Deploy Dell PowerFlex v3.6.x

Store Tomcat's keystore password in the lockbox

After PowerFlex Gateway installation or upgrade, Tomcat's keystore password is written to file in plain text. Optionally, if your organization requires it, follow this procedure to store it in the lockbox.

1. On the PowerFlex Gateway, open the catalina.properties file in the following location:
   • Linux: /opt/emc/scaleio/gateway/conf
   • Windows: C:\Program Files\EMC\Scaleio\Gateway\conf
2. Copy the keystore.password value.
   For example, for keystore.password = ubSF2TqZgQpmLZU2GMvyyAdGgIkt1w, copy ubSF2TqZgQpmLZU2GMvyyAdGgIkt1w.
3. Log in as a root user to the system on which the PowerFlex Gateway is running.
4. Run the following FOSGWTool command in command line:
   NOTE: If a lockbox does not exist yet, add the --create_default_lockbox flag to the command in order to create one.

   NOTE: You can overwrite an existing value using the --overwrite flag.
   • Linux:

     /opt/emc/scaleio/gateway/bin/FOSGWTool.sh --store_value_in_lockbox --key lb.keystore.password --value <keystore.password value>

   • Windows:

     C:\Program Files\EMC\ScaleIO\Gateway\bin\FOSGWTool.bat 
     		    --store_value_in_lockbox --key lb.keystore.password --value <keystore.password value>

5. Edit the server.xml file:
   1. Using a text editor, open the file:
      • Linux: /opt/emc/scaleio/gateway/conf/server.xml
      • Windows: C:\Program Files\EMC\Scaleio\Gateway\conf\server.xml
   2. Change the entry keystorePass="${keystore.password}" to keystorePass="${lb.keystore.password}", and save the file.
   The ${keystore.password} reference has been replaced with a reference to the key name that you used to store the password in the lockbox.
6. Remove the plain text password from the catalina.properties file.
   1. Using a text editor, open the catalina.properties file mentioned in Step 1.
   2. Delete the password value for keystore.password, and save the file.
7. Restart the PowerFlex Gateway service:
   • Windows: From the Windows Services window, restart the EMC ScaleIO Gateway.
   • Linux: Type the following command:

     etc/init.d/scaleio-gateway restart