6.1.1 Configure Allowed Referers
When you run Configuration Manager, the default host, IPv4
address, IPv6 address, loopback address, and localhost address are
added to the Allowed Referer list. These addresses are added only
for the machine where LCM is executed. For a AEM forms on JEE cluster,
manually add all the other cluster nodes to the list:
-
In Administration Console, click
Settings
>
User Management
>
Configuration
>
Configure Allowed Referer URL’s
.
The Allowed Referer list appears at the bottom of the page.
-
To add an allowed referer:
-
Type a host name
or IP address in the Allowed Referers box. To add more than one
allowed referer at a time, type each host name or IP address on
a new line. Provide hostName and IP address of all the cluster nodes/load balancer.
-
In the HTTP Port and HTTPS Ports boxes, specify which ports
to allow for HTTP, HTTPS, or both. If you leave those boxes empty,
the default ports (port 80 for HTTP and port 443 for HTTPS) are
used. If you enter
0
(zero) in the boxes, all ports
on that server are enabled. You can also enter a specific port number
to enable only that port.
-
Click Add.
-
Click
Save
.
If the Allowed Referer List is empty,
the CSRF feature stops working and the system becomes insecure.
-
After changing the Allowed Referer list, restart the AEM
forms on JEE cluster.
6.1.2 Perform a system image backup
After AEM forms on JEE is installed and deployed into production
areas and before the system is live, it is recommended that you
perform a system image backup of the servers on which AEM forms
on JEE is implemented. Also take backup of CRX repository.
The
AEM forms on JEE database, GDS directory, and application servers
must be part of this backup. This is a complete system backup that
you can use to restore the contents of your computer if your hard
drive or entire computer stops working. See the
Backup and
Recovery
topic in
Administration Help
.
6.1.3 Restart the application server
When you first deploy AEM forms on JEE, the server is in
a deployment mode in which most modules are in memory. As a result,
the memory consumption is high and the server is not in a typical
production state. You must restart the application server to get
the server back into a clean state.
Note:
You may skip to restart
the AEM forms on JEE server, if you have restarted the server after
configuring CRX clustering or after updating Allowed Referer list
Note:
When
you upgrade the AEM forms on JEE Server or deploy a Service pack,
ensure that you delete the [Jboss_root]\domain\servers\<server
name>\tmp folders before restarting the application server.
6.1.4 Verify the deployment
You can verify the deployment by logging in to Administration
Console. If you log in successfully, then AEM forms on JEE is running
on the application server and the default user is created in the
database. To verify the CRX repository deployment, access the CRX
welcome page.
You can review the application server log files to ensure that
components were deployed correctly or to determine the cause of
any deployment issues you may encounter.
6.1.4.1 Accessing Administration Console
Administration Console is the web-based portal for accessing
a variety of configuration pages where you can set run-time properties
that control the way AEM forms on JEE operates. When you log in
to Administration Console, you can access User Management, Watched
Folder, and Email client configuration, and administrative configuration
options for other services. Administration Console also provides
access to Applications and Services, which administrators use for managing
archives and deploying services to a production environment.
The default user name and password for logging in is
administrator
and
password
.
After you log in the first time, access User Management and change the
password.
Before you access Administration Console, AEM forms on JEE must
be deployed and running on your application server.
For information about using Administration Console, see
Administration
Help.
-
Type the following URL in a web browser:
http://[hostname]:[port]/adminui
For
example:
http://localhost:8080/adminui
-
If you have upgraded to AEM forms on JEE, enter the same
administrator user name and password as that of your previous LiveCycle
installation. In case of a fresh installation, enter the default
user name and password.
-
After you log in, click
Services
to access the service
administration pages or click
Settings
to access the pages
on which you can administer settings for different modules.
6.1.4.2 Change the default password of AEM forms on JEE Administrator
AEM forms on JEE creates one or more default users during
the installation. The password for these users is in the product
documentation and is publicly available. You must change this default
password, depending on your security requirements.
The AEM forms on JEE administrator user password is set to “password”
by default. You must change it in Administration Console > Settings
> User Management.
Also, it is recommended to change the default password for CRX
Administrator.
For detailed information, see
Change
the default administrator password
.
6.1.4.3 Accessing CQ Welcome Page
CQ welcome page is the web-based portal for accessing various
CQ components, administration, deployment and development tools.
The default user name and password for logging in is administrator
and password (same as AEM forms on JEE Administrator).
Access the welcome page using the following steps:
-
Type the following URL in a web browser:
http://[hostname]:[port]/lc/welcome
-
Enter the same administrator user name and password as mentioned
above.
-
After you log in, you can access various components, administration, deployment
and development UIs.
6.1.4.4 Accessing OSGi Management Console
In CQ, components are in form of OSGi bundles which are
deployed to Apache Felix OSGi container. OSGi console provides a
way to manage OSGi bundles and services configurations. The default
user name and password for logging in is admin and admin (same as
CRX Administrator).
Access the OSGi Management console using the following steps:
-
Type the following URL in a web browser:
http://[hostname]:[port]/lc/system/console
-
Enter the same administrator username and password as mentioned
above.
-
After you log in, you can access various components, services,
bundles and other configurations.
6.1.4.5 Change CQ Administrator default password
CQ embedded within AEM forms on JEE has two administrator
users as mentioned below.
-
Super Administrator (administrator)
: The Super
Administrator user can access various CQ/CRX UIs and perform admin
operations. The default username and password are same as AEM forms
on JEE Administrator,
administrator/password
. This user doesn't
have access to OSGi Management Console. The default password of
this user can be changed using Administrator console only as mentioned
in section
Change default AEM forms password
. The changed
password will be applicable for both AEM forms on JEE and CQ.
-
Administrator (admin): This user can access to OSGi console
in addition to CQ/CRX UIs and has administrator privileges. The
default username and password for the user are
admin/admin
.
To change the default password follow the below mentioned steps:
-
Type the following URL in a web browser.
http://[hostname]:[port]/lc/libs/granite/security/content/admin.html
-
Login using following credential:
Username
:
admin
Password
: admin.
-
Search for user
Administrator
.
-
Click on the user in left pane, the user details is displayed
in the right pane.
-
Click on
Edit
icon in the right pane.
-
On the edit page in the right pane, provide new password
in the
New Password
field and current password in
Your Password
field.
-
Click
Save
icon in the right pane.
-
Re-login using the changed password to verify.
6.1.4.6 View the log files
Events, such as run-time or startup errors, are recorded
to the application server log files. If you have problems deploying
to the application server, you can use the log files to help you
find the problem. You can open the log files by using any text editor.
Log
files, in case of manually-configured JBoss, are located at:
Log
files, in case of Adobe-preconfigured JBoss, are located at:
The
log files are:
Following CRX log files are located at [
CRX_home
]/
-
error.log
-
audit.log
-
access.log
-
request.log
-
update.log
|
|
|