Installation Checklist
This document serves as a checklist to outline the information needed for TQ Data Foundation installations. Please use this guide to pull in appropriate IT resources and gather needed information prior to installation. The links in this guide will be very useful for new customers. Please read them completely.
Read the documentation for server installation at TQ Data Foundation Installation. Details on the below items will be found in this document.
Provision Tomcat server with appropriate sizing for users and data, plan for growth. Follow the guidelines provided upon purchase. Contact TopQuadrant support if you need a new copy of this information.
Decide where the workspace, properties file, and vault will be located. The workspace contains configuration, connector and data files.
Ensure Tomcat has access to write to the directory for the workspace. For Debian based Linux distributions, see the notes for using Tomcat 11.
Server must be running supported Tomcat and Java. See TQ Data Foundation Server Platform Considerations
Decide on authentication mechanisms for end users and API clients, see Authentication Methods. For SSO methods, have the required IDP details ready.
Decide on active database storage options. TDB will be contained in the workspace. Data Platform will enable all Data Foundation collections to be synced between Data Foundation nodes. See Data Platform for specific instructions on setting up Data Platform. You cannot change this later without creating a new environment workspace.
Implement a backup strategy for the workspace and/or database. Backup often. See Backup and Restore.
If implementing more than 1 server (for instance Explorer) both should have the ability to talk to each other.
Obtain the .war file and license file from TopQuadrant Jira ticketing system. If the ticket is closed, you can still access it in the portal.
After reading the installation guide and preparing the above information, you will be ready to deploy Data Foundation application, setup users and rights management. See Rights Management Admin Page for Rights Management assistance. See The Governance Model and Workflows for using the governance collection to control user permissions as well.
Follow the rest of the Server Administration Page guide for additional configurations in Data Foundation. Please go through the Product Configuration Parameters Admin Page and the System Configuration Parameters Admin Page prior to use. These have important configurations such as the Mail Settings Section.
Highly Recommended:
Monitoring software (such as Splunk, Zabbix, ELK)
Update the log4j.xml file in EDG/WEB-INF with appropriate parameters for rollover size
Create a playbook/runbook for deployment and installation of Data Foundation for future use
Security:
EDG will create temporary files (including potentially sensitive files such as uploaded documents) in the temp directory that is used by the Java VM. The specific location of that can be controlled using the system property java.io.tmpdir. If the temp files are deemed a security risk, the system administrator may elect to change the temp dir location and adjust permissions accordingly.
Hashicorp can be used for secure storage data encryption. See EDG Integration with Hashicorp Vault and related setup field reference
Several configuration settings exist to limit security risk for Data Foundation, please check the Server Administration page in Data Foundation and the setup field reference to enable/disable these settings.