3.5 Installing the Apache Tomcat Application Server

OpenText Identity Governance uses Apache Tomcat to host and run the user interface, which allows users to access and use OpenText Identity Governance without having to install a client. You must install Apache Tomcat on the same server where you install Zulu OpenJDK and OpenText Identity Governance. Use the following information to help you install Apache Tomcat.

3.5.1 Prerequisites for the Apache Tomcat Application Server

Review the following considerations before installing Apache Tomcat:

  • We highly recommend that you configure Apache Tomcat to use https with either TLSv1.2 or TLS1.1. Any prior version of TLS should not be used. For more information, see SSL/TLS Configuration How-To on the Apache Tomcat website.

  • (Conditional) If you use Linux, do not run Apache Tomcat as root. Best practice for security on Linux is to not install programs as root and use an administrator account with privileges to install products instead.

3.5.2 Installing Apache Tomcat

You must install Apache Tomcat on the same server that has Zulu OpenJDK installed and where you will install OpenText Identity Governance.

  1. Ensure that you install the version of Apache Tomcat that OpenText Identity Governance requires. For more information, see Section 2.4.1, OpenText Identity Governance Server System Requirements.

  2. Access the Apache Tomcat website and download the supported version.

  3. Use the documentation for the supported version of Apache Tomcat to complete the installation.

  4. (Optional) Create and use a common directory for the Apache Tomcat installation such as:

    • Linux: /opt/netiq/idm/apps/tomcat

    • Windows: C:\netiq\idm\apps\tomcat

  5. Ensure that you configure TLSv1.2 or TLSv1.1 for https communication. For more information, see SSL/TLS Configuration How-To on the Apache Tomcat website.

  6. Record the installation path for Apache Tomcat to use when installing OpenText Identity Governance, OSP, and Identity Reporting.

3.5.3 Starting and Stopping Apache Tomcat

When you make configuration changes for OpenText Identity Governance, you must either restart, or stop and start Apache Tomcat to have the changes take effect. If you used the installation scripts we provided to install Apache Tomcat, you use different commands to restart Apache Tomcat. For more information, see Section B.1, Stopping, Starting, and Restarting the Apache Tomcat Service.