Securing the Integration with Decision Central

Prior to deploying the integration to a Production environment, additional steps should be taken to ensure security of your data.

Before starting this section, you should complete the previous steps in this chapter.

The instructions in this chapter have set up the integration between Insight and Decision Central using the default database credentials, and http for communications. This is a convenient starting point for evaluations, local development and basic integration testing.

However, it is strongly recommended that the installation is secured before being used operationally with real data.

Changing the Default PostgreSQL Database Password

To change the password for the Xpress Insight user, start the PostgreSQL database console by opening a command window and entering the following: %XPRESSDIR%\insight\db\pgsql\bin\psql insightdb postgres
Enter the command ALTER ROLE to change the password.
For example, to set the password to ficoxpress enter: ALTER ROLE insight WITH PASSWORD ‘ficoxpress’;
Exit the PostgreSQL database console. Enter the following in the command window:

\q

Secure Decision Central using https

Open the Decision Central Planning Install and Maintenance Guide that was provided with the Decision Central installation files. Refer to Chapter 3 titled Installing Decision Central for the First Time and refer to step 4 - Edit the Environment File.
Update the following environment variables in the DECISION_CENTRAL_ENV.bat(Windows) or DECISION_CENTRAL_ENV.sh(Linux) file.
```
DC_CONFIG_PUBLIC_ASSET_URI=https://localhost:8444
DC_CONFIG_TOMCAT_SERVER_HTTPS_PORT=8444
```
Restart Decision Central.

Changing the Default Decision Central Content Database Password

By default, the connection uses the username nuxeo and password nuxeo. You may want to change this password as an additional security measure.

To change the password for the Decision Central user, start the PostgreSQL database console by opening a command window and entering the following command:
```
%XPRESSDIR%\insight\db\pgsql\bin\psql nuxeo postgres
```
Enter the command ALTER ROLE to change the password.
For example, to set the password to newPassword enter: ALTER ROLE nuxeo WITH PASSWORD ‘newPassword’;
Exit the PostgreSQL database console. Enter the following in the command window:

\q
Navigate to the directory in which Decision Central is installed and edit the file DECISION_CENTRAL_ENV.bat(Windows) or DECISION_CENTRAL_ENV.sh(Linux) in the {install_dir}/conf folder. Update the following variable:
```
DC_CONFIG_NUXEO_DB_PASSWORD=newPassword
```
Restart Decision Central.

Changing the Default Decision Central Workflow Database Password

By default, the connection uses the username workflow and password workflow. You may want to change this password as an additional security measure.

To change the password for the Decision Central workflow user, start the PostgreSQL database console by opening a command window and entering the following command:
```
%XPRESSDIR%\insight\db\pgsql\bin\psql workflow postgres
```
Enter the command ALTER ROLE to change the password.
For example, to set the password to newPassword enter: ALTER ROLE workflow WITH PASSWORD ‘newPassword’;
Exit the PostgreSQL database console. Enter the following in the command window:

\q
Navigate to the directory in which Decision Central is installed and edit the file DECISION_CENTRAL_ENV.bat(Windows) or DECISION_CENTRAL_ENV.sh(Linux) in the {install_dir}/conf folder. Update the following variable:
```
DC_CONFIG_DB_ACTIVITI_PASSWORD=newPassword
```
Restart Decision Central.

Encrypting the Decision Central Database Password

To encrypt the database user password, use the Encrypt Password utility.

Select the password you wish to encrypt.
Open a command window and run the following command appropriate to your operating system:
Windows
```
encrypt_password.bat yourSelectedPlainTextPassword
```
Linux
```
encrypt_password.sh yourSelectedPlainTextPassword
```
Copy the returned string to the clipboard.
Navigate to the directory in which Decision Central is installed and edit the file DECISION_CENTRAL_ENV.bat(Windows) or DECISION_CENTRAL_ENV.sh(Linux) in the {install_dir}/conf folder. Update the appropriate variable.
For example, to update the activiti password:
```
 DC_CONFIG_DB_ACTIVITI_PASSWORD={pastedEncryptedPassword}
```
Restart Decision Central.

Contents

Index