.zip file.

The unzipped folder structure will be com\mysql\main.

2. Stop the JBoss Application Server.

3. For JBoss configured in the standalonemode, copy the extracted com.zip folder and place it

in the {JBOSS_HOME}/modules/ path. For the domainmode, place the unzipped com.zip

folder (com\mysql\main\) in the {JBOSS_HOME}/modules/ path for each of the

master/slavemachines.

4. Open and edit the appropriate configuration file based on the configured JBossmode.


http://docs.kony.com/8_x_PDFs/com.zip


For example, domain.xml in the domainmode and standalone-full.xml in the

standalonemode. These files are available at {JBOSS_HOME}/domain/configuration

and {JBOSS_HOME}/standalone/configuration folders respectively.

5. Search for the tag and add the

appropriate globalmodule based on the database selected.

For example, add the following code for the domainmode:

6. Save the changes.

7. Start the JBoss Server.

2.6.2.3 Configure the Standalone Existing JBoss

To install Kony Fabric on an existing standalone JBoss, follow the steps to configure the standalone

JBoss:

1. Open the standalone.xml from the /standalone/configuration.

2. Configure Hostname/IP in the standalone.xml file for JBoss, as below:



3. Configure JBoss to listen for remotemanagement requests as below:

l Add under the

l Add following section under the

4. For Engagement Services to work, remove the following subsystem:

|

5. In case of installing all the Kony Fabric components, follow these steps to increase heap size by

setting the JAVA_OPTS in the \standalone\bin\standalone.sh/bat:

l standalone.bat:

set "JAVA_OPTS= -server -Xms2048m -Xmx2048m"

l standalone.sh:

JAVA_OPTS="-server -Xms1024M -Xmx1024M"

2.6.2.4 Configure the Standalone Existing JBoss with Self-Signed Certificate (JBoss 7.1)

If you need to use existing JBosswith self-signed certificate, follow these steps:



1. Add an Existing SSLCertificate to Cacerts. For more details, click How to Add an Existing

Secure Sockets Layer (SSL) Certificate.

2. Copy the keystore file to /standalone/configuration folder.

3. Modify the standalone.xml by adding the following security-realm in the security-

realms section.

Here = Name of the keystore file. (for example, keystore.jks)

= Password of keystore file.

4. In the standalone.xml, add the following https-listener tag for default-server in the

Subsystem urn:jboss:domain:undertow:3.1 .

2.6.2.5 Configure Port Settings for Multinode Loadbalancer Setups

Before installing Kony Fabric on an application server, for the application server to communicate with a

Web Server properly, youmust open the port 80.



How to Disable Weak Ciphers in JBoss

To disable weak ciphers, replace the https-listener under JBoss subsystem/undertow, for

example,

For example, the following is a sample for https connector tag:

For example, the following is a samplemodified https connector tag:



2.6.3 WebLogic Prerequisites



Oracle Java 7, you also need to configure PermGen settings. WebLogic heap and PermGen settings

2.6.3.2 Security Configurations

To add environments to Kony Fabric Console, add the following configuration inside the security-

configuration tag of the config.xml file of WebLogic Server.

false

After configuring the security-configuration tag, restart the server fromWebLogic console. In

case ofWebLogic cluster, restart all servers fromWebLogic console.

2.6.4 WebSphere Prerequisites



Oracle Java 7, you also need to configure PermGen settings. WebSphere heap settings

2.6.4.2 How to Enable TLS v1.2 Protocol

If your Kony Fabric instance onWebSphere that is updated with IBM Java 7 SDK fix pack 7.0.9.60, the

identity fails to log-in to Salesforce. Because the TLSv1.0 protocol is disabled on Kony Fabric and on

the other external sites that Kony Fabric wants to connect - for example, Salesforce. To avoid log-in

issueswith external back-ends, add the -D parameters into JVMArguments.

To add -D parameters in the JVM arguments, follow these steps:

1. Log intoWebSphere Admin Console.

2. Go to Application servers > server1 > Process definition > Java Virtual Machine.


http://docs.kony.com/konylibrary/konyfabric/resources/websphere_faqs.htm#Heap_WAS


3. Under the Configuration > General Properties > Generic JVM arguments, add the following -

D parameter:

-Dhttps.protocols=TLSv1.1,TLSv1.2 -Dcom.ibm.jsse2.overrideDefaultTLS=true

4. Go to Security > SSL certificate and key management > SSL configurations >

NodeDefaultSSLSettings > Quality of protection (QoP) settings.

5. Under General Properties > Protocol, select the TLSv1.1 protocol.

6. If your Kony Fabric is installed onWebSphere with IBM Java 8, add the following parameter to

JVM arguments:

-Dcom.ibm.jsse2.overrideDefaultTLS=true

For more details, refer to Salesforce disabling TLS 1.0


https://help.salesforce.com/articleView?id=000221207&type=1


2.6.4.3 How to Retrieve Server Groups in WebSphere when using Admin Security with TLSv1.2

1. InWebSphere Admin Console, download the default SSL certificate.

2. Import certificate into IBM Java path: {IBM_PATH}/{JAVA}/jre/lib/security/cacerts

For example, /opt/IBM/WebSphere/AppServer/java_1.8_64/jre/lib/securitykeytool -importcert -keystore cacerts -

storetype jks -file /opt/IBM/WebSphere/AppServer/java_1.8_

64/jre/lib/security/17229154223.crt -alias 172.29.154.223

3. If you are prompted for a password, enter the password:

l Default password: changeit



4. Select the Enable administrative security check box.

5. Set the following JVM arguments:

l Set JVM heap size

l Set JVM generic arguments



6. Restart the application server after setting JVMarguments.

7. Execute the installer with LAX_VM.

For example, ./KonyMobileFabricInstaller.bin LAX_VM/opt/IBM/WebSphere/AppServer/java_1.8_64/bin/java

8. Provide the default path of certs in the installation wizard. For example,

/opt/IBM/WebSphere/AppServer/profiles/AppSrv01/etc



2.6.4.4 Updating the SSL Socket Factory Providers

l See that the SOAP_CONNECTOR_PORT is open.

l If theWAS server is secured, set the following in java/jre/lib/security/java.security:

l ssl.SocketFactory.provider=com.ibm.jsse2.SSLSocketFactoryImpl

(for Java7)

l ssl.ServerSocketFactory.provider=com.ibm.jsse2.SSLServerSocke

tFactoryImpl (for Java8)

Refer Configure SSL for WebSphere.

2.6.4.5 NGINX Load Balancer Configuration

l Following are the URLmappings for the Load Balancer configuration:

l https:///mfconsole -> https:///mfconsole

l https:///accounts -> https:///accounts

l https:///workspace -> https:///workspace

l https:///authService -> https:///authService

l https:///admin -> https:///admin

l https:///services -> https:///services

l https:///middleware -> https:///middleware

l https:///apps -> https:///apps

l https:///metrics -> https:///metrics

l https:///kpns -> https:///kpns

l Visualizer runs on localhost: 5000, by default. Hence it must be allowed. Also allow 8888 if you


https://www.ibm.com/support/knowledgecenter/en/SSFUEU_7.4.0/op_grc_admin/t_adm_update_ssl_socketfactory_providers.html


want to test web applications locally. Set the following HTTP response header X-Frame options

to allow the required localhost:

l add_header X-Frame-Options "ALLOW-FROM localhost:5000";

l add_header X-Frame-Options "ALLOW-FROM localhost:8888";


3. Kony Fabric Topology and Components Kony Fabric Installation Guide - LinuxVersion1.11

3. Kony Fabric Topology and Components

Kony Fabric topology explains the logical arrangement of various components, such as, console,

identity services, developer environment, and production environment.

In design time you configure appswith services, and publish them to a developer environment. After

you confirm the changes in the apps, these appswill need to be published to a production

environment. Authorized users can access apps onmobile devices from a production environment.



An overview of the Kony Fabric architecture and components follows:



An overview of the Kony Fabric deployment architecture follows:

The following table describes the components of Kony Fabric:



Convention Description

Identity This component validates user accounts and applications for authentication

and authorization.

l Authentication identifies log-on credentials of a user.

l Authorization allows or denies access to resources based on a user's

role.

Identity is used to authenticate and authorize runtime and design-time users.

Accounts The accounts component contains information about what a user can do,

such as create other users, delete users, create environments, delete

environments, and publish apps to an environment.

This component uses auth service for authorizing requests based on user

roles.

Workspace

(WaaS)

Workspace configures MBaaS services (applications, identity, integration,

orchestration, and engagement services). After these services are

configured, these services must be published to respective

clouds/environments so that the services are available for run-time use.

Console/Portal The console/portal is the user interface for configuring services for an

application.

API Developer

Portal

Kony Fabric Developer Portal feature lets you create a Portal for exposing

APIs created using Kony Fabric. Developers from internal and external

partner teams can access the portal created to explore and test the APIs

You can directly access your Kony Developer Portal in Kony Fabric Console.


http://docs.kony.com/konylibrary/konyfabric/kony_fabric_user_guide/Default.htm#KonyDevPortal.htm?TocPath=Features|_____16


Convention Description

Environments

(Engagement

Services,

Integration

Services)

This component adds runtime capabilities to apps, such as engagement

services, and integration services.

Admin Admin provides the capability to list down the set of services published and

test the services shown as well. Also you can view list of published apps and

provides the delete apps functionality. In Kony Cloud, changing the log levels

and checking the logs features are available as the cloud is managed by

Kony. You can also view reports if you are usingmetrics module. This is an

optional component.

For more details, refer to http://docs.kony.com/konylibrary/integration/kony_

fabric_integration_ service_admin_console_user_guide/Default.htm

Middleware This component exists between amobile device and an endpoint server. It

receives a request from amobile device, sends it to an endpoint server,

fetches the response from the backend and provides the required information

to the device in the JSON format.

Services Services component is used only when Kony Fabric is integrated. It has same

runtime capabilities as themiddleware.

Note: To use Kony Sever with Kony Fabric integrated, you can ignore

themiddleware.war. Similarly when you use only standalone Kony

Server, you can ignore the services.war.


https://docs.kony.com/konylibrary/integration/kmf_integrationservice_admin_console_userguide/Default.htmhttps://docs.kony.com/konylibrary/integration/kmf_integrationservice_admin_console_userguide/Default.htm


Note: The Kony Fabric components can be configured on one node or separate nodes - for

example, you can use one of the following choices:

- Install All Components on one node.

- Install Kony Fabric Console, Identity Services, Integration Services, and Engagement Services

on separate nodes.

For frequently asked questions and troubleshooting, refer to FAQs and Troubleshooting.

3.1 Developer Environment

For development environment, a developer can preferably install Kony Fabric components in a

standalonemode (single node) on a local environment. For more details, refer to Single Node

Installation.

Important: Kony Fabric Installer supports Tomcat, JBoss,WebLogic, andWebSphere.

Tomcat on single-node only. For multi-node installation on Tomcat, refer to Kony FabricManual

Install Guide.

Kony Fabric Consolidated installer supports JBoss on single node (Standalone Mode) andmulti-

node (Domain Mode).

Important: By default Kony Fabric Consolidated installer supportsmemcached server only in case

of multinode installation.

By default Kony Fabric Consolidated installer is not enabled with memcached server for single

node installation (Tomcat and JBoss.) If you want usememcached server, follow manual steps

provided at How to Install Memcached Server.


http://docs.kony.com/konylibrary/mf_manual_install.htmhttp://docs.kony.com/konylibrary/mf_manual_install.htm


3.2 Production Environment

For production environment, domainmode (multinode) installation with HTTPs protocol is preferred.

Multinode installation helps to enable better performance, high availability, and load balancing. For

more details, refer to Multinode Installation.


4. Kony Fabric Installation on Single Node and

Multinode

Kony Fabric Installation Guide -

LinuxVersion1.11

4. Kony Fabric Installation on Single Node and Multinode

You can install Kony Fabric in a domainmode (multinode) or a standalonemode (single node) on a

local environment.

The following table details Kony Fabric installation supported for a single node andmultinode

installations.

Kony Fabric Components can be installed Single Node Multinode

Console

l Workspace

l Accounts

Identity

Integration

l Admin

l Middleware

l Services

l Metrics

API Developer Portal

Engagement Services


5. Pre-Installation Tasks Kony Fabric Installation Guide - LinuxVersion1.11

5. Pre-Installation Tasks

5.1 Download Kony Fabric Installer

l Download KonyFabricSetup.tar.gz file from http://community.kony.com/downloads and

extract the file. To download Kony Fabric installer from the community portal, follow these steps:

1. Log in to http://community.kony.com/downloads. You can obtain a user name and

password from your sales representative or partner.

2. Click the Kony Fabric tab.

3. Select the specific release version from the Kony Fabric Installer (Consolidated

Installer for all features) drop-down list and then click on the specific release related files

you want to download. For example, if you want to download Kony Fabric 8.0.0

GA installer, select the 8.0.0 GA version from the drop-down list, and then click

the Installer_Linux link. .

The KonyFabricSetup.tar.gz file contains the following files:

n KonyFabricInstaller-x.x.x.x_GA.bin

n installer.properties - This file is required for silent installation.

n README.txt

5.2 Steps before installing (or) upgrading Kony Fabric with the existing

database

Perform the following activities before installing (or) upgrading Kony Fabric with the existing database:

l Take database backup

l Make sure you have previously installed directory


http://community.kony.com/downloadshttp://community.kony.com/downloads


l Take a backup of applications deployed at the server level. (Post installation, take backup of the

changes done to the binaries).

l Post installation (or) upgrade process, replace old authService.key, workspaceService.key, and

ACCOUNTS_ENCRYPTION_KEY (applicable only for identity and workspace components).

5.3 Create /tmp Folder

Kony Fabric Installer required a /tmp folder in Linux environment to unpack installer. When the /tmp

folder is not found, the Installer shows I/O exception at the time of unpack exception, shown below:

This must specify in the pre-req of installation. Installation must

required temp folder to unpack MF installer (either default / custom

temp folder).

5.4 Install Memcached Server

Memcached is a high-performance, distributedmemory object caching system, generic in nature, but

intended for use in speeding up dynamic web applications by alleviating database load.

5.5 libevent (memcached dependency)

The libevent API provides amechanism to execute a callback function when a specific event

occurs on a file descriptor or after a timeout has been reached. Furthermore, libevent also support

callbacks due to signals or regular timeouts.

libevent is meant to replace the event loop found in event driven network servers. An application

just needs to call event_dispatch() and then add or remove events dynamically without having to

change the event loop. Refer to http://libevent.org/

To install libevent (memcached dependency), follow these steps:

1. First, checkwhether libevent is installed on your computer. To check, type the below

command in your Linux terminal:


http://libevent.org/


whereis libevent

2. If you do not find libevent on your system, download and install it. Download libevent-

1.4.8-stable.tar.gz. Refer to http://libevent.org/

3. Extract the libevent-1.4.8-stable.

4. In your Linux terminal, type the below command:

cd libevent-1.4.8-stable

./configure

make

make install

5. Type the below command to create a symlink to libevent

ln -s /usr/local/lib/libevent-1.4.so.2 /usr/lib

Now that you have installed the dependencies, install thememcahced server.

5.6 Memcached Server

To install Memcached Server, follow these steps:

1. Download thememcached server.

2. Extract the zip file.

3. Open the Linux terminal.

4. Go to ../memcache directory.


http://libevent.org/


5. Run the following command:

tar xfz memcached-1.2.6.tar.gz

cd memcached-1.2.6

./configure

make

make install

memcached -d -m 1024 -u root -l 127.0.0.1 -p 11211

Important: RunMemcached as a daemon (d = daemon, m = memory, u = user, l = IP to

listen to, p = port)

5.7 Configure Load Balancers for Sending Host Information in

Multinode

When user is installing Kony Fabric onmultinode environment, the user should checkwhether the

parameter: proxypreserveHost is set to On in the Loadbalancer configuration file to send host in

the headers.

If the proxypreserveHost is not configured, the loadbalancer will not send host in the headers. Users

cannot launch Kony Fabric Console.

The above configuration is based on the loadbalancer.

For example:

l For Apache: preserveHost On

l For HAProxy: preserve host flag is not required.



5.7.1 Tuning File Descriptor Limits on Linux

To run the enterprise applications successfully on Linux distribution, youmay have to update some of

the default kernel parameter settings.

In Linux, there is a limit to the number of file descriptors that a process can open. The default is set to

1024 per process. You can increase this limit for optimum performance.

To increase the file descriptor limit, follow these steps:

Note: Based on the user you create for your app server and database, increase the file descriptor

limit for the user accordingly.

For example: In this procedure, the created user isWebLogic for running theWebLogic server.

You can follow these steps to increase the file descriptor limit based on your application server and

database such as Tomcat, JBoss,WebLogic, or WebSphere.

1. Log on to Linux system and change toWebLogic user.

2. Enter the following command:

[weblogic@localhost ~]$ ulimit -n

If the result is displayed as 32768, skip the following steps. The limit is set for optimum

performance. Else, perform the steps to increase the limit.

3. Increase the file descriptors limits.

You can limit WebLogic user to specific limits by editing /etc/security/limits.conf file.

a. Enter the following command to edit the file:

vi /etc/security/limits.conf



b. SetWebLogic user soft and hard limits by adding the following lines:

weblogic soft nofile 32768

weblogic hard nofile 32768

c. Save and close the file. Log out and log back in again.

d. Verify the changes by entering the following command:

[weblogic@localhost ~]$ ulimit -n

It should display 32768.

4. Restart your App server

5.8 Download and Install the Unrestricted JCE Policy Files

In accordance with the United States of America export restrictions, Java that is bundled with the

server has limited encryption key sizes that can be used in the server operation. In order to

successfully convert signed client certificates or sign server Certificate Signing Request for use in the

server, youmust download the following bundled encryption policy files and replace themwith the

unrestricted files published by the Java vendor.

l local_policy.jar

l US_export_policy.jar

To Configure Unrestricted JCE Policy Files for WebSphere, follow these steps:

For WebSphere, follow the steps provided in the link:

https://www.ibm.com/support/knowledgecenter/SS8JFY_

7.5.0/com.ibm.lmt75.doc/com.ibm.license.mgmt.security.doc/lmt_scr_downloading_installing_jce_

policyfiles.html

To Configure Unrestricted JCE Policy Files for Tomcat, JBoss, or WebLogic, follow these steps:


https://www.ibm.com/support/knowledgecenter/SS8JFY_7.5.0/com.ibm.lmt75.doc/com.ibm.license.mgmt.security.doc/lmt_scr_downloading_installing_jce_policyfiles.htmlhttps://www.ibm.com/support/knowledgecenter/SS8JFY_7.5.0/com.ibm.lmt75.doc/com.ibm.license.mgmt.security.doc/lmt_scr_downloading_installing_jce_policyfiles.htmlhttps://www.ibm.com/support/knowledgecenter/SS8JFY_7.5.0/com.ibm.lmt75.doc/com.ibm.license.mgmt.security.doc/lmt_scr_downloading_installing_jce_policyfiles.html


1. Go to the Oracle Java SE download

page http://www.oracle.com/technetwork/java/javase/downloads/index.html

2. Scroll down to Additional Resources section. You will find Java Cryptography Extension

(JCE) Unlimited Strength Jurisdiction Policy File.

3. Download the JCE version that matches your installed JVM, for example,

UnlimitedJCEPolicyJDK.zip.

4. Extract the downloaded zip file. The UnlimitedJCEPolicyJDK.zip file

contains the following files:

l local_policy.jar

l US_export_policy.jar

l README.txt

5. Copy the .jar files (local_policy.jar and US_export_policy.jar) to /lib/security/

Note: These jars will be already there so you have to overwrite them. Back up the existing

jars before you overwrite themwith new jars.

6. Restart your application server.

After the encryption policy files are installed, you should be able to successfully convert signed

client certificates for use in the server.

l Database Pre-Installation Tasks

l Application Servers Pre-Installation Tasks


http://www.oracle.com/technetwork/java/javase/downloads/index.html


5.9 Database Pre-installation Tasks

5.9.1 MySQL

5.9.1.1 Increase innodb_log_file_size in my.cnf file - MySQL

Note: If the size of your application ismore than the variable size of server database, an error

occurs. Ensure the variable max_allowed_packet_size is set to a higher value than the

application size.

To avoid this error, increase the global variable in the server database.

- Modify the SQL Statement to Set global max_allowed_packet=10*1024*1024.

In this statement the server database size is configured to 10-Megabytes(MB).

For example, if your application size is 1024-kilobytes (1 MB) and you try to publish an application

fromKony Studio of 2048-Kilobytes(2MB) an error appears while publishing. Increase the size of

server database to a valuemore than 2048-Kilobytes (2 MB) for publishing the application.

For innodb_log_file_size, the value is set to 48M by default.

In the my.cnf file, increase the innodb_log_file_size =

5.9.2 Oracle

5.9.2.1 Create Locator Component for Oracle Database

By default when anOracle database is created using DBCA or Oracle Installer Enterprise Edition with

create database option, the SDO_Geometry object type will be default created as part of locator

component.

If the database is created using scripts by followingmanual process, then the Locator component will

not be created. You need to create the locator component for your Oracle database separately.



Verify if the locator component is already installed

Run the below queries in the Oracle database used for Installer:

Select comp_name, version, status from dba_registry where upper

(comp_name) like '%MEDIA';

Select username from dba_users where username = 'MDSYS'

If the above statements return zero records andMDSYS schema is not created, then follow these

steps to create theMDSYS schema and install the locator component manually.

The following steps need to be executed by a SYSDBA only.

To create Locator or MDSYS schema, follow these steps in option #1 or option #2:

l Option #1. Follow DBCA or Oracle Installer enterprise edition with create database option to

create Oracle database. Use the same database during Kony Fabric Installation.

l Option #2. Run the following scripts on the database to be used for Kony Fabric, where Oracle

locator is not installed.

i. Connect as SYSDBA

sqlplus "/as sysdba"

ii. CreateMDSYS User if not exists:

Create user mdsys identified by secret default tablespace

sysaux

A secret is a dummy password. Provide the password that is used duringMDSYS user

creation.



iii. Run the below SQL to grant the privileges:

SQL>@?/md/admin/mdprivs.sql

iv. Connect to MDSYS user:

Conn mdsys/secret

A secret is dummy password. Provide the password that is used duringMDSYS user

creation.

v. Run the below SQL to create the locator objects:

SQL>@?/md/admin/catmdloc.sql

All the above .sql files executed will be available as part of database software md folder.

After executing the above steps, execute the following query to check if everything is fine:

Select * from dba_objects where owner='MDSYS' and object_name

like 'SDO%';

Once theOracle locator is installed, run the Installer to setup Kony Fabric. The system should

not throw the error: Invalid Data Type SDO_GEOMETRY

Note: As per Oracle 12cRelease 1 (12.1) documentation, Oracle Locator is available with

the following editions:

l Oracle Database Standard Edition One

l Oracle Database Standard Edition



l Oracle Database Enterprise Edition

l Oracle Database Express Edition (Oracle Database XE)

For more information regarding Oracle licensing, refer to Oracle Database documentation.

Important: SDO_GEOMETRY is part of Oracle Locator, which is free and does not need

additional licensing, but this is bundled with Oracle Spatial, which is part of enterprise

edition licensing.

For more details, please go through the followingOracle reference document:

Doc ID 1066837.1 :- Oracle Spatial andOracle Locator Licensing Information.

5.9.3 Maria DB

5.9.3.1 Increase the table_definition_cache and table_open_cache values

To increase the values of table_definition_cache and table_open_cache inMaria DB, execute the

following commands or update the ini or cnf file with:

set GLOBAL table_definition_cache=4000;

//For table_definition_cache; 4000 is the minimum value

set GLOBAL table_open_cache=2000; //For table_open_cache; 2000 is the

minimum value

5.10 Application Servers Pre-Installation Tasks

5.10.1 JBoss

5.10.1.1 Configure Load Balancer as Proxy in JBoss Multinode Setup (Optional if SSL Offloading at

Load Balancer)

1. Navigate to your Kony Fabric install directory and open the domain.xml file.



2. In the domain.xml, update all the http connector tags to include the scheme and

proxy-port details.

For example,

5.10.1.2 Update Listen Interfaces in host.xml for JBoss Cluster

For JBoss domainmode installation, configure the following interface address.

1. Go to /domain/configuration/host.xml

2. In place of existing interfaces xml tag, replace the default content with below details:



5.10.1.3 Comment the javax-persistence-module for Kony Engagement Services on JBoss Cluster

If you are installing Kony Engagement Services on JBoss domainmode installation, comment the

below persistencemodule in the domain.xml file.

1. Go to /domain/configuration/domain.xml

2. Comment the below xml tag. Comment the persistencemodule at four places in the

domain.xml file.



5.10.1.4 How to Configure Connector - JBoss

For importing an app to Kony Fabric Console properly, youmust have set the enough value for the

max-post-size in the standalone.xml file. For more details, refer to Configure Connectors -

JBoss.

5.10.1.5 How to Increase Timeout and Maximum Heap Size Settings - JBoss

Restarting JBoss can cause deployment failures. To avoid these failures, youmust increase the JBoss

timeout andmaximumheap size settings for cluster.

To increase memory and timeout settings in JBoss (pre-configured JBoss), follow these steps:

1. In the standalone.bat or .sh file, add the following properties to Java_opts:

-Djboss.as.management.blocking.timeout=8400

-Xms2048m

-Xmx4096m

2. In the /standalone/configuration/standalone.xml file, add

config deployment-timeout=”8400” in the deployment-scanner subsystem,

shown below:

To increase memory and timeout settings in JBoss Multinode, follow these steps:


http://docs.kony.com/konylibrary/konyfabric/kony_fabric_manual_install_guide/Default.htm#Configuring_Connectors_and_WAR_JBoss.htmhttp://docs.kony.com/konylibrary/konyfabric/kony_fabric_manual_install_guide/Default.htm#Configuring_Connectors_and_WAR_JBoss.htm


1. In the domain.bat or .sh file, add the following properties to Java_opts:

-Djboss.as.management.blocking.timeout=8400

2. Set the heap size for the selected server groups as below in the /domain/configuration/domain.xml.

l Search for tag in the domain.xml and set the heap size in the JVM

settings.

5.10.1.6 How to Configure Engagement Services - JBoss

When Engagement is selected as Fabric Component, based on the selected JBossmode, youmust

add the following parameter in the JVMarguments present in standalone.bat/domain.bat( for

Windows) or standalone.sh/domain.sh(for Unix):

-DKMS_CORE_VERSION=2

5.10.2 WebLogic

5.10.2.1 Increase JVMmemory for WebLogic Server

For a successful deployment of Kony FabricWar files onWebLogic server, increase the PermGen

memory inWebLogicmemory arguments. For more details, refer to Heap and PermGen Settings

5.10.2.2 Place MS SQL Server Connector JAR in WebLogic Classpath

If you want to install MS SQLServer Database withWebLogic, then you need tomanually place

the mssql-jdbc-7.0.0.jre8 file in theWebLogic classpath.

Important: To add the mssql-jdbc-7.0.0.jre8 file in theWebLogic classpath, perform the

following steps before starting Kony Fabric installation.



To add mssql-jdbc-7.0.0.jre8 file in the WebLogic classpath, follow these steps:

1. Place the mssql-jdbc-7.0.0.jre8 in the /server/lib folder.

2. Edit the commEnv.cmd/sh script in the /oracle_common/common/bin.

3. Prepend your JAR file to theWEBLOGIC_CLASSPATH environment variable like set WEBLOGIC_CLASSPATH=%WL_HOME%\server\lib\ mssql-jdbc-

7.0.0.jre8;%JAVA_HOME%\lib\tools.jar;%PROFILE_CLASSPATH%;%ANT_

CONTRIB%\lib\ant-contrib.jar;%CAM_NODEMANAGER_JAR_PATH%

4. Restart the server.

5.10.2.3 Configure Hibernate Dialect in WebLogic (only for WebLogic)

For the Engagement Services to work with Oracle DB, set the following parameter in the

setDomainEnv.sh and run the setDomainEnv.sh before starting theWebLogic server.

-Dhibernate.dialect=org.hibernate.dialect.Oracle10gDialect

5.10.2.4 How to Configure Engagement Services - WebLogic

When Engagement is selected as Fabric Component, youmust add the following parameter in the

JVMarguments present in domain-name\StartWebLogic.cmd (for Windows) or domain-

name\StartWebLogic.sh (for Unix):


5.10.3 WebSphere

5.10.3.1 Configure Property Settings for Logs - (only for WebSphere)

Tomake the LOG_ROOT variable accessible to applications, set the variable under custom properties

of process definition.

1. Log in toWebSphere Admin Console.

2. Go to Servers > Server Types > WebSphere application servers.



3. Click Application Server. (For example, server1, it is the default server created with

WebSphere installation).

4. Go to Server Infrastructure section, expand Java and Process Management and click

Custom Properties.

5. Go to Custom Properties, click Java Virtual Machine.

6. Click New to add LOG_ROOT property.

7. Enter LOG_ROOT as name.

8. Enter ${LOG_ROOT} as value.



9. Save the configuration.

After setting the LOG_ROOT variable under custom properties, logs are created under \IBM_WebSphere\WebSphere\AppServer\profiles\AppSrv02\logs\konymflogs

5.10.3.2 Install Kony Fabric on a Remote WebSphere Server with Global Security Enabled

To get server groups of a remoteWebSphere Server using a SOAP port, follow these steps before

running the Kony Fabric Installer.

1. Install IBMWebSphere SDK on a systemwhere you want to run the Kony Fabric Installer.

2. Add the SSL certificate to DMGR. For more information, refer to How to Add an Existing Secure

Sockets Layer (SSL) Certificate.

3. Launch a Terminal window.

4. Go to the location of the Kony Fabric Installer.



5. Run the Kony Fabric Installer as follows:

KonyFabricInstaller-7.x.bin LAX_VM

5.10.3.3 Support Deployment of apiportal.war on WebSphere Server

To support deployment of the apiportal.war onWebSphere, make the following configuration

changes:

l Disable the following option

Go to Servers > Server Types > WebSphere application servers > server_name > Session

management > Enable cookies > Restrict cookies to HTTPS sessions.

l Remove the row matching with domain=*, name=JSESSIONID, path=/ in the

Security > Global Security > Programmatic session cookie configuration.

5.10.3.4 Updating authService.war and accounts.war for WebSphere 9

1. Add the following -D params in the jvm properties:

“com.ibm.websphere.jaxrs.server.DisableIBMJAXRSEngine=true”

2. In the server configuration, expand container services. In the Default

JAXRS provider settings change the JAX-RS Provider to 2.0spec.

5.10.3.5 How to Configure Engagement Services - WebSphere

When Engagement is selected as Fabric Component, youmust add the following parameter in the

Generic JVM arguments section of theWebSphere Administration Console under Application

Servers > serverName > Process Definition > Java Virtual Machine:



6. Installation Modes - Kony Fabric Kony Fabric Installation Guide - LinuxVersion1.11

6. Installation Modes - Kony Fabric

You can install Kony Fabric by any of the followingmodes:

Important: Ensure that you have the required hardware and access to the supporting software as

mentioned in the Prerequisites section and performed the steps asmentioned in the Pre-

installation Tasks section.

l Installing Kony Fabric - Console-mode (for command-line-driven installations)

l Installing Kony Fabric - Silent-mode (for working with limited or no user interaction)



6.1 Installing Kony Fabric - Console-mode (for command-line-driven

installations)

This section of the document provides you with the instructions for installing and configuring Kony

Fabric on Linux.

Note: If you install Kony Fabric Console on a partition different from the user's home directory,

youmust have read/write execute permissions.




Important: Make sure you have proper administrative rights to install Kony Fabric on your

computer. You also need a user where Kony Fabric will be installed.

The directory contains the log files logging each invocation of the installer. Tomake

problem identification easier, provide these log files to Konywhen reporting an issue.

You can install Kony Fabric on Tomcat, JBoss,WebLogic, or WebSphere servers.

l Installing Kony Fabric on Tomcat

l Installing Kony Fabric on JBoss

o StandaloneMode (Single node installation in bundled JBoss)

o StandaloneMode (Single Node installation in a pre-configured JBoss)

o DomainMode (Multi node installation in pre-configured JBoss)

l Installing Kony Fabric onWebLogic

l Installing Kony Fabric onWebSphere



6.1.1 Installing Kony Fabric on Tomcat - Console-mode

Note: If a user installs Kony Fabric Console on a partition different from the user's home directory,

the user must have read/write execute permissions.

This section of the document provides you with the instructions for installing and configuring Kony

Fabric Console on a single node. For multi-node installations, refer the Deployment Checklist and

Example Case Studies.




Make sure you have proper administrative rights to install Kony Fabric on your computer.

You also need a user where Kony Fabric will be installed.

The directory contains the log files logging each invocation of the installer. Tomake

problem identification easier, provide these log files to Konywhen reporting an issue.

To install Kony Fabric Console on Tomcat using the installer, follow these steps:

1. Execute the following command to switch to the user that you created.

# su - username

2. Press Enter. The system prompt you to enter the password.

3. Enter the password, and press Enter.

4. Unzip the KonyFabricSetup.tar.gz file, and navigate to the folder KonyFabric_Installer_

Linux.

5. Start the ./KonyFabricInstaller-x.x.x.x_GA.bin file by executing the following command:


https://docs.kony.com/konylibrary/konyfabric/kony_Fabric_deployment_guide/Default.htm#Deployment_Checklist.htmhttps://docs.kony.com/konylibrary/konyfabric/kony_Fabric_deployment_guide/Default.htm#Deployment_Checklist.htm


Preparing to install...

Extracting the JRE from the installer archive...

Unpacking the JRE...

Extracting the installation resources from the installer

archive...

Configuring the installer for this system's environment...

Launching installer...

=================================================================

==============

Kony Fabric (created with InstallAnywhere)

------------------------------------------------------------------

-------------

Preparing CONSOLE Mode Installation...

=================================================================

==============

Introduction

------------

This installer will install a new or upgrade an existing instance



of Kony Fabric.

Kony Fabric is a set of enterprise-grade mobile infrastructure

services

that makes it easy to build amazing apps that integrate and

support all of

your backend systems. With open, standards-based development,

scalable and

secure services, and exceptional agility, enterprises can

dramatically reduce

the cost and complexity of enterprise mobility projects.

To proceed with installation, please confirm that the following

prerequisites

have been met -

1. Database server for installation. MySQL, MariaDB, Oracle, MS

SQL Server

and DB2 are the

supported databases. MariaDB is supported for Tomcat/JBoss

only.

2. Corresponding database user should exist and that user should

have all required

privileges as per the documentation.

3. If you want to use your existing SSL certificate then please

have the SSL

certificate

mapped to the domain name you want to use.

4. If you want to install with JBoss/ WebLogic/ WebSphere as an



option for application

server, then have the application server preconfigured. Please

note that single node

JBoss is also bundled as part of the installer, in case you

want to install afresh.

To change input, type 'back' to go back to the previous step.

To cancel the installation, type 'quit' at any time.

For troubleshooting & help on the installation, use

http://docs.kony.com/konylibrary/konyfabric/resources/installer.h

tm

For getting started on Kony Fabric, refer

http://community.kony.com/documentation

For upgrading Kony Fabric, refer online documentation.

If you have more questions or feedback, you can join our

http://community.kony.com/ or, raise a

http://support.kony.com/.

->1- Continue with Installation.

2- Abort Installation.

ENTER THE NUMBER OF THE DESIRED CHOICE, OR PRESS TO ACCEPT

THE

© 2020 by Kony, Inc. All rights reserved 75 of