Configure ARIS server
After the ARIS server installation was completed on a Linux operating system, the aris10 user is locked and has no password. Command-line tools (sh files), such as ARIS server Administrator or ARIS Cloud Controller can only be started by the aris10 user related to the ARIS agent.
To unlock the aris10 user, enter: passwd -u aris10
To interactively enter a password, enter: passwd aris10
To start the command-line tools, enter: su -c acc10.sh aris10 or su -c arisadm.sh aris10
To execute these command-line tools as an ARIS user without root privileges, you must enter the password of the aris10 user.
To copy files manually into the ARIS directory, as the aris10 user enter the commands: su aris10 and sudo aris10
As an ARIS user without root privileges, you must make sure that the files have the correct ownership (aris10 ).
To lock the aris10 user again enter: passwd -l aris10
After installation please check the system. To prevent unauthorized access, you must change initial passwords and optionally define security settings for passwords. Depending on the features you want to use in ARIS additional modifications are required.
Due to the current Tomcat (Ghostcat) vulnerability, block all ports except the load balancer HTTPS port.
If you use an external database management system and you have created empty schemes for additional tenants, you must assign additional tenants to these schemes after the ARIS server setup is completed. The default tenant and the master tenant were assigned automatically.
If you use an external load balancer (LB), you must reconfigure ARIS LB to prevent system failure caused by ARIS brute-force protection.
Make sure that all fonts are available.
To check the installation, start ARIS server.
To do so, start ARIS Cloud Controller (su -c acc10.sh aris10). If you have changed the ARIS agent's default user credentials during this procedure, you will be prompted for that password you have chosen.
As the internal ARIS user running all runnables has no root privileges all privileged ports (<1024) cannot be used. To run ARIS under a privileged port you need to redirect the ports.
Enter startall. This process will take a while.
Enter list to monitor the status of all runnables.
The state of all runnables represented by their instance IDs is listed. Possible states are:
UNKNOWN
The runnable state is not yet known. This state is shown directly after the ARIS agent was started.
STARTING
The runnable is starting, but this process is not complete yet.
STARTED
The runnable is running.
DEACTIVATED
The runnable is not in use. It has been deactivated manually and can be activated if necessary.
This runnable is deactivated if ARIS server was installed without ARIS Aware.
DOWN
This runnable started and crashed. The ARIS agent will attempt to automatically restart the runnable momentarily.
FAILED
This runnable has crashed. The ARIS agent has given up trying to restart the runnable.
If you want more detailed information on health checks, please refer to the ARIS System Monitoring guide. If a runnable does not start properly, read the Basic Troubleshooting .
After all runnables have started, open your browser and enter localhost or https://<IP address or fully-qualified host name>:<load balancer port>/#<tenant name>/adminSettings. You must enter the port number only if you have changed or redirected the standard port. The login dialog opens.
Enter the user name superuser and the password superuser. This user only has access to the ARIS Administration of the tenant.
Click OK. ARIS Administration opens.
Click
Licenses and check whether the licenses were properly imported during setup. If you have not imported licenses during setup, do so now. For detailed information on license and user management and security settings refer to the Manage ARIS online help chapter.Click
User management. The list of users is displayed. It contains all default users.Make sure to assign all required license privileges to the system user, such as ARIS Architect. Otherwise, the system user cannot perform administrative actions, such as running scheduled reports. For detailed information on license and user management and security settings refer to the Manage ARIS online help chapter.
Change all default passwords and customize the password policy (see Configure user management).
Warning
To prevent unauthorized access to the ARIS system, after installation or data migration, always change the default passwords of all users that are automatically created (arisservice user, guest user, system user, superuser user) on all operational tenants, as well as on the infrastructure tenant (master). It is mandatory to provide administrator permissions to different users and/or make sure to not lose the superuser's password. Otherwise, the system will not allow administrator access. If you did not change the ARIS agent user's credentials during the setup process, please at least change the ARIS agent user's password manually.
Create users or import LDAP users and assign privileges and licenses for the default tenant. For detailed information on user management and security settings refer to the Manage ARIS online help chapter.
If you have created additional tenants, users and licenses must be managed for each additional tenant.
Create additional system users and superusers for each tenant holding all required administrator permissions. This will allow access to the ARIS system in case of password loss.
Optionally customize the password policy. You can define passwords to expire after a period of time, define length or strength of a password or you can force users to change their passwords before first login.
If you use functionalities and extension packs as listed, you must customize ARIS accordingly.
If you are going to use ARIS for SAP ® Solutions, additional requirements must be met. For details, see Technical Help: Connect SAP® systems and Required SAP systems.
To make dashboards available, refer to the online help.
Click Logout.
Send the URL https://<IP address or fully-qualified host name>:<load balancer port>/#<tenant name>/home to all users.
ARIS server is installed and running.
You can stop ARIS server using the Stop ARIS server link in the Windows start menu or enter stopall in the ARIS Cloud Controller (see ARIS Cloud Controller (ACC) Command-line Tool).