Installing OpenSearch and OpenSearch Dashboards with SSL on Microsoft Windows in Silent Mode

Encrypting the OpenSearch Passwords on Microsoft Windows

You can use the setup script to install OpenSearch and OpenSearch Dashboards in silent mode by preparing a text file that includes installation details.

The passwords that you include in the silent mode text file must be encrypted. For the OpenSearch installation, encrypt the OpenSearch administrative user and proxy user passwords using the PSCipher utility. You must use the pscipher.jar and psvault files that are part of the OSK DPK. The psvault that is delivered with PeopleSoft PeopleTools will not work for OpenSearch.

  1. Go to OSK_INSTALL.

  2. Extract the entire contents of OSK_FILENAME.zip in the same directory, OSK_INSTALL. 

    unzip OSK_FILENAME.zip

    Note:

    It is a good idea to extract into the same directory where you downloaded the zip files, and to extract into an empty directory for each new installation.

    The extraction creates the following directories in OSK_INSTALL:

    • setup directory — includes the setup script and sample configuration file

    • archives directory — includes archives for deployment

    • readme.txt file and other files

    • opensearch-manifest — lists the version information for OpenSearch and JDK included in the DPK

  3. Go to OSK_INSTALL\archives and extract pt-jdk21.0.yy.tgz into a temporary folder, or a folder with a different name; for example, pt-jdk-temp.

    It may be necessary to extract the file twice.

  4. Go to OSK_INSTALL\archives and extract pt-opensearch-3.2.0.tgz into a temporary folder, or a folder with a different name; for example, pt-opensearch-temp.

    It may be necessary to extract the file twice. The extraction creates the following folders:

    • bin

    • config

    • lib

    • logs

    • modules

    • plugins

  5. Copy psvault from the folder OSK_INSTALL\pt-opensearch-temp\plugins\orcl-security-plugin\config\properties to OSK_INSTALL\pt-opensearch-temp\plugins\orcl-security-plugin.

  6. In a command prompt, run the following command, specifying the passwords for the OpenSearch administrative user and proxy user.

    <path_to_java>\java -Dpscipher.path=<path_to_which_files_are_extracted> -cp <path_to_which_files_are_extracted>\pscipher.jar com.peoplesoft.pt.opensearch.pscipher.PSESEncrypt <admin_user> <password> <proxy_user> <password> <output_path>\<outputfile>

    For example uses the default OpenSearch administrative user, osadmin, and proxy user, people.

    C:\OSK_INSTALL\archives\pt-jdk-temp\bin\java -Dpscipher.path=C:\OSK_INSTALL\archives\pt-opensearch-temp\plugins\orcl-security-plugin -cp C:\OSK_INSTALL\archives\pt-opensearch-temp\plugins\orcl-security-plugin\pscipher.jar com.peoplesoft.pt.opensearch.pscipher.PSESEncrypt osadmin password1 people password2 C:\OSK_INSTALL\os_output.txt

  7. Copy the encrypted text from os_output.txt, without adding line feeds or spaces. Paste the encrypted passwords into the silentinstall.config file for the osadmin.password and people.password parameters.

    The output has this format:

    osadmin:{V2.1}encrypted password==
people:{V2.1}encrypted password==

Encrypting the Truststore and Keystore Passwords on Microsoft Windows

After extracting the OSK DPK archives, you can use the opensearchuser script to encrypt the keystore and truststore passwords.

  1. Change directory to pt-opensearch-temp/bin.

    cd C:\pt-opensearch-temp\bin

  2. Enter the following command for each password:

    opensearchuser encrypt [password text]

  3. Copy the encrypted text and paste it into the silentinstall.config file for the OS_keystore_pwd and OS_truststore_pwd.

Creating a Configuration File and Running the Silent Mode Installation on Microsoft Windows

To install in silent mode:

  1. Create a configuration file.

    The OSK_INSTALL/setup directory includes a sample configuration file, silentinstall.config. If you want to use this file, it is a good idea to make a backup copy of the original file before you continue.

    Edit the configuration file with the required values. See the section Installing OpenSearch and OpenSearch Dashboards with SSL on Microsoft Windows Interactively for guidance on specifying the values.

  2. Enter y (yes) if you want to install OpenSearch, or n (no) if you want to skip the OpenSearch installation.

    You must enter a value for this field. If you enter yes, you must specify values for the items labelled mandatory. If you enter no, you can leave them blank. Enter encrypted text for the passwords as described in the previous section.

    #Silent Install Configuration Values for installing opensearch 
and opensearch-dashboards

#Install opensearch Y/N is mandatory field
Install opensearch?[Y/N]= 

#Opensearch cluster name (mandatory)
cluster.name= 

#Opensearch host name (mandatory)
network.host=

#Opensearch port number (optional-default 9200)
#If its upgrade from ES to Opensearch and if you want to use the 
same port number as ES. Please make sure ES is down else please 
enter a different port number for OS.

http.port=

#Opensearch data directory (optional-default OS_HOME/data)
#If its upgrade from ES to Opensearch and if you want to use the 
same data path as ES. Please make sure ES is down else please 
enter a different data path for OS.
path.data= 

#Opensearch log directory (optional-default OS_HOME/logs)
path.logs= 

#Opensearch discovery hosts (optional)
discovery.hosts= 

#Opensearch heap size (optional-default 2)
OS_HEAP_SIZE= 

#Opensearch admin username (optional - default osadmin)
admin.user= 

#Opnesearch encrypted password for osadmin (mandatory)
admin.password=encrypted password

#Opensearch proxy username (optional - default people)
people.user= proxy

#Opensearch encrypted password for people (mandatory)
people.password=encrypted password

  3. If you want to configure OpenSearch to use SSL, supply the keystore path and encrypted password, and the truststore path and encrypted password. 

    ##For Secure installation of Opensearch please fill the below values

#Openearch keystore path
OS_keystore_path= 

#Opensearch encrypted keystore password
OS_keystore_pwd= encrypted password

#Opensearch truststore path
OS_truststore_path= 

#Opensearch truststore password
OS_truststore_pwd= encrypted password

  4. Specify N (no) to skip the Logstash installation.

    When you enter N (no) for this field, you can leave the other parameters in the Logstash section blank. This sample does not show the entire Logstash section.

    #Install Logstash Y/N is mandatory field
Install Logstash?[Y/N]=N
[...]

  5. Specify y if you want to install OpenSearch Dashboards, or n if you do not.

    You must enter a value for this field. If you enter yes, you must specify values for the items labelled mandatory in this section. If you enter no, you can leave them blank. 

    #Install Opensearch-dashboards Y/N is mandatory field
Install opensearch-dashboards?[Y/N]= 

#Opensearch-dashboards host name (mandatory)
opensearch-dashboards.host= 

#Opensearch-dashboards port number (optional-default 5601)
opensearch-dashboards.port=

  6. If you want to install OpenSearch Dashboards and connect to the currently-installed OpenSearch server, specify y (yes) for the following.

    If you want to install OpenSearch Dashboards and connect to a previously-installed OpenSearch server, specify n (no). 

    #Set the value to Y if Install Opensearch(Y) and Install 
Opensearch-dashboards(Y)
Use same OS?[Y/N]= n

  7. Specify the host name, port, OpenSearch administrative user, and encrypted password for the OpenSearch server.

    #Provide the Opensearch instance details mapped to Opensearch-dashboards
OS.host[http(s)://hostname]= 
OS.port= 
OS.user=
OS.password=

  8. If the OpenSearch is SSL enabled, enter the path to the certificate, the keystore, and the PEM file.

    #Provide SSL required values for OSD if Opensearch is SSL enabled.
OSD.cert.path= 
OSD.cert.key= 
OSD.cert.pem=

  9. In a terminal window, run the DPK setup script from OSK_INSTALL/setup as follows:

    Note:

    The command includes line feeds for readability. Do not include the line feeds when you run.

    psft-dpk-setup.bat –-install_silent_secure 
--install_base_dir BASE_DIR
--config full_path_configuration_file

    • Use double-dashes when specifying the script options; for example, --install_silent_secure.

    • For the install_base_dir option, specify the full path where you want OpenSearch and OpenSearch Dashboards installed. The installation directory is referred to in this documentation as BASE_DIR.

    • For the config option, specify the full path to the prepared configuration file. For example:

      Note:

      The command includes line feeds for readability. Do not include the line feeds when you run.

      psft-dpk-setup.bat –-install_silent_secure
--install_base_dir /home/opensearch
--config /home/temp_install/silentinstall.config

  10. When the script completes, you see messages such as: 

    OpenSearch Installation Completed.
....
OpenSearch-dashboards installation is completed.

  11. After you complete the OpenSearch and OpenSearch Dashboards installation, you must configure the integration with the PeopleSoft environment.

    See "Integrating OpenSearch with the PeopleSoft Environment."

  12. To use OpenSearch Dashboards, see the Search Technology product documentation.

    See PeopleTools: Search Technology, "Working with Insights Dashboards for PeopleSoft Application Data."