Configuring authentication profiles
Deployment Manager provides default operator IDs and authentication profiles. You must enable the default operator IDs and configure the authentication profiles that the orchestration server uses to communicate with the candidate systems.
Configure the default authentication profile by following these steps:
On the orchestration server, enable the DMReleaseAdmin operator ID and specify its password.
Log in to the orchestration server with [email protected]/install.
In the header of Dev Studio, click DMReleaseAdmin.
, and then clickOn the Edit Operator ID rule form, click the Security tab.
Clear the Disable Operator check box.
Click Save.
Click Update password.
In the Change Operator ID Password dialog box, enter a password, reenter it to confirm it, and then click Submit.
Log out of the orchestration server.
On each candidate system, which includes the development, QA, staging, and production systems, enable the DMAppAdmin operator ID.
If you want to create your own operator IDs, ensure that they point to the PegaDevOpsFoundation application.
Log in to each candidate system with [email protected]/install.
In the header of Dev Studio, click DMAppAdmin.
, and then clickIn the Explorer panel, click the operator ID initials, and then click Operator.
On the Edit Operator ID rule form, click the Security tab.
Clear the Disable Operator check box.
Click Save.
Click Update password.
In the Change Operator ID Password dialog box, enter a password, reenter it to confirm it, and then click Submit.
Log out of each candidate system.
On each candidate system, update the DMReleaseAdmin authentication profile to use the new password. All candidate systems use this authentication profile to communicate with the orchestration server about the status of the tasks in the pipeline.
Log in to each candidate system with the DMAppAdmin operator ID and the password that you specified.
In the header of Dev Studio, click
.Click DMReleaseAdmin.
On the Edit Authentication Profile rule form, click Set password.
In the Password dialog box, enter the password, and then click Submit.
Save the rule form.
On the orchestration server, modify the DMAppAdmin authentication profile to use the new password. The orchestration server uses this authentication profile to communicate with candidate systems so that it can run tasks in the pipeline.
Log in to the orchestration server with the DMAppAdmin user name and the password that you specified.
In the header of Dev Studio, click
.Click DMAppAdmin.
On the Edit Authentication Profile rule form, click Set password.
In the Password dialog box, enter the password, and then click Submit.
Save the rule form.
If your target environment is SSL-enabled with private certificates, configure the Deployment Manager connectors so that they can receive and process tokens by doing setting the keystore:
In the header of Dev Studio, create and configure a keystore. For more information, see Creating a keystore for application data encryption.
Configure the Pega-DeploymentManager/TrustStore dynamic system setting to reference the keystore ID by clicking
.Click the Pega-DeploymentManager/TrustStore dynamic system setting.
On the Settings tab, in the Value field, enter the ID of the keystore that you created in the previous step.
Click Save.
For more information about dynamic system settings, see Creating a dynamic system setting.
Do one of the following actions:
- If you are upgrading to Deployment Manager 4.8.x, resume the post-upgrade procedure from step 2. For more information, see Running post-upgrade steps.
- If you are not upgrading, continue the installation procedure. For more information, see Configuring the orchestration server.
- Understanding default authentication profiles and operator IDs
When you install Deployment Manager on all the systems in your pipeline, default applications, operator IDs, and authentication profiles are installed. Authentication profiles enable communication between the orchestration server and candidate systems.
Previous topic Configuring systems in the pipeline Next topic Understanding default authentication profiles and operator IDs