CABI 3.2 Upgrade of Tomcat 5.5 to Tomcat 6.0.18

Products

• CA Virtual Privilege Manager
• CA Privileged Identity Management Endpoint (PIM)
• CA Privileged Access Manager (PAM)

Issue/Introduction

CABI 3.2 Upgrade of Tomcat 5.5 to Tomcat 6.0.18

Pre-Migration Setup details

This document was created to address a number of concerns with the aging Apache Tomcat version 5.5 and a number of vulnerabilities including CVE-2007-0774 (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0774). In the following steps, we will perform a new installation of Apache Tomcat 6.0.18 and deploy the necessary CABI packages within Tomcat.

This document assumes that CABI 3.2 is installed in the following location. You may have to modify these steps to suit your installation. (These are the installation defaults.)

CABI 3.2: C:\Program Files (x86)\CA\SC\CommonReporting3

Business Objects: C:\Program Files (x86)\CA\SC\CommonReporting3\BusinessObjects Enterprise 12.0\

Begin Upgrade Process

1. Download the Tomcat 6.0 service installer from:
   
   http://archive.apache.org/dist/tomcat/tomcat-6/v6.0.18/bin/apache-tomcat-6.0.18.exe
   
   
2. Download the JDK 5.0 Update 22 32bit or 64bit from:
   
   http://www.oracle.com/technetwork/java/javase/downloads/index-jdk5-jsp-142662.html
   
   
3. Install the JDK 5.0 32bit or 64bit package.
   
   
4. Stop existing Tomcat instance. Install the Tomcat 6.0 service package and point to the downloaded JDK that was installed in step 3, when prompted. You need to point to your new JDK: C:\Program Files\Java\jdk1.5.0_22 for this install. When choosing the Destination path, please use the following location to place Tomcat in the CABI program directory.
   
   

   <Please see attached file for image>

   
   
   
5. In services.msc, right click on Apache Tomcat 5.5.20 and click properties. Set the service to Disabled.
   
   

   <Please see attached file for image>

   
   
   
6. Ensure that Tomcat 6 starts successfully by launching it from the Services console. Stop Tomcat once verified.
   
   
7. Once Tomcat 6 has been successfully installed, navigate to Start >> Programs >> Apache Tomcat 6.0 >> Configure Tomcat . Once open, navigate to the Java tab.
   
   

   <Please see attached file for image>

   
   
   Insert the following values:
   
   Java Virtual Machine:
   
   C:\Program Files (x86)\CA\SC\CommonReporting3\javasdk\jre\bin\server\jvm.dll
   
   Java Classpath:
   
   C:\Program Files (x86)\CA\SC\CommonReporting3\Tomcat6\bin\bootstrap.jar;C:\Program Files (x86)\CA\SC\CommonReporting3\javasdk\lib\tools.jar
   
   Java Options:
   
   -Djava.library.path=C:\Windows\SysWOW64\;C:\Program Files (x86)\CA\SC\CommonReporting3\BusinessObjects Enterprise 12.0\win32_x86\
   -Dcatalina.base=C:\Program Files (x86)\CA\SC\CommonReporting3\Tomcat6\
   -Dcatalina.home=C:\Program Files (x86)\CA\SC\CommonReporting3\Tomcat6\
   -Djava.endorsed.dirs=C:\Program Files (x86)\CA\SC\CommonReporting3\Tomcat6\endorsed\
   -Dbobj.enterprise.home=C:\Program Files (x86)\CA\SC\CommonReporting3\BusinessObjects Enterprise 12.0\
   -Xrs
   -XX:MaxPermSize=256M
   -Dbusinessobjects.olap.bin=
   -Dbusinessobjects.olap.stylesheets=C:\Program Files (x86)\CA\SC\CommonReporting3\OLAP Intelligence 12.0\stylesheets\
   -Djava.awt.headless=true
   -Daf.configdir=C:/Program Files (x86)/CA/SC/CommonReporting3/Dashboard and Analytics 12.0
   Maximum memory pool: 1024 MB
   
   
8. Browse to the following location:
   
   C:\Program Files (x86)\CA\SC\CommonReporting3\Tomcat6\conf
   
   
   • Create a subdirectory named "Catalina".
     
     

     <Please see attached file for image>

     
     
     
   • Then inside Catalina, create a subdirectory named "localhost".
     
     

     <Please see attached file for image>

     
     
     You should end up with a new path:
     C:\Program Files (x86)\CA\SC\CommonReporting3\Tomcat6\conf\Catalina\localhost
     
     
9. In the following steps, we'll use the "wdeploy" utility to deploy the CABI war files to the new Tomcat 6 environment.
   
   
   • Browse to C:\Program Files (x86)\CA\SC\CommonReporting3\deployment
     
     
   • Open "config.tomcat6" in a text editor of your choice.
     
     
   • Edit the first 3 sections as follows and save to disk.
     
     # as_dir: the installation directory of the application server
     as_dir=C:\Program Files (x86)\CA\SC\CommonReporting3\Tomcat6
     
     # as_instance: the application server instance to deploy to (represents the name of a folder in the conf/Catalina directory)
     as_instance=localhost
     
     # as_service_name: on windows, the name of the tomcat service when tomcat is installed as a service
     as_service_name=Tomcat6
     
     
   • Open cmd.exe
     
     
   • Change dir to: C:\Program Files (x86)\CA\SC\CommonReporting3\deployment
     
     
   • Execute the following command: "wdeploy tomcat6 deployall"
     
     
   • The wdeploy utility will take a few minutes to configure the new Tomcat 6 environment. And the end, you should notified that the build was successful with the following message:
     
     

     <Please see attached file for image>

     

Apache Tomcat 6 should now be fully deployed and integrated for use with CABI 3.2.

Post Upgrade Checks

1. Ensure that the "Apache Tomcat" service is present in the Windows Services console and that it is configured to boot automatically with the machine.
   
   
2. Start Apache Tomcat 6 and ensure that it listens on port 8080 (or your preconfigured port)
   
   
3. Ensure that you can login to the CABI 3.2 portal by logging at: http://<hostname>:8080/ InfoViewApp/logon.jsp

Environment

Release: ACP1M005900-12.6-Privileged Identity Manager
Component: