Legacy Ubuntu Quick Start

This section provides a guide to quickly get a test installation up and running using Ubuntu Linux. For more information on configuration options etc, see Installation Instructions.

The current installation procedures for JBoss 7 / EAP 6 uses the JBoss CLI to configure the application server. Note that JBoss CLI has some issues with automated deploys and functions may break. For example, if the machine not has enough cores, the CLI connections will terminate and report errors.

This guide uses EJBCA 6.5, JBoss EAP 6.4, and Java 8, but other versions may be possible to use by replacing the versions. It is assumed that the installation is made in a user account with the username "user". In your environment, replace the username you are using with "user".

This Quick Start guide uses the JBoss built in database H2 that should not be used for a production installation.

The H2 database is created as ~/ejbcadb. If you run this installation multiple times, delete this file to remove old databases.

  1. Install Ubuntu 16.04 server x64, default configuration, only OpenSSH server selected (or other Ubuntu of your choice, for example Ubuntu Desktop).

    • Add user with username user during install. The path /home/user means the user's home directory below.

    • Make sure that networking and hostnames work correctly, i.e. hostname and ip are configured in /etc/hosts.

  2. Open a new terminal ejbca.

  3. Install needed software from Ubuntu repositories:

    sudo apt-get install default-jdk-headless ant ant-optional unzip
  4. Install software not in Ubuntu repositories, JBoss EAP 6.4 and EJBCA 6.5.0:

    unzip jboss-eap-6.4.0.zip
    unzip ejbca_ce_6_5_0.zip
  5. Configure EJBCA to allow finding the application server (JBoss):

    echo "appserver.home=/home/user/jboss-eap-6.4" >> ejbca_ce_6_5_0/conf/ejbca.properties
  6. Open new terminal jboss and start JBoss:

    jboss-eap-6.4/bin/standalone.sh
  7. Build and deploy EJBCA to JBoss:

    cd ejbca_ce_6_5_0
    ant deploy

    If questions show up, press Enter and wait a little for JBoss to reload.

  8. Run installation (in terminal ejbca) to create initial Management CA and TLS keystores:

    ant install

    and select all default values.

    images/s/en_GB/7202/8bb4a7d7a43e6723fe7875221f32b3124c55e6e1/_/images/icons/emoticons/warning.png If ant install fails with errors, this is typically due to an unsuccessful deployment or start of JBoss. Check the server logs to resolve the issue, see Troubleshooting.

  9. Go back to the jboss terminal and restart JBoss:

    ctrl-c
    jboss-eap-6.4/bin/standalone.sh

  10. Copy /home/user/ejbca_ce_6_5_0/p12/superadmin.p12 to the Admin Desktop machine and import in web browser (keystore password is ejbca by default).

  11. Open URL https://server:8443/ejbca, where server is the server's name/ip. You will see a warning that the server side TLS certificate is not trusted. Ignore this warning to be prompted to connect using your imported P12.

The installation is now done and it is highly recommended to secure your installation according to the Securing JBoss.