Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
Copyright
Copyright 2014 P TC Inc . and/or Its Subs idiary Companies. A ll
Rights Res erv ed.
User and training guides and related documentation from PTC Inc. and its
subsidiary companies (collectively "PTC") are subject to the copyright laws of the
United States and other countries and are provided under a license agreement that
restricts copying, disclosure, and use of such documentation. PTC hereby grants to
the licensed software user the right to make copies in printed form of this
documentation if provided on software media, but only for internal/personal use
and in accordance with the license agreement under which the applicable software
is licensed. Any copy made shall include the PTC copyright notice and any other
proprietary notice provided by PTC. Training materials may not be copied without
the express written consent of PTC. This documentation may not be disclosed,
transferred, modified, or reduced to any form, including electronic media, or
transmitted or made publicly available by any means without the prior written
consent of PTC and no authorization is granted to make copies for such purposes.
Information described herein is furnished for general information only, is subject to
change without notice, and should not be construed as a warranty or commitment
by PTC. PTC assumes no responsibility or liability for any errors or inaccuracies
that may appear in this document.
The software described in this document is provided under written license
agreement, contains valuable trade secrets and proprietary information, and is
protected by the copyright laws of the United States and other countries. It may not
be copied or distributed in any form or medium, disclosed to third parties, or used
in any manner not provided for in the software licenses agreement except with
written prior approval from PTC.
UNAUTHORIZED USE OF SOFTWARE OR ITS DOCUMENTATION CAN
RESULT IN CIVIL DAMAGES AND CRIMINAL PROSECUTION. PTC
regards software piracy as the crime it is, and we view offenders accordingly. We
do not tolerate the piracy of PTC software products, and we pursue (both civilly
and criminally) those who do so using all legal means available, including public
and private surveillance resources. As part of these efforts, PTC uses data
monitoring and scouring technologies to obtain and transmit data on users of
illegal copies of our software. This data collection is not performed on users of
legally licensed software from PTC and its authorized distributors. If you are using
an illegal copy of our software and do not consent to the collection and
transmission of such data (including to the United States), cease using the illegal
version, and contact PTC to obtain a legally licensed copy.
I m p o r t a n t C o p y r i g h t , Tr a d e m a r k , P a t e n t , a n d L i c e n s i n g I n f o r m a t i o n : See the
About Box, or copyright notice, of your PTC software.
U N I T E D S TAT E S G O V E R N M E N T R E S T R I C T E D R I G H T S L E G E N D
This document and the software described herein are Commercial Computer
Documentation and Software, pursuant to FAR 12.212(a)-(b) (OCT95) or DFARS
227.7202-1(a) and 227.7202-3(a) (JUN95), and are provided to the US
Government under a limited commercial license only. For procurements predating
the above clauses, use, duplication, or disclosure by the Government is subject to
the restrictions set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data
and Computer Software Clause at DFARS 252.227-7013 (OCT88) or Commercial
Computer Software-Restricted Rights at FAR 52.227-19(c)(1)-(2) (JUN87), as
applicable. 01012014
PTC Inc., 14 0 Kend rick Street, Need ham, MA 0 24 94 USA
Contents
Contents
The PTC Windchill Installation and Configuration Guide provides the instructions
to install and configure Windchill (including its Oracle database and Windchill
solutions), and to initialize and load the database.
Before you install your solution, be sure you have the most up-to-date version of
this manual. It will be posted on the PTC Web site:
https://www.ptc.com/appserver/cs/doc/refdoc.jsp
Before you install and configure Windchill, be sure you have installed your
database software (This is not a requirement for Pro/INTRALINK 10.1 customers
installing the bundled Oracle database).
If books are not installed on your system, see your system administrator.
Te c h n i c a l S u p p o r t
Contact PTC Technical Support via the PTC Web site, phone, fax, or e-mail if you
encounter problems using <product name> or the product documentation.
For complete details, refer to Contacting Technical Support in the PTC Customer
Service Guide. This guide can be found under the Self Help section of the PTC
Web site at:
http://www.ptc.com/support/indexsupport.htm
The PTC Web site also provides a search facility for technical documentation of
particular interest. To access this page, use the following URL:
http://www.ptc.com/support/support.htm
You must have a Service Contract Number (SCN) before you can receive technical
support. If you do not have an SCN, contact PTC Maintenance Department using
the instructions found in your PTC Customer Service Guide under Contacting
Your Maintenance Support Representative.
10
Comments
PTC welcomes your suggestions and comments on its documentation. Send
comments to the online survey form at the following address:
documentation@ptc.com
Please include the name of the application and its release number with your
comments. For online books, provide the book title.
Comments
11
1
Planning a Solution Installation
Installing Windchill PDMLink on a Pro/INTRALINK 10.1 System ....................................14
Installation Planning for Optional Products...................................................................14
This section contains information required before you install your solution.
Before you install your solution, be sure you have the most up-to-date version of
this manual. It will be posted on the PTC Web site:
https://www.ptc.com/appserver/cs/doc/refdoc.jsp
13
Creo Vi ew
Creo View Client and Creo View Thumbnail Generator are installed using the PTC
Solution Installer.
There are additional components of Creo View which are located on productspecific CDs and require a separate installation. Some of these products may
require an additional purchase from PTC. Refer to the Creo View Adapters
Installation and Configuration Guide for installation instructions for the following
products:
14
15
Caution
If you choose one of the distributed scenarios, the PTC Solution Installer (PSI)
must be run on each machine in the proper sequence to avoid manual postinstallation configuration steps.
Caution
If you are updating an existing installation to include Windchill Business
Reporting, you must first uninstall any previous installtions of Cognos, and
reboot your machine, for the installation to run successfully.
The following Windchill Business Reporting installation scenarios are supported:
Local InstallationThe host, gateway server, and your Windchill solution are
all installed on one machine.
Distributed Installations
Local Installation
If the WBR host and gateway server are both installed on the same machine as
your Windchill solution, as in the following graphic, then the PTC Solution
Installer is run only once, and automatically installs the components in the proper
sequence.
16
Three Machines
If the WBR host, gateway server, and your Windchill solution are all installed on
separate machines, as in the following graphic, then the PSI must be run three
times: first to install the host, then to install the gateway server, and lastly to install
your Windchill solution.
17
Oth e r P re -In s t a l l a t i o n C o n s i d e ra ti o n s
Other considerations before you begin your installation:
The Windchill Directory Server already be installed and configured before you
begin installing any Windchill Business Reporting components.
If you are installing Windchill Business Reporting on Red Hat Linux 5.X, you
must have the system library files installed before installing Windchill Business
Reporting.
Note
There is no dependency between the client and server installations. They can
be installed in either order.
Note
The hostnames and RMI port for your Windchill PartsLink server and client
must be known prior to installation.
Option
RMI Registry Port for
Windchill PartsLink
Default
10011
Desc ripti on
Valid range is 1024
65535
18
Java Runtime Environment (JRE) 1.6 or higher on both the client and server
Java 2 Platform, Standard Edition 6.24 or higher installed on both the client
and server
Creo View
19
Number Installation
Component
1.
Message Oriented
Middleware
2.
Windchill Server
3.
4.
5.
Windchill Shipbuilding
Template
Windchill Gateway for
FORAN
Windchill Visualization
Services and Creo View
Windchill PartsLink
Integration Client
Standalone
Component
Windchill Server
Windchill Server
Windchill Server
20
Prerequis ites
Refer to the standard PTC platform support matrix at http://www.ptc.com/
appserver/cs/doc/refdoc.jsp to view production hardware and software support.
A successful Windchill Gateway for Creo Elements/Direct Model Manager
installation requires the following prerequisites:
Java Runtime Environment (JRE) 1.6 or higher on both the client and server
Java 2 Platform, Standard Edition 6.23 or higher installed on both the client
and server
Windchill installed
If you are choosing a staging area for installation, then you need to copy the
installers from the CD_WCOCREATEMM CD
If you choosing media for installation, then you must point to the following
correct installer locations on the CD:
<CD drive>/CD_WCOCREATEMM for Creo Elements/Direct Model
Manager Gateway Server Component
The following table lists the recommended sequence of installation steps. For
details on each step, refer to the section of documentation listed in the Wh e re
D o c u m e n t e d column.
Number
Installation
C l i e n t o r S e r v e r H o w To I n s t a l l
Component
1
CD_WCOCRE
Message Oriented
(standalone
ATEMM
Middleware
component)
2.
Windchill Gateway
Windchill Server
CD_WCOCRE
ATEMM
for Creo Elements/
Direct Model
Manager
Ins tallin g Wind c h ill Ga tew ay for C reo E lemen ts / Dire c t Mod el Ma na ge r
a n d F O R A N To g e t h e r
This option is installed using the bundled PTC Solution Installer (PSI). You can
review the inputs in the Installation summary panel.
21
Ins tallin g Wind c h ill Ga tew ay for C reo E lemen ts / Dire c t Mod el Ma na ge r
on E xis ting Gateway for FORA N
This option is installed using the bundled PTC Solution Installer (PSI). This update
does not require any inputs from you.
Replication
Windchill replication increases the productivity of Windchill users by reducing
their time to access content data. The users access content data stored on more
rapidly accessible external vaults known as replica vaults. Replica vaults store
content data that has been replicated from slower external vaults or from the
Windchill database.
The Windchill user's experience in accessing replicated and non-replicated
information is identical except for the improved access time. The Windchill user's
only explicit interaction with Windchill content replication is setting preferences in
a graphical interface.
A Windchill site (also known as a cluster) is a group of hosts with one URL. For
the purpose of content replication, a site can play the role of master site, replica
site, or both. When a site is playing the role of a master site, content can be
replicated from database storage, from external storage, or both to one or more
replica sites. When a site is playing the role of a replica site, content can be
replicated to it from master sites.
A master site stores vault and folder configuration information for each of its
replica sites. Replica sites retrieve vault configuration information on startup or an
update of the information is pushed from the master site on its startup or sent
explicitly by the master site administrator.
A remote site is meant to provide Windchill users with local access to content data
in replicated vaults. The data in each replicated vault can come from only one
master site, and attempts to disregard this rule could result in the loss of data.
The installation and configuration of a File Server remote site are detailed in the
following sections.
22
Windchill PDMLink
Windchill ProjectLink
Windchill CAPA (not available if installing as a standalone product)
Windchill Nonconformance (not available if installing as a standalone product)
Windchill Customer Experience Management (not available if installing as a
standalone product)
Windchill Integrations for Embedded Software
Pro/INTRALINK
Integral Windchill PDMLink and Windchill ProjectLink
23
Note
You must complete this step during the master server installation. Otherwise,
you will need to perform manual steps to set it up later.
Note
Selecting the master site activates the U pd a te K e y s button.
3. If there is an existing K ey Ge ne ra ti o n D a te for the keys displayed in the table,
you can accept the value and do nothing, or click U p da te K ey s to initiate the
creation of the public and private keys. (Generating the keys requires several
seconds.)
4. When the keys are created, select the master site again and then click E x p or t
Key.
5. Provide a name for the key, navigate to a storage location for the key, and save
it as a file. The key must have the extension PUBKEY or KEY (for example,
site1.pubkey).
Downloading the Software and Key Using the File Server Management
Utility
1. Create a folder for your software and key downloads.
2. From a remote machine you want to use as a File Server, click or enter the
master site URL.
24
A Windchill product opens (See the various Windchill products listed in Step 1
in this section.)
3. From S i te
, L i br ar i es , P ro du c t s , , select U ti l i ti e s F i l e S e rv e r
A dminis tra tio n File S erv e r Ma n ag e me n t.
Note
For Or ga n i z a ti o ns and P r oj e c t s the F i l e S er v e r Ma n ag e me n t link is
available under U ti l i t i es .
The F i l e S e rv e r M an a ge me n t page opens with the list of I ns ta l l er Li n k s .
4. Click each installer link and download the files into the folder you created
earlier in this procedure.
5. Extract the contents of each ZIP file.
6. Continue to Installing a File Server Remote Site on page 183.
Note
After you have installed the File Server remote site, you must complete the
post-installation steps in the Completing Configurations - Manual Steps on
page 187 chapter.
25
26
Item
Windchill PLM Connector
Server CD
Desc ription
The Windchill PLM Connector server CD
contains the Windchill PLM Connector server
software, sample files and documentation.
The PTC solution Installer (PSI) is used to install
the Windchill PLM Connector server on the
Windchill server. The Windchill PLM Connector
server CD can be downloaded from the PTC
software downloads page to the PSI stager. It is
also available on CD-ROM.
27
Item
Desc ription
An administrator can set the access
permissions to read-only for imported data.
Refer to the Discourage Modification of
Imported Packages on the Windchill Server
procedure for detailed instructions.
Description
The following documentation is available on the
Windchill PLM Connector server and client CDs
at <WPC_Server_Install_dir\doc> and <WPC_
Client_Install_dir\doc>:
Ensure that you have the necessary credentials to log in to Windchill as Site or
Organization Administrator.
28
C h o o s i n g t h e P S I I n s t a l l a t i o n Ty p e
Choose the appropriate installation type for your system:
Note
The S o l ut i on option creates a new installation on one or more machines
with your choice of optional products (like Windchill PLM Connector),
platform components, and configuration options. See the configuration
section of the PSI installer guide to determine if any manual configurations
are necessary for Windchill PLM Connector.
Note
The U p d ate E x i s ti n g In s tal l a ti o n option allows you to install a product onto
an existing installation, add an additional language or install a Windchill
software update.
29
2
Ins talling Orac le
About Oracle.............................................................................................................32
Before You Begin.......................................................................................................32
Installing Oracle Server Software ................................................................................33
Installing Oracle Client Software .................................................................................34
Installing Oracle Patches............................................................................................36
Post-Installation Activities...........................................................................................36
PTC supports Oracle Enterprise Edition and Standard Edition software. This
section guides you through the process of installing and setting up Oracle for
Windchill.
Note
Select a version of Oracle that is supported with this release. For more
information about the products supported with this release, see the software
matrix (available from http://www.ptc.com/appserver/cs/doc/refdoc.jsp.
Note
If you are installing the bundled Oracle software, you do not need to install the
database software before running the PTC Solution Installer (PSI).
31
About Oracle
PTC provides these guidelines to assist you when installing the Oracle Relational
Database Management System (RDBMS) software. In all cases, follow the
instructions in the Oracle Database Installation Guide for detailed platform specific
instructions (user authentication, memory, process tuning, and so on).
The Oracle server can be installed either on the same machine as Windchill or on a
remote machine. By default, when the server software is installed, Oracle also
installs the client software on the same machine. If you install Windchill on a
different machine than the Oracle server and if you plan to customize Windchill
and generate Data Definition Language (DDL) scripts, then you must also install
the Oracle client software on the same machine as the Windchill server. Also, if
you install Windchill on a different machine than the Oracle server, you must run
the PTC Solution Installer (PSI) on the Oracle server before installing your
Windchill solution.
Included in this chapter are instructions for an Oracle server installation (whether
on the Windchill server machine or on a remote machine), and an Oracle clientonly installation for the Windchill server machine.
Note
You do not need to install the Oracle client software unless you are planning to
customize Windchill and generate DDL scripts.
Oracle is delivered on the Oracle DVDs and it is installed using the Oracle
Universal Installer. If you are using the PTC-bundled Pro/INTRALINK Oracle,
it is installed using the PTC Solution Installer (PSI).
B e f o r e Yo u B e g i n
Determine which versions of Oracle are supported for your application. See the
software matrix (available from http://www.ptc.com/appserver/cs/doc/refdoc.
jsp).
On UNIX systems, the installing user (including root) is typically the database
administrator (DBA). It does not matter whether the user is a local user or
Network Information Services (NIS) user.
When creating an Oracle database using PSI, you can launch PSI as the user
that installed the database software, or as root user.
32
You must have 5 GB available hard drive disk space for an Oracle server
installation with a Windchill demo database. More disk space is accordingly
needed for larger databases.
To complete the installation, you will need to provide the installer with
information. PTC recommends you gather this information in advance to allow the
installation to proceed without interruption:
Default is LISTENER.
Protocol type.
Default is TCP/IP.
Port number for the protocol type.
The default for TCP/IP is 1521.
Note
To create a database using the PSI the proper environment settings must be
configured in a sh shell for an Oracle User. This includes updating the Oracle
user profile so that the Oracle environment variable and path are set
automatically when launching a sh shell. For more information see Database
Configuration on page 70.
Installing Oracle
33
4. If you have a My Oracle Support account, you could enter the information
here; otherwise, it is optional. Click N e x t to continue.
Note
If you have not entered an email address, click Ye s on the E ma i l A d d re s s
N o t S p e c i f i e d popup window.
5. Select In s tal l d a tab a s e s o ftw a re o nl y and click N ex t.
6. Select S i n gl e i n s ta n c e da ta b as e i n s t al l a ti o n and click N e x t .
7. The default language is English. Select the language for your database and
click N e x t.
8. Select E n te rp ri s e E di t i on
9. Click on S e l ec t Op ti on s and clear all components.
10. Enter the Ora c l e B a s e . This is the base directory for the Oracle software.
11. Enter the S oft w ar e L o c a ti on . Oracle recommends that this be within the Oracle
base directory.
12. Click N e x t .
13. For UNIX, select the OSDBA and OSPER groups for operating system
authentication and click N e x t.
14. The prerequisite check verifies that your system meets the needs of installation
and configuration of Oracle. The installer lists any unsatisfied requirements.
Click N e x t .
15. The summary window displays the options you chose. Review your selections
and click F i ni s h .
16. Once the installation has finished, click C l o s e to exit.
Note
For UNIX, be sure to run $ORACLE_HOME/root.sh as the root user.
34
On Windows: <DVD-ROM>\client\setup.exe
On UNIX: <DVD-ROM>/runinstaller
Desc ription
A name for the installation
Full path where you want to install the
Oracle software.
Installing Oracle
35
R e m o v i n g P re v i o u s Ve r s i o n s o f O r a c l e
If you have installed an upgraded version of Oracle you may remove the older
version. However, before removing your older version you may want to verify that
the new version has been installed properly. The following checks should confirm
that Oracle has successfully upgraded:
Connect to the database using the new Oracle environment settings, such as
ORACLE_HOME or PATH
Verify the database version.
Verify the connection with Windchill
If the Oracle upgrade has been successful you may remove the older Oracle
version by using the following procedure:
1. Navigate to the following location:
cd <ORACLE VERSION HOME>/deinstall
2. Run deinstall.
C h e c k i n g E n v i ro n m e n t Va r i a b l e s
After the Oracle installation is complete, verify that the PATH environment
variable includes the correct Oracle directory path.
For example:
Wi n d o w s
For Oracle 11.2.x.x:
c:\oracle\ora102\bin
UNIX
36
Also, when Oracle is installed, it typically places two Java Runtime Environments
at the beginning of the PATH variable. This placement interferes with Windchill
installers, which rely on the Java 1.6 SDK. After installing Oracle, make sure that
your 1.6.x Java SDK is positioned in your PATH variable before any JREs the
Oracle installer may have added.
For additional information about language setting options, see the Oracle
installation documentation.
Unix
At the command prompt enter the following:
<Oracle>/bin/netca
where <Oracle> is the directory location where you installed Oracle.
Perform the net services configuration procedure appropriate to an Oracle server or
client, as described in the sections Installing Oracle Server Software on page 33
and Installing Oracle Client Software on page 34.
Installing Oracle
37
For additional information about this configuration assistant, refer to the Oracle
Database Installation Guide.
C o n f i g u ri n g a R e mo t e O ra c l e D a t a b a s e t o Wo rk w i t h
the Windc hill Server
If your Oracle database is on a separate server from your Windchill server, you
must perform this additional procedure before installing your Windchill solution.
This section provides an overview of the actions you must perform with the PTC
Solution Installer (PSI) on the Oracle server before you install the Windchill
solution on your Windchill server.
Note
This section assumes you have installed Oracle on your database server as
described in this chapter.
For detailed descriptions of each screen and option, see Installing a Standalone
Product or Component on page 151.
Perform the following on the Oracle database server:
1. Launch the PTC Solution Installer. For more information, see Launching the
PTC Solution Installer on page 58.
2. Choose the installer language. For more information, see Installing Using the
PTC Solution Installer on page 152.
3. Read the B ef or e Yo u B eg i n panel and click N e x t.
4. Read the PTC Customer Agreement panel and confirm that you have legal
authority to install the software as described in the section titled Installing
Using the PTC Solution Installer on page 152.
5. Select the S ol u ti o n I ns ta l l ati o n type and click N ex t. For more information on
installation types, see Selecting the Installation Type on page 60.
6. Select the S ta nd a l on e P r od u c t or C o mp o ne n t and click N ex t.
7. Select Or ac l e C on fi g ur ati o n .
8. Under Ora c l e C o nfi g u ra ti on , select C re a te D a ta ba s e. In addition, you can
select C re a te W i n dc hi l l In s tal l a ti o n D a ta b as e U s e r A c c ou n t. The latter can be
done during your Windchill installation on the Windchill server, but the
database must be created on the Oracle server now. For more information, see
Installing a Standalone Product or Component on page 154.
9. Select the installation directories. For more information, see Specifying the
Installation Directory on page 73.
38
Installing Oracle
39
3
Ins talling S QL S erv er
About SQL Server .....................................................................................................42
Before You Begin.......................................................................................................42
Installing SQL Server Software ...................................................................................44
Index Byte Limitation..................................................................................................46
Configuring a Remote SQL Server Database to Work with the Windchill Server ..............47
Starting SQL Server Services .....................................................................................48
Select a version of SQL that is supported with this release. For more information
about the products supported with this release, see the Windchill Software Matrices
(available from http://www.ptc.com/appserver/cs/doc/refdoc.jsp).
Note
Microsoft SQL Server is supported only on Windows systems.
41
A bout S QL S erv er
PTC has provided these guidelines to assist you when installing the SQL Server
software. In all cases, follow the installation instructions outlined in the Readme.
htm file, which is located in the Servers directory of the SQL Server software CD.
You can also access this document by selecting R ea d the re l e as e n o te s on the
A u t o r u n panel of the SQL Server installer.
SQL Server can be installed either on the same machine as Windchill or on a
remote machine.
SQL Server is delivered on the SQL Server CDs and is installed using the SQL
Server installer.
B e f o r e Yo u B e g i n
Determine which versions of SQL Server are supported for your application.
See the software platform matrix (available from http://www.ptc.com/
appserver/cs/doc/refdoc.jsp).
The installing user (typically the database administrator [DBA]) must be a
member of the Administrator group.
You must have 1.5. GB available hard drive disk space for a SQL Server
installation with a Windchill demo database. More disk space is needed for
larger databases.
For additional installation requirements and platform prerequisites, consult the
Microsoft SQL Server documentation, or visit:
http://www.microsoft.com/sql/prodinfo/sysreqs/default.mspx.
Required Filegroups:
PRIMARY
BLOBS
INDX
WCAUDIT
42
If you are planning to upgrade to SQL Server 2012 then the upgrade needs to
be completed with SQL_Latin1_General_CP1_CI_AS (UCS-2) collation.
Updating with a new sub installer for an updated server is allowed with SQL
Server 2008 R2 (SQL_Latin1_General_CP1_CI_AS (UCS-2)) or Server 2012
(SQL_Latin1_General_CP1_CI_AS (UCS-2)) collation.
Database schema name and schema owner must be identified by same name
SQL Server logon, user, and schema must be identified by same name
Note
Do not grant DBA or Database Admin roles or privileges to Windchill database
users.
Windc hill B us iness Reporting
The following are the supported database platforms and collations for Windchill
Business Reporting:
If you are installing Windchill 10.1 maintenance release M050 then note the
following:
If Windchill Business Reporting is selected as the sub installer then you must
have SQL Server 2012 (Latin1_General_100_CI_AS (UTF 16)) or SQL Server
2008 R2 (SQL_Latin1_General_CP1_CI_AS (UCS-2)) for Windchill Business
Reporting as the target database platform.
If you are updating the existing installation with Windchill Business Reporting
as a standalone component then you must have either SQL Server 2012
(Latin1_General_100_CI_AS (UTF 16)) or SQL Server 2008 R2 (SQL_
Latin1_General_CP1_CI_AS (UCS-2)) for Windchill Business Reporting as
the target database platform.
If the new Windchill Business Reporting server is a target server for upgrading
from a previous release of Windchill Business Reporting having database
platform as SQL Server 2008 or SQL Server 2008 R2 then you must have SQL
Server 2008 R2 (SQL_Latin1_General_CP1_CI_AS (UCS-2)) as the target
database platform.
If the new Windchill Business Reporting server is a target server for upgrading
from a previous release of Windchill Business Reporting having database
43
platform as SQL Server 2012 then you must have SQL Server 2012 (Latin1_
General_100_CI_AS (UTF 16)) as the target database platform.
If you are installing Windchill 10.1 maintenance release M050 as an update server
then note the following:
You must update the existing Windchill Business Reporting server to 10.1
M0250 with SQL Server 2008 R2 (SQL_Latin1_General_CP1_CI_AS (UCS2)) as the target database platform.
Note
These are the minimum options needed to support a SQL Server database
for Windchill.
44
Documentation Components
Note
The D e fa ul t I ns ta nc e is the name of the machine on which SQL Server is
installed. In s tan c e ID should be the same as In s ta n c e N a me .
11. Review the disk space requirements. Go back and change the installation
location, if needed, and click N ex t.
12. Under S e rv e r C o nfi g u ra ti on , on the S e rv i c e A c c o u nts tab, select or enter the
A c c o u n t N a m e that will be used to start the services. For basic installations you
can use NAUTTHORITY\SYSTEM account for all services, and click OK .
13. Under S e rv e r C o nfi g u ra ti on , select the C ol l a ti o n tab.
14. Select C u s t om i z e next to Database Engine. In the popup window, select
W i n d o w s c o l l a t i o n d e s i g n a t o r a n d s o r t o r d e r , and select L a t i n 1 _ G e n e r a l _ 1 0 0
from the C ol l a ti o n d e s i g na to r drop down box. Also select the check boxes
C a s e - s e n s i t i v e , A c c e n t - s e n s i t i v e , and S u p p l e m e n t a r y C h a r a c t e r s . Click O K .
The D at ab a s e E ng i n e field should display the collation Latin1_General_100_
CS_AS_SC. Click N e x t.
15. Under S e rv e r C o nfi g u ra ti on , click N e x t.
16. Under D ata b as e E n g i ne C o nf ig u ra ti o n, select A u the n ti c a ti o n M od e Mi x ed
M o d e . Enter password for the Built-in SQL Server system admin account (sa).
17. Under S p e c i fy S QL S e rv e r ad mi n i s tra to rs , select A d d C u rr en t U s e r and click
Nex t.
18. Error reporting is optional. Check the box if you would like to send error
reports to Microsoft. Click N ex t.
19. If any rules have failed, performed what is required for the failed rule and
continue.
20. Review the summary for the SQL Server installation and click In s ta l l .
21. After the installation process is successful, click N ex t.
22. Click C l o s e to close the installer.
45
Index By te Limitation
The maximum length for an index key in SQL Server is 900 bytes. If an index
exceeds the 900 byte limit, an exception is thrown. To prevent an exception from
being thrown, ensure that the data values used by the index are less than 900 bytes.
Following are examples of exceptions thrown when the index size exceeds 900
bytes.
For example:
The insert statement is executed and the index size exceeds 900 bytes
wt.pom.DatastoreException: A SQL error has occurred for the statement
"INSERT INTO WTUser(classnameA2A2,updateCountA2,blob$entrySetadHocAcl,
disabled,
classnamekeydomainRef,idA3domainRef,entrySetadHocAcl,eventSet,inherited
Domain,name,repairNeeded,markForDeleteA2,updateStampA2,createStampA2,modify
StampA2,idA2A2) VALUES (wt.org.WTUSER,1,?,?,?,?,?,?,?,?,?,?,?,?,?)".
Database system message follows: Nested exception is: java.sql.SQLException:
[ptc][SQLServer JDBC Driver][SQLServer]Operation failed. The index entry of
length 2000 bytes for the index WTUser$COMPOSITE exceeds the maximum
length of 900 bytes.
For example:
When the update statement is executed and the index size exceeds 900 bytes
wt.pom.DatastoreException: A SQL error has occurred for the statement
"UPDATE WTUser SET blob$entrySetadHocAcl=?,disabled=?,classnamekey
domainRef=?,idA3domainRef=?,entrySetadHocAcl=?,eventSet=?,inherited
Domain=?,name=?,repairNeeded=?,markForDeleteA2=?,
updateStampA2=?,modifyStampA2=?,updateCountA2=updateCountA2+1 WHERE
((idA2A2 = ?) AND (updateCountA2 = ? ))" Database system message follows:
Nested Exception is: java.sql.SQLException: [ptc][SQLServer JDBC Driver]
[SQLServer]Operation failed. The index entry length of 2000 bytes for the
index WTUser$COMPOSITE exceeds the maximum length of 900 bytes.
46
Note
This section assumes you have installed SQL Server on your database server as
described in this chapter.
For detailed descriptions of each screen and option, see Installing a Standalone
Product or Component on page 151.
Perform the following on the SQL Server database server:
1. Launch the PTC Solution Installer. For more information, see Installing Using
the PTC Solution Installer on page 152.
2. Choose the installer language. This is the language that the installer uses for
you to choose settings for your installation.
3. Read the B ef or e Yo u B eg i n panel and click N e x t.
4. Read the PTC Customer Agreement panel and confirm that you have legal
authority to install the software as described in the section titled Installing
Using the PTC Solution Installer on page 152.
5. Select the S ol u ti o n installation type and click N ex t.
6. Select the S ta nd a l on e P r od u c t or C o mp o ne n t and click N ex t.
7. Select S QL S er v e r C o nf i gu ra ti o n.
8. Under S Q L S e rv er C on fi g ur ati o n , select C re ate Wi n d c h i l l D a tab a s e an d
I n s t a l l a t i o n U s e r . For more information, see Installing a Standalone Product or
Component on page 154.
9. Select the installation directories. For more information, see Specifying the
Installation Directory on page 73.
10. Select the Base Data Language. For more information, see Specifying
Language Settings on page 76.
11. Select the database size. For more information, see Selecting the Database Size
on page 77.
47
12. Enter your database settings. For more information, see Entering Your
Database Information on page 77.
13. Choose whether to use a staging area. For more information, see Selecting
Staging Directory Options on page 97.
14. If you are using a staging area, copy the SQL Server Configuration files from
the "Windchill 3rd Party Software" CD to the staging directory. For more
information, see Copying CDs or CD Images to the Staging Area on page 98.
15. Review the installation overview and click In s ta l l . For more information, see
Reviewing the Installation Overview on page 98.
You can now continue installing your Windchill solution on the Windchill server.
Using the SQL Server Configuration Manager, start the following SQL Server
services:
48
SQL Server
SQL Server Agent
SQL Server Browser
4
B efore Using the P TC S olution
Installer
Overview ..................................................................................................................50
Installing Using the Appropriate Permissions ...............................................................50
Setting the Installation Directory on Windows...............................................................51
Using a Staging Directory for Product CDs on Windows................................................51
Disabling Windows Firewall and Internet Explorer Enhanced Security Configuration
for Windows Server ................................................................................................52
Configuring Windchill with the Arbortext Publishing Engine ...........................................53
Preparing Enterprise LDAP for Installation Data Load ...................................................53
Preparing an Enterprise LDAP Including Active Directory..............................................54
Configuring a Windchill Installation to be IPv6 Compliant ..............................................54
Specifying UNIX Settings ...........................................................................................55
Verify that the Time and Date is Accurate on the Server ................................................56
49
Overview
This section provides an overview of the things you should know before installing
your Windchill solutions.
Verify that you have the most recent version of this guide and other installation
documentation. The latest versions can be downloaded from http://www.ptc.
com/appserver/cs/doc/refdoc.jsp.
Get familiar with how the PTC Solution Installer works, what each installation
type does, and the order of installation for the database and the products the
installer supports. Refer to the Getting Started with PTC Windchill Installation
and Configuration Guide for more information.
Review this manual to understand the software requirements, the values you
must enter into the PTC Solution Installer install your products, and any
manual steps you must perform to complete your installation.
Caution
Before attempting to access any part of the Windchill system ensure that all
installation procedures have been completed.
50
After installing those components, you can log in as a non-root user and use the
PSIs S ol u ti o n installation type to complete your installation.
If you choose to reference an existing Apache web server during your installation,
the PTC Solution Installer (PSI) references the components as the user that is
installing each component. For example, if you execute PSI and install Apache as
root and you later run the PSI as a different user to install a Windchill solution that
is configured to use the existing Apache, then the non-root user will not have
permission to access the Apache logs.
Oracle requires a database administrator who does not have root access to install.
Note
A non-root installation of Apache requires that you set port numbers to 1024 or
higher.
51
Go to C o nt ro l P a n el .
Click on A d d o r R e mo v e P ro gr am s .
Click on A d d/R e mo v e W i nd o w s C o mp on e n ts .
Clear the checkbox for I nte rn e t E x p l or er E nh a nc ed S ec u ri ty C on fi g ur at io n .
Click N e x t .
Click F i n i s h .
Once you have completed your installation and closed the PSI, you may re-enable
this option.
F o r Wi n d o w s 2 0 0 8 S e r v e r s
The Windows Firewall and the Internet Explorer Enhanced Security Configuration
option must be temporarily disabled while installing your PTC solutions using the
PTC Solution Installer (PSI) for the following reasons:
52
The S er v e r Ma n ag e r opens.
In the S ec u ri ty I nfo rm at i on section, click G o to Wi n d ow s F i re w al l .
Click W i nd o w s F i re w a l l P r op e rti e s .
On the D o ma i n P r of i l e, P ri v a te P ro fi l e, and P ub l i c P r ofi l e tabs, change the
F i r e w a l l S t a t e to O ff .
Click OK .
Administrators
Attribute Administrators
LifeCycle Administrators
Replication Managers
Type Administrators
Workflow Administrators
Workflow Authors
53
If you are binding to a Read Only LDAP respository, the user you choose must
have the "uid=Administrator" attribute.
If you are binding to a Read/Write LDAP respository, the user specified will be
assigned a "uid=Administrator" attribute. There can only be one user with the
"uid=Administrator" attibute in both the administrative and enterprise user
Distinguished Names.
If you are going to specify an existing user for your site administrator, this user
cannot be assigned to an organization (a value specified for the "o" attribute) in
the LDAP repository.
Using the existing user as a Site Administrator for Active Directory Server is
not supported.
54
Several 3rd Party applications do not yet support IPv6, so sites implementing IPv6
must have a dual-stack Windchill server (IPv4/IPv6) to be able to integrate with
IPv4 enabled 3rd party applications. The following is a diagram that illustrates this
point:
The client (browser) to the Windchill server connection can use a pure IPv6
connection.
There are manual instructions in this guide to configure Apache and Sun Java
System Web servers. IIS Web servers do not require special instructions to make
them IPv6 compliant. An IPv6 protocol stack must be installed on the server, but
these instructions are outside the scope of this document.
55
Ve r i f y t h a t t h e Ti m e a n d D a t e i s A c c u r a t e
on the Server
Some third-party products that are installed with your solution utilize the time and
date stamp on the solution server. To ensure proper installation, verify that the time
and date is accurate on the solution server.
56
5
Installing Windchill Solutions
Overview ..................................................................................................................58
Installing Using the PTC Solution Installer....................................................................58
Optional Product Settings...........................................................................................99
This section describes how to use the PTC Solution Installer to install Windchill
solutions.
57
Overview
Note
If you have installed Pro/INTRALINK, installing Windchill PDMLink serves
to upgrade your installation to Windchill PDMLink. If you have customized or
otherwise modified yourPro/INTRALINK installation, consult the chapter
"Managing Customizations" in the PTC Windchill Customization Guidebefore
installing Windchill PDMLink.
Verify that you have done the following before continuing with the installation
process:
Completed any necessary steps in the chapter Before Using the PTC Solution
Installer on page 49
Installed the database software using the instructions in either Installing Oracle
on page 31 or Installing SQL Server on page 41
Caution
Before attempting to access any part of the Windchill system ensure that all
installation procedures have been completed.
58
Note
If you are installing on UNIX, refer to Loading and Mounting the CDROM on UNIX on page 479 for more information.
Note
If you are installing a service pack, do not run the installer from a windchill
shell as the service pack may have updates to the windchill command code.
Instead, be sure to modify the system PATH variable to include the path to
your installed SDK bin directory before running the setup file.
2. From your CD drive, enter the following command:
Wi n d o w s
setup.vbs
UNIX
setup
B e f o re Yo u B e g i n
The B e fo re Yo u B e gi n panel provides links to the documentation necessary to
install your Windchill solutions.
P TC C us tomer A greement
The installer prompts you to accept the license agreement. Acceptance of the
license agreement is required for installation. The person installing this software
must have the legal authority to accept the license agreement on behalf of the
customer. If the installer does not accept the license agreement, instructions will
appear on-screen with respect to how to return the software for a refund. Note that
a refund will only be given if the instructions are followed in a timely manner (no
59
later than 30 days after the software is shipped by PTC). Before you are allowed to
accept the agreement, you must scroll all the way through it to acknowledge you
have reviewed the information.
S e l e c t i n g t h e I n s t a l l a t i o n Ty p e
The PTC Solution Installer (PSI) allows you to install products using the following
installation types:
Solution Installation
This option allows you to install a maintenance release, install a point release,
add products to your already-installed solution, or add a language. For
example, if you have an existing Windchill PDMLink system, you use Update
Existing Installation to add Windchill ProjectLink or Windchill Business
Reporting to your solution.
Recover
This option is available if the PTC Solution Installer detects an incomplete
installation. Select this option to attempt to complete the unfinished
installation. For more information on recovering an unsuccessful installation,
see Recovering an Installation on page 486
60
Note
If you need to choose a different installation type after clicking N e x t, cancel the
installation and re-start the PTC Solution Installer.
The Windchill Integrations for Embedded Software product solution consists of:
Installation
Remember the following points during the installation:
61
Caution
If you cancel during the actual installation, any configurations already
made to the system cannot be undone.
Perform the following steps for Windchill Integrations for Embedded Software
installation.
Note
Refer to the following installation procedure for Windchill Integrations for
Embedded Software as a guideline. See the PSI installation guide for detailed
installation instructions for your system installation and configuration.
1. After the PTC agreement screen, choose S o l ut i on to begin the PSI installation.
2. In the Product Lifecycle Management section of the Product Solution window,
select Windchill Integrations for Embedded Software. If applicable, select other
product solutions.
3. Select the optional products you want to install for:
Windchill Integration
Windchill Modules
Windchill Base Solutions Add-ons
Windchill Visualization
4. Select the platform components to install and configure on this machine, or
select the option to configure your solution to existing platform components for
the following:
Java Software Development Kit
Apache Web Server
Windchill Directory Server
Database Software
5. A summary list of your product selections display. Some of your product
selections may have optional features that you can configure.
62
6. Specify the database options to configure for your site from the following list
of options:
Database
Database Installation User
Database Application User
7. Select the optional integrations you will use with Windchill Integrations for
Embedded Software from the following selections:
Windchill Integration for Bugzilla
Windchill Integration for IBM Rational ClearCase
Windchill Integration for Atlassian JIRA
Windchill Integration for Subversion
8. Select if you are installing in a production or non-production environment.
And, if you want to configure to send and receive system information.
9. Specify the E-mail address of the system administrator responsible for the
proper functioning of your Windchill solution. Provide your customers
numbers so that your solution can send administrative notifications and
communicate with PTC.
10. Specify the directory paths for the following:
Base Installation Directory (your installation directory)
Installation Directory for Windchill
Installation Directory for Java SDK for Windchill
Installation Directory for Windchill Directory Server
Installation Directory for Apache Web Server
Installation Directory for Oracle Database
11. Select the datasets you would like to load for the following:
63
If you are installing the optional integration, Windchill Integration for IBM
Rational ClearCase, you can choose to create database schema and load
administrative data required for this product during the installation, or as a
manual step after the installation.
Note
If you choose not to perform this step during the installation, see Step 1
Run Windchill Loader in the post installation section for Windchill
Integration for IBM Rational ClearCase. This is a required step IBM
Rational ClearCase. There is no load demo data for IBM Rational
ClearCase.
12. Specify the fully qualified host name and port numbers for both the web server
and servlet engine:
Web Server DNS Registered Host Name
HTTPS Port Number
Servlet Web Server Listener Port Number
Servlet Engine DSN Registered Host Name
13. Complete the applicable selections in the PSI installer windows.
14. Select a language for base data which includes templates and rules, and one or
more display languages for user interface and documentation.
64
16. Specify the settings to access the LDAP server, administrative users, and user
definitions.
LDAP Server DNS Registered Host Name
LDAP Server Port Number
LDAP Server Administrator Distinguished Name
LDAP Server Administrator Password.
Confirm LDAP Server Administrator Password.
LDAP Base DN
LDAP Server Administration Port
17. Enter Windchill Site Administrator. Select from the following:
Create New
Use Existing Account
18. Enter the Windchill Site Administrator user name and password as wcadmin.
wcadmin
Windchill Site Administrator Password
wcadmin
Confirm Windchill Site Administrator Password
wcadmin
19. Select the Repository Where the Site Administrator is Stored from the
following selections.
Administrator
Enterprise
20. Select the Web Application Context Root as Windchill.
Windchill
21. Select the Info*Engine Task Processor Port Number.
22. Select the Initial Organization Name as ptc.
ptc
23. Specify Where to Create Product Icons.
24. Specify the staging area for your installation CDs.
25. A summary page displays with the values you specified for your installation
and the values that were selected for you by default. You can save this
information for future reference by clicking S a v e .
26. To make any changes to your installation, click the B a c k button to the specific
screens of where you want to change selections or values.
65
Caution
If you cancel during the actual installation, any configurations already
made to the system cannot be undone.
28. Once the installation is complete, the components installed display on the
screen. Click D on e to exit the installer.
Post Installation Steps
Refer to the section Windchill Integrations for Embedded Software on page 219for
the manual post-installation steps.
Note
For information on installing Optegra Gateway refer to the Optegra Gateway
Installation and Configuration Guide available on the Reference Documents
site.
66
67
Component
Windchill Directory Server
Desc ripti on
Windchill Directory Server is an LDAPcompliant enterprise directory that is
bundled with Windchill solutions.
Database Software
o Install Pro/INTRALINK Oracle
The following table lists the actions available in the drop-down list for the platform
components:
Action
Install and configure
Configure to an existing
local instance
Do not install or configure
68
Desc ription
Installs and configures this component on the local
machine.
Configures your Windchill solution to an existing
local instance of the component.
Only select this option if you will install and
configure the component at a later time. This option
also is available if you can manually configure a
remote component of that type. For example, select
this option under servlet engine if you wish to
manually connect to a remote servlet engine.
Note
This screen will not appear if you are installing Apache, because Apache
requires a root user to install.
69
When choosing the user, refer to the section titled Installing Using the Appropriate
Permissions on page 50 to note components that require specific permissions to
function properly.
When you have selected the appropriate user, click N e x t.
Databas e Configuration
The database configuration screen allows you to configure the database for your
Windchill solution:
70
Selected Options
C r e a t e D a t a b a s e and
Create Ins tallation User
Create Databas e,
C r e a t e I n s t a l l a t i o n U s e r and
Create Databas e Application Us er
U s e E x i s t i n g D a t a b a s e and
Create Ins tallation User
Us e Ex isting Databas e,
C r e a t e I n s t a l l a t i o n U s e r and
Create Databas e Application Us er
Resulting Configuration
The PSI creates a database and
installation user. The database
installation user will be used to create
the database schema, load required data,
and execute transactions from
Windchill. After selecting these options,
click N e x t.
Note
When creating an Oracle database
using PSI, you can launch PSI as
the user that installed the database
software, or as root user.
The PSI creates a database, installation
user, and application user. The database
installation user will be used to create
the database schema and load required
data. The database application user will
be used to execute transactions from
Windchill. After selecting these options,
click N e x t.
The PSI creates a database Installation
user. The database installation user will
be used to create the database schema,
load required data, and execute
transactions from Windchill. After
selecting these options, click N ex t.
The PSI creates a database installation
user and application user. The database
installation user will be used to create
the database schema and load required
data. The database application user will
be used to execute transactions from
Windchill. After selecting these options,
click N e x t.
71
Selected Options
U s e E x i s t i n g D a t a b a s e and
Us e Ex isting Ins tallation User
Resulting Configuration
The PSI will use an existing database
installation user to create the database
schema, load required data, and execute
transactions from Windchill. After
selecting these options, click N ex t. The
user has the option to configure
Windchill with a database application
user using the instructions in the section
titled Configuring a Database
Application User on page 214.
This option is only available if you
chose to install Windchill Business
Reporting.
S e t t i n g O r a c l e C o n f i g u r a t i o n U t i l i t y E n v i r o n m e n t Va r i a b l e s
You must update the Oracle user profile so that the following environment
variables are set automatically when launching a sh shell.
ORACLE_HOME= ORACLE_HOME_LOCATION
PATH=/usr/bin:/usr/local/bin:/usr/sbin:/sbin:/usr/local/sbin:/usr/ucb:/usr/ccs/bin:
$ORACLE_HOME/ bin:$PATHLD_LIBRARY_PATH=$ORACLE_HOME/lib:$LD_LIBRARY_PATH
SHLIB_PATH=/u01/app/oracle/product/11gR2/lib:$SHLIB_PATH
LIBPATH=/u01/app/oracle/product/11gR2/lib:$LIB_PATH
C o n f i g u ri n g Yo u r E n v i ro n m e n t f o r I n f o r m a t i o n
Exchange
This section describes how to configure your system for information exchange
with PTC. Sending information to PTC is useful in helping diagnose and resolve
problems when your site contacts PTC technical support. Choose from the
following options:
Option
Production environment
Desc ripti on
Select this option if you are installing
your production system.
Non-Production environment
Select this option if you are installing a
test system or a system other than your
production system.
Configure to Send and Receive System Configures your production system to
Information
send and receive information. By
default, this option is selected when you
choose to install a P ro du c t io n
environment.
72
Company Name
Sales Order Number (SON)
Service Contract Number (SCN)
Desc ripti on
Enter the email address of your
Windchill system administrator who
will read system notifications or
correspond with PTC for information
exchange.
Enter the name of your company.
A service contract number is required
for technical support.
73
You can change each individual subdirectory to meet your needs. By default, all
products and components are installed under the Base Installation Directory. You
can change this by editing the installation directory in any given field. To continue
propagating changes throughout all installation paths, enter further changes under
the B a s e In s ta l l a ti on D i re c t or y field.
Note
For HP-UX machines, the In s tal l a ti o n D i r ec to ry for the A p ac he Web S er v e r
should only be installed in the following location:
/opt/hpws22/apache
74
Desc ripti on
Selecting this option creates the
database schema that defines the tables,
columns and relationships between
fields and tables. This option is selected
by default to allow base data to be
loaded.
Note
When selected, and if you are
adding an additional product to an
existing installation, and that
product has its own schema you are
asked to provide a database
installation user name and
password.
Base data is required for all solutions.
This option is selected by default to
load the base data.
Installs the demonstration data.
PTC Windchill Installation and Configuration Guide
E n te ri n g th e We b S e rv e r a n d S e rv l e t E n g i n e
Settings
Apache Web server and Tomcat servlet engine are the Web server and servlet
engine that PTC bundles with its Windchill solutions.
The Web server is the front-end authentication mechanism for your Windchill Web
application. The Apache Web server is bundled with Windchill and has an
automatic configuration. The servlet engine extends the functionality of the Web
server by managing the data transfer between the Windchill application server and
the client. The Tomcat servlet engine is bundled with Windchill and has an
automated configuration. For more information about the Web servers and servlet
engines, see the software matrices:
http://www.ptc.com/appserver/cs/doc/refdoc.jsp
For this part of the installation, make sure you have the logical host name from
your network administrator.
We b S e rv e r a n d S e r v l e t E n g i n e I n p u t F i e l d s
Use the following options for Apache Web Server and Tomcat Servlet Engine:
Option
Web Server DNS Registered Host
Name
Desc ripti on
The a fully qualified host name of the
computer on which Apache is installed.
The host name must conform to the
required standard Internet format that
specifies the name can be a text string
up to 63 characters drawn from only the
alphabet (A-Z and a-z), digits (0-9),
hyphen (-), and period (.). The period is
used only as a domain name separator.
The first character of a host name can
be either a letter or a digit.
The default is:
<hostname>.<domainname>
A port number to listen for HTTP
requests.
A value is required.
75
Option
Desc ripti on
requests.
A value is required.
HTTPS is not effective out-of-the-box
and requires manual configuration to
implement.
Display Language
Desc ripti on
Select a language for administrative
data, such as templates and rules. The
initial default language is English.
Select one or more D i s p l a y L an g ua g e
check boxes for the user interface and
documentation.
76
Ta b l e s p a c e
5000 MB
Production
11,000 MB
Large
26,000 MB
Desc ription
Size is sufficient to load
the Windchill
demonstration data and
should be adequate for
very small pilots.
Initial size. Adjust for
your needs accordingly.
Initial size. Adjust for
your needs accordingly.
Ta b l e s p a c e
1500 MB
Production
2500 MB
Large
5000 MB
Desc ription
Size is sufficient to load
the Windchill
demonstration data and
should be adequate for
very small pilots.
Initial size. Adjust for
your needs accordingly.
Initial size. Adjust for
your needs accordingly.
E n t e ri n g Yo u r D a t a b a s e I n f o r m a t i o n
When you use the PTC-bundled Pro/INTRALINK - Oracle for the Windchill
solution, you are creating new user names and passwords.
When you use a previously installed Oracle or SQL Server database, you reference
existing user names and passwords. Oracle and SQL provide persistent data
storage for Windchill.
77
In the D efi n e S e tti n g s section, enter your Oracle or SQL Server database
information.
Oracle
Option
Enable extended character sets check
box.
Desc ripti on
Select the check box for every language
except for English.
A cleared check box is the default,
which means English is the default
language.
Create a new installation directory if
you are installing the PTC-bundled Pro/
INTRALINK - Oracle.
If you have installed Oracle, set the
ORACLE_HOME system environment
variable to the Oracle installation
directory.
78
Option
Oracle User Password for Windchill
Desc ripti on
Create a new password.
Note
Your password cannot include
special characters (! @ % ^ & * ( )
+ = \ | ` ~ [ { ] } ; : ' " , < > ?). If
your sites password policy requires
special characters, create a
temporary password now and
manually change it to include
special characters post-installation.
For more information, see Changing
the Database Password
on page 191.
Enter the password again to verify the
password.
Option
Default
A cleared check box is the
Enable extended
c h a r a c t e r s e t s check box. default, which means
English is the default
language.
Oracle Server Installation <ORACLE _HOME> is
the default if the variable
Directory
is not set.
<hostName>.<domain>
1521
Desc ription
Select the check box for
every language except for
English.
Create a new installation
directory if you are
installing the PTCbundled Pro/INTRALINK
- Oracle.
Set the ORACLE_HOME
system environment
variable to the Oracle
installation directory.
Defines the fully qualified
machine name of the
Oracle server.
Create a new name for
PTC-bundled Pro/
INTRALINK - Oracle or
use the existing name for
the Oracle Configuration.
Defines the port number
the Oracle server listens
79
Option
Oracle SYSTEM
Account Password
Confirm Oracle
SYSTEM Account
Password
Oracle User Name for
Windchill
80
Default
wind
Desc ription
on.
Create a new port number
for PTC-bundled Pro/
INTRALINK - Oracle or
use the existing port
number for the Oracle
Configuration.
Defines a name to be
given to the database
when it is created. The
number cannot exceed 8
aphanumeric characters,
and must not begin with a
numeric digit.
Create a new name for
PTC-bundled Pro/
INTRALINK - Oracle or
use the existing name for
the Oracle Configuration.
Enter the system
password.
Create a new password
for PTC-bundled Pro/
INTRALINK - Oracle or
use the existing password
for Oracle.
Enter the password a
second time to verify the
password.
Create this user name if
you are installing the
PTC-bundled Pro/
INTRALINK Oracle.
Use the same user name
that you used when
installing Oracle.
Create this password if
you are installing the
PTC-bundled Pro/
INTRALINK Oracle.
Option
Default
Temporary Tablespace
Name
(Both Database settings
and Data Loader settings)
TEMP
Desc ription
Use the same password
that you used when
installing the Oracle
Configuration.
Enter the password a
second time to verify the
password.
Create this name if you
are installing the PTCbundled Pro/INTRALINK
Oracle.
Use this name if you have
installed the Oracle
Configuration.
Create this name if you
are installing the PTCbundled Pro/INTRALINK
Oracle.
Use this name if you have
installed the Oracle
Configuration.
SQL S erv er
Creating a Windchill database user account and dabase objects remotely is not
supported for SQL Server using PSI. To accomplish this option for SQL server,
PSI must be run on the SQL Server host and the SQL Server Configuration option
must be selected to create a database and user. Then, PSI must be launched again
from the Windchill Server host. Select C on fi g ur e to a n e x i s ti n g u s er o n an e x i s ti ng
d a t a b a s e for SQL Server and fill in the fields with the SQL Server values used
during the database creation step on the database host.
For more information on creating a User on SQL Server, see Installing a
Standalone Product or Component on page 151.
Note
Some options do not appear when configuring to an existing user and database.
81
Option
Installed SQL Server Instance Name
(Named Instance only)
Password for User sa
SQL Server User Name for Windchill
SQL Server User Password for
Windchill
Desc ripti on
The default instance represents the
machine on which the SQL server is
installed.
Enter a password.
The same user name that you used
when installing SQL Server
The same password that you used when
installing SQL Server
Note
Your password cannot include
special characters (! @ % ^ & * ( )
+ = \ | ` ~ [ { ] } ; : ' " , < > ?). If
your sites password policy requires
special characters, create a
temporary password now and
manually change it to include
special characters post-installation.
For more information, see Changing
the Database Password
on page 191.
Confirm SQL Server User Password for Enter the password again to verify the
Windchill
password.
Option
SQL Server Installation
directory
SQL Server Client
Installation Directory
SQL Server DNS
Registered Host Name
Installed SQL Server
Instance Name (Named
Instance only)
82
Default
Desc ription
The same directory you
used when installing SQL
Server.
The same directory you
used when installing SQL
Server.
The same name you used
when installing SQL
Server.
The name you used when
installing SQL Server.
If you used the default
instance during
installation of SQL
Server, this can be left
empty.
Option
TCP Port Number for
SQL Server Instance
Default
Desc ription
The same port number
you used when installing
SQL Server.
The password for the
master administrator for
SQL Server.
The username that
Windchill uses to access
SQL Server.
The password Windchill
will need to access the
database.
Enter the password again
to verify the password.
E n t e ri n g Yo u r L D A P S e t t i n g s
Windchill Directory Server (WDS) is an LDAP-compliant enterprise directory that
is bundled with Windchill. WDS is required for managing Windchill operation
definitions. It can also optionally manage Windchill user information.
When installing WDS on a separate machine from your Windchill solution, WDS
requires a locally installed Java Software Development Kit (JSDK).
Caution
The Windchill Directory Server must be installed on local disk. It must not be
installed on NFS mounts, or other non-local disk. Attempting to install the
Windchill Directory Server on nonlocal storage can cause data corruption,
file locking issues and startup failures. In addition, antivirus software must be
turned off or be configured to avoid scanning in the Windchill Directory Server
installation directory.
The LDAP settings create a default LDAP directory structure similar to the
following:
83
Note
Depending on the product you are installing, the default LDAP directory
structure is different.
In the D efi n e S e tti n g s section, enter your LDAP settings:
Option
LDAP Server DNS Registered
Host Name
LDAP Server Administrator
Distinguished Name
Desc ription
<hostname>.<domain> is the default.
The distinguished name for the Windchill
Directory Server administrator. The setup
program creates the directory using the
distinguished name that you specify.
cn=Manager is the default
84
Option
LDAP Server Administrator
Password
Confirm LDAP Server
Administrator Password
Desc ription
Windchill Directory Server administrators
password
Specify the same password that you specified
for the Administrators password.
The following default values are set for you during the Express installation. You
cannot change these values during an Express installation.
Option
LDAP Server Port
Number
Default
389
Base Distinguished
Name for Product
Properties
cn=configuration,
cn=Windchill_10.0,
o=<myCompany>
Des cription
Defines the port number that the
Windchill Directory Server listens
on for requests.
Defines the distinguished name of
the top subtree LDAP entry under
which Windchill configuration
LDAP entries reside.
Specifies a base node in the
Administrative Directory hierarchy
that contains all users in the
directory that should be visible to
Windchill.
o=<mycompany>
Base Distinguished ou=people,
Name for Enterprise
cn=EnterpriseLdap,
Users
cn=Windchill_10.0,
o=<mycompany>
No
Enterprise User
entries are in the
Enterprise LDAP
Windchill Directory o=Company Name
Server Directory
85
Option
Suffix
Default
Des cription
the entire set of Windchill created
entries will be stored.
The port number that is used by
the Windchill Directory Server
control-panel to administer
Windchill Directory Server..
The port number used by JMC
clients to retrieve Windchill
Directory Server usage data. The
standard JMX clients, JConsole or
VisualVM, can be used to connect
to Windchill Directory Server on
this port.
Define the settings for the Windchill Directory Server LDAP directory:
Note
The following is a complete list of possible options; some may not appear
depending on whether you are installing WDS on the same server with
Windchill or standalone.
Option
LDAP Server DNS
Registered Host
Name
LDAP Server Port
Number
Default
<hostname>.<do
main>
Entry
<hostname>.<domain> is the
default.
389
cn=Manager
LDAP Server
Administrator
Distinguished Name
LDAP Server
Administrative
Password
Confirm LDAP
86
Option
Server
Administrative
Password
Default
o=PTC
LDAP Server
Administrator Port
4444
Entry
specified for the Administrators
password.
Note
This field only appears when
installing a new Windchill
Directory Server LDAP Server.
Defines the LDAP base
distinguished name under which the
entire set of Windchill created
entries will be stored.
The port number that is used by the
Windchill Directory Server controlpanel to administer Windchill
Directory Server..
The port number used by JMX
clients to retrieve Windchill
Directory Server usage data. The
standard JMX clients, JConsole or
VisualVM, can be used to connect
to Windchill Directory Server on
this port.
Define the distinguished name of
the top subtree LDAP entry under
which Windchill configuration
LDAP entries reside.
You can enter any unique base
unless you entered a context name
as part of the distinguished name
entered here. By default, a no
context name was required when
you installed Windchill Directory
Server.
Define the distinguished name of
the LDAP subtree under which
Administrative LDAP entries
reside. Users and groups under this
subtree will be visible to Windchill.
You can edit this field to change the
suggested name.
87
Option
Default
Enable Separate
Enterprise LDAP
Server
Entry
Note
This option does not apply
when Windchill Directory
Server is installed as a
standalone component.
Define the distinguished name of
an LDAP subtree under which
Enterprise LDAP entries reside.
Users and groups under this subtree
will be visible to Windchill.
Note
Refer to the section Preparing
Enterprise LDAP for
Installation Data Load on page
53 before setting this option and
Preparing an Enterprise LDAP
Including Active Directory on
page 54.
Specifies whether the enterprise
subtree is in a separate LDAP
Server (for example, a site
corporate LDAP server).
88
Option
Enterprise
Repository LDAP
Server Host Name
Default
<hostname>
<domainname>
Enterprise
Repository LDAP
Server Port
LDAP Connection
389
Bind as User
Des cription
Host name to connect to the
Enterprise LDAP Server. An
Enterprise LDAP can exist on a
local or remote machine. You can
use either a V3 Compliant LDAP
or an existing Microsoft Active
Directory Service (ADS) for this.
The port number that Windchill
will use to communicate with the
enterprise LDAP server.
Specifies the bind method used to
connect to the Enterprise
Repository.
Two options are available:
Bind as Anonymous, which
does not require a user name to
read the contents of the
repository.
cn=Manager
Enterprise
Repository LDAP
User Distinguished
Name
Enterprise
Repository LDAP
Password
89
Option
Windchill
Privileges for
Repository
Default
Read,Write
Des cription
Sets a flag indicating this is a read/
write adapter.
If it is ADS, you can bind in only
Read only mode. For other V3
compliant LDAP, you can choose:
Read, Write.
LDAP Servic e
Option
LDAP Service
Enterprise Adapter
Name
User Filter
Default
Active Directory
Service (ADS)
<reverse hostname>.
EnterpriseLDAP
Des cription
Select this option if the enterprise
node is ADS. Otherwise, select
Other V3Compliant LDAP.
As soon as you select ADS, the
following options later in this
section are highlighted. See Default
User Mappings for ADS Attributes
on page 92.
Change only the text
"EnterpriseLDAP in this field.
To filter users.
Only those users who are selected
here are searchable through
Windchill
Examples:
90
Default
Des cription
If the Enterprise Node (LDAP)
is Windchill Directory Server:
uid= *(searches for all
users)
or
uid= ne* (searches for all
users with the name starting
with ne).
If the Enterprise Node is ADS:
cn=* (searches for all users)
or
cn=ne*(searches for all
users with the name starting
with ne)
Note
You can modify this criteria
after installation by going to
Site Utilities Info*Engine
A d m i n i s t r a t o r and selecting the
Group Filter
91
Default
Des cription
If the Enterprise Node (LDAP)
is Windchill Directory Server:
cn=*(Searches for all
Groups)
or
cn=gr* (Searches for all
Groups with the name
starting with gr).
If the Enterprise Node is ADS:
cn=*(Searches for all
Groups)
or
cn=gr*(Searches for all
Groups with the name
starting with gr), and so on.
Note
You can modify this criteria
after installation by going into
Site Utilities Info*Engine
92
Default
userCertificate
sAMAccountName
telephoneNumber
postalAddress
preferredLanguage
cn
sn
mobile
mail
user
company
facsimileTelephoneNumber
sAMAccountName
Note
By default, both the unique identifier attribute and the unique identifier can
have the same value; however, the unique identifier attribute must always point
to an attribute that holds a unique value. If you do not have multiple
subdomains in your ADS configuration, and you know that the
sAMAccountName is unique within a single domain, then you can use the
default value for your unique identifier attribute. If the values for your
sAMAccountName are not unique, then you should use the userPrincipalName
for your unique identifier attribute.
Default Group Mappings for ADS A ttributes
The "Option" column specifies the attribute name expected by Windchill and the
"Default" column specifies the ADS attribute name.
Option
Unique Identifier Attribute
Description
Default
sAMAccountName
description
93
Default
group
member
S ta rti n g th e Wi n d c h i l l D i re c to ry S e rv e r
On both Windows and UNIX systems you will need to start the Windchill
Directory Server every time you reboot the machine. For more information see
Starting the Windchill Directory Server.
94
Desc ripti on
Creates a new Windchill site
administrator using the values in the
following fields.
Uses an existing Windchill site
administrator account. Specify the
values for the existing account in the
following fields.
Field
Windchill Site Administrator User
Name
Desc ripti on
A user name for the administrator of the
Windchill server. An example might be
wcadmin.
Note
Because of restrictions in both
Apache and the Sun ONE servers,
the user names that are used for
logging on cannot contain extended
ASCII characters nor multi-byte
characters.
Note
If the U s e E x i s ti n g U s e r (used as
a Site Administrator) option is
enabled, the installation does not
work. See also Installation Logs
and Troubleshooting on page
460.
Windchill Site Administrator Password The password for the Windchill server
administrator user.
Confirm Windchill Site Administrator Verify the password you entered for the
Password
Windchill server administrator user.
This option is only necessary when
creating a new account.
Repository Where the Site
Specifies which LDAP repository
Administrator Is Stored
contains the site administrator.
You have two options: Administrative
and Enterprise
Field
Web Application Context Root
Desc ripti on
Defines the Web application context
root name used to access the Windchill
applications through the Web browser.
This value is used to format the URL,
for example, http://<DNS name>/<Web
application context root>.
95
Field
Initial Organization Name
Desc ripti on
port number is already in use.
A name that describes the organization
for which this installation is being
performed. An example might be World
Wide Tractors. The initial organization
specified here becomes the internal
organization for auditing.
An Internet domain name for the initial
organization. The Internet domain name
must conform to the required standard
Internet format that specifies the name
can be a text string up to 63 characters
drawn from only the alphabet (A-Z and
a-z), digits (0-9), hyphen (-), and period
(.). The period is only used as a domain
name separator. The first character of an
Internet domain name can be either a
letter or a digit. In particular, the value
you specify cannot contain the
underscore character ( _ ). A valid
example of an Internet domain name is:
world-wide-tractors1.com
96
Desc ripti on
Creates the icons in a new program
group in the S t ar t menu
Creates the icons under a program
group that already exists in the S tar t
menu
PTC Windchill Installation and Configuration Guide
Windows (continued)
Option
In the Start menu
On the Desktop
In the Quick Launch Bar
Other
Do not create icons
Desc ripti on
Creates the icons at the top level of the
S t a r t menu
Creates the icons on your Windows
desktop
Creates the icons in your Windows
Quick Launch Bar
Specify the location where you want to
create icons
No icons are created during installation
Note
If you select I n a N ew P r og ra m Gr ou p or In the S ta rt Me n u, you can create the
icons for all users by selecting C re at e Ic on s for A l l U s e rs .
UNIX
Option
In your home folder
Other
Do not create links
Desc ripti on
Creates the links in your home folder
Specify the location where you want to
create links
No links are created during installation
Note
The term "product CD" can refer to either the physical CD media or the
equivalent files downloaded from PTC.com.
97
Place the product CD you want to copy to the staging directory in the drive.
Click C o p y D i s c .
Click B ro w s e and navigate to the CD drive where you placed the product CD.
Click OK .
98
The Ins ta l l ati o n Ov e rv i ew panel also gives an indication of the estimated disk space
requirements to complete the installation based upon the options you have chosen.
After you click In s ta l l on the In s t al l a ti o n Ov e rv i e w panel, the installer checks your
system for the required disk space. If there is not enough space, the installer
presents a dialog box that informs you of this and waits for the space to be
available. You may also choose to go back and select a different installation
directory.
The disk space check can be disabled completely by setting the installer variable
CHECK_DISK_SPACE to a value OFF (note all CAPS) prior to launching the
installer. From a command prompt, enter the following command:
<PTCSolutionInstallerDirectory>/setup -DCHECK_DISK_SPACE=OFF
Note
The installation summary includes un-encrypted password information. After
the installation is complete, make sure that the following files are only
accessible by those with the appropriate permissions:
<Windchill>\installer\*.properties
Summary.html
L o c a t i n g P o s t - i n s t a l l a t i o n S t e p s f o r Yo u r P r o d u c t s
The PTC Solution Installer installs and configures many, but not all, PTC products
end-to-end. Each product has its own section in the Completing Configurations Manual Steps chapter that describes any necessary post-installation manual steps.
Refer to the section for each of your installed optional products to complete your
installation.
99
Note
To publish manufacturing objects Windchill MPMLink must be installed.
100
Option
Configure Windchill
PDMLink for use with
Windchill ESI
Default
Selected
Configure Windchill
PDMLink for use with
ERP Connector
Deselected
Create Distribution
Targets in the Site
Context
Deselected
Desc ription
Configures Windchill
PDMLink for Windchill
ESI by performing the
relevant configuration
steps such as installing the
contents of the archive
esi.ptcdar, propagating
properties, updating the
LDAP, loading the ESI
data, etc.
Configures Windchill
PDMLink for ERP
Connector by performing
the relevant configuration
steps such as installing the
contents of the archive
esi.ptcdar, propagating
properties, updating the
LDAP, loading the ESI
data, etc.
Creates distribution
targets in the database
based on an input file
supplied by the user.
Note
For more information
on configuring
Windchill ESI for
multiple ERP instance
see the PTC Windchill
Enterprise Systems
Integration Installation
and Configuration
Guide - Oracle
Applications or the
PTC Windchill
Enterprise Systems
Integration Installation
and Configuration
Guide - SAP.
101
Note
This step occurs further along in the installation process, after you configure
you administrative settings.
Option
Default
Path to the File tibjms.jar
JMS Administrator
Password
Confirm JMS
Administrator Password
102
Desc ription
Location of the file
tibjms.jar, as installed by
the Middleware
Installation and
Configuration Utility
(MICU).
Name of the user with
administrative privileges
for the TIBCO EMS
(otherwise known as
"TIBCO Enterprise for
JMS") Server.
Password for the JMS
Administrator user.
Since the password
entered by the PSI user
will not be echoed, this
field would help ensure
that the user typed in the
password correctly for the
JMS Administrator
Password field.
Name of the machine
hosting the TIBCO EMS
Server.
Port number on which the
TIBCO EMS Server
listens for requests from
clients.
Location of the file
ESITarget.xml, containing
distribution targets
Option
Note
If the option for
creating distribution
targets for standard
ESI has not been
selected, this setting
will not appear in the
installer
Choice Indicating the
Context in Which to
Create Distribution
Targets
Default
Desc ription
information for use with
the Windchill data loader.
Create Distribution
Targets in the Site
Context
Note
If the option for
creating distribution
targets for standard
ESI has not been
selected, this setting
will not appear in the
installer
Value for Context in
Which to Create
Distribution Targets
Note
If the option for
creating distribution
targets for standard
ESI has not been
selected, this setting
will not appear in the
installer
103
ERP Connector
ERP Connector is a product designed to leverage current standard Windchill ESI
capabilities on the Windchill side, without using any third-party EAI software.
This uni-directional integration enables the publication of product information
stored in Windchill PDMLink to distribution targets in XML. ERP Connector
enables the transfer and mapping of business objects, such as parts, Bills of
Materials (BOMs) Change Notices (CNs) and documents, from Windchill
PDMLink to the distribution targets, and also serves as the foundation for more
advanced transaction-managed integrations.
If Windchill MPMLinkis installed ERP Connector allows you to publish the
following manufacturing objects:
104
Option
Directory containing the
ERP Connector
distribution target file
Choice Indicating the
Context in Which to
Create Distribution
Targets
Default
Desc ription
Location of the file
containing the ERP
Connector distribution
target information.
Create distribution targets There are two options for
in the Site Context
this setting. The default
option places all ERP
Connector distribution
targets in the Site context.
If you have more specific
needs for your
distribution targets, select
the option to create
distribution targets in a
context other than the Site
context.
If the option to create
ERP Connector
distribution targets in a
context other than the Site
context is selected, the
user must specify the
value for the context(s) to
create the ERP Connector
distribution targets in,
here.
105
W i n d c h i l l Wo r k g r o u p M a n a g e r
Windchill Workgroup Manager is an add-on product to Windchill PDMLink and
Windchill ProjectLink. It enables companies to integrate and manage second and
third party authoring applications within Windchill.
Installation of Windchill Workgroup Manager requires Windchill PDMLink or
Windchill ProjectLink.
W h e n I n s t a l l i n g a N e w e r Ve r s i o n o f W i n d c h i l l Wo r k g r o u p M a n a g e r
w i t h t h e P r e v i o u s Ve r s i o n o f W i n d c h i l l
Beginning with the Windchill 10.1 M020 maintenance release, new versions of the
Windchill Workgroup Manager client are supported with older versions of the
Windchill server; the client will be backwardly compatible with an older version
of the server. This allows client-side software fixes, along with support for new
versions of CAD applications with older server maintenance releases without the
need to upgrade the Windchill server.
Backward compatibility is supported with AutoCAD, Autodesk Inventor, CATIA
V5, NX, and SolidWorks.
106
Note
For a description of each optional Windchill Workgroup Manager product,
refer to the Getting Started with Windchill Installation and Configuration
Guide.
107
Note
Windchill server core software and optional products installations cannot be
installed outside of PSI installer.
108
Refer to the chapter Completing Configurations - Manual Steps on page 187 for
any manual post-installation steps.
For advanced deployment options, such as installing in a clustered environment,
refer to the PTC Windchill PartsLink Classification and Reuse Administrator's
Guide.
109
Note
To install in a Windchill cluster environment, install the Windchill PartsLink
client on each node in the Windchill cluster.
1. Refer to Installing Using the PTC Solution Installer on page 58 while
completing the following sections:
2.
3.
4.
5.
Note
The server hostname you enter must be accessible by the machine on which
Windchill PartsLink client is being installed.
RMI Regis try P ort
Default value:
Valid range:
10011
102465535
Note
The value of the R MI R e g i s try P or t field must be the same as the R M I
R e g i s t r y P o r t specified when installing Windchill PartsLink server.
When finished, click N ex t.
110
Click N e x t .
111
Note
The information entered on this screen is used to propagate the
xconfmanager and properties files. The schema for Windchill PartsLink is
created separately. For information on creating the schema, see Windchill
PartsLink Classification and Reuse Post-Installation Steps on page 240.
7. Specify optional product settings by entering the R M I R e gi s try P o rt and
PartsLink client hos tname.
Note
If the Windchill PartsLink client is installed in a Windchill cluster
environment, enter the hostnames of each of the Windchill nodes, separated
by a semi-colon.
RMI Regis try P ort
Default value:
Valid range:
10011
102465535
Note
The value of the R MI R e g i s try P or t field must be the same as the R M I
R e g i s t r y P o r t specified when installing Windchill PartsLink client.
When finished, click N ex t.
8. Follow the general PSI instructions for the remaining steps:
Refer to the chapter Completing Configurations - Manual Steps on page 187 for
any manual post-installation steps.
112
Note
This step occurs further along in the installation process, after you configure
you administrative settings.
113
Manual Input
JMS Base URI
Default
Desc ription
A base URI is required to
store administrative
objects at the LDAP
server. This procedure is
for those who have
WindchillDS servers.
Specific to your site
Specific to your site
cn=ieQCF
cn=ieExecution
Specific to your site
Specific to your site
cn=inQ3
SunMQ
Note
During the configuration steps the installer will ask for a public key file. You
must obtain this file from Windchill.
114
Ti p
For more information see Getting Started with Windchill Gateway for Creo
Elements/Direct Model Manager.
Note
The property com.ptc.distproc.credential sets the gateway administrator
password in the <>/DistProc/distproc.properties file. This is the password of
the principal who allows the adapters to interact with the gateway controller in
Windchill. If encryption is enabled, then the JMS Base URI, WES Base URI
and Queue Base URI fields need to be encrypted. See the Windchill system
administration online help for more details.
The installation begins at the S e l e c t P ro d uc t step when Windchill PDMLink is
installed.
You must manually input the following:
Manual Input
JMS Base URI
Default
Desc ription
A base URI is required to
store administrative
objects at the LDAP
server. This procedure is
for those who have
WindchillDS servers.
Specific to your site
Specific to your site
115
Manual Input
Default
User Name
Gateway Administrative
Password
JMS Inbound Queue
Name
JMS Service Name
Default Target Context for
Imported Data
Desc ription
Specific to your site
Windchi ll MP MLi nk
Windchill MPMLink is an add-on product to Windchill PDMLink, and is the
central repository and the design environment for manufacturing data management
in Windchill. Windchill MPMLink enables the manufacturing engineer to
associatively transform the engineering BOM to the manufacturing BOM, to
manage libraries of manufacturing resources and standardized manufacturing
capabilities, to define digital definitions of process plans with associative links to
the mBOMs and manufacturing resources and to dynamically generate work
instructions for the shop floor.
Installation of Windchill MPMLink requires Windchill PDMLink.
Win d ch ill MP ML in k
116
Desc ripti on
Makes the thumbnail image created by
the Thumbnail Generator interactive.
You can manipulate the model.
Creates a Vi s u al i z a ti on tab on the
S t r u c t u r e tab of the objects information
Option
Make client available
Make Validate for ECAD available
Desc ripti on
page.
Provides a client download directly
from Windchill.
Provides an ECAD Compare and
Validate for ECAD download directly
from Windchill.
117
Installation
Windchill PLM Connector server software is installed using the PTC Solution
Installer (PSI). During the PSI installation, under Op ti o n al P ro d uc ts , select
Windc hill PLM Connector.
After you have completed the PSI installation, to view the Windchill PLM
Connector server log files, go to <WT_HOME>/installer/logs folder to determine
if the installation was successful:
WPCSERVER_InstallLog.xml
If the installation fails, error messages and the name of the log files appear. The
log files can be helpful in determining the cause of the failure. The installation
error log files are located in the <WT_HOME>/installer/logs folder.
118
119
Option
Base URL
Default
User Name
Password
Desc ription
The property "com.ptc.windchill.
insight. environment.baseUrl" is
specified in <Windchill>\codebase\
insightIntegration.xconf.
This is the name used by Windchill
Product Analytics Process Adapter
and is authenticated by to create
parts and suppliers in . The name
must be a valid user and have the
required permissions to create parts
and suppliers. The property is
specified in <Windchill>\ codebase\
WEB-INF\insightIntegration.ie.
xconf.
This is the password used by
Windchill Product Analytics Process
Adapter and is authenticated in order
to create parts and suppliers in
InSight. The property is specified in
<Windchill>\codebase\WEB-INF\
insightIntegration.ie.xconf.
120
Note
Windchill Business Reporting is also supported in a cluster environment. For
information on installing Windchill Business Reporting in a cluster
environment, see the PTC Windchill Advanced Deployment Guide.
Local Installation
In a local installation, the Windchill Business Reporting components are installed
on the same machine as your Windchill solution. The PSI is run only once.
From the list of solutions to install, select the Windchill solution or solutions you
are installing.
On the optional products screen, select Wi n d c h i l l B u s i ne s s R e po rti n g .
121
Default
Selected
Desc ription
When selected, installs
the Windchill Business
Reporting host
components.
When selected, installs
the Windchill Business
Reporting gateway server.
The C o nfi g u re Lo c a l
I n s t a l l t h e G a t e w a y S e r v e r Selected
Default
<base installation
directory>\Reporting
Desc ription
The location where the
selected Windchill
Business Reporting
components are installed.
122
Default
Selected
Desc ription
Loads the base data set,
including the predefined
reports for Windchill
Business Reporting. PTC
strongly recommends
leaving this option
selected, to avoid the need
for certain manual postinstallation
configurations.
Desc ripti on
The user name for the Windchill
Business Reporting database user
account.
or
Windc hill Busines s Reporting SQL
S e rv er Da ta b as e Us e r N a me f or the
Databas e Us er Ac count
Windc hill Busines s Reporting Orac le
Databas e Pass word for the Database
User Account
or
Windc hill Busines s Reporting SQL
S e rv er Da ta b as e Us e r P as s w o rd fo r th e
Databas e Us er Ac count
Co n firm Wind c hill B u s in e s s R e p ortin g
Orac le Da ta b as e P a s s w o rd for the
Databas e Us er Ac count
or
Co n firm Wind c hill B u s in e s s R e p ortin g
S QL S erv e r D a ta ba s e Us er P a s s wo rd
for the Database User Acc ount
123
Default
wbradmin
Desc ription
This user has
administrative privileges
for Windchill Business
Reporting but is not a
Windchill administrative
user. This user is created
in the repository specified
in the B as e D i s ti n gu i s he d
Na me for Ad min is tra tiv e
U s e r s option on the
Windchill Business
Re p orting A dminis tra tiv e
Us er P as s wo rd
Co n firm P a s s wo rd f or
A d min istrativ e Use r
Default
local machine
Desc ription
Location where the
gateway server will be
installed.
80
local machine
Mapped location of
Windchill Business
Reporting Host installation
(leave empty if locally
installed)
DNS R e gis te re d H o s t
Name of the Windchill
B u s in e s s R ep o rtin g Ho s t
In a local installation
scenario, accept the
default.
124
Option
Default
C o m m u n i c a t i o n P o r t o f t h e 9300
Windchill Business
Reporting Host
Location of Windchill
Installed location of
B u s in e s s R ep o rtin g
Windchill Business
i n s t a l l a t i o n a s s e e n b y t h e Reporting
Windchill Business
Reporting Host
Desc ription
Port used by Windchill
Business Reporting host
to communicate with the
Windchill Business
Reporting gateway.
The installed location of
Windchill Business
Reporting as seen by the
host component.
In a local installation
scenario, accept the
default value.
D i s t r i b u t e d I n s t a l l a t i o n - Tw o Ma c h i n e s
In a two machine distributed installation scenario, the Windchill Business
Reporting host components are installed on a separate machine from the gateway
server and your Windchill solution. The PSI is run twice, in the following order:
1. Installing the Windchill Business Reporting Host Components on page 125
2. Installing the Gateway Server and Windchill Solution on page 129
Ins tallin g th e Wi ndc hi ll B u s in es s Re po rting Ho s t Co mp on en ts
From the list of solutions to install, select the S tan d al o n e P ro d uc t o r C o mp on e nt
checkbox.
Select from the following standalone product or component options:
Note
If you leave both the Oracle Configuration and SQL Server Configuration
deselected, it is assumed that a database and associated user already exist, and
that you will supply that information in the database information screen.
Option
Orac le Configuration
Default
Deselected
Desc ription
Select this option if you
are configuring an Oracle
database as part of this
installation scenario.
Under this option, select
the following as
appropriate:
125
Option
Default
Desc ription
Create Databas e selected by default.
Note
When creating an
Oracle database
using PSI, you can
launch PSI as the
user that installed
the database
software, or as
root user.
default.
126
Deselected
Option
Default
Desc ription
Create Windc hill
Database and Us er -
selected by default.
Windchill Business
Reporting
Deselected
deselected by default.
Select this checkbox
to create a new
database and user. To
use an existing
database and user,
leave deselected.
Select this option to
install the Windchill
Business Reporting
components. Under this
option, select as follows:
Ins tall the Hos t
C o m p o n e n t s - Select
this option to install
the host. Select from
the following as
appropriate for your
installation; you must
select one:
Configure Orac le
Databas e
Configure Orac le
RAC Database
Configure SQL
S e rv er Data b as e
option.
Enter the following installation directory information:
Option
In s talla tio n D irec to ry f or
Windchill Business
Reporting
Default
<base installation
directory>\Reporting
Desc ription
The location where the
host components are
installed.
127
Desc ripti on
The user name for the Windchill
Business Reporting database user.
or
Windc hill Busines s Reporting SQL
S e rv er Da ta b as e Us e r N a me f or the
Databas e Us er Ac count
Windc hill Busines s Reporting Orac le
Databas e Pass word for the Database
User Account
or
Windc hill Busines s Reporting SQL
S e rv er Da ta b as e Us e r P as s w o rd fo r th e
Databas e Us er Ac count
Co n firm Wind c hill B u s in e s s R e p ortin g
Orac le Da ta b as e P a s s w o rd for the
Databas e Us er Ac count
or
Co n firm Wind c hill B u s in e s s R e p ortin g
S QL S erv e r D a ta ba s e Us er P a s s wo rd
for the Database User Acc ount
Specify the appropriate LDAP settings for your configuration. For more
information, see Entering Your LDAP Settings on page 83.
128
Windchill Business
Reporting Gateway
M ac hi n e s We b S e rv er
P o rt
Default
local machine
80
C o m m u n i c a t i o n P o r t o f t h e 9300
Windchill Business
Reporting Host
Desc ription
Location where the
gateway server will be
installed. Be sure to note
this location to use when
you install the gateway
server.
Port that the gateway
server will listen on to
communicate with the
host components. Be sure
to note this location to use
when you install the
gateway server.
Port used by Windchill
Business Reporting host
to communicate with the
Windchill Business
Reporting gateway.
Default
Selected
I n s t a l l t h e G a t e w a y S e r v e r Selected
Desc ription
Deselect this option.
Leave this option
selected. The C on fi g u re
Loc al Apac he for Gateway
129
Default
<Windchill installation
directory>\Reporting
Desc ription
The location where the
gateway server is
installed.
Default
Selected
Desc ription
Loads the base data set,
including the pre-defined
reports for Windchill
Business Reporting. PTC
strongly recommends
leaving this option
selected, to avoid the need
for certain manual postinstallation
configurations.
Default
local machine
Desc ription
This value must match the
value for the Wi n dc h i ll
B us in es s R e p ort ing
Ga te w ay Ma c h i n es D N S
R e gis te re d H o s t N a me
80
130
Default
wbradmin
Desc ription
This user has
administrative privileges
for Windchill Business
Reporting but is not a
Windchill administrative
user. This user is created
in the repository specified
in the B as e D i s ti n gu i s he d
Na me for Ad min is tra tiv e
U s e r s option on the
Windchill Business
Re p orting A dminis tra tiv e
Us er P as s wo rd
Co n firm P a s s wo rd f or
A d min istrativ e Use r
Default
local machine
Desc ription
Location where the
gateway server will be
installed.
80
131
Option
DNS R e gis te re d H o s t
Name of the Windchill
B u s in e s s R ep o rtin g Ho s t
Default
Desc ription
Caution
This step must be
completed before you
can proceed with the
installation.
This value must match the
machine where the host
components were
installed.
Port used by Windchill
Business Reporting host
to communicate with the
Windchill Business
Reporting gateway.
local machine
C o m m u n i c a t i o n P o r t o f t h e 9300
Windchill Business
Reporting Host
Location of Windchill
Installed location of
B u s in e s s R ep o rtin g Ho s t
Windchill Business
I n s t a l l a t i o n a s s e e n b y t h e Reporting
Windchill Business
Reporting Host
132
Note
If you leave both the Oracle Configuration and SQL Server Configuration
deselected, it is assumed that a database and associated user already exist, and
that you will supply that information in the database information screen.
133
Option
Orac le Configuration
Default
Deselected
Desc ription
Select this option if you
are configuring an Oracle
database as part of this
installation scenario.
Under this option, select
the following as
appropriate:
Create Databas e selected by default.
Note
When creating an
Oracle database
using PSI, you can
launch PSI as the
user that installed
the database
software, or as
root user.
default.
134
Deselected
Option
Default
Desc ription
Create Windc hill
Database and Us er -
selected by default.
Windchill Business
Reporting
Deselected
deselected by default.
Select this checkbox
to create a new
database and user. To
use an existing
database and user,
leave deselected.
Select this option to
install the Windchill
Business Reporting
components. Under this
option, select as follows:
Ins tall the Hos t
C o m p o n e n t s - Select
this option to install
the host. Select from
the following as
appropriate for your
installation, you must
select one:
Configure Orac le
Databas e
Configure Orac le
RAC Database
Configure SQL
S e rv er Data b as e
option.
Enter the following installation directory information:
Option
In s talla tio n D irec to ry f or
Windchill Business
Reporting
Default
<base installation
directory>\Reporting
Desc ription
The location where the
host components are
installed.
135
Desc ripti on
The user name for the Windchill
Business Reporting database user.
or
Windc hill Busines s Reporting SQL
S e rv er Da ta b as e Us e r N a me f or the
Databas e Us er Ac count
Windc hill Busines s Reporting Orac le
Databas e Pass word for the Database
User Account
or
Windc hill Busines s Reporting SQL
S e rv er Da ta b as e Us e r P as s w o rd fo r th e
Databas e Us er Ac count
Co n firm Wind c hill B u s in e s s R e p ortin g
Orac le Da ta b as e P a s s w o rd for the
Databas e Us er Ac count
or
Co n firm Wind c hill B u s in e s s R e p ortin g
S QL S erv e r D a ta ba s e Us er P a s s wo rd
for the Database User Acc ount
Specify the appropriate LDAP settings for your configuration. For more
information, see Entering Your LDAP Settings on page 83.
136
Windchill Business
Reporting Gateway
M ac hi n e s We b S e rv er
P o rt
Default
local machine
80
C o m m u n i c a t i o n P o r t o f t h e 9300
Windchill Business
Reporting Host
Desc ription
Location where the
gateway server will be
installed. Be sure to note
this location to use when
you install the gateway
server.
Port that the gateway
server will listen on to
communicate with the
host components. Be sure
to note this location to use
when you install the
gateway server.
Port used by Windchill
Business Reporting host
to communicate with the
Windchill Business
Reporting gateway.
Note
If you leave both the Oracle Configuration and SQL Server Configuration
deselected, it is assumed that a database and associated user already exist, and
that you will supply that information in the database information screen.
Option
Orac le Configuration
Default
Deselected
Desc ription
Select this option if you
are configuring an Oracle
database as part of this
installation scenario.
Under this option, select
the following as
appropriate:
137
Option
Default
Desc ription
Create Databas e selected by default.
Note
When creating an
Oracle database
using PSI, you can
launch PSI as the
user that installed
the database
software, or as
root user.
default.
138
Deselected
Option
Default
Desc ription
Create Windc hill
Database and Us er -
selected by default.
Windchill Business
Reporting
Deselected
deselected by default.
Select this checkbox
to create a new
database and user. To
use an existing
database and user,
leave deselected.
Select this option to
install the Windchill
Business Reporting
components. Under this
option, select as follows:
Ins tall the Hos t
Components Deselect this option.
Ins tall the Gateway
S e r v e r - Select this
option to install the
gateway server. The
Co nf igu re L oc al
Apac he for Gateway
139
Default
Desc ription
Browse to the local
Apache location.
<base installation
directory>\Apache
<base installation
directory>\Reporting
Default
Desc ription
This value must match the
value entered in the
Windchill Bus ines s
Re po rtin g Gat ewa y
Ma c h i n es Web S erv e r
P o r t field when you
140
Default
Mapped location of
Windchill Business
Reporting Host installation
(leave empty if locally
installed)
DNS R e gis te re d H o s t
Name o f the Windchill
B u s in e s s R ep o rtin g Ho s t
local machine
C o m m u n i c a t i o n P o r t o f t h e 9300
Windchill Business
Reporting Host
Desc ription
The drive mapped to the
host installation. You
must share the host
installation location on the
host machine with read/
write permissions for the
machine where the
Windchill solution is
installed. Then, on the
machine where the
Windchill solution is
installed, map a location
to that shared host
installation.
Caution
This step must be
completed before you
can proceed with the
installation.
This value must match the
machine where the host
components were
installed.
Port used by Windchill
Business Reporting host
to communicate with the
Windchill Business
Reporting gateway.
This value must match the
value entered when the
host components were
installed.
I n s t a l l Yo u r W i n d c h i l l S o l u t i o n
Install your Windchill solution, being sure to make the following Windchill
Business Reporting related selections.
On the optional products screen, DO NOT select W i nd c h i l l B us i n es s R e p or ti ng .
141
On the product selections summary screen, set the following product features:
Option
Co n figu re Win d c h ill fo r
B u s in e s s R ep o rtin g
Default
Deselected
Desc ription
Select this field for
Windchill Services to be
properly configured for
Windchill Business
Reporting.
Default
Selected
Desc ription
Loads the base data set,
including the pre-defined
reports for Windchill
Business Reporting. PTC
strongly recommends
leaving this option
selected, to avoid the need
for certain manual postinstallation
configurations.
Specify the appropriate LDAP settings for your configuration. For more
information, see Entering Your LDAP Settings on page 83.
Set the following administrative settings for Windchill Business Reporting:
Option
Windchill Business
Re p orting A dminis tra tiv e
Us er ID
Default
wbradmin
Desc ription
This user has
administrative privileges
for Windchill Business
Reporting but is not a
Windchill administrative
user. This user is created
in the repository specified
in the B as e D i s ti n gu i s he d
Na me for Ad min is tra tiv e
U s e r s option on the
Windchill Business
Re p orting A dminis tra tiv e
Us er P as s wo rd
Co n firm P a s s wo rd f or
A d min istrativ e Use r
142
Default
local machine
Desc ription
Location where the
gateway server was
installed.
80
Mapped location of
Windchill Business
Reporting Host installation
(leave empty if locally
installed)
DNS R e gis te re d H o s t
Name o f the Windchill
B u s in e s s R ep o rtin g Ho s t
local machine
Caution
This step must be
completed before you
can proceed with the
installation.
This value must match the
machine where the host
components were
installed.
143
Option
Default
C o m m u n i c a t i o n P o r t o f t h e 9300
Desc ription
Port used by Windchill
Business Reporting host
to communicate with the
Windchill Business
Reporting gateway.
Windchill Business
Reporting Host
Location of Windchill
B u s in e s s R ep o rtin g Ho s t
Ins tallation as s een by the
Windchill Business
Reporting Host
P o s t-I n s tal l a ti o n S te ps
Refer to the chapter Completing Configurations - Manual Steps on page 187 for
any manual post-installation steps.
Note
Windchill Index Search is not available for PTC Windchill PDM Essentials.
144
Bulk Indexing
You can use the Bulk Index Tool to load all the objects that belong in the Windchill
Index Search libraries. This utility sends objects to a search engine to be indexed
according to their domains indexing policy. You can perform the following tasks
with this utility:
Start and stop the bulk indexing process. Because loading indexes can take a
significant amount of time, it may be necessary to stop the operation for some
length of time. State is maintained in the IndexStatus table, which is used by
this too, so the process can be stopped and restarted without having to re-index
objects that have already been indexed.
Schedule the process to start and stop at specified times.
Check on the status of the overall bulk indexing process.
Attempt the re-index objects that have failed the indexing process.
Maintain a detailed log of the indexing process.
Note
The Bulk Index Tool can only be used to load Windchill Index Search libraries.
Note
If a user searches for the latest iteration of an object that was loaded using the
data loading utilities, all iterations appear in the search results. You can correct
this problem by using the Bulk Index Tool to re-index the data once it has been
loaded.
Us ing Windc hill Index Searc h During an Upgrade
For more information on using Windchill Index Search and bulk indexing during
an upgrade see:
145
Default
Selected
The fully qualified
name of the current
machine
Configured by PSI.
8085
Windchill Index
Search Port Number
146
Des cription
Enables Windchill Search Index to
load data.
The Apache Web Server host
name.
The directory where you want
Windchill Index Search data to be
stored.
Ti p
Index Data should be stored on
a local filesystem. Remote
filesystems are typically quite
a bit slower for indexing. If
your index needs to be on the
remote filesystem, consider
building it first on the local
filesystem and then copying it
up to the remote filesystem.
The port on which the Windchill
Search Index starts.
Option
Default Indexing
Language
Index Search
Language List
Default
The language originally
selected when
launching the
installation process.
The language originally
selected when
launching the
installation process.
Des cription
The default language to be used
when processing data.
Additional languages to be
considered when processing data.
Creo Vi ew Clients
The Creo View clients include rich visualization tools for viewing, analyzing, and
collaborating on 3D models, drawings, documents, and images.
147
Option
Interactive 3D Thumbnails
Desc ripti on
Makes the thumbnail image created by
the Thumbnail Generator interactive.
You can manipulate the model.
Creates a Vi s u al i z a ti on tab on the
S t r u c t u r e tab of the objects information
page.
Provides a client download directly
from Windchill.
Provides a Creo View ECAD Compare
and a Creo View ECAD Validate
download directly from Windchill.
Getting Started With Windchill Service Information Manager and Service Parts
148
or you can C a nc el from the window. If you choose to create a new product using
the S e rv ic e Inf or ma ti on Ma n ag e r Ge ne ra l P ro d uc t template, it handles all of the
configurations needed to create a service product.
Refer to the section Windchill Service Information Manager on page 286 for any
additional manual post-installation steps.
149
6
Ins talling a S tandalone P roduct or
Component
Overview ................................................................................................................ 152
Installing Using the PTC Solution Installer.................................................................. 152
Selecting the Installation Type .................................................................................. 153
Installing a Standalone Product or Component........................................................... 154
Specifying the User (UNIX Only) ............................................................................... 154
Providing Details for System Notifications and Information Exchange........................... 155
Specifying the Installation Directory........................................................................... 155
Entering the Web Server and Servlet Engine Settings................................................. 156
Specifying Language Settings .................................................................................. 158
Selecting the Database Size..................................................................................... 158
Entering Your Database Information.......................................................................... 159
Selecting Data Loader Settings................................................................................. 164
Entering Your LDAP Settings.................................................................................... 165
Entering Administrative Settings ............................................................................... 176
Specifying Optional Product Settings......................................................................... 178
Creating Product Icons or Links ................................................................................ 178
Selecting Staging Directory Options .......................................................................... 179
Copying CDs or CD Images to the Staging Area......................................................... 180
Reviewing the Installation Overview .......................................................................... 180
Locating Post-installation Steps for Your Products ...................................................... 181
151
Overview
This chapter describes how to use the PTC Solution Installer (PSI) to install a
standalone product or component. The standalone product or component option
appears when you have selected S ol u ti o n S t an d al o n e P ro d uc t o r C o mp on e nt.
If you are installing your PTC solutions in a distributed environment (on multiple
machines), use this option to install components. You must run the PSI on each
distributed machine that is to have standalone components. For more information
on the installation order of distributed optional products and platform components,
or high-level information on how to set up a distributed environment, see to the
Getting Started with PTC Windchill Installation and Configuration Guide.
Note
If you are installing a service pack, do not run the installer from a windchill
shell as the service pack may have updates to the windchill command code.
Instead, be sure to modify the system PATH variable to include the path to
your installed JSDK bin directory before running the setup file.
2. From your CD drive, enter the following command:
Wi n d o w s
setup.vbs
152
UNIX
setup
B e f o re Yo u B e g i n
The B e fo re Yo u B e gi n panel provides links to the documentation necessary to
install your Windchill solutions.
P TC C us tomer A greement
The installer prompts you to accept the license agreement. Acceptance of the
license agreement is required for installation. The person installing this software
must have the legal authority to accept the license agreement on behalf of the
customer. If the installer does not accept the license agreement, instructions will
appear on-screen with respect to how to return the software for a refund. Note that
a refund will only be given if the instructions are followed in a timely manner (no
later than 30 days after the software is shipped by PTC). Before you are allowed to
accept the agreement, you must scroll all the way through it to acknowledge you
have reviewed the information.
S e l e c t i n g t h e I n s t a l l a t i o n Ty p e
The PTC Solution Installer (PSI) allows you to install products using the following
installation types:
Solution Installation
This option allows you to install a maintenance release, install a point release,
add products to your already-installed solution, or add a language. For
example, if you have an existing Windchill PDMLink system, you use Update
Existing Installation to add Windchill ProjectLink or Windchill Business
Reporting to your solution.
Recover
This option is available if the PTC Solution Installer detects an incomplete
installation. Select this option to attempt to complete the unfinished
installation. For more information on recovering an unsuccessful installation,
see Recovering an Installation on page 486
153
Note
This screen will not appear if you are installing Apache, because Apache
requires a root user to install.
When choosing the user, refer to the section titled Installing Using the Appropriate
Permissions on page 50 to note components that require specific permissions to
function properly.
When you have selected the appropriate user, click N e x t.
154
Desc ripti on
155
You can change each individual subdirectory to meet your needs. By default, all
products and components are installed under the Base Installation Directory. You
can change this by editing the installation directory in any given field. To continue
propagating changes throughout all installation paths, enter further changes under
the B a s e In s ta l l a ti on D i re c t or y field.
Note
For HP-UX machines, the In s tal l a ti o n D i r ec to ry for the A p ac he Web S er v e r
should only be installed in the following location:
/opt/hpws22/apache
E n t e ri n g t h e We b S e rv e r a n d S e rv l e t
Engine Settings
Apache Web server and Tomcat servlet engine are the Web server and servlet
engine that PTC bundles with its Windchill solutions.
The Web server is the front-end authentication mechanism for your Windchill Web
application. The Apache Web server is bundled with Windchill and has an
automatic configuration. The servlet engine extends the functionality of the Web
server by managing the data transfer between the Windchill application server and
the client. The Tomcat servlet engine is bundled with Windchill and has an
automated configuration. For more information about the Web servers and servlet
engines, see the software matrices:
http://www.ptc.com/appserver/cs/doc/refdoc.jsp
For this part of the installation, make sure you have the logical host name from
your network administrator.
We b S e r v e r a n d S e rv l e t E n g i n e I n p u t F i e l d s
Use the following options for Apache Web Server and Tomcat Servlet Engine:
156
Option
Web Server DNS Registered Host
Name
Desc ripti on
The a fully qualified host name of the
computer on which Apache is installed.
The host name must conform to the
required standard Internet format that
specifies the name can be a text string
up to 63 characters drawn from only the
alphabet (A-Z and a-z), digits (0-9),
hyphen (-), and period (.). The period is
used only as a domain name separator.
The first character of a host name can
be either a letter or a digit.
The default is:
<hostname>.<domainname>
A port number to listen for HTTP
requests.
A value is required.
157
Desc ripti on
Select a language for administrative
data, such as templates and rules. The
initial default language is English.
Select one or more D i s p l a y L an g ua g e
check boxes for the user interface and
documentation.
Display Language
Ta b l e s p a c e
5000 MB
Production
11,000 MB
Large
26,000 MB
158
Desc ription
Size is sufficient to load
the Windchill
demonstration data and
should be adequate for
very small pilots.
Initial size. Adjust for
your needs accordingly.
Initial size. Adjust for
your needs accordingly.
Ta b l e s p a c e
1500 MB
Production
2500 MB
Large
5000 MB
Desc ription
Size is sufficient to load
the Windchill
demonstration data and
should be adequate for
very small pilots.
Initial size. Adjust for
your needs accordingly.
Initial size. Adjust for
your needs accordingly.
E n t e r i n g Yo u r D a t a b a s e I n f o r m a t i o n
When you use the PTC-bundled Pro/INTRALINK - Oracle for the Windchill
solution, you are creating new user names and passwords.
When you use a previously installed Oracle or SQL Server database, you reference
existing user names and passwords. Oracle and SQL provide persistent data
storage for Windchill.
In the D efi n e S e tti n g s section, enter your Oracle or SQL Server database
information.
Oracle
Option
Enable extended character sets check
box.
Desc ripti on
Select the check box for every language
except for English.
A cleared check box is the default,
which means English is the default
language.
Create a new installation directory if
you are installing the PTC-bundled Pro/
INTRALINK - Oracle.
If you have installed Oracle, set the
ORACLE_HOME system environment
variable to the Oracle installation
directory.
159
Option
Desc ripti on
Note
Your password cannot include
special characters (! @ % ^ & * ( )
+ = \ | ` ~ [ { ] } ; : ' " , < > ?). If
your sites password policy requires
special characters, create a
temporary password now and
manually change it to include
special characters post-installation.
For more information, see Changing
the Database Password
on page 191.
Enter the password again to verify the
password.
Option
Default
A cleared check box is the
Enable extended
c h a r a c t e r s e t s check box. default, which means
English is the default
language.
Oracle Server Installation <ORACLE _HOME> is
Directory
the default if the variable
is not set.
160
Desc ription
Select the check box for
every language except for
English.
Create a new installation
directory if you are
installing the PTCbundled Pro/INTRALINK
- Oracle.
Option
Default
<hostName>.<domain>
1521
wind
Oracle SYSTEM
Account Password
Desc ription
Set the ORACLE_HOME
system environment
variable to the Oracle
installation directory.
Defines the fully qualified
machine name of the
Oracle server.
Create a new name for
PTC-bundled Pro/
INTRALINK - Oracle or
use the existing name for
the Oracle Configuration.
Defines the port number
the Oracle server listens
on.
Create a new port number
for PTC-bundled Pro/
INTRALINK - Oracle or
use the existing port
number for the Oracle
Configuration.
Defines a name to be
given to the database
when it is created. The
number cannot exceed 8
aphanumeric characters,
and must not begin with a
numeric digit.
Create a new name for
PTC-bundled Pro/
INTRALINK - Oracle or
use the existing name for
the Oracle Configuration.
Enter the system
password.
Create a new password
for PTC-bundled Pro/
INTRALINK - Oracle or
use the existing password
for Oracle.
161
Option
Confirm Oracle
SYSTEM Account
Password
Oracle User Name for
Windchill
Default
Temporary Tablespace
Name
(Both Database settings
and Data Loader settings)
Desc ription
Enter the password a
second time to verify the
password.
Create this user name if
you are installing the
PTC-bundled Pro/
INTRALINK Oracle.
TEMP
162
SQL S erv er
Creating a Windchill database user account and dabase objects remotely is not
supported for SQL Server using PSI. To accomplish this option for SQL server,
PSI must be run on the SQL Server host and the SQL Server Configuration option
must be selected to create a database and user. Then, PSI must be launched again
from the Windchill Server host. Select C on fi g ur e to a n e x i s ti n g u s er o n an e x i s ti ng
d a t a b a s e for SQL Server and fill in the fields with the SQL Server values used
during the database creation step on the database host.
For more information on creating a User on SQL Server, see Installing a
Standalone Product or Component on page 151.
Note
Some options do not appear when configuring to an existing user and database.
Option
Installed SQL Server Instance Name
(Named Instance only)
Password for User sa
SQL Server User Name for Windchill
SQL Server User Password for
Windchill
Desc ripti on
The default instance represents the
machine on which the SQL server is
installed.
Enter a password.
The same user name that you used
when installing SQL Server
The same password that you used when
installing SQL Server
Note
Your password cannot include
special characters (! @ % ^ & * ( )
+ = \ | ` ~ [ { ] } ; : ' " , < > ?). If
your sites password policy requires
special characters, create a
temporary password now and
manually change it to include
special characters post-installation.
For more information, see Changing
the Database Password
on page 191.
Confirm SQL Server User Password for Enter the password again to verify the
Windchill
password.
163
Option
SQL Server Installation
directory
SQL Server Client
Installation Directory
SQL Server DNS
Registered Host Name
Installed SQL Server
Instance Name (Named
Instance only)
Default
Desc ription
The same directory you
used when installing SQL
Server.
The same directory you
used when installing SQL
Server.
The same name you used
when installing SQL
Server.
The name you used when
installing SQL Server.
If you used the default
instance during
installation of SQL
Server, this can be left
empty.
The same port number
you used when installing
SQL Server.
The password for the
master administrator for
SQL Server.
The username that
Windchill uses to access
SQL Server.
The password Windchill
will need to access the
database.
Enter the password again
to verify the password.
164
Desc ripti on
Selecting this option creates the
database schema that defines the tables,
columns and relationships between
fields and tables. This option is selected
by default to allow base data to be
loaded.
Note
When selected, and if you are
adding an additional product to an
existing installation, and that
product has its own schema you are
asked to provide a database
installation user name and
password.
Base data is required for all solutions.
This option is selected by default to
load the base data.
Installs the demonstration data.
E n t e r i n g Yo u r L D A P S e t t i n g s
Windchill Directory Server (WDS) is an LDAP-compliant enterprise directory that
is bundled with Windchill. WDS is required for managing Windchill operation
definitions. It can also optionally manage Windchill user information.
When installing WDS on a separate machine from your Windchill solution, WDS
requires a locally installed Java Software Development Kit (JSDK).
Caution
The Windchill Directory Server must be installed on local disk. It must not be
installed on NFS mounts, or other non-local disk. Attempting to install the
Windchill Directory Server on nonlocal storage can cause data corruption,
file locking issues and startup failures. In addition, antivirus software must be
turned off or be configured to avoid scanning in the Windchill Directory Server
installation directory.
The LDAP settings create a default LDAP directory structure similar to the
following:
165
Note
Depending on the product you are installing, the default LDAP directory
structure is different.
In the D efi n e S e tti n g s section, enter your LDAP settings:
Option
LDAP Server DNS Registered
Host Name
LDAP Server Administrator
Distinguished Name
Desc ription
<hostname>.<domain> is the default.
The distinguished name for the Windchill
Directory Server administrator. The setup
program creates the directory using the
distinguished name that you specify.
cn=Manager is the default
166
Option
LDAP Server Administrator
Password
Confirm LDAP Server
Administrator Password
Desc ription
Windchill Directory Server administrators
password
Specify the same password that you specified
for the Administrators password.
The following default values are set for you during the Express installation. You
cannot change these values during an Express installation.
Option
LDAP Server Port
Number
Default
389
Base Distinguished
Name for Product
Properties
cn=configuration,
cn=Windchill_10.0,
o=<myCompany>
Des cription
Defines the port number that the
Windchill Directory Server listens
on for requests.
Defines the distinguished name of
the top subtree LDAP entry under
which Windchill configuration
LDAP entries reside.
Specifies a base node in the
Administrative Directory hierarchy
that contains all users in the
directory that should be visible to
Windchill.
o=<mycompany>
Base Distinguished ou=people,
Name for Enterprise
cn=EnterpriseLdap,
Users
cn=Windchill_10.0,
o=<mycompany>
No
Enterprise User
entries are in the
Enterprise LDAP
Windchill Directory o=Company Name
Server Directory
167
Option
Suffix
Default
Des cription
the entire set of Windchill created
entries will be stored.
The port number that is used by
the Windchill Directory Server
control-panel to administer
Windchill Directory Server..
The port number used by JMC
clients to retrieve Windchill
Directory Server usage data. The
standard JMX clients, JConsole or
VisualVM, can be used to connect
to Windchill Directory Server on
this port.
Define the settings for the Windchill Directory Server LDAP directory:
Note
The following is a complete list of possible options; some may not appear
depending on whether you are installing WDS on the same server with
Windchill or standalone.
Option
LDAP Server DNS
Registered Host
Name
LDAP Server Port
Number
Default
<hostname>.<do
main>
Entry
<hostname>.<domain> is the
default.
389
cn=Manager
LDAP Server
Administrator
Distinguished Name
LDAP Server
Administrative
Password
Confirm LDAP
168
Option
Server
Administrative
Password
Default
o=PTC
LDAP Server
Administrator Port
4444
Entry
specified for the Administrators
password.
Note
This field only appears when
installing a new Windchill
Directory Server LDAP Server.
Defines the LDAP base
distinguished name under which the
entire set of Windchill created
entries will be stored.
The port number that is used by the
Windchill Directory Server controlpanel to administer Windchill
Directory Server..
The port number used by JMX
clients to retrieve Windchill
Directory Server usage data. The
standard JMX clients, JConsole or
VisualVM, can be used to connect
to Windchill Directory Server on
this port.
Define the distinguished name of
the top subtree LDAP entry under
which Windchill configuration
LDAP entries reside.
You can enter any unique base
unless you entered a context name
as part of the distinguished name
entered here. By default, a no
context name was required when
you installed Windchill Directory
Server.
Define the distinguished name of
the LDAP subtree under which
Administrative LDAP entries
reside. Users and groups under this
subtree will be visible to Windchill.
You can edit this field to change the
suggested name.
169
Option
Default
Enable Separate
Enterprise LDAP
Server
Entry
Note
This option does not apply
when Windchill Directory
Server is installed as a
standalone component.
Define the distinguished name of
an LDAP subtree under which
Enterprise LDAP entries reside.
Users and groups under this subtree
will be visible to Windchill.
Note
Refer to the section Preparing
Enterprise LDAP for
Installation Data Load on page
53 before setting this option and
Preparing an Enterprise LDAP
Including Active Directory on
page 54.
Specifies whether the enterprise
subtree is in a separate LDAP
Server (for example, a site
corporate LDAP server).
170
Option
Enterprise
Repository LDAP
Server Host Name
Default
<hostname>
<domainname>
Enterprise
Repository LDAP
Server Port
LDAP Connection
389
Bind as User
Des cription
Host name to connect to the
Enterprise LDAP Server. An
Enterprise LDAP can exist on a
local or remote machine. You can
use either a V3 Compliant LDAP
or an existing Microsoft Active
Directory Service (ADS) for this.
The port number that Windchill
will use to communicate with the
enterprise LDAP server.
Specifies the bind method used to
connect to the Enterprise
Repository.
Two options are available:
Bind as Anonymous, which
does not require a user name to
read the contents of the
repository.
cn=Manager
Enterprise
Repository LDAP
User Distinguished
Name
Enterprise
Repository LDAP
Password
171
Option
Windchill
Privileges for
Repository
Default
Read,Write
Des cription
Sets a flag indicating this is a read/
write adapter.
If it is ADS, you can bind in only
Read only mode. For other V3
compliant LDAP, you can choose:
Read, Write.
LDAP Servic e
Option
LDAP Service
Enterprise Adapter
Name
User Filter
Default
Active Directory
Service (ADS)
<reverse hostname>.
EnterpriseLDAP
Des cription
Select this option if the enterprise
node is ADS. Otherwise, select
Other V3Compliant LDAP.
As soon as you select ADS, the
following options later in this
section are highlighted. See Default
User Mappings for ADS Attributes
on page 174.
Change only the text
"EnterpriseLDAP in this field.
To filter users.
Only those users who are selected
here are searchable through
Windchill
Examples:
172
Default
Des cription
If the Enterprise Node (LDAP)
is Windchill Directory Server:
uid= *(searches for all
users)
or
uid= ne* (searches for all
users with the name starting
with ne).
If the Enterprise Node is ADS:
cn=* (searches for all users)
or
cn=ne*(searches for all
users with the name starting
with ne)
Note
You can modify this criteria
after installation by going to
Site Utilities Info*Engine
A d m i n i s t r a t o r and selecting the
Group Filter
173
Default
Des cription
If the Enterprise Node (LDAP)
is Windchill Directory Server:
cn=*(Searches for all
Groups)
or
cn=gr* (Searches for all
Groups with the name
starting with gr).
If the Enterprise Node is ADS:
cn=*(Searches for all
Groups)
or
cn=gr*(Searches for all
Groups with the name
starting with gr), and so on.
Note
You can modify this criteria
after installation by going into
Site Utilities Info*Engine
174
Default
userCertificate
sAMAccountName
telephoneNumber
postalAddress
preferredLanguage
cn
sn
mobile
mail
user
company
facsimileTelephoneNumber
sAMAccountName
Note
By default, both the unique identifier attribute and the unique identifier can
have the same value; however, the unique identifier attribute must always point
to an attribute that holds a unique value. If you do not have multiple
subdomains in your ADS configuration, and you know that the
sAMAccountName is unique within a single domain, then you can use the
default value for your unique identifier attribute. If the values for your
sAMAccountName are not unique, then you should use the userPrincipalName
for your unique identifier attribute.
Default Group Mappings for ADS A ttributes
The "Option" column specifies the attribute name expected by Windchill and the
"Default" column specifies the ADS attribute name.
Option
Unique Identifier Attribute
Description
Default
sAMAccountName
description
175
Default
group
member
176
Desc ripti on
Creates a new Windchill site
administrator using the values in the
following fields.
Uses an existing Windchill site
administrator account. Specify the
values for the existing account in the
following fields.
Field
Windchill Site Administrator User
Name
Desc ripti on
A user name for the administrator of the
Windchill server. An example might be
wcadmin.
Note
Because of restrictions in both
Apache and the Sun ONE servers,
the user names that are used for
logging on cannot contain extended
ASCII characters nor multi-byte
characters.
Note
If the U s e E x i s ti n g U s e r (used as
a Site Administrator) option is
enabled, the installation does not
work. See also Installation Logs
and Troubleshooting on page
460.
Windchill Site Administrator Password The password for the Windchill server
administrator user.
Confirm Windchill Site Administrator Verify the password you entered for the
Password
Windchill server administrator user.
This option is only necessary when
creating a new account.
Repository Where the Site
Specifies which LDAP repository
Administrator Is Stored
contains the site administrator.
You have two options: Administrative
and Enterprise
Field
Web Application Context Root
Desc ripti on
Defines the Web application context
root name used to access the Windchill
applications through the Web browser.
This value is used to format the URL,
for example, http://<DNS name>/<Web
application context root>.
177
Field
Initial Organization Name
Desc ripti on
port number is already in use.
A name that describes the organization
for which this installation is being
performed. An example might be World
Wide Tractors. The initial organization
specified here becomes the internal
organization for auditing.
An Internet domain name for the initial
organization. The Internet domain name
must conform to the required standard
Internet format that specifies the name
can be a text string up to 63 characters
drawn from only the alphabet (A-Z and
a-z), digits (0-9), hyphen (-), and period
(.). The period is only used as a domain
name separator. The first character of an
Internet domain name can be either a
letter or a digit. In particular, the value
you specify cannot contain the
underscore character ( _ ). A valid
example of an Internet domain name is:
world-wide-tractors1.com
178
Desc ripti on
Creates the icons in a new program
group in the S t ar t menu
Creates the icons under a program
group that already exists in the S tar t
Windows (continued)
Option
In the Start menu
On the Desktop
In the Quick Launch Bar
Other
Do not create icons
Desc ripti on
menu
Creates the icons at the top level of the
S t a r t menu
Creates the icons on your Windows
desktop
Creates the icons in your Windows
Quick Launch Bar
Specify the location where you want to
create icons
No icons are created during installation
Note
If you select I n a N ew P r og ra m Gr ou p or In the S ta rt Me n u, you can create the
icons for all users by selecting C re at e Ic on s for A l l U s e rs .
UNIX
Option
In your home folder
Other
Do not create links
Desc ripti on
Creates the links in your home folder
Specify the location where you want to
create links
No links are created during installation
Note
The term "product CD" can refer to either the physical CD media or the
equivalent files downloaded from PTC.com.
179
Place the product CD you want to copy to the staging directory in the drive.
Click C o p y D i s c .
Click B ro w s e and navigate to the CD drive where you placed the product CD.
Click OK .
180
The Ins ta l l ati o n Ov e rv i ew panel also gives an indication of the estimated disk space
requirements to complete the installation based upon the options you have chosen.
After you click In s ta l l on the In s t al l a ti o n Ov e rv i e w panel, the installer checks your
system for the required disk space. If there is not enough space, the installer
presents a dialog box that informs you of this and waits for the space to be
available. You may also choose to go back and select a different installation
directory.
The disk space check can be disabled completely by setting the installer variable
CHECK_DISK_SPACE to a value OFF (note all CAPS) prior to launching the
installer. From a command prompt, enter the following command:
<PTCSolutionInstallerDirectory>/setup -DCHECK_DISK_SPACE=OFF
Note
The installation summary includes un-encrypted password information. After
the installation is complete, make sure that the following files are only
accessible by those with the appropriate permissions:
<Windchill>\installer\*.properties
Summary.html
L o c a t i n g P o s t - i n s t a l l a t i o n S t e p s f o r Yo u r
P rod uc ts
The PTC Solution Installer installs and configures many, but not all, PTC products
end-to-end. Each product has its own section in the Completing Configurations Manual Steps chapter that describes any necessary post-installation manual steps.
Refer to the section for each of your installed optional products to complete your
installation.
181
7
Ins talling a File S erv er Remote
Site
File Server Management Utility Overview................................................................... 184
Installing a File Server Remote Site Using PSI ........................................................... 184
183
Note
A File Server is a remote or replica server for Windchill.
File Server Management provides the following functions:
You use the PTC Solution Installer (PSI) to install a File Server remote site. PSI is
a dynamic installer that offers different installation options based on the products
and features you select.
To install a File Server remote site:
1. In the folder where you extracted the downloaded ZIP files, locate and open the
PTC 10.0 Solution Installer folder.
2. Double-click the setup.vbs file.
3. Complete the installation as described in the Installing Windchill Solutions on
page 57 chapter, but with the following File Server-specific options:
184
Installation typeSelect S ol u ti o n .
Solution to installSelect F i l e S e rv e r.
Platform components For most File Server installations, use the default
value of In s ta l l an d C on fi g u re .
Note
If you are configuring an existing LDAP then a unique Base DN is to
be used. For example:
cn=<FileServerName>,cn=Windchill_10.0,o=ptc
185
8
Completing Configurations Ma n ua l S te p s
Completing the Configuration Overview..................................................................... 188
All Solutions ............................................................................................................ 188
Defect Tracking Systems [Integrity (DTS), Bugzilla and Atlassian JIRA] Server
Configuration ....................................................................................................... 220
Software Configuration Management Systems [Integrity Source (SCM), Subversion
and IBM Rational ClearCase] Server Configuration ................................................. 220
Windchill PDMLink................................................................................................... 225
Windchill ProjectLink................................................................................................ 226
Windchill CAPA ....................................................................................................... 228
Windchill Nonconformance....................................................................................... 230
Windchill Customer Experience Management ............................................................ 231
Optional Products.................................................................................................... 233
This section contains the manual instructions that complete the configurations for
Windchill.
187
All Solutions
This section describes any manual post-configuration steps that apply to all
solutions.
Note
If the WCA fails during the installation process, the installation may still
complete successfully. However, you must manually re-run the WCA.
For more information on WCA, what it does and how to run the WCA, see PTC
Windchill Administration - Configuring Your PTC Windchill Environment.
188
189
For example,
ant -f webAppConfig.xml addAuthProvider -DappName=Windchill
190
For example,
./htpasswd -c /opt/hpws/apache/conf/app-Windchill-Passwd my_username my_password
3. By default the web server user may not have permissions to access <Apache_
Home>/conf, the default directory for which the password file is configured. In
order to allow the password file to be readable by the Apache process, the conf
directory and the app-<webapp_name>-Passwd file must both be accessible to
the web server user.
Make both the conf directory and the app-<webapp_name>-Passwd file
accessible to the Apache user by doing one of the following:
191
P roperty Updated
wt.pom.dbPassword
<Windchill>/codebase/
WEB-INF/
ieStructProperties.txt
ie.ldap.managerPW
<Windchill>/codebase/
WEB-INF/ie.properties
192
PSI Field
Windchill Business
Reporting [Oracle|SQL
Server] Database
Password for the Database
User Account
Windchill Business
Reporting Administrative
User Password
P roperty Updated
Not applicable - this is
updated through the
Cognos configuration.
db.properties
wt.cognos.admin.
password
C h a n g i n g t h e S e c re t Te x t f o r W i n d c h i l l N e t w o rk
Communi c ati ons
PTC automatically generates a unique value for the secret.text2 and secret.text
properties in the ie.properties file to establish a more secure authentication process
between your servlet and the Windchill adapter. Both properties are used to sign
and validate requests between Info*Engine components to verify their authenticity.
The values that are set through the installation should be sufficiently unique that
there should be no real need to reset these property values.
If you choose to reset the secret.text2 and secret.text values, use the steps described
in PTC Windchill Administration - Configuring Your PTC Windchill Environment.
The user for abc@gmail.com must open the email that is sent and click the
R e g i s t e r action in the email.
To configure Windchill ProjectLink self registration, change the following
properties in the <Windchill>/conf/register/reg.propertiesfile
193
194
This must be configured for the JRE that is used by the servlet engine, the
Windchill server, and any other Java application that would access the Web
server.
To list the default certificate of authority trusted by your JRE, execute:
keytool -list -v -keystore /<JRE>/lib/security/cacerts
195
5. Restart Tomcat.
6. Restart Windchill.
Other Windchill products such as the workgroup managers may also support
HTTPS and would require additional configurations to convert to HTTPS. See
the workgroup manager documentation for those instructions.
Additional information about HTTPS can be found at:
www.modssl.org
(The following two URLs are valid when Apache is installed and running
on the local machine.)
Apache installed on Windows and HP-UX: http://localhost/manual/ssl/
Apache installed on Solaris and AIX: http://localhost/manual/mod/mod_
ssl
Solaris 64 -bit with SSL
There is a bug with Apache's SSL usage. The OS incorrectly translates the default
broadcast channel (255.255.255.255) into binary form so Apache doesn't find a
correct matching virtual host in the <apache_home>/conf/extra/httpd-ssl.conffile.
When trying to access Windchill over HTTPS, a not found error will be returned.
There are two available work arounds for this:
1. Edit <apache_home>/conf/extra/httpd-ssl.conf and change the <VirtualHost_
default_:port> to be whatever your IP address is on that machine. For example,
change it to: <VirtualHost 132.253.10.34:443>. This will cause Apache to
listen for the SSL requests on that particular IP. If you wish to listen on more
than one interface, you would need to copy the whole <VirtualHost> tag
section and change the IP to a second IP you wish to listen on.
or
2. Edit appropriate network files. Edit /etc/nsswitch.conf and add dns to the hosts
section. For example, the hosts line might look like this: "hosts: dns nis files".
Once that is done, you need to disable the name-service-cache daemon. With
root access type, "svcadm disable system/name-service-cache:default", this will
disable the service. Apache will now work with the _default v-host. To
reenable the daemon when you have finished testing you can type, "svcadm
enable system/name-service-cache:default"
196
Note
When Apache and Tomcat are configured as a service, the Windchill
application directories should not be either a mapped drive or referenced using
a UNC path (for example, \\server\\share).
Wi t h o u t A n t
Execute this command from the Apache/bin directory:
httpd -k install -n <ServiceName> -DSSL
Where <ServiceName> is the name you gave the Apache Windows service when
you created it.
Un install with Ant
Execute this command from the <Apache> directory.
ant -f config.xml uninstallService -DserviceName <serviceName>
Where <serviceName> is the name you gave the Apache Windows service
when you created it.
197
C o n fi g u ri n g H TTP S fo r Oth e r We b S e rv e rs
If you are using a Web server and servlet engine other than Apache and Tomcat,
those servers also can be configured to support HTTPS. PTC does not, however,
provide the HTTPS configuration instructions for these servers and recommends
using the documentation provided by the vendor for their products.
To enable Windchill to support HTTPS for other Web servers, you would:
If the command does not succeed, verify that the "ant" command is in your
PATH.
Replication
File Serv er Remote Site Post-ins tallation S teps
To perform content replication, you must complete these steps for the master site
and File Server sites.
Following are the major post-installation steps for the master site and File Server.
For detailed a detailed procedure for any of these steps, refer to the corresponding
section below.
1. Do one of the following:
Option ARegister the File Server with the master site.
Option BCreate a remote site representation on the master site.
2. Create remote hosts, vaults, and folders.
3. Mount and enable the folders.
4. Start the remote site.
198
Note
The label ( T hi s Ins ta l l at io n ) appears after the site name in the S i t e
M a n a g e m e n t window for the site to which you are currently connected.
System software ensures that the automatically generated site labeled ( Th i s
I n s t a l l a t i o n ) can continue serving its role in the event of a change in the
value of the wt.httpgw.url.anonymous property in the wt.properties
file. This automatically generated sites URL is the value of the wt.httpgw.
url.anonymous property in the wt.properties file. If the value
changes, the system assigns the new URL to it, and a warning message is
displayed on the master site console. You can configure this site by clicking
Update.
2. In the S i te M an a ge me n t window, click N e w . The N e w S i te window opens.
3. Enter the following information:
Field
S ite Name
URL
Desc ription
The site name must be unique. The
string is not case-sensitive and cannot
include spaces. A File Server site
must be known by the same name to
all master sites.
The label (T h i s In s tal l a ti o n) appears
after the site name in the S i te
M a n a g e m e n t window for the site to
which you are currently connected.
Enter the URL. The URL must allow
the master site to access the file server
199
Field
S i t e Ty p e
Context
De s c rip tio n
200
Desc ription
site.
The URL is the value of the wt.
httpgw.url.anonymous property in the
wt.properties file of the site that
you are creating. It is the URL of the
anonymous gateway for the Windchill
site. If this URL is the same as the
URL of the Windchill site to which
you are currently connected, the label
( T h i s I n s t a l l a t i o n ) appears following
the site name in the S i t e M an a ge me n t
window.
Select the F i l e S e rv er checkbox.
The Ma s t er and F i l e S er v e r options
determine which roles the site uses for
replication. You can select one, both,
or neither of these options.
Click S e l ec t to access the P i c k
C o n t e x t window, which lists all
possible contexts. Select a context and
then click OK .
Note
This field is for the site and
organization levels only.
Enter a description of the site. You
can use up to 200 characters.
Field
Principal
S ite P ro x imity
Desc ription
Click S e l ec t to access the S e l e c t
P r i n c i p a l window. Use the fields on
the Gro up s and U s er s tabs to select a
principal for the new site.
You can move the sites into the order
of proximity to the current site being
created or updated.
The left box contains a list of all the
sites. You can move the sites from this
box to the right box using > > and < < .
The box on the right side indicates the
proximity of the other sites to the new
site. The site at the top of the list has
highest proximity to the new site. You
can move a site up or down the list
with Mo v e U p , M ov e D o w n , M ov e To p,
and Mo v e B o ttom .
4. Click OK .
Note
The new site appears in Li s t of S i te s table in the S i te Ma n ag e me nt window.
If you need to update an existing site, select the site in the S i te M an a ge m en t
window and then click U p d ate .
Caution
Each folder must be mounted to a unique physical location. If this is not done,
permanent data loss will occur.
201
You create remote hosts, vaults, and folders from the Va u l t C on fi g u ra ti on window.
To access this window, select U ti l i ti e s F i l e S er v e r A d mi n i s tr ati o n Vau l t
C o n f i g u r a t i o n , available from S i t e , L i b r a r i e s , and P r o d u c t s .
Creating a Remote Host
Creating a host associates a site with a host on the network.
A host is a machine on your network, on which Windchill Method Server is
running, that can be used to store content files. Since method servers may run on
different hosts, each folder should have a different mount for each host. If this is
not done, the paths might not be identical. However, the location for all mounts for
a folder should be the same.
Note
The system does not check that the DNS name that you enter for the host is a
valid DNS name.
To create a host:
1. From the Va ul t C o n fi g ur ati o n window, select F i l e N e w H o s t . The N e w H os t
window opens.
2. Enter the DNS name for the host in the H o s t N a me field. (There cannot be any
blank values in the name.) The host name appears in the wt.properties file on
the remote site server (java.rmi.server.hostname).
Note
The system does not verify that the DNS name that you enter is valid.
3. Select the remote site from the S i te list.
4. Click OK .
Creating a Remote Vault
A vault is a logical context for folders, each of which represents a storage location
on a host machine. A remote vault is a vault on a File Server rather than master
site. PTC recommends one vault for each remote server for content replication.
202
Note
Creating a cache vault on the File Server site is preferable because remote users
can upload content to this vault much faster. However, the existence of a cache
vault on a Windchill File Server is not a necessity for replicating contents to
that site.
To create a remote vault:
1. From the Va ul t C o n fi g ur ati o n window, select F i l e N e w Va u l t. The N e w Vau l t
window opens.
2. Enter the following information:
Field
Site
Name
Va u l t t y p e
D e f a u l t s y s t e m t a r g e t (for a master
vault) or D e fa ul t t ar ge t fo r s i te (for a
Desc ription
Select the File Server from the list.
Enter a vault name. The name you
specify must be unique among the
vaults defined for all sites.
Select one of the following:
M as ter Vau l tStores (revaulted)
master copies of content files.
R e p li c a v a ul t Stores replicated
content files.
C a c h e v a ul t Stores uploaded
files until they are revaulted to
their permanent storage locations.
If you select this vault type, the
vault is used as the local cache
vault for the site. Only one cache
vault is allowed for each site.
All vault types are supported on
both main sites and File Server
sites.
Note
Vaults are enabled by default
at creation.
You can select this checkbox, but you
cannot directly clear it. Because there
must always be a default target for the
site (replica or cache vault) or default
system target (master vault), the
checkbox is cleared automatically
203
Field
Desc ription
when you designate another vault as
the default target.
Every site must have one vault that is
its default target.
When a master vault is designated as
the default system target, and when
the wt.fv.useVaultsForAllContent
property is true, the vault becomes the
destination for revaulting operations
for content not covered by revaulting
rules.
When a replica or cache vault is
designated as the default target for a
site, it becomes the target of
replication operations when the target
vault has not been explicitly specified.
204
Field
Desc ription
Do not select this checkbox. If you
do, the vault is not available for
storing uploaded or replicated content
files.
Leave this checkbox selected. When
this checkbox is selected, a folder is
automatically created when an
existing folder reaches its capacity
(number of files). This checkbox is
selected by default.
A u to ma tic c le an u p o f o lde r c on te nt
Note
For this option to work, you must
have manually created and
mounted a root folder.
Select this checkbox if appropriate.
When this checkbox is selected,
automatic cleanups are performed on
this vault according to the rules and
schedule that are specified in the
Read only
Note
This option is available only for
replica and cache vaults.
window.
3. Click OK .
Note
You can create only one cache vault per Windchill File Server for
replication.
Note
Creating a cache vault on the File Server site is recommended because remote
users can upload content to this vault much faster. However, the existence of a
cache vault on a Windchill File Server is not a necessity for replicating
contents to that site.
205
To create a folder:
1. From the Va ul t C o n fi g ur ati o n window, select F i l e N e w F o l de r. The N e w
F o l d e r window opens.
2. Enter a unique name for the folder in the N a me field.
3. Select a vault from the Va u l t list.
Note
Do not select the R e ad On l y checkbox. If you do, the folder is not available
for storing uploaded or replicated content files.
4. Click OK .
Before content can be replicated to a vault, at least one of its folders must be
mounted and enabled in the next step.
Step 3: Mount and Enable the Folders
After you have defined vaults and folders for the site and specified its hosts, you
must specify the location of the storage partition to which content will be
replicated. You do this by defining the mount for each combination of folder and
host for the site.
To mount a folder:
1. In the left pane of the Vau l t C o nf i gu ra ti o n window, expand a cabinet that holds
folders and then select the folder.
2. Select Ob j e c t M o un t. The N e w Mo u nt window opens.
3. Select a host from the H o s t list.
4. Specify the path to the folder path in the P a th field.
5. Click OK .
6. Select the folder and then select Ob j ec t U p da te . The U p d at e F o l de r window
opens.
7. Select the E na b l ed checkbox and then click OK .
Step 4: Start the Remote Site
Starting a remote site server is similar to starting a standard Windchill server.
To start the remote site:
1. Start the web server, servlet engine, and method server on the remote site
computer.
2. Start Windchill in one of the following ways:
206
207
wt.services.service.3=wt.wrmf.delivery.ShippingService/wt.wrmf.delivery.
StandardShippingService
wt.services.service.4=wt.wrmf.delivery.ReceiverService/wt.wrmf.delivery.
StandardReceiverService
wt.services.service.5=wt.wrmf.transport.GenericTransportService/wt.wrmf.transport.
StandardGenericTransportServi
The method server and server manager should now launch successfully. The POM
messages that normally appear when the method server starts are not displayed,
and registering with the server manager is significantly quicker than in a full
Windchill installation.
Java SDK
LDAP Server
Web Server
Servlet Engine
Info*Engine Server
Windchill Services
Note
Apache and Tomcat must share a common directory when they are unzipped,
for example CD_CAPPS/Apache and CD_CAPPS/Tomcat. To ensure that
this structure is preserved in the ZIP files, Apache and Tomcat must be
individually copied into a separate CD_CAPPS folder and this folder must be
referenced when calling createZip.xml.
The script needed to perform these tasks can be found here: <Windchill>/
bin/CCSTools/createZip.xml
208
Note
All of the CD images must be unzipped before they can be recognized by the
PSI staging area.
U p d a ti n g th e Fi l e S e rv e r
Maintenance updates for a remote File Server are required when maintenance
releases or patches are applied to the master site. The updates are delivered by a
file named CcsDsu.zip that contains all the necessary updates for a maintenance
209
If you have completed the master site update and the autoManageCCS property
in the wt.properties file is set to true, then broadcast the file server
configuration to automatically download the ZIP file to the following location
on the file server: <Windchill>/bin/CCSTools/update.
If the autoManageCCS property is set to false, you must manually download
the ZIP file to this location from the F i l e S e rv er Ma na g em en t utility, available
from S i te U ti l i ti e s Fi l e S e rv e r A d mi n i s tr at i on .
Note
If you are updating an existing file server installation, you must first update the
third party products (Java, Apache, Tomcat) for the file server.
After you download the ZIP file to the appropriate location on the file server, you
must update the existing standalone products on the file server with PSI before you
restart Windchill on the file server to apply the update.
After you have successfully installed the Ccs.Dsu.zip file, and you are updating the
file server for the first time from 10.0 F000, or 10.0 M010, or 10.0 M020
maintenance release to a future release, complete the following steps:
1. Shut down the method servers, server manager, and web server on the file
server.
2. From a Windchill shell of the file server, execute the following command:ant
-f <WT_HOME>/bin/installModules.xml deploy_module
-Drt=true -Ddeclare_xconfs.skip=true
If the master is on HTTPS and the Java on file server was updated with the same
version as the master, manually add the certificate to the Java Keystore on the file
server. Otherwise, no certificate needs to be added.
Updating E xis ting Standalone P roduc ts on the File S erver
1. Shut down the method servers, server manager, and web server on the file
server.
2. After applying the update on the master and restarting it, check the content of
File Server Management inside the Windchill page from S i te U ti l i ti es
F i l e S e r v e r A d m i n i s t r a t i o n to see if the standalone products have been updated
(verify their date).
210
3. If the standalone products have been updated, download the standalone product
ZIPs as well as the PSI ZIP from the master server and extract them into the
staging area.
4. Run PSI located on the staging area and select U pd a te E x i s ti n g Ins ta l l ati o n .
5. Select the instance of the file server to be updated.
6. Select S ta n da l o ne P ro du c ts o r C o mp on e nt s On l y .
7. Provide the location of the staging area for PSI to install the standalone
products update.
8. Click N e x t until you reach the end of the last panel for running the installation.
Ma nua lly Gen era ting the C C S D s u .z ip File (I f N ec es s a ry )
If E n a bl e R e mo te F i l e S er v e r S u pp o rt was not selected during the initial solution
installation, this ZIP file does not exist after applying the maintenance updates, so
you must generate it manually.
An ANT script that handles this task resides in the following location:
<Windchill>/bin/CCSTools/create_ccsdsu.xml.This script creates
the CcsDsu.zip file based on a BOM (bill of materials). It maintains a
cumulative BOM, <wt_home>/codebase/CCSTools/
CcsDsuBom.include, with which any future BOMs are merged.
To generate the ZIP file, run the following command from a Windchill shell:
ant -f <Windchill>/bin/CCSTools/create_ccsdsu.xml
-Dinstall.files.maint=true <params>
The script runs and generates the CcsDsu.zip and a corresponding MD5
checksum file in the <Windchill>/codebase/CCSTools/update
directory.
This CcsDsu.zip is downloaded to the remote File Server. Ensure that the ZIP file
is placed in the same location as the master site: <Windchill>/codebase/
CCSTools/update.
The CcsDsu.zip is applied when Windchill is restarted on the File Server.
211
Note
When applying an update (a patch or maintenance release) to a master site that
has a cluster setup, the patch is applied to each the node in the cluster
individually. However, for the CCS (File Server) automatic update to function
properly, the files in the <Windchill>/codebase/CCSTools/update
directory in the master node (background method server) of the cluster must be
copied to the <Windchill>/codebase/CCSTools/update directory
of each node in the cluster. This is essential to ensure that the CCSDsu.zip
and its CCSDsu.zip.MD5 files on all nodes are exactly the same.
212
Note
If ant -f install_ccsdsu.xml fails on the first attempt, run it again
to successfully complete the update process.
5. Once the execution completes, start Windchill.
213
xconfmanager -s wt.pom.dbUser=<WINDCHILL_APP_USER_
NAME> -t "db/db.properties" -p
xconfmanager -s wt.pom.dbPassword=<WINDCHILL_APP_
USER_PASSWORD> -t "db/db.properties" -p
xconfmanager -s wt.pom.dbSchemaUser=<WINDCHILL_
INSTALL_USERNAME> -t "db/db.properties" p
2. Start Windchill and its related services. From the method server output, verify
that the database application user name <WINDCHILL_APP_USER_NAME>
has been used for the database connection.
If you did not create a database application user when you installed your Windchill
solution, you can create one after the PTC Solution Installer (PSI) finishes
installing your solution by using database-specific scripts and the database client.
The database client must either be installed on the Windchill server or the script
should be copied and executed from the database server. Use the following steps to
manually create the database application user:
214
Oracle
1. Open a Windchill shell.
2. Change the directory to <Windchill>\db\sql (or sql3). The script is located in
both folders, and they are not dependent on single or multi-byte Windchill
configuration.
3. Using the Sqlplus utility, log in to the Windchill database as a database
administrative user.
Note
Users executing the following script must have read/write privileges on the
<Windchill>\db\sql (or sql3) folder.
4. Execute the create_wc_app_user.sql file to create an application user,
a database role, and an after login trigger.
Note
PTC recommends creating the application user and role by appending the
Windchill maintenance release version to the name; for example,
WindchillAppUser_10M0XX, WindchillAppRole_10M0XX. This will
help uniquely identify the names and correlate them with the target
Windchill version.
The following is an example of the script execution output:
Windchill Install database User Name: <WINDCHILL_INSTALL_USERNAME>
Windchill Application database Role Name: <WINDCHILL_APP_DATABASE_ROLE>
Windchill Application database User Name: <WINDCHILL_APP_USERNAME>
Windchill Application database User Password: <WINDCHILL_APP_USER_PASSWORD>
Default Tablespace Name: users
Temporary Tablespace Name: temp
5. Verify that the application user and role was created correctly by logging on to
the database as that user.
6. From a Windchill shell, execute the following commands to modify Windchill
db.properties file with appropriate values:
215
xconfmanager -s wt.pom.dbUser=<WINDCHILL_APP_USER_
NAME> -t "db/db.properties" -p
xconfmanager -s wt.pom.dbPassword=<WINDCHILL_APP_
USER_PASSWORD> -t "db/db.properties" -p
xconfmanager -s wt.pom.dbSchemaUser=<WINDCHILL_
INSTALL_USERNAME> -t "db/db.properties" p
7. Start Windchill and its related services. From the method server output, verify
that the database application user name <WINDCHILL_APP_USER_NAME>
has been used for the database connection.
SQL Server
1. Open a Windchill shell.
2. Change the directory to <Windchill>\db\sqlserver.
3. Execute the batch file D:\ptc\Windchill\db\sqlServer> create_
wc_app_user.bat to create an application user and a database role.
Note
Users executing the following script must have read/write privileges on the
<Windchill>\db\sqlserver folder.
Note
PTC recommends creating the application user and role by appending the
Windchill maintenance release version to the name; for example,
WindchillAppUser_10M0XX, WindchillAppRole_10M0XX. This will
help uniquely identify the names and correlate them with the target
Windchill version.
The following is an example of the script execution output:
SQL Server Host Name: <DB_HOST_NAME>
SQL Server Instance Name (for Named Instance only): <DB_INSTANCE_
NAME>
SQL Server Admin User name (default is sa):
Password for user sa: manager <SA_PASSWORD>
Windchill Install Database User Name: <WC_INSTALL_USERNAME>
Default database name for user <WC_INSTALL_USERNAME>:
<DEFAULT_DB>
Windchill Application Database Role Name: <WC_APP_DATABASE_
ROLE>
216
4. Verify that the application user and role was created correctly by logging on to
the database as that user.
5. From a Windchill shell, execute the following commands to modify Windchill
db.properties file with appropriate values:
xconfmanager -s wt.pom.dbUser=<WINDCHILL_APP_USER_
NAME> -t "db/db.properties" -p
xconfmanager -s wt.pom.dbPassword=<WINDCHILL_APP_
USER_PASSWORD> -t "db/db.properties" -p
xconfmanager -s wt.pom.dbSchemaUser=<WINDCHILL_
INSTALL_USERNAME> -t "db/db.properties" p
6. Start Windchill and its related services. From the method server output, verify
that the database application user name <WINDCHILL_APP_USER_NAME>
has been used for the database connection.
217
9
Windc hill Integrations for
E mbe dd ed S oftwa re
Defect Tracking Systems [Integrity (DTS), Bugzilla and Atlassian JIRA] Server
Configuration ....................................................................................................... 220
Software Configuration Management Systems [Integrity Source (SCM), Subversion
and IBM Rational ClearCase] Server Configuration ................................................. 220
Windchill Integrations for Embedded Software is a PTC product solution with the
following optional server integrations:
The Windchill Integrations for Embedded Software product solution consists of:
219
D e f e c t Tr a c k i n g S y s t e m s [ I n t e g r i t y ( D T S ) ,
B ugz illa and A tlas s ian J IR A ] S erv er
Configu ration
There are no server post-installation steps for the Defect Tracking System (DTS)
adapters, Integrity (DTS), Bugzilla and Atlassian JIRA.
Refer to the Windchill Help Center, I nte g ra te d S o ftw a re Ma na g em en t S o ftw a re
D e f e c t Tr a c k i n g I n t e g r a t i o n s A d m i n i s t r a t i o n for information on how to setup and
manage DTS adapters.
Note
There are no post installation procedures when performing an initial
installation of Windchill in a Windows environment and when IBM Rational
ClearCase is installed on the same machine that Windchill is installed.
220
Refer to the IBM Rational ClearCase Installation and Configuration section in the
Windchill Help Center and in the Windchill Integration for Software Configuration
Managements Systems Administrators and Users Guide for information on how
to:
Note
If administrative data was not loaded by the installer, load the required
administrative data. This loads context templates, preferences, and access
control rules required by IBM Rational ClearCase.
windchill wt.load.WindchillLoader
-Application=Windchill.SoftwareConfigMgmtIntegration
221
A D A P T E R _ H O M E specify the directory where all the jar files from cc.
zip file were extracted, as described above. For example:
set ADAPTER_HOME=D:\SCMI-OOP
J AVA _ H O M E specify the location of JDK (on the machine where the
IBM Rational ClearCase adapter will be running). JDK version 1.5 should
be installed on the client machine.
For example,
set JAVA_HOME=c:\jdk\jdk1.5_0_06
Note
Also verify that IEPROPFILE, IENAMINGSERVICENAME all have
correct values as described in the comments of the s tar tC C A da p te r.b at
file.
222
set CLASSPATH=%SCM_HOME%;%CLASSPATH%
For example,
%JAVA_HOME%\bin\java.exe -cp "%CLASSPATH%" -DpropFile="%IEPROPFILE%"
-DruntimeServiceName="%ADAPTER_NAME%" -DserviceName="%ADAPTER_NAME%"
-DnamingServiceName="%IENAMINGSERVICENAME%"
-Dwt.home="%SCM_HOME%" com.ptc.windchill.scm.adapter.clearcase.
CcMultithreadedAdapter
Example startCCAdapter.bat:
@echo off
rem Start up
rem *****************************************
rem User configured properties
rem set JAVA_HOME to the install location of the JDK
set JAVA_HOME=
rem set ADAPTER_HOME to the directory where the file cc.zip was extracted
set ADAPTER_HOME=
rem ADAPTER_NAME should be the set to the name the ClearCase adapter that you created
rem in Windchill Integrations for Embedded Software.
set ADAPTER_NAME=$WC.com.ptc.swlink.scm.defaultAdapter$
rem *****************************************
WT_HOME\codebase\WEB-INF\ie.properties
set IEPROPFILE=$WC.com.ptc.swlink.scm.iepropfile$
rem IENAMINGSERVICENAME should be the same as the value of
rem wt.federation.ie.namingService
rem in WT_HOME\codebase\wt.properties
set IENAMINGSERVICENAME=$WC.com.ptc.swlink.scm.ccConfig.host2$.namingService
set SCM_HOME=%ADAPTER_HOME%
223
set CLASSPATH=%JAVA_HOME%\lib\tools.jar;%CLASSPATH%
set CLASSPATH=%SCM_HOME%\servlet.jar;%CLASSPATH%
set CLASSPATH=%SCM_HOME%\ie3rdpartylibs.jar;%CLASSPATH%
set CLASSPATH=%SCM_HOME%\ieWeb.jar;%CLASSPATH%
set CLASSPATH=%SCM_HOME%\jmxcoreWeb.jar;%CLASSPATH%
set CLASSPATH=%SCM_HOME%\wc3rdpartylibs.jar;%CLASSPATH%
set CLASSPATH=%SCM_HOME%\CommonCore.jar;%CLASSPATH%
set CLASSPATH=%SCM_HOME%\MetaSpecCommon.jar;%CLASSPATH%
set CLASSPATH=%SCM_HOME%\cc.jar;%CLASSPATH%
set CLASSPATH=%SCM_HOME%\install.jar;%CLASSPATH%
set CLASSPATH=%SCM_HOME%;%CLASSPATH%
title SCM Adapter
echo ------------------------------------------------------------------------------echo Starting SCM Adapter
echo.
echo JAVA_HOME = %JAVA_HOME%
echo ADAPTER_HOME
= %ADAPTER_HOME%
224
Windchill PDMLink
The following describes the post-installation procedures that are needed to
complete an installation of Windchill PDMLink.
Ma nua lly L oa din g Da ta a nd D ata ba s e S c h ema
During the installation using the PSI, you are prompted to select your data loader
settings on page 164. If you choose not to load data using PSI, you must manually
load it after PSI installs your solution using the instructions in the section Database
Initializing and Data Loading on page 295. However, in certain scenarios
additional steps are needed to complete your installation. These scenarios are;
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>"
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql/pdml/DDLBasic/Make_module_DDLBasic.sql
225
Note
Please note the following:
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
226
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>"
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql/pjl/
ChangePlanning/Make_module_ChangePlanning.sql
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>"
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql/pjl/ProjectManagement
/Make_module_ProjectManagement.sql
227
Make_module_ProjectManagement.sql
Note
Please note the following:
W i n d c h i l l C A PA
The following describes the post-installation procedures that are needed to
complete an installation of Windchill CAPA.
Ma nua lly L oa din g Da ta a nd D ata ba s e S c h ema
During the installation using the PSI, you are prompted to select your data loader
settings on page 164. If you choose not to load data using PSI, you must manually
load it after PSI installs your solution using the instructions in the section Database
Initializing and Data Loading on page 295. However, in certain scenarios
additional steps are needed to complete your installation. These scenarios are;
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
228
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>"
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql/qms/Masterdata/
Make_module_Masterdata.sqlwindchill
--java=%JAVA_HOME%/bin/java.exe --javaargs="-Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql/capa/CAPA/Make_module_CAPA.sql
Note
Please note the following:
229
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql/qms/Masterdata/Make_module_Masterdata.sql
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.dbUser=<username> -Dwt.tools.
sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql/nc/NC/Make_module_NC.sql
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.dbUser=<username> -Dwt.tools.
sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql/qms/
DispositionServer/Make_module_DispositionServer.sql
230
-Dwt.tools.sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql3/qms/Masterdata/Make_module_Masterdata.sql
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.dbUser=<username> -Dwt.tools.
sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql3/nc/NC/Make_module_NC.sql
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.dbUser=<username> -Dwt.tools.sql.dbPassword=<password>"
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql3/qms/DispositionServer/
Make_module_DispositionServer.sql
Note
Please note the following:
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
231
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>" wt.tools.
sql.SQLCommandTool %WT_HOME%/db/sql/qms/Masterdata/Make_module_Masterdata.sql
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>"
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql/cem/CEM/Make_module_CEM.sql
232
wt.tools.sql.SQLCommandTool
Note
Please note the following:
Note
When manually loading data for Windchill Customer Experience
Management, the Windchill.QualityManagement.QMS file must be loaded
before loading the Windchill.QualityManagement.CEM file.
windchill wt.load.WindchillLoader -Application=Windchill.QualityManagement.QMS
-Unattended -AbortOnError
windchill wt.load.WindchillLoader -Application=Windchill.QualityManagement.CEM
-Unattended -AbortOnError
Optional P ro duc ts
This section describes any manual post-installation steps required for the optional
products.
Creo Vi ew S tandard
There are no post-installation steps for this product.
Windchill ESI
The following describes the post-installation procedures that are needed to
complete an installation of Windchill ESI.
233
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql/esi/Esi/Make_module_Esi.sql
234
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql3/esi/Esi/Make_module_Esi.sql
Note
Please note the following:
U p g r a d i n g C u s t o m i z e d D i s t r i b u t i o n Ta r g e t s
When a customized distribution target is upgraded to a more recent release of
Windchill, it will be labelled as a Distribution Target type. This is because there are
no subtypes available for the customized target. After you have migrated your
customized distribution targets you need to create the appropriate subtype
distribution target using the Ty p e an d A ttri b ut e M an a ge r. Once the appropriate
distribution target subtype has been created you can convert your customized
distribution target to the newly created custom subtype.
To convert a customized distribution target to a different subtype use the following
procedure:
1. Navigate to the M an a ge D i s tri b ut io n utility, available from U ti l i ti e s under
O r g a n i z a t i o n or S i t e .
2. Select the customized distribution target and click C h an g e Tar ge t Ty p e .
3. Select the appropriate subtype.
Note
Once a target has been converted to a subtype the C h a ng e Ta rg et Ty pe action
will no longer be available.
235
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>"
-Dwt.tools.sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql/wii/Environment/Make_module_Environment.sql
236
%WT_HOME%/db/sql3/wii/Environment/Make_module_Environment.sql
Note
Please note the following:
W i n d c h i l l Wo r k g r o u p M a n a g e r
This section contains information about Windchill Workgroup Manager postinstallation server instructions for all 2nd and 3rd party authoring tools integrated
with Windchill Workgroup Manager.
U s i n g a F i l e S y n c h r o n i z a t i o n - C a p a b l e Wo r k e r w i t h W i n d c h i l l
Wo r k g r o u p Ma n a g e r
The following instructions apply to Windchill Workgroup Manager authoring
applications using a file synchronizations-capable worker with Windchill
Workgroup Manager.
These steps are included in the Windchill Workgroup Manager Help Center under
Windchill Workgroup Manager Integrations for your individual authoring tool
under Using a File Synchronization-Capable Worker with Windchill Workgroup
Manager.
Also refer to the Windchill Workgroup Manager Administrators and Users Guide
for your authoring tool located in the PTC Reference Documents site.
C o n f i g u r i n g t h e Wo r k e r a n d C o n f i g u r i n g t h e Wo r k e r o n W i n d o w s
The following instructions apply to Windchill Workgroup Manager authoring
applications requiring the configuration of the Worker, and the configuration of the
Worker on Windows.
237
These steps are included in the Windchill Workgroup Manager Help Center under
Windchill Workgroup Manager Integrations for your individual authoring tool, and
in the downloadable PDF for your guide from the PTC Reference Documents site:
Configuring the Worker
Post-Install Configuration of the Worker on Windows
Also refer to Configuring the Worker and Post-Install Configuration of the
Worker on Windows located in the Windchill System Administrators Guide.
Run the Windc hill Update E xi sting Ins tal lation P roc edure When
I n s t a l l i n g W i n d c h i l l Wo r k g r o u p M a n a g e r 1 0 . 1 M0 2 0 w i t h W i n d c h i l l
1 0 .1 M0 1 0 , o r u p d a t i n g fro m a p ri o r re l e a s e o f Wi n d c h i l l Wo r k g r o u p
Ma nag er
When Installing Windchill Workgroup Manager 10.1 M020 with Windchill 10.1
M010, or updating from a prior release of Windchill Workgroup Manager, you
must run the Windchill Update Existing Installation procedure.
Note
Installing Windchill Workgroup Manager 10.1 M020 with Windchill 10.1
M010 is supported with AutoCAD, Autodesk Inventor, CATIA V5, NX, and
SolidWorks for backward compatibility.
W i n d c h i l l Wo r k g r o u p M a n a g e r f o r C AT I A V 5
For CATIA V5 only, after installing your Windchill solution, and prior to installing
Windchill Workgroup Manager client, you must build the CATIA V5 Abstraction
Library.
Refer to the Windchill Workgroup Manager for CATIA V5 Administrators and
Users Guide located in the PTC Reference Documents site at PTC Reference
Documents.
238
Wi n d c h i l l Wo rk g ro u p Ma n a g e r fo r A rb o rte x t Is o D ra w a n d W i n d c h i l l
Wo r k g r o u p Ma n a g e r f o r C r e o I l l u s t r a t e
Ensure that the following mandatory system environment variables are created for
Windchill Workgroup Manager for Arbortext IsoDraw and Windchill Workgroup
Manager for Creo Illustrate.
Note
The following system environment variables must be created before installing
the Windchill Workgroup Manager client. Also refer to the Windchill System
Administrator's Guide, available at the PTC Document Reference Site for more
information.
The system environment variable for the Windchill Virtual File System (VFS),
that is installed during the Windchill Workgroup Manager client installation, is
PTC_VFS_INSTALL_DIR. This variable allows the user to install VFS at the
specified location for the Windchill Workgroup Manager client software. Set
the following system environment variable:
PTC_VFS_INSTALL_DIR=<any local directory>
Note
If you do not set the above variable, then during the Windchill Workgroup
Manager client software installation, VFS will install at the default location
C:\ProgramFiles\PTC\VFS.
Another system environment variable for Windchill Virtual File System (VFS),
that is installed during the Windchill Workgroup Manager client software
installation is PTC_PLACES_DEFAULT. This variable allows a user to specify
the initial location for PTC Place. It is used during the installation of VFS. This
system variable can be changed using the PTC Places UI located in the Control
Panel and wgmvfsclient.exe utility.
Set the following system environment variable:
239
Note
If you do not set the PTC_PLACES_DEFAULT variable, then after the
Windchill Workgroup Manager client software installation, the default
location for PTC Places becomes <User Profiles>\<username>\PTC
Places.
If you do not set the PTC_PLACES_DEFAULT variable, the customer
cannot choose a default location for PTC Places.
Other system environment variables must be set before installing the Windchill
Workgroup Manager client software:
PTC_VFS_ROOT=<any local directory>
PTC_WLD_ROOT=<any local directory>
Note
If you do not set the above variables, then during the Windchill Workgroup
Manager client software installation, the folders .ws and .vfs are
created under <local drive>\<Users>\<user>\.wwgm. If the .wwgm
folder becomes created under the network drive, it will cause a conflict.
Note
There are no post-installation steps for Windchill PartsLink Client.
240
Note
It is recommended for the PartsLink database user to be different from the
Windchill database user.
Oracle
To create the Windchill PartsLink server schema:
1. Create a database schema.
2. Open a command prompt or windchill shell.
3. Change the directory of the shell to <PTL_HOME>/db/sql.
Note
<PTL_HOME> is the installation directory location set during installation
of Windchill PartsLink server. By default, this value is: C:\ptc\Windchill_
10.0\PartsLink.
4. Log in to sqlplus using the installation user name and password created during
the database schema creation:
sqlplus <install username>/<install password>@<service
id>
5. Execute the database scripts by running:
@ptl/PartsLinkService/make_schema.sql
To create the application user:
1.
2.
3.
4.
@create_wc_app_user.sql
5. Enter details for the application user.
241
SQL S erv er
To create the Windchill PartsLink server schema:
1. Create a database schema.
2. Copy the following directory and all of its contents to a machine where the
sqlcmd tool is available:
PTL_HOME/db/sqlServer
3. Open a command prompt or Windchill shell.
4. Go to the sqlServer directory in the command prompt.
5. Log in to the SQLServer schema for the Windchill PartsLink installation
syntax:
sqlcmd -S <db-hostname>\<db-service> -U <username> -P
<password>
6. To create the Windchill PartsLink Server schema objects, run the following
command:
:r make_partslinkserver_schema.sql
To create the application user:
1.
2.
3.
4.
Note
It is recommended for the PartsLink database user to be different from the
Windchill database user.
Oracle
To recreate the Windchill PartsLink server schema with SOX compliance:
1. If you have created the application user, perform the following steps using the
database system:
a. Open a command prompt or Windchill shell.
b. Log on to sqlplus as a system user.
242
c. Drop the PartsLink server database role using the following command:
drop role <role name>.
d. Drop the PartsLink server application user, using the following command:
drop user <user name>.
2. Drop the PartsLink server schema:
a. Open a command prompt or Windchill shell.
b. Change the directory of the shell to: <PTL_HOME>/db/sql.
Note
<PTL_HOME> is the installation directory location set during
installation of Windchill PartsLink server. By default, this path is set to
C:\ptc\Windchill_10.0\PartsLink.
c. Log on to sqlplus using the installation user name and password created
during the database schema creation: sqlplus<install user
name>/<install password>@<service id>.
d. Execute the database scripts by running the following command: @ptl/
PartsLinkService/drop_schema.sql.
To create the application user:
1.
2.
3.
4.
@create_wc_app_user.sql
5. Enter details for the application user.
243
SQL S erv er
To create the Windchill PartsLink server schema:
1. If you have created the application user and role, perform the following steps
using the database user sa
Note
Keep the following in mind:
USE [USER_DB}
GO
EXEC sp_droprolemember N'APP_ROLE', N'APP_USER'
GO
ALTER AUTHORIZATION ON ROLE::[APP_ROLE] TO [dbo]
GO
ALTER AUTHORIZATION ON SCHEMA::[APP_USER] TO [dbo]
GO
DROP SCHEMA [APP_ROLE]
GO
DROP ROLE [APP_ROLE]
GO
DROP SCHEMA [APP_USER]
GO
DROP USER [APP_USER]
GO
USE [master]
GO
DROP LOGIN [APP_USER]
GO
244
d. To drop the Windchill PartsLink Server schema objects, run the following
command: :r drop_partslinkserver_schema.sql.
To create the application user:
1.
2.
3.
4.
W i n d c h i l l S h i p B u i l d i n g Te m p l a t e
The following describes the post-installation procedures that are needed to
complete an installation of Windchill Ship Building.
Ma nua lly L oa din g Da ta a nd D ata ba s e S c h ema
During the installation using the PSI, you are prompted to select your data loader
settings on page 164. If you choose not to load data using PSI, you must manually
load it after PSI installs your solution using the instructions in the section Database
Initializing and Data Loading on page 295. However, in certain scenarios
additional steps are needed to complete your installation. These scenarios are;
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. To load data run the following command:
windchill wt.load.WindchillLoader -Application=Windchill.WCShipbuildingTemplate
-Unattended -AbortOnError
245
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. To load data run the following command:
windchill wt.load.WindchillLoader -Application=Windchill.WCShipIntegration -Unattended
-AbortOnError
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
246
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. To load data run the following command:
windchill wt.load.WindchillLoader -Application=Windchill.CoCreateModelManagerGateway
-Unattended -AbortOnError
Windchi ll MP MLi nk
Perform the following steps to complete the Windchill MPMLink installation:
If Win dc hill R eq uire me nts Ma nag emen t an d Wi ndc hil l MP ML ink a re
ins talle d at th e s a me time
The following file needs to be loaded as a post-installation step after the last of
either Windchill Requirements Management or Windchill MPMLink is
installed on a server with both products installed at the same time:
%<windchill>%\loadFiles\type\ConfigurableDescribeLinkREQLMPML.xml
247
Property name="com.ptc.windchill.mpml.copyOver.update.wt.part.WTPart"
For example:
<Property name="com.ptc.windchill.mpml.copyOver.create.wt.part.WTPart"
default="WCTYPE|wt.part.WTPart~MBA|source,WCTYPE|wt.part.WTPart~MBA|
containerReference^WCTYPE|wt.inf.container.WTContainer,WCTYPE|wt.part.WTPart~MBA|
partType,WCTYPE|wt.part.WTPart~MBA|describedBy@WCTYPE|
wt.epm.structure.EPMDescribeLink,WCTYPE|wt.part.WTPart~MBA|describedBy@WCTYPE
|wt.part.WTPartDescribeLink,WCTYPE|wt.part.WTPart~MBA|references@WCTYPE
|wt.part.WTPartReferenceLink,WCTYPE|wt.part.WTPart~SCA|ALL_CLASSIFICATION_IBAS,WCTYPE|
wt.part.WTPart~MBA|buildSource@WCTYPE
|wt.epm.build.EPMBuildRule,WCTYPE|wt.part.WTPart~MBA|describedBy@WCTYPE|
com.ptc.windchill.mpml.pmi.MPMWTPartToEPMDocumentLink,WCTYPE|wt.part.WTPart~MBA|
characteristic@WCTYPE|com.ptc.windchill.mpml.pmi.MPMPartQualityLink"/>
<Property name="com.ptc.windchill.mpml.copyOver.update.wt.part.WTPart"
default="WCTYPE|wt.part.WTPart~MBA|source,WCTYPE|wt.part.WTPart~MBA|partType,WCTYPE|
wt.part.WTPart~MBA|describedBy@WCTYPE|wt.epm.structure.EPMDescribeLink,WCTYPE|
wt.part.WTPart~MBA|describedBy@WCTYPE|wt.part.WTPartDescribeLink,WCTYPE|
wt.part.WTPart~MBA|references@WCTYPE|wt.part.WTPartReferenceLink,WCTYPE|
wt.part.WTPart~SCA|ALL_CLASSIFICATION_IBAS,WCTYPE|wt.part.WTPart~MBA|choice@WCTYPE|
com.ptc.windchill.option.model.ChoiceMappableChoiceLink,WCTYPE|wt.part.WTPart~MBA|
describedBy@WCTYPE|com.ptc.windchill.mpml.pmi.MPMWTPartToEPMDocumentLink,WCTYPE|
wt.part.WTPart~MBA|buildSource@WCTYPE|wt.epm.build.EPMBuildRule,WCTYPE|
wt.part.WTPart~MBA|characteristic@WCTYPE|com.ptc.windchill.mpml.
pmi.MPMPartQualityLink"/>
To convert buildrule links to Inherited links use the following procedure (the
default is to convert to Content links):
1. Navigate to and open the mpmlink.properties.xconf file, found to the following
location:
\Windchill\codebase\com\ptc\windchill\mpml\xconfs\mpmlink.properties.xconf
248
windchill.mpml.pmi.MPMWTPartToEPMDocumentLink"/>
Note
This property controls how EPMBuildRule links (Part-CAD Association
type: Owner, Contributing Content, Contributing Image and Image) are
copied from an upstream part to its downstream equivalent part when this
link type is declared in the copy over framework properties. The default for
this property is to convert an upstream EPMBuildRule to a downstream
EPMDescribeLink (Part-CAD Association type: Content). It can instead be
set to convert an upstream EPMBuildRule to a downstream
MPMWTPartToEPMDocumentLink (Part-CAD Association type:
Inherited).
To maintain the published representation when iterating parts without iterating the
EPM Doc use the following procedure:
Note
This procedure is optional. However, if the default (true) is maintained
representations may not always appear after you checkout a part.
1. Navigate to and open the wvs.properties.xconf file, found in the following
location:
\Windchill\codebase\wvs.properties.xconf
Ti p
The ask_designate_owners option if set to n o, allows you to designate
annotation elements without being prompted to also designate the parent
annotation. The parent annotation will not be designated.
249
Update the Obj ect A dapter Recipe Fil e For Creo Parametric
The publishing of annotations needs to be enabled in the recipe file for Creo
Parametric. If not, model annotations will not appear.
For more information on how to do this refer to the C on fi g u ri n g th e C re o Vi e w
A d a p t e r f o r C r e o section of the PTC Creo View MCAD Adapter Installation and
Configuration Guide.
Ma nua lly L oa din g Da ta a nd D ata ba s e S c h ema
During the installation using the PSI, you are prompted to select your data loader
settings on page 164. If you choose not to load data using PSI, you must manually
load it after PSI installs your solution using the instructions in the section Database
Initializing and Data Loading on page 295. However, in certain scenarios
additional steps are needed to complete your installation. These scenarios are;
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql/mpml/MPMLink/Make_module_MPMLink.sql
250
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql3/mpml/MPMLink/Make_module_MPMLink.sql
Note
Please note the following:
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
251
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>"
-Dwt.tools.sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql/suma/SupplierManagement/Make_module_SupplierManagement.sql
Note
Please note the following:
252
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql/wadm/wadm/Make_module_wadm.sql
253
%WT_HOME%/db/sql3/wadm/wadm/Make_module_wadm.sql
Note
Please note the following:
Create A ttributes
After you have installed Windchill PLM Connector, you can optionally configure
attributes in Windchill to show the source system name and source object version
of imported objects. These attributes are:
254
255
256
Perform the following procedure to compile the .java file required for Windchill
PLM Connector service and Veto service.
Note
Refer to the WPCServer.zip file located at <WT_HOME>\src\wpcserver
\Samples\ on the Windchill PLM Connector software CD for the sample .java
script, StandardWPCVetroService.java.
1. Open the Windchill shell and navigate to the <WT_HOME> \src\wpcserver
directory.
2. Enter the following command to create a new directory structure under <WT_
HOME>\src\wpcserver\cust\service.
javac -g -d. Samples/WPC_Server/src/cust/service/*.java
Note
Refer to the Windchill Customizers Guide for more details on creating
non-modelled services for listening.
Regis ter the Wi ndc hil l P LM Connec tor S erv ice on the Wi ndc hil l S erver
If Windchill PLM Connector is installed on a Windchill PDMLink database with
Windchill ProjectLink, you must register Windchill PLM Connector service with
the Windchill server.
1. Register Windchill PLM Connector service in the codebase with
xconfmanager. For example,
xconfmanager -t codebase/wt.properties
-swt.services.service.5000 =com.ptc.cwp.wncadapter.
server.CWPService/com.ptc.cwp.wncadapter.server.
257
StandardCWPService p
Note
Refer to the Windchill Customizers Guide for more details on creating nonmodelled services for listening.
Ma nua lly L oa din g Da ta a nd D ata ba s e S c h ema
During the installation using the PSI, you are prompted to select your data loader
settings on page 164. If you choose not to load data using PSI, you must manually
load it after PSI installs your solution using the instructions in the section Database
Initializing and Data Loading on page 295. However, in certain scenarios
additional steps are needed to complete your installation. These scenarios are;
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>"
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql/wpcserver/WPCServer/
Make_module_WPCServer.sql
258
-Dwt.tools.sql.dbPassword=<password>"
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql3/wpcserver/WPCServer/
Make_module_WPCServer.sql
Note
Please note the following:
The following sections include verifications you can run to confirm that Windchill
Business Reporting installed properly, and optional manual post-installation steps
that you may choose to perform if applicable for your site.
These verifications include:
259
Ve r i f i c a t i o n s
Log In to Windchill Business Reporting
To confirm that Windchill Business Reporting was successfully installed, navigate
to the following URL:
<machine>:<port>/Cognos
Note
This verification step applies only to Windchill PDMLink, Windchill
ProjectLink, integral Windchill PDMLink and Windchill ProjectLink, and
integral Arbortext Content Manager and Windchill ProjectLink installations.
Once you have logged into Windchill Business Reporting, a Windchill folder
should be present, containing the out-of-the-box reports loaded for your Windchill
solution. If Windchill Requirements Management, Windchill Aerospace and
Defense, or Windchill MPMLink are installed with your Windchill solution, a
folder for each products out-of-the-box reports will be present within the
Windchill folder.
These reports are also available from within your Windchill solution, on the
R e p o r t s pages.
260
C o n fi g u ri n g Wi n d c h i l l B u s i n e s s R e p o rti n g A c c e s s C o n tro l
Out-of-the-box, Windchill Business Reporting makes all Windchill site
administrators (members of the A d mi n i s tr ato rs group) members of the S y s te m
A d m i n i s t r a t o r s group within Cognos, giving them complete access to all Windchill
Business Reporting data and functionality. If your site has the optional Windchill
Business Reporting modules, then users must be added to the appropriate
Windchill groups to be able to access the additional Windchill Business Reporting
functionality:
<WBR_Home>\webcontent\documentation\bisamples_mtoc.html
261
C o n fi g u ri n g Wi n d c h i l l B u s i n e s s R e p o rti n g w i th H TTP S
You can configure Windchill Business Reporting to work with the SSL protocol so
that communication happens using HTTPS rather than HTTP, using the following
general steps:
1. Configure your Windchill web server to use SSL before you proceed to
configure Windchill Business Reporting to use SSL. For more information see
Configuring HTTPS for Apache and Windchill on page 194.
2. Configure Windchill Business Reporting to use SSL, following the directions
in the Secure Deployment Guide available from the documentation page, as
described in the previous section.
3. Update the model. For more information, see Updating the Model and Loading
Reports on page 259.
4. Restart Windchill Business Reporting.
262
Namespace ID
Host and Port
Base Distinguished Name
When logging into Windchill Business Reporting, users will be presented with a
drop-down list of the available namespaces to choose from, including the original
Administrative LDAP configured by the PSI, and the new Enterprise LDAP. To
have the log-in default to the Enterprise LDAP, see Set the Default Namespace on
page 259 (Optional). You can later choose to remove the default namespace and
revert to the drop-down list.
Configure your Web Server
Next, configure your Web server so that the Enterprise LDAP is recognized when
authenticating Windchill Business Reporting requests. See the previous chapters in
this guide for more information on the Web server installed at your site. The
following sections include specific information helpful for each Web server.
For specific information on supported software versions, see the Software Support
Matrix (available from http://www.ptc.com/appserver/cs/doc/refdoc.jsp).
Apache on Windows
To configure Apache to recognize the Enterprise LDAP for authenticating
Windchill Business Reporting requests use the following procedure:
1. From within a Windchill shell, navigate to the directory where Apache is
installed.
2. Run the following on the command line:
ant -f webAppConfig.xml addCognosAuthProvider
-DappName=<COGNOS_WEBAPP_NAME>
-DproviderName=<ENTERPRISE_LDAP_NAME>
-DldapUrl=<ENTERPRISE_LDAP_URL>
where
263
Note
If there is a space or an equal sign ( = ) anywhere in one of the arguments,
you must enclose the entire argument with double quotes ( " ).
3. Restart Apache.
Apache on HP-UX
On HP-UX, Apache can only use a single LDAP for authentication of Windchill
Business Reporting requests, however you can specify an additional password file
to allow users from the Administrative LDAP (or other LDAPs) to log in as well.
1. Edit the app-Cognos.properties file, located in the following directory:
<Apache>/conf
Where <Apache> is the directory location where your Apache is installed.
2. Change the values of the following properties as necessary to reflect the
Enterprise LDAP rather than the Administrative LDAP:
apacheWebApp.ldapUpr
apacheWebApp.anonBind
apacheWebApp.bindDN
apacheWebApp.bindPwd
3. To allow users from the Administrative LDAP to log into Windchill Business
Reporting, enable use of a password file as follows:
264
or
cd <Apache>
ant -f webAppConfig.xml regenAllWebApps
<Apache>/conf
where <Apache> is the directory location where your Apache is installed.
2. Change the values of the following properties as necessary to reflect the
Enterprise LDAP rather than the Administrative LDAP:
apacheWebApp.ldapUpr
apacheWebApp.anonBind
apacheWebApp.bindDN
apacheWebApp.bindPwd
3. To allow users from the Administrative LDAP to log into Windchill Business
Reporting, enable use of a password file as follows:
a. While editing the app-Cognos.properites file in the previous step,
specify a value of TRUE for the apacheWebApp.passwordFile.enabled
property.
265
<Apache>/bin
where <Apache> is the directory location where your Apache is installed.
4. Regenerate the Cognos web app configuration by running one of the following
from a Windchill shell:
cd <Apache> ant -f webAppConfig.xml regenCognosWebAppConf -DappName=Cognos
or
cd <Apache>
or
Enable Windchill to Pass Users Cognos Namespace on page 259
266
Note
If you set the Enterprise LDAP as the gateway namespace, then only users
from the Enterprise LDAP can log into Windchill Business Reporting. This
means that users from the Administrative LDAP, such as wcadmin or
wbradmin, cannot log into Windchill Business Reporting, but users from
the Enterprise LDAP who have similar permissions can log in. You can
later remove this gateway namespace, and return to the drop-down list of
namespaces presented to users when the log into Windchill Business
Reporting.
267
C o n fi g u ri n g Wi n d c h i l l B u s i n e s s R e p o rti n g w i th S u n J a v a
S y s te m We b S e rv e r
To configure Windchill Business Reporting to work with Sun Java System Web
Server, use the following procedure:
Note
The Sun Java System Web Server must be configured to work with Windchill
before proceeding.
1. Log into Sun Java System Web Server as the administrator you established
when you installed Sun Java Web Server.
2. On the C o mm on Tas k s tab, select D o c u me n t D i re c to ri e s .
3. On the D o c um en t D i re c t or i es table, click the N e w button.
4. Add the following U R I P re fi x and D i re c tor y P a th values:
URI Prefix
/Cognos
/Cognos/cgi-bin
5.
6.
7.
8.
9.
U p d a ti n g th e Mo d e l a n d L o a d i n g R e p o rts
If the out-of-the-box reports did not load during installation (for example, if you
did not load the base data), or if there are updates to the reports that you need to
load into Windchill Business Reporting, then the data model must be updated and
the reports loaded on the machine where your Windchill solution is installed. To do
268
this, run the following script from a Windchill shell. (Your Windchill solution,
Windchill Business Reporting, Web servers, and servlet engines must be running
for this script to be successfully run.)
ant -f <wt_home>/installer/wnc/wbr_actions.xml
Create a new database application user for Cognos. For more information, see
Create a New Cognos Database User on page 269.
Set properties using the xconfmanager. For more information, see Setting
Properties on page 269.
Run the wbr_actions.xml script as described in the previous section, Updating
the Model and Loading Reports on page 268.
For wt.properties:
wt.reporting.thirdParty.enabled=true
wt.auth.trustedHosts=<WBR host> <WBR gateway> localhost
For db.properties:
wt.cognos.namespace=AdministrativeLDAP
wt.cognos.endpointUrl=http://<WBR host>:<WBR port>/p2pd/servlet/dispatch
wt.cognos.home=<WBR host components installation directory on host machine>
wt.cognos.model.dir.location=$(wt.cognos.model.dir)
wt.cognos.admin.uid=<Windchill site administrator user>
wt.cognos.admin.password=<Windchill site administrator password>
wt.cognos.externalUrl=$(wt.webserver.protocol)://$(wt.rmi.server.hostname):
269
$(wt.webserver.port)/Cognos/cgi-bin/cognos.cgi
Note
The value used for the wt.cognos.namespace property must match the
Namespace ID value in the Cognos Configuration tool, which by default is
AdministrativeLDAP. If you have changed the Namespace ID value, then
you must use that new value for the wt.cognos.namespace property.
Note
If the operating systems of the machines where the Windchill Business
Reporting host and the Windchill Web server are installed differ, then the
following property must also be set for db.properties:
wt.cognos.model.dir=$(wt.cognos.home)<OS specific separator>
$(wt.cognos.model.name)
R e v e rs e P r o x y C o n f i g u r a t i o n f o r S e p a r a t e A p a c h e We b
S e rv e rs
A reverse proxy configuration is required if Windchill Business Reporting and
your Windchill solution use different Apache web servers.
270
After Windchill Business Reporting and your Windchill solution are successfully
installed, you must:
1. Configure your Windchill installation. For more information see Configuring
Windchill on page 259.
2. Configure Windchill Business Reporting. For more information, see
Configuring Windchill Business Reporting on page 259.
3. Update the model and load reports. For more information see Updating the
Model and Loading Reports on page 259.
Note
Both your Windchill solution and Windchill Business Reporting must use the
same LDAP.
Configuring Windchill
Changes must be made to your Windchill solution in the following locations:
wt.properties file
Modify wt.properties to include the address of the machine where
Windchill Business Reporting is installed as a trusted host:
wt.auth.trustedHosts=<machine_ip_addr> <serverhost>
Apache additions.conf
Add the following proxy setting to the Apache/conf/extra/
additions.conf file:
ProxyPass /Cognos <cognos_url>
ProxyPassReverse /Cognos <cognos_url>
where <cognos_url> is the fully qualified URL of the machine where the
Windchill Business Reporting host components are installed. For example:
http://server1.mycompany.com/Cognos
271
where <Apache> is the directory location where your Apache is installed, and
where <Web_application_context_root> is the name specified for your
Windchill installation, which is "Windchill" by default.
Wi n d c h i l l In d e x S e a rc h Ov e rv i e w fo r In s ta l l e rs
Indexing is the process of extracting text strings of attribute names and attribute
values from Windchill objects and sending them to a search engine that builds
indices optimized for searching. This enables users to efficiently search for data
stored in a Windchill database, without having to know anything about the internal
object model. Windchill solutions provide the option of installing Windchill Index
Search to help with indexing.
The Windchill Index Search system provides the ability to search for keywords
within the meta data and content of Windchill database objects. The oversight of a
system administrator is required to maintain the efficiency and usefulness of the
search system as it changes over time.
Bulk Indexing
You can use the Bulk Index Tool to load all the objects that belong in the Windchill
Index Search libraries. This utility sends objects to a search engine to be indexed
according to their domains indexing policy. You can perform the following tasks
with this utility:
272
Start and stop the bulk indexing process. Because loading indexes can take a
significant amount of time, it may be necessary to stop the operation for some
length of time. State is maintined in the IndexStatus table, which is used by this
too, so the process can be stopped and restarted without having to reindex
objects that have already been indexed.
Schedule the process to start and stop at specified times.
Check on the status of the overall bulk indexing process.
Attempt the reindex objects that have failed the indexing process.
Maintain a detailed log of the indexing process.
Note
The Bulk Index Tool can only be used to load Windchill Index Search
libraries.
Us ing Windc hill Index Searc h During an Upgrade
For more information on using Windchill Index Search and bulk indexing during
an upgrade see:
The index policy rules for your site must be in place. The default rule is that all
indexable objects are indexable across the entire site.
The Windchill Index Search libraries that appear in index policy rules must be
properly configured. Ensure that collections are defined in wt.properties in the
wt.index.federatedLibraries property.
Certain property values should be modified to fit your needs. See Setting
Windchill Index Search Properties on page 273.
273
P roperty
wt.index.bulkIndexSize
D e f a u l t Va l u e
200
wt.index.
checkIndexingRulesBeforeQueue
false
wt.index.
defaultQueueInterval
60
wt.index.enabled
true
wt.index.
excludeAttributes
xml,organization,url,
entrySet
wt.index.
federatedLibraries
wblib
wt.index.filterFileTypes
.prt
wt.index.
indexingLanguage
wt.index.
274
Desc ription
Number of objects to
index at one time during a
BulkIndex operation.
If enabled, objects are
filtered from the queue
based on indexing rules.
If disabled, objects that
are not indexable are
filtered at indexing time.
Time-out interval, in
seconds, for the index
queue polling thread.
Enables Windchill Index
Search.
Object attributes that are
not indexed. Removing
the default attributes may
cause indexing to fail.
The Solr core to which
objects are indexed. If
multiple cores are used,
they should be indicated
using a comma-separated
list
List of file extensions of
file types that will not be
indexed.
Default indexing
language. The value
should be a two-character
ISO639 language code or
local, which will set the
language to the same as
the method server.
A list of supported
language codes is
available in the
properties.html
file.
The list of indexing and
P roperty
indexingLanguageList
D e f a u l t Va l u e
wt.index.
indexWorkingCopy
true
wt.solr.ajpPort
8008
Desc ription
searching languages. The
value should be a commaseparated list of twocharacter ISO639
language codes. The
default indexing language
is added to this list if not
already present. The
corresponding keywords_
xx field should be present
in the Solr schema.xml
file. If the detected
language is not present in
indexingLanguageList,
that content would be
indexed as default
indexing language
content.
A list of supported
language codes is
available in the
properties.html
file.
If enabled, checked out
object data is indexed.
When the object is
checked in, the object is
re-indexed with the new
version. If the check out is
undone, the checked out
index is removed
The TCP/IP port that will
be used to expose the Solr
web application to the
web server via AJP. The
xconfmanager
automatically propagates
this to the Apache or IIS/
Tomcat configuration
when these web server
options are used and it has
275
P roperty
D e f a u l t Va l u e
wt.solr.host
localhost
wt.solr.internalHttpPort
8085
wt.tomcat.
embeddedMode.solr
Desc ription
write access to the
necessary configuration
files. Otherwise, any
changes made to this
setting are also made in
the web server
configuration.
Host for Solr. In the case
of a non-clustered
deployment, this can
simply be localhost. In a
clustered deployment, it
should be the hostname of
the cluster node where
Solr is being run. If this is
empty or unassigned, then
this implies that Solr is
not configured.
The TCP/IP port that Solr
listens upon for direct
server to server HTTP
requests from Windchill.
Controls whether the Solr
web application, other
web applications, or both
are deployed to the servlet
engine embedded within a
given method server,
specified by values of
only, no, and yes,
respectively.
For more information about these properties, see the Index Search properties topic
in the Windchill Help Center.
Checking the Properties
In addition to the properties already mentioned, the following properties should be
addressed:
276
Va l i d W i n d c h i l l C o n f i g u r a t i o n s
The following Windchill configurations can be used with Windchill Index Search:
Note
This information is applicable only if Windchill is installed along with the
Windchill Index Search module, and is applicable to every node in a Windchill
cluster.
277
Configurati on
Windchill with Single MethodServer
and no BackgroundMethodServer
Desc ripti on
In this configuration, the single
MethodServer will handle all Windchill
processes including Index Search
process. The index engine (Solr) will
also be hosted in the MethodServer.
In this configuration, the
BackgroundMethodServer will host the
index engine (Solr). All other Windchill
related processes run in the foreground
MethodServer(s)
In this configuration, admin should
ensure that only one
BackgroundMethodServer is configured
to host the index engine (Solr). The
configuration details can be found in
Configuring Background Method
Servers on page .
Desc ripti on
This configuration is not supported. If
multiple MethodServers need to be
configured in Windchill, then there
must be atleast one
BackgroundMethodServer configured
on the node.
Ti p
The following may aid in performance:
278
Disabling the queues on the BGMS hosting Solr will further improve
performance. The queues will run in the foreground MethodServers and
other BackgroundMethodServers configured in the installation
name="text_ja" at line 22
Reinitialize a Winchill Index Search library after changes have been made to
the indexing policy.
Ti p
To improve performance, indexing should be turned off when bulk loading.
The Bulk Index Tool should be used after indexing to populate your indexes.
279
Start and stop the bulk indexing process. Because loading indexes can take a
significant amount of time, it may be necessary to stop the operation for some
length of time. State is maintained in the IndexStatus table, which is used by
this tool, so the process can be stopped and restarted without having to re-index
objects that have already been indexed.
Schedule the process to start and stop at specified times.
Check on the status of the overall bulk indexing process.
Attempt to re-index objects that have failed the indexing process.
Maintain a detailed log of the indexing process.
Note
The Bulk Index Tool can only be used to load Windchill Index Search libraries.
The tool queries Windchill for all applicable objects, and then compares them to
the IndexStatus table to determine if they have been indexed or not. Then it
determines whether each object belongs in a collection according to the index
policy of the domain to which the object belongs. If so, the object is indexed into
the appropriate collections. For more information about collections, see
Customizing Search in the PTC Windchill Customization Guide.
You can start, stop, and schedule this bulk indexing process.
Ti p
You can open two command prompts, side by side, to simplify the process of
running the tool. Use one command prompt to run the Bulk Index Tool and the
other command prompt to tail the BulkIndexTool.log file. The tail utility is a
standard UNIX utility. For more information, see the main page. This utility is
also available for Windows from GNU at the following web site:
http://www.gnu.org
For real-time progress, you can run the tail utility on the BulkIndexTool.log file.
However, this is not required.
280
After all prerequisites are met, you can run the Bulk Index Tool by entering the
following in a windchill shell and logging in as a user from the Administrator user
group:
windchill wt.index.BulkIndexTool
Note
If you plan to modify the default MIME file types for content indexing, follow
the procedure outlined in the Specifying MIME Types for Content Indexing
help topic prior to running the Bulk Index Tool.
Note
Windchill only indexes the latest iteration of any revision.
If you have previously started the bulk indexing process and it is still running
when you select this option, you will receive an error message.
2. Stop the bulk indexing process.
Select option 2 to stop the bulk index loading process and remove any
remaining bulk indexing queue entries.
3. Schedule the bulk indexing process.
Select option 3 to setup a regular schedule to repeat the bulk indexing process.
You may want to schedule this time during low user activity.
Enter the following information:
281
Total number of runs (how many times you want the scheduled task
repeated).
Frequency (in days) that you want the bulk indexing task to run. (For
example, enter 1 for daily; enter 7 for weekly.)
4. Reset failed entries
Select option 4 to reset the objects that failed during indexing, so they can be
processed again.
5. Reset entries that are processing.
Select option 5 if you have objects that have not yet been marked as complete.
This can happen if communication between the Index engine and Windchill
occurred and the Windchill did not update the object.
6. Reset entries that had no indexing policies.
Select option 6 if you have changed indexing rules and objects that did not
have rules that needed to be indexed. For example, you should use option 6 if
you create a new indexing rule in the P o l i c y A d mi n i s t ra ti on utility and want
objects subject to the new rule to be indexed. Creating a new indexing policy
rule does not impact already indexed objects.
7. Check the bulk indexing progress:
Select option 7 to view indexing status.
The following status example indicates that out of 3609 objects, 3588 are
indexed, 15 objects failed, and 6 objects have yet to be indexed.
Example:
Current status of Bulk Indexing:
282
Objects processing: 0
Objects remaining: 6
When all objects have been processed, the bulk indexing process is complete.
Note
This progress is dependent on the wt.indexbulkIndexSize=200 property. No
changes to status are made until the set number of objects are processed.
8. Delete the bulk indexing list of objects.
9. Verify Index Data
283
Note
Option 9 marks objects not present on the index server as failed. Use option
7 if you want to check the status of your indexed objects. Use option 4 to
index any failed objects.
10. Exit
Select option 10 to close the Bulk Index Tool.
http://<WINDCHILL_URL>-Solr/wblib/select/?q=solr&spellcheck=true&spellcheck.
q=solr&spellcheck.build=true
Note
The URL needs to be accessed only once and the spelling suggestions will not
be available if Solr is set up in a multi-core environment.
Ma n u a l l y L o a d i n g D a ta a n d D a ta b a s e S c h e ma
The following describes the post-installation procedures that are needed to
complete an installation of Windchill Index Search.
284
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>"
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql/rialto/AdaptersCC/
Make_module_AdaptersCC.sql
%WT_HOME%/db/sql/rialto/WTSoftwareIssue/Make_module_WTSoftwareIssue.sql
285
-Dwt.tools.sql.dbPassword=<password>"
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql3/rialto/AdaptersCC/
Make_module_AdaptersCC.sql
%WT_HOME%/db/sql3/rialto/WTSoftwareIssue/Make_module_WTSoftwareIssue.sql
Note
Please note the following:
286
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>"
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql/sis/SisCore/
Make_module_SisCore.sql
287
wt.tools.sql.SQLCommandTool %WT_HOME%/db/sql3/sis/SisCore/Make_module_SisCore.sql
Note
Please note the following:
You choose to not automatically create schema and load data when installing
using the PSI.
You choose to not automatically create schema and load data when adding to
an existing Windchill installation, using the PSI.
Typically these steps are needed to account for customized standard attributes.
1. Complete the PSI installation, during which you deselect the options described
in Selecting Data Loader Settings on page 164.
2. Create the database schema to be used in order for the data to be loaded, as
described in Creating the Database Schema on page 300.
3. Load your data, as described in Loading Base and Demonstration Data on page
303.
4. Open a windchill command window and execute the following script to create
the database schema:
No n Multi-by te Installations
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true
288
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql/sisipc/PartList/Make_module_PartList.sql
windchill --java=%JAVA_HOME%/bin/java.exe --javaargs="
-Dwt.tools.sql.autoCommit=true -Dwt.tools.sql.verbose=6
-Dwt.tools.sql.dbUser=<username> -Dwt.tools.sql.dbPassword=<password>"
wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql/sisipc/PartList/Make_module_PartList.sql
Note
Please note the following:
289
Previously, this process was performed using the Windchill Policy Administration
utility. As of Windchill 10.1 M050, and going forward, run the following
command scripts from any Windchill shell.
Note
This is a mandatory procedure that must be completed as part of the postinstallation process and before users can begin using Windchill Requirements
Management.
From any Windchill shell, run the following command scripts:
windchill com.ptc.windchill.enterprise.requirement.util.REQLContainerACLPatcher
windchill com.ptc.windchill.enterprise.requirement.util.REQLContainerTemplateACLPatcher
290
10
Wh ats N e x t S u mma ry
Monitoring and Maintenance Activities....................................................................... 292
Other Product Installations and Configurations........................................................... 292
Administrative Activities ........................................................................................... 293
About Software Maintenance.................................................................................... 293
This chapter provides a summary of the other installation tasks and the post
administrative tasks that are performed after the Windchill solutions are installed
and configured.
291
The following is a list of other configurations and products that you can install.
References to the installation and configuration instructions for these products are
included:
292
293
11
Database Initializing and Data
Loading
Before You Begin..................................................................................................... 296
Configuring Business Object Uniqueness Across Organizations.................................. 296
Starting the Web Server, Servlet Engine, and Windchill Servers .................................. 298
Setting the Number of Starting Method Servers.......................................................... 299
Creating the Database Schema ................................................................................ 300
Update the Windchill Database................................................................................. 302
Loading Base and Demonstration Data ..................................................................... 303
Executing Post-Dataload Steps ................................................................................ 310
Resetting the Number of Running Method Servers ..................................................... 310
About the Base and Demonstration Data ................................................................... 310
This chapter contains the instructions to initialize and populate the Windchill
database with base and/or demonstration data. The base data for all of the installed
Windchill products must be loaded before you can use Windchill.
Follow the instructions in this chapter if you opted not to install the base data with
the PTC Solution Installer.
For information on loading legacy data, including converting data files from CSV
to XML format, refer to the Windchill Data Loading Reference and Best Practices
Guide.
295
B e f o r e Yo u B e g i n
Determine which versions of Oracle are supported for your application. For
more information, see the software matrix available from the PTC Reference
Documents site:
http://www.ptc.com/view?im_dbkey=124477
On UNIX systems, the installing user (including root) is typically the database
administrator (DBA). It does not matter whether the user is a local user or
Network Information Services (NIS) user.
You must have 5 GB available hard drive disk space for an Oracle server
installation with a Windchill demo database. More disk space is needed for
larger databases.
To complete the installation, you must provide the installer with information. PTC
recommends you gather this information in advance to allow the installation to
proceed without interruption:
Default is LISTENER.
Protocol type.
Default is TCP/IP.
Port number for the protocol type.
The default for TCP/IP is 1521.
296
Note
The information in this section is only pertinent if you are installing either the
Windchill PDMLink solution, or the combined Windchill PDMLink and
Windchill ProjectLink solution. If you are installing any other solution set, you
may disregard the information contained in this section.
Before you load any data, you need to decide if you want to configure business
object uniqueness across organizations. The type of configuration you choose
determines whether business object uniqueness is constrained at the site level or at
the organization level. If you want a business object to be unique across
organizations, you must set several properties prior to loading your data. If you set
these properties after having loaded your data, the data could become corrupted.
Caution
Prior to system configuration, you should carefully consider whether
organization-level object uniqueness is required. Configuration of the
namespace at the organization level rather than the site level is not supported
for all business use cases. For example, setting the namespace at the
organization level can lead to problems in setting the owning organization
value of an object that has been moved from one organization to another.
For more information on business object uniquenesss considerations, see the PTC
Windchill Basic Administration Guide. This guide explains the differences
between constraining data uniqueness at the site level versus the organization level.
In the default environment, business object uniqueness is constrained at the site
level. In this default environment, business objects must be unique across the entire
site.
The alternative is to constrain business object unique at the organization level. In
this type of environment, objects must be unique in their respective organization.
To configure a business object to be unique across organizations, use the
xconfmanager utility to set the required parameter values. From within a windchill
shell, type the following commands:
xconfmanager -s wt.inf.container.restrictCrossOrgDataUse=true
-s wt.inf.container.orgNamespace=true
-t wt.properties -p
297
S t a r t i n g t h e We b S e r v e r, S e r v l e t E n g i n e ,
and Windc hill S erv ers
Start Apache and Tomcat. For more information on starting Apache and Tomcat,
refer to the Starting and Stopping Apache and the Windchill Method Server on
page 488 section and the Using the Windows Shortcut to Start the Servers section.
Verify that the Apache/Tomcat configuration is correct and functioning before
continuing. From your browser enter the URL for your Windchill server:
http://<hostname>/<webapp>
where <webapp> is the web application context root for Windchill that you entered
when installing your Windchill solution. You will see the PTC Splash Page. You
will get an HTTP Error on a URL similar to the following:
http://host.company.com/Windchill/servlet/WindchillGW
You will be prompted for a login. Enter the administrator user name and password.
You will get messages similar to the following if the authentication executed
correctly:
298
Note
Refer to the Windchill Performance Tuning Guide and the Configuring
Multiple Background Method Servers section in the Windchill System
Administrator's Guide for additional information about multiple method servers
and background method servers.
To L i m i t t h e N u m b e r o f M e t h o d S e r v e r s t o O n e
1. Verify that the wt.manager.monitor.services property specifies only the method
server and document all other services that are displayed for the property.
You must also disable any customized monitor service properties you may have
defined. Execute the following command from the windchill shell to display
the value assigned to wt.manager.monitor.services (perform this for your
customized monitor services properties as well):
xconfmanager -d wt.manager.monitor.services
2. If only the method server is displayed, then only one method server is being
used and no other steps are required. Otherwise, change the wt.manager.
monitor.services to specify only the method server as follows:
xconfmanager -s wt.manager.monitor.services=MethodServer
-t <Windchill>/codebase/wt.properties -p
299
If these conditions are true, then no other steps are required. Otherwise, set the
value of the property to 1, if the property exists. Use the xconfmanager to apply
these changes. Perform the following instructions from the windchill shell:
Now that only the method server is specified (limited to one), you can load the
database. After the database is loaded, restore these properties to their original
settings.
UNIX
windchill --java=%JAVA_HOME%/bin/java --javaargs="-Dwt.tools.sql.autoCommit=true
-Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=<username>
-Dwt.tools.sql.dbPassword=<password>" wt.tools.sql.SQLCommandTool
%WT_HOME%/db/sql/create_ddl_wt.sql
300
SQL S erv er
1. Open a Windchill shell and change directory to <Windchill>/db/sqlserver.
2. Execute the following:
Wi n d o w s
windchill java=%JAVA_HOME%/bin/java.exe javaargs="-Dwt.tools.sql.
autoCommit=true -Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=
<username> -Dwt.tools.sql.dbPassword=<password>" wt.tools.sql.
SQLCommandTool %WT_HOME%/db/sqlserver /create_ddl_wt.sql
UNIX
windchill java=%JAVA_HOME%/bin/java javaargs="-Dwt.tools.sql.
autoCommit=true -Dwt.tools.sql.verbose=6 -Dwt.tools.sql.dbUser=
<username> -Dwt.tools.sql.dbPassword=<password>" wt.tools.sql.
SQLCommandTool %WT_HOME%/db/sqlserver /create_ddl_wt.sql
3. Execute the following:
<WT_HOME>/bin/windchill --java=<JAVA_HOME>/bin/java --jap=wt.properties\
com.ptc.windchill.upgrade.tools.upgradeframework.java.args --cpp=wt.properties\
com.ptc.windchill.upgrade.tools.classpath com.ptc.windchill.upgrade.
statemachine.DynamicLauncher -actc noui
Oracle RA C
1. Log in to the Oracle RAC database using SQLPlus as a DBA user (For
example, SYSTEM).
2. After replacing the <USERNAME> and <PASSWORD> variables, execute the
following query to create a user schema:
create user <USERNAME> identified by <PASSWORD>
default tablespace USERS
temporary tablespace TEMP
quota unlimited on USERS;
301
Note
For more information on how to manually create the schema and load data for
any separate modules that you may have installed see Completing the
Configuration Overview on page 188 and then the Post-Installation actions
section for the module you have installed.
Note
Optional products may require their own specific installation instructions. For
more information refer to the Completing Configurations - Manual Steps on
page 187post-installation section for the product you are installing.
302
E x t e n s i o n Va l u e
_zh_CN
_zh_TW
_fr
_de
_it
_ja
_ko
_es
303
304
The Windchill Services data (installed with Windchill Services) can be loaded by
itself or in conjunction with a Windchill solution. In the latter scenario, it must be
the first in the product data load order.
With regard to solution data, the following combinations of data loads are
supported:
Windchill PDMLink and Windchill ProjectLink The solution data sets can be
loaded in any order.
Pro/INTRALINK 10.1 is a standalone solution. It uses the same base data as
Windchill PDMLink. If you load the base data and subsequently install an
upgrade to Windchill PDMLink, you should not reload the base data.
Arbortext Content Manager and Windchill ProjectLink. The solution data sets
can be loaded in any order.
WindchillLoader Syntax
The WindchillLoader is run from the command line under the direction of the
windchill command.The WindchillLoader command syntax is:
windchill wt.load.WindchillLoader [class args]
Where [class args] represents the required and optional executable options.
Note
For additional information about the windchill command, refer to the Windchill
Command chapter.
wt.load.WindchillLoader Clas s Arguments
C las s A rgu me nts
-All
-Application=[<app ID>,...]
-Info
Desc ripti on
Loads the base data for all the Windchill
solutions that are installed.
A comma delimited list of Windchill
solutions for which data should be
loaded. This argument allows you to
choose a specific solution or set of
solutions to load.
Each <app ID> must match a value as
listed when the -Info report is
generated.
Displays a list of the Windchill
solutions that are installed and have
305
-IncludeDemo
-LoadOnlyDemo
-Locale=<locale>
Desc ripti on
valid loadsets.
Run this command to obtain the <app
ID> values to use with the Application
argument.
Loads the base data and the
demonstration data for an installed
Windchill solution.
By default, if this argument is excluded,
then only the base data is loaded.
Loads only the demonstration data for
an installed Windchill solution.
To use this argument, the base data
must have already been loaded.
Loads the specified localized load files
for the specified Windchill solution.
Refer to the section "WindchillLoader
Examples" for an example of this
argument.
If this argument is provided, the load set
framework will do the following:
Adds "_<locale>" to the filename
attribute if attribute "localized" is
true. The framework will not fall
back to the original file name if the
locale variant is not found
It will not change the file name if
the attribute "localized" is false or
not present
If the "-Locale" argument is not
provided, the load set framework will
use only the filename attribute
irrespective of whether the "localized"
attribute is true or false.
For the case when a load set is
localized, specifying the locale through
this attribute would allow the localized
version of the load set to be loaded. If
306
-Unattended
-Help
Desc ripti on
no locale has been provided, the load
set framework will fall back to the
default pre-configured filename.
Runs the loader in unattended mode.
The installer will not elicit prompts to
the typical questions it poses during the
installation.
Displays the help for WindchillLoader.
Note
When loading the database for the first time, you must load the Windchill
Services data (Windchill.Foundation) in addition to the data for the Windchill
solution or solutions that you have installed.
You may load the Windchill Services data separately using the following
command:
windchill wt.load.WindchillLoader
-Application=Windchill.Foundation
Note
It will also be loaded if you run the WindchillLoader command with the option
-Application=All.
After you have installed all the solutions that you intend to install, you are ready to
load the data. The following instructions will step you through the first time data
load process:
1. Display a list of the Windchill products that are installed:
windchill wt.load.WindchillLoader -Info
307
A list of all the Windchill products that are installed are displayed. Take a
moment to review the list and verify that the products listed are the products
that you expect to be installed. At a minimum, the list must include Windchill.
Foundation, the Windchill Services data.
Take note of the product names and the format used for the name, as you must
use this name as it exactly appears in the -Application argument product list.
For example, Windchill.Foundation represents the Windchill Services data and
Windchill PDMLink represents the Windchill PDMLink data.
2. Load all the data for the Windchill products that are installed.
Using the -All argument will load the base data for all the installed products.
For the first time load, it is recommended to use the -All argument to ensure
you load the data for all the installed Windchill products:
windchill wt.load.WindchillLoader -All
3. Load the demonstration data for the Windchill solutions that are installed:
windchill wt.load.WindchillLoader -LoadOnlyDemo
A list of all the Windchill products that are installed are displayed. Review the
list for the name of the Windchill solution that you installed. Take note of the
format of the name, because you will use that name in the -Application
argument.
2. Load the base data for the Windchill solution (or solutions) that you installed:
windchill wt.load.WindchillLoader -Application=[<app ID>,...]
3. Load the demonstration data for the Windchill solution (or solutions) that you
installed. If you installed Windchill PDMLink, then you would execute the
command as follows:
windchill wt.load.WindchillLoader
-Application=Windchill.PDMLink -LoadOnlyDemo
308
Caution
Do not run the WindchillLoader with the -All argument if a Windchill solution
data set is already loaded.
WindchillLoader Examples
The following are some examples using various combinations of the utility
arguments.
To display a list of the installed Windchill solutions available for loading data:
windchill wt.load.WindchillLoader -Info
To load only the base data for a specific solution identified by <app ID>:
windchill wt.load.WindchillLoader -Application=<app ID>
To load the base data and the demonstration data for a specific solution:
windchill wt.load.WindchillLoader
-Application=<app ID> -IncludeDemo
To load the base data and the demonstration data for all installed Windchill
solutions:
windchill wt.load.WindchillLoader -All -IncludeDemo
To load the base data and demonstration data for all installed Windchill
solutions in unattended mode:
windchill wt.load.WindchillLoader -All -Unattended
If a Windchill solution is already installed and its related data loaded, and you
install a second Windchill solution, then to load the data do the following:
Load only the data specific to the new Windchill solution. You cannot load
the same data twice as this will cause an error to occur.
To load the new Windchill solution load set, use the following command:
windchill wt.load.WindchillLoader -Application=<app ID> -Locale=<locale>
To load the localized data for a specific solution, enter the following in a
Windchill shell:
windchill wt.load.WindchillLoader -Application=<app ID> -Locale=<locale>
For example,
windchill wt.load.WindchillLoader Application=Windchill.PDMLink -Locale=ja
309
wt.manager.monitor.services
wt.manager.monitor.start.MethodServer
Note
The tables are subdivided by solution and then by base data and demonstration
data.
310
Windchill Servic es
The information in the Windchill Services Base Data table is base data that is
required for all solutions. The base data files are listed in the loadset file:
<Windchill>/codebase/wt/load/foundationLoad.xml.
Windc hi ll P DMLink
There are two sets of data for Windchill PDMLink base data and demonstration
data. The base data files are listed in the loadset file: <Windchill>/codebase/com/
ptc/windchill/pdmlink/load/pdmlinkLoad.xml.
Note
If you are upgrading Pro/INTRALINK 10.1 to Windchill PDMLink and have
already loaded the base data, you should not reload the base data.
The demonstration files are listed in the loadset file: <Windchill>/codebase/com/
ptc/windchill/pdmlink/load/pdmlinkDemo.xml.
Note
If WindchillLoader is run in Unattended mode, then it will not provide the
above option. In this case, it automatically creates the default organization
context.
311
Note
The Windchill PDMLink demonstration (demo) data contains thumbnail
images. To view the thumbnail images, you must install the Creo View client.
The Creo View client product is packaged with the Creo View Client CD (or
the Creo View Standard CD, if you purchased this separately). Once the Creo
View client is installed, to view the demo data images, log on as demo and use
demo for the password.
Windchill ProjectLink
Windchill ProjectLink base data files are listed in the loadset file: <Windchill>/
codebase/com/ptc/windchill/projectlink/load/atcmLoad.xml.
The demonstration files are listed in the loadset file: <Windchill>/codebase/com/
ptc/windchill/projectlink /load/projectlinkDemo.xml.
Note
This section does not cover the loading/migration of data from earlier releases
of Pro/INTRALINK to Pro/INTRALINK 10.1. For information on this subject,
see the Pro/INTRALINK Data Migrator Administrator's Guide.
312
Note
If WindchillLoader is run in -Unattended mode, then it will not provide the
above option. In this case, it automatically creates the default organization
context.
313
12
Installing and Configuring A dobe
LiveCy cle Software
About Adobe LiveCycle Forms Software.................................................................... 316
System Compatibility and Requirements ................................................................... 316
Installing Adobe LiveCycle Forms Software ............................................................... 316
Configuring Windchill for Use with Adobe LiveCycle Forms Software ........................... 317
This section describes how to install and configure the Adobe LiveCycle software
for use with Windchill for creating and managing task form templates.
Additionally, it covers how to deploy the Adobe software to an application server.
315
For more information about the system requirements for the Adobe LiveCycle
Forms software, refer to the Adobe Installing and Configuring LiveCycle Forms
guide for version 8.2 or 9.0.
316
The Turnkey method will work if you are using a Windows operating system with
a JBoss server.
Follow the installation instructions found in the Adobe documentation titled,
Adobe Installing and Configuring LiveCycle Forms. It is recommended that you
read through the installation and deployment checklists as well as the Before You
Install section prior to beginning the installation process.
U s i n g t h e Tu r n k e y I n s t a l l a t i o n M e t h o d
The turnkey method is recommended for installing, configuring, and deploying the
LiveCycle Forms with a Windows operating system and a JBoss server. This
method installs the files and then runs the Configuration Manager to configure the
EAR file for deployment to the application server. This method also installs and
configures a JBoss application server.
During the installation process you can skip the following steps:
It is not necessary to install the MySQL database. However, it will not interfere
with the Windchill solution if it is installed.
When given the option, do not include the User Management and
Administrator tools component.
317
Where <Adobe LiveCycle ES server user name> is the log on user name of
the server on which the Adobe LiveCycle ES installation resides. The
default value is administrator.
com.adobe.Password=<Adobe LiveCycle ES server password>
Where <Adobe LiveCycle ES server password> is the log on password of
the server on which the Adobe LiveCycle ES installation resides. The
default value is password. The default value is set to default. This
password field can be encrypted. To do this, you need to propagate the new
password of Adobe Lifecycle server by running the following command
from a windchill shell:
xconfmanager -s com.adobe. Password=newpassword p
If you want to set the encrypted value, then do not propagate this passwordrelated property from site.xconf.
Note
The turnkey installation method uses a port setting of 8080. This is not a
value that can be changed using the Turnkey installation method.
2. Copy the following JAR files from the Adobe form server to <windchill-root
directory>\srclib\adobeFormLibs:
adobe-usermanger-client.jar
318
adobe-livecycle-client.jar
adobe-output-client.jar
adobe-forms-client.jar
adobe-utilities.jar
The jar files can be found in the following location:
<Forms_Server_Home>\LiveCycle_ES_SDK\client-libs\common\adobeusermanager-client.jar
<Forms_Server_Home>\LiveCycle_ES_SDK\client-libs\common\adobelivecycle-client.jar
<Forms_Server_Home>\LiveCycle_ES_SDK\client-libs\common\adobeoutput-client.jar
<Forms_Server_Home>\LiveCycle_ES_SDK\client-libs\common\adobeforms-client.jar
<Forms_Server_Home>\LiveCycle_ES_SDK\client-libs\jboss\adobeutilities.jar
The remaining third-party jar files are bundled with Windchill and will be
deployed automatically at <Windchill>\srclib\adobeFormLibs.
Where <Windchill> is the location where your Windchill system is installed.
319
13
Configuring EXPRESS Data
Manager
Installing EXPRESS Data Manager........................................................................... 322
Configuring Windchill for EDMS ................................................................................ 322
This is an optional configuration; however, if you plan to use the Windchill STEP
features, then you must install and configure EXPRESS Data Manager.
This chapter contains instructions to install and configure EXPRESS Data
Manager for Windchill.
321
edms.db.directory
edms.db.name
edms.db.password
322
D e f a u l t Va l u e
There is no default
value; a value must be
specified.
$(edms.home)\\db
exchange
exchange
edms.license
2. Use the xconfmanager to append the following EDMS Java API value to the
wt.java.classpath property:
Specify the existing and new value (append the new value to the existing
value). See the xconfmanager guidelines for specifying multiple property
and property value combinations:
xconfmanager -s wt.java.classpath=<appended EDMS value>
-t <Windchill>/codebase/wt.properties -p
4. Restart the Windchill method server for the changes to take effect.
At this time, the STEP configurations are complete.
323
14
C o n f i g u ri n g S u n J a v a S y s t e m We b
S erv er
Before You Begin..................................................................................................... 326
Configuring Windchill for Sun Java System Web Server.............................................. 326
Configuring Sun Java System Web Server ................................................................ 327
Using Sun Java System Web Server for Multiple Instances of Windchill ....................... 336
The instructions in this chapter provide the details to configure the Sun Java
System Web Server for use with your Windchill solution.
325
B e f o r e Yo u B e g i n
Before you begin this configuration, you should have:
Consulted the Windchill software matrices for the version of the Sun Java
System Web Server that is supported with this release.
Installed Sun Java System Web Server.
The configurations for Sun Java System Web Server are performed using the Sun
Web Server Administration Server and manually editing files. You will need the
following information to complete the configuration:
Windchill does not use the Sun Java System Web Server JDK, so the default,
bundled Java version can be installed instead of using an external JDK.
PTC recommends installing and configuring the Apache Web Server with your
solution to provide a configuration baseline. You may then reconfigure to use
the Sun Java System Web Server as a manual post installation step.
The location of the Windchill codebase directory This value was defined
during the installation of Windchill, for example, /opt/ptc/Windchill/codebase.
The Windchill Web application context root name This value was defined
during the installation of Windchill.
The host name of the system where Windchill Directory Server resides.
The LD A P S e rv e r P o rt N u mb e r This value was defined during the installation
of Windchill Directory Server. The default is 389.
The Base DN used by Windchill Directory Server for your Windchill solution
This is the value you entered in the B a s e D i s t i ng u i s h ed N a me fo r P ro du c t
P r o p e r t i e s field during your Windchill product installation.
The LD A P S e rv e r A d mi n i s t ra tor D i s ti n g ui s he d N am e This is the Windchill
Directory Server administrator distinguished name that was defined during the
installation of Windchill Directory Server. The default is cn=Manager.
The L D A P S e rv er A d mi n i s tra to r P as s w o rd This is the password you defined
for the Windchill Directory Server administrator that was defined during the
installation of Windchill Directory Server.
The URL to use to access the Sun Java System Web Server Admin Console.
By default this is running on the local host at port 8989 for SSL and 8800 for
non-SSL
326
To identify the Web server being used as a Sun Java System Web Server, set the
following wt.properties property using the xconfmanager:
wt.content.SunOne=true
The user that the Sun Java System Web Server runs as must be allowed to read and
write to the following files and locations in Windchill:
<Windchill>/logs
Ensure that the permissions on the directory and files, if they exist, are set to allow
the Sun Java System Web Server user read and write privileges.
C o n f i g u ri n g S u n J a v a S y s t e m We b S e rv e r
The following instructions guide you through the steps to configure the Sun Java
System Web Server for use with Windchill solutions:
1.
2.
3.
4.
5.
D e p l o y i n g c h a n g e s t o t h e S u n J a v a S y s t e m We b
S erv er
Most changes made using the Admin Console will need to be deployed to the
running instance of the web server. After making any changes, a D e p l oy me n t
P e n d i n g link appears in the top right corner of the Admin Console. This informs
you that the changes you have made require deployment. To deploy these changes,
click D ep l o y me n t P en d i ng and a new page appears. The page contains a D e pl o y...
or C a nc el button. Click D e p l oy... to propagate the changes to all instances or click
C a n c e l to postpone the deployment.
If manual changes were made directly to the files, the Configuration Deployment
page will provide the following options:
327
Select the Pull and deploy changes from [virtualhost] action and click OK .
328
Host Name
Port
Base DN
Bind DN
Bind Password
329
4. Set the LDAP database as the default. To do so, select the check box listed next
to the Authentication Database name and click S e t A s D e fa u l t.
5. Consult the section titled "Deploying changes to the Sun Java System Web
Server" to deploy these changes.
Note
Only a single LDAP directory service can be configured for authentication. All
users must be located within this single LDAP directory service.
By default, the Sun Java System Web Server's internal servlet engine is enabled.
This is not recommended for use with Windchill and should be disabled. To
disable the internal Java Servlet Engine, perform the following:
1. From the J a v a tab of the C on fi g u ra ti on s instance, ensure the Ge ne ra l sub-tab is
selected.
2. In the Ge ne ra l subsection, clear the E n a bl e d box next to the J a v a : field.
3. Click S a v e .
4. Consult the section titled "Deploying Changes to the Sun Java System Web
Server" to deploy these changes.
330
D e p l o y i n g W i n d c h i l l We b A p p l i c a t i o n t o S u n J a v a
S y s t e m We b S e rv e r
This section describes how to deploy the Windchill Web application to the Sun
Java System Web Server.
sjswsAuth.acl
magnusconfadditions.conf
vhost-objconfadditions.conf
The following sections refers to configuration files for the Sun Java System Web
server. These files are located in the <webserver installation directory>/https<configurationname>/config directory. For example, if the server is installed in
/opt/sun/webserver7 and the configuration name is windchill.company.com, the
directory will be: /opt/sun/webserver7/https-windchill.company.com/config.
E n a b l i n g t h e To m c a t C o n n e c t o r
The magnusconfadditions.conf file contains the configuration directives that must
be added to the magnus.conf file located in the configuration directory. Cut and
paste the two lines starting with Init into the magnus.conf file. Ensure that there are
no unexpected line breaks in each line.
The @@ARCH@@ string needs to be replaced with the appropriate string for the
architecture of the web server. Use the following:
For example, if you are using a 64-bit Intel WebServer running on Solaris 10, the
lines will look like:
331
Ensure that the magnus.conf file is saved after making this change. After
completing the changes to the magnus.conf file, the [virtualhost]-obj.conf must be
updated. If the [virtualhost]-obj.conf file does not exist, then the changes must be
applied to the entire configuration. In this case, make the modifications to the obj.
conf file. The generated vhost-objconfadditions.conf consists of three sections.
Below is an example of the contents of this file:
#The following section belongs in the Object name="default" section of the
vhost-obj.conf file
NameTrans fn="assign-name" from="/Windchill/*.jsp(|/*)" name="jknsapi"
NameTrans fn="assign-name" from="/Windchill/*.jspx(|/*)" name="jknsapi"
NameTrans fn="assign-name" from="/Windchill/servlet/*" name="jknsapi"
NameTrans fn="assign-name" from="/Windchill/app(|/*)" name="jknsapi"
NameTrans fn="assign-name" from="/Windchill/ptc1(|/*)" name="jknsapi"
NameTrans fn="assign-name" from="/Windchill/*.jar" name="jknsapi"
NameTrans fn="assign-name" from="/Windchill/gwt/servlet/*" name="jknsapi"
NameTrans fn="assign-name" from="/Windchill/gwt/*/servlet/*" name="jknsapi"
#The following line belongs in the Object name="default" section of the
vhost-obj.conf file
#but must be after the above NameTrans lines
NameTrans fn="pfx2dir" from="/Windchill" dir="/WT_HOME/codebase"
#The following line belongs at the end of the vhost-obj.conf file
<Object name="jknsapi">
ObjectType fn="force-type" type="text/plain"
Service fn="jk_service" method="*" worker="ajp13"
</Object>
The sections are separated by comment lines starting with the pound character (#).
The first two sections contain NameTrans lines and need to be pasted into the Sun
Java System Web Server configuration instance's virtualhost-obj.conf file's <Object
name=default> section.
Add these NameTrans lines after the last occurrence of any existing NameTrans
lines in the virtualhost-obj.conf file. The last section begins with <Object name=
jknsapi>. This section should be appended to the end of the virtualhost-obj.conf
file. Ensure that the virtualhost-obj.conf file is saved after making the above
changes.
332
C o n fi g u ri n g A c c e s s C o n tro l R u l e s fo r th e W i n d c h i l l We b A p p l i c a ti o n
The sjswsAuth.acl files contains the Authentication rules necessary for Windchill.
This file needs to be copied to the Sun Java System Web Server instance's
configuration directory and named [virtualhost].acl. For example, if your
virtualhost for the webserver is windchill.company.com, the filename will be
windchill.company.com.acl. If this file already exists, then the contents of the file
immediately after the following need to be pasted into the existing file:
# File automatically written
#
# You may edit this file by hand
#
version 3.0;
Add the following just before the </virtual-server> line and save the file:
<acl-file>[virtual hostname].acl</acl-file>
For example, in the previous, block, where the hostname is windchill.company.
com the entire block will be:
<virtual-server>
<name>windchill.company.com</name>
<host>windchill.company.com</host>
<http-listener-name>http-listener-1</http-listener-name>
<object-file>windchill.company.com-obj.conf</object-file>
<acl-file>windchill.company.com.acl</acl-file>
</virtual-server>
333
Authentication Database
334
A c t i o n o r Va l u e
Select URI in the drop down window
and enter the resource that access
control is being configured against.
Select the database for the LDAP
server.
Field
Authentication Method
Prompt for Authentication
A c t i o n o r Va l u e
Select Basic
This is the HTTP Basic authentication
realm for Windchill. The default value
used for Windchill installs is
Windchill but any value may be
used.
A c t i o n o r Va l u e
Allow
Select the appropriate authorization
restrictions for the URL being
configured.
335
U s i n g S u n J a v a S y s t e m We b S e rv e r f o r
Multiple Ins tanc es of Windc hill
To use the same Sun Java System Web Server software to connect to multiple
instances of Windchill, you must create multiple Sun Java System Web Server
configurations and a separate Virtual Server within each configuration. This
isolates each Windchill web application within its own configuration and Virtual
Server.
336
15
C o n f i g u r i n g I I S a n d To m c a t
Before You Begin..................................................................................................... 338
Configuring IIS and Tomcat ...................................................................................... 339
Configuration Summary ........................................................................................... 351
337
B e f o r e Yo u B e g i n
PTC supports Internet Information Services (IIS) with Tomcat.
Before you begin this configuration, you should have:
Consulted the Windchill software matrices for the version of IIS supported
with this release.
Installed a supported version of IIS, including the Microsoft Script Debugger.
The debugger is optional, but is very useful for debugging.
Installed the Java 2 Software Development Kit (SDK).
Installed Apache.
PTC highly recommends that you use the bundled Apache Web server to
initially test your Info*Engine installation before switching to IIS. Testing your
installation with Apache takes very little additional time up front and generally
saves a great deal of time in troubleshooting if anything is not working
properly with IIS.
Installed Info*Engine as part of your Windchill solution.
Installed any Windchill solution that you intend to use and tested it with
Tomcat and Apache. Completing this step ensures that Windchill is correctly
installed before you switch to using IIS.
As part of testing Windchill with Apache, you may want to add an alternate
user name (for example, "domainxzy\userxyz") to a user LDAP entry in
Windchill Directory Server to ensure that such users can be accessed using the
Windows "domain\user"-style credentials. For example, during the installation
of Windchill Services, you specified the user name of the Windchill
administrator and this user was added to Windchill Directory Server. If the
name you entered (such as wcadmin) was not a Windows user, you can add an
alternate user name for the administrator by updating the user through the
Windchill Principal Administrator. The user name you add should be an
established Windows user that IIS will be able to access. Remember that after
you switch to IIS, IIS does not access user and password information in
Windchill Directory Server.
Note
If you are using only Info*Engine and not Windchill, this item does not
apply.
338
Installed all vendor required operating system patches and other suggested
installations. For supported operating system versions, see the Software Matrix
that is accessible from the PTC Documentaiton Reference Web site.
Enabled ISAPI-dll Handler Mapping at either the server or web site level.
Ensured that the appropriate Role services have been installed, to ensure that
IIS works with Windchill.
Application Development
ISAPI Extensions (not installed by default)
ISAPI Filters (not installed by default)
Security
Basic Authentication (not installed by default)
Request Filtering
Management Tools
IIS Management Console
IIS Management Scripts and Tools (not installed by default)
The next section guides you through the steps to configure IIS and Tomcat.
C o n f i g u r i n g I I S a n d To m c a t
Many of the instructions in this section use the Internet Information Services (IIS)
Manager to configure IIS and Tomcat. Consult the IIS Manager help if you need
detailed information about the user interface.
Configuring IIS and Tomcat for use with Info*Engine and Windchill involves
completing the sets instructions in the following sections:
Installing Tomcat Connector into IIS on page 341
Creating the Windchill Virtual Directory for IIS 7 on page 342
339
S e t t i n g U p t h e I I S / To m c a t C o n n e c t o r D i r e c t o r y
The IIS/Tomcat connector directory contains the IIS/Tomcat connector
configuration files. For the remainder of these instructions, the IIS/Tomcat
connector directory is referred to as the <IISConnectorDir>. This directory is
located at <Windchill>/tomcat/connectors.
Edit <IISConnectorDir>\conf\workers.properties as follows:
Note
The contents of this file can be identical to that in workers.properties in the
Apache conf directory; so if you are moving from Apache to IIS, you can
simply copy the Apache file to <IISConnectorDir>\conf.
340
I n s t a l l i n g To m c a t C o n n e c t o r i n t o I I S
To install the Tomcat connector into IIS, complete the following steps:
1. Open a command prompt window and navigate to the <IISConnectorDir>/iis
directory.
2. Enter the following command (all on one line), replacing the italicized
arguments as directed in the table that follows:
For IIS 6:
scripts\isapi_install <server> <fdir> <worker> <mount> <log> <level>
For IIS 7:
scripts\isapi_install_iis7 <server> <fdir> <worker> <mount> <log> <level>
Note
As an alternative, if the out of the box PTC Tomcat Connector directory is
used, the following shorter command can be used:
isapi_install_iis7 <server> <tomcat_dir> <loglevel> <architecture>
A rgument
<server>
<fdir>
<worker>
<mount>
<log>
Description
Name of the IIS web site to use; this should generally be Default
Web Site (including the double-quotes) unless your site requires
another value.
If you use a value other than Default Web Site, be sure to use
that value instead of Default Web Site throughout the remainder
of these instructions.
Full file name (including path) of <IISConnectorDir>/iis/
<architecture> where <architecture> is either x86 for 32-bit
Windows or x64 for 64-bit Windows.
Full file name of (including path) of <IISConnectorDir>\conf
\workers.properties.
Full file name (including path) of <IISConnectorDir>\conf
\uriworkermap.properties file.
Full file name (including path) of log file in which filter connector
messages will be logged. This file does not exist at this point in
the process. PTC recommends that you use <IISConnectorDir>
\logs\isapi_redirect.log as the log file name.
341
A rgument
<level>
Description
The level of logging verbosity: e me rg , e rr or , i n fo , or de b ug .
e r r o r is suggested for normal production usage, whereas d e b u g
<architecture>
Note
This command can be safely re-run with any necessary changes to any
arguments including the level of logging.
3. Restart IIS.
<mount>
342
Desc ripti on
Name of the IIS web site to use; this
should generally be Default Web Site
(including the double-quotation marks)
unless your site requires another value.
If you use a value other than Default
Web Site, use that value instead of
Default Web Site throughout the
remainder of these instructions.
Full file name (including path) of
<IISConnectorDir>\conf\uriworkermap.
properties file.
A rgu me nt
<name>
<Windchill>
Desc ripti on
The name for the application (ie,
Windchill). This will be used as the
virtual directory in IIS for application
mapping.
The full path to the Windchill
installation directory (ie, C:\ptc
\Windchill_<release_number>
\Windchill)
343
Path
Permissions
4. Click F i n i s h .
IIS 6 only
1. Select the resulting virtual directory from the left pane and select P ro p er ti es
from either the right-mouse contextual menu or the A c t i on menu.
2. Select the D o c u me nt s tab in the resulting dialog.
3. Click A d d and enter i n d ex .h tml in the resulting dialog. Then click O K two
times.
By default, IIS only understands index.htm. Because Windchill has the index.
html file, this step is required. For web applications without an index.html file,
this step is optional.
C o n f i g u ri n g I I S t o S e r v e N e c e s s a r y M I M E Ty p e s
Note
This procedure is for IIS 6 (required) or if you prefer to configure IIS 7
manually without using the config_windchill.vbs script
IIS returns a 404.3 error rather than serving file types which are not listed in its
global MIME types list. This error can be resolved by adding each type
individually. Instead, PTC recommends that you can add a wildcard MIME type
allowing IIS to serve all unregistered MIME types as binary files.
IIS 6:
1. From IIS Manager, select the <ComputerName> (local computer) node in the
left pane.
2. Select P ro p er ti e s from either the right-mouse contextual menu or the A c t i on
menu.
3. Select the <ComputerName> (local computer) node in the left pane.
344
4.
5.
6.
7.
IIS 7:
1. From IIS Manager, select the <ComputerName> (local computer) node in the
left pane.
2. On the middle pane, select MIM E Ty p e s .
3. On the A c ti on s pane, click A d d ....
4. Enter the asterisk (* )for E x te n s i o n and a pp l i c ati o n /o c te t-s tre a m for M IME Ty p e.
5. Click OK .
A d d i n g To m c a t C o n n e c t o r t o I S A P I E x t e n s i o n L i s t
Note
This procedure is for IIS 6 (required) or if you prefer to configure IIS 7
manually without using the config_windchill.vbs script.
To add the Tomcat connector to the list of allowed ISAPI extensions, complete the
following steps:
IIS 6:
1.
2.
3.
4.
5.
6.
IIS 7:
1. From IIS Manager, select the <ComputerName> node in the left pane.
2. From the F ea tu re s (middle) panel, select Is ap i & C GI R e s tri c ti o ns . Right click
and choose Op en F e atu re . From the actions (right) panel, select A d d .
3. Enter "jakarta" for the description.
4. In the IS A P I or C GI P ath , click the box to navigate to <IISConnectorDir>\isapi_
redirect.dll as the required file.
345
5. Select S e t ex te ns i o n s ta tus to al l o w e d.
6. Click OK .
Note
The Tomcat filter should not be put on a server with SharePoint when IIS is run
in isolation mode.
346
Note
If you are configuring IIS for use with only Info*Engine and not Windchill,
you can skip this section.
In this set of steps, the virtual directory is configured to verify the identity of the
users accessing it. Users can be authenticated to prevent unauthorized users from
establishing a Web (HTTP) connection to restricted content.
To set the required authentication, complete the following steps:
1. Create a directory called s er v l e t within the Windchill codebase directory.
2. Create an empty file name WindchillGW in the servlet directory.
3. From IIS Manager, select the virtual directory created in Creating the Windchill
Virtual Directory for IIS 7 on page 342 from the left pane. For example, select
Windchill. Then select R efr es h from either the right-mouse contextual menu or
the A c ti o n menu. Performing this action makes the newly created directory
visible.
4. Set up the following access controls in IIS for each directory within the Default
Web Site:
The following table lists the directories you will find in Default Web Site and
whether to set E na b l e a n on y m ou s ac c e s s for each directory. In the path listed,
<webAppName> refers to the alias of the virtual directory created in Creating
the Windchill Virtual Directory for IIS 7 on page 342.
P a th i n D e fa u l t We b S i te
jakarta/
<webAppName>/
Enable
anonymous
access
Yes
Yes
347
P a th i n D e fa u l t We b S i te
<webAppName>/servlet/WindchillGW
<webAppName>/infoengine
<webAppName>/servlet
<webAppName>/wtcore/jsp
<webAppName>/netmarkets/jsp
<webAppName>/com/ptc/wvs/client/jsp
<webAppName>/rs/jsp/jsp
<webAppName>/install/jsp
<webAppName>/pdmlink/jsp
Enable
anonymous
access
Yes
No
No
No
No
No
No
No
No
Enable all of the above directories for B a s i c a u th en ti c ati o n using the associated
checkbox.
Also, disable all of the directories for In te g ra ted W in d ow s a uth e nt i c a ti o n by not
clicking the checkbox.
The steps to accomplish setting access controls for each directory are as
follows:
For IIS 6:
a. Select the virtual directory from the left pane.
For <webAppName>/servlet/WindchillGW, you must select
<webAppName>/servlet and then select WindchillGW in the right pane.
b. Select P r op e rti e s from either the right-mouse contextual menu or the A c ti on
menu.
c. In the resulting P r op e rti e s window, select the D i re c tor y S e c u ri ty tab.
d. Click E d i t.
e. In the resulting window, make the selections indicated previously for the
following:
Basic authentication
348
Note
To access Windchill, users must be in the default domain that is
selected.
Note
Entering W i nd c h i l l in this field is required to ensure the proper
functioning of Workgroup Managers.
The following example window shows the selection of both E n ab l e
a n o n y m o u s a c c e s s and B a s i c a u t h e n t i c a t i o n , as well as the entry of
W C Q A P U N E . T E S T. C O M in the D e f a u l t d o m a i n field and of W i n d c h i l l in
the R e al m field:
349
Note
Set E n a bl e an o ny mo u s a c c es s for only the jakarta/,
<webAppName>/, and <webAppName>/servlet/WindchillGW
directories.
g. Click OK in both windows.
Authentication must be set for the first seven paths listed in the table. If any of
the paths listed after the first seven paths do not exist in your installation, you
can skip them.
Note
If additional Windchill products or updates are installed into this instance,
they may require additional directories to be authenticated. To check for
this case, examine the list of web-app-relative resources for which the
Windchill instances requires authentication as recorded in the Windchill
instance of apacheConf/config/authResAdditions.xml file. Also note that
all entries starting with "servlet" can be ignored as these are already
handled by the table above.
For IIS 7 Manual Configuration
a. Select the virtual directory from the left pane. For <webAppName>/servlet/
WindchillGW, you must select <webAppName>/servlet. In the middle
pane, the select the c o nt en t v i ew . Then, select WindchillGW in the middle
pane, and from the A c ti o n pane select S w i tc h to F ea tu re s v i ew .
b. Select A u th en ti c at i on in the middle pane.
c. In the resulting view, make the selections previously indicated for the
following A ut he n ti c a ti o n names:
Anonymous Authentication
Basic Authentication
d. Select the appropriate authentication and in the A c ti o n menu select D i s ab l e
or E n ab l e as indicated by the previous chart.
The following example window shows the selection of both enable anonymous
access and basic authentication:
350
5. Restart IIS.
a. Select the <ComputerName> (local computer) node in the left pane.
b. Select A l l Tas k s and then R es ta rt IIS from the right-mouse contextual menu.
c. Click OK .
351
If you have installed Windchill, test the Windchill solution that you intend to
use with IIS and Tomcat. Installing Windchill is described in this guide.
Administrative activities for Windchill are described in the Windchill Business
Administrator's Guide.
If you want to use Active Directory Server (ADS) as your enterprise LDAP
service, you can do so by configuring Windchill to use it. For details on how to
configure Windchill, see the Configure Windchill to Use an Enterprise
Directory chapter in this guide.
352
16
Configuring IB M HTTP S erver A IX
Installing HTTP Web Server ..................................................................................... 354
Installing Windchill components ................................................................................ 354
Restarting the IBM HTTP Server............................................................................... 354
The instructions in this chapter provide the details to configure IBM HTTP Server
on an AIX platform for use with Windchill solutions.
353
I n s t a l l i n g H T T P We b S e rv e r
Install the following components for the IBM WebSphere Application Server as
directed by the IBM documentation:
This file is located under the Apache/ManualInstall directory on the Third Party
Applications CD (CAPPS CD).
Note
Any time the overlay is applied, any manual configurations in this file will
need to be redone as this step overwrites the custom configuration.
is the directory where the server is installed. For example if the installation
directory is
/usr/HTTPServer/binthen
354
355
17
C o n f i g u r i n g A p a c h e a n d To m c a t
With Other Options
Before You Begin..................................................................................................... 358
Setting Up Apache Ant............................................................................................. 358
Configurations When Apache is Installed Remotely .................................................... 360
Running Apache as a Windows Service .................................................................... 362
Running Tomcat in Development Mode ..................................................................... 363
Apache and Info*Engine Installed With Different Users ............................................... 363
Installing Apache A Second Time.............................................................................. 364
Configuring Apache for IPv6 ..................................................................................... 364
Configuring a Non-PTC Apache (manual installation) ................................................. 365
Specifying Web Server Authentication....................................................................... 367
This chapter provides additional instructions to configure Tomcat and Apache for
other options.
357
B e f o r e Yo u B e g i n
The typical installation and configuration scenario for Apache is that Apache is
installed on the same machine as Windchill (local) and configured to support
HTTP requests. Tomcat must be installed on the Windchill machine, as this is the
only scenario PTC supports at this time. There are, however, other scenarios you
may have for your environment, for example, running Apache on a machine other
than Windchill (remote), reinstalling Apache after its initial installation, or running
Apache in a more secure environment such as HTTPS.
The additional instructions in this chapter include:
Setting Up Apache Ant on page 358 Apache Ant is a Java-based build tool
used by PTC to configure and reconfigure Apache (and Tomcat) for
Info*Engine and Windchill.
Configurations When Apache is Installed Remotely on page 360 Instructions
for configuring Apache when it is installed on a different machine than
Windchill.
Running Tomcat and Apache As Windows Services on page 362 Setting up
Tomcat and Apache as a Windows service using Ant.
Installing Apache A Second Time on page 364 Configurations for a
subsequent installation of Apache that overlays the initial version installed.
Configuring a Non-PTC Apache (manual installation) on page 365
Configurations for using an existing Apache installation with Windchill.
Specifying Web Server Authentication on page 367 Using Ant commands to
specify various web server authentication items for Apache.
358
To use Ant, it must be located on the machine where the configurations are to take
place, the access permissions must be set appropriately, and the environment
variables set for Ant. At that point, Ant can be executed from the command line.
1. Install Ant If the configurations are taking place on a machine other than the
Windchill machine, or if the user performing the configurations does not have
sufficient access permissions to the Ant files in the Windchill directory, then
you must install Ant to a new location.
a. Select location where Ant should be installed (different machine or new
directory on the Windchill machine) and create an installation directory for
Ant, for example:
Windows: C:\ptc\Windchill_10.0\ant
UNIX: /opt/ptc/Windchill_10.0/ant
b. Insert the Windchill Third Party Software CD in the CD-ROM.
c. Copy the ant.tar.gzip file for UNIX or the ant.zip file for Windows from the
/Apache/ManualInstall/ directory to the Ant directory.
d. Set the access permissions as required for the install user.
2. Uncompress the Ant file. Ant is packaged as a compressed file and it must be
uncompressed before it can be used in application. This step must be
performed for all installations of Ant, including the Ant files located in the
Windchill installation directory.
Wi n d o w s
unzip ant.zip
UNIX
gunzip ant.tar.gzip
359
Note
These environment variable settings are not required once Windchill
Services is installed and delivers the windchill shell. The windchill shell
sets the necessary environment variables for you, at which point, Ant can
be run. Once the windchill shell is available and if you have reason to use
Ant after Windchill Services is installed, then run the Ant command from
the windchill shell.
4. To test Ant, at the command prompt execute the following command:
ant -help
You can also use the help command to review the other execution options available
with Ant and to verify the Ant syntax.
360
1. Install Apache using the Apache installer and the instructions provided to
perform the installation.
2. Install and configure Apache Ant for the machine where Apache is installed.
See Setting Up Apache Ant on page 358.
3. Copy the content of the <Windchill>/apacheConf/config directory and the
<Windchill>/apacheConf/config-WHC directory to a directory of choice on the
Apache machine.
The apacheConf/config and apacheConf/config-WHC directories contain
configuration files for Tomcat and Windchill. The content of these files is
dynamic and changes to accommodate the installation of a Windchill
application.
4. Create a shared file system of the Windchill codebase directory for Apache that
meets your site requirements. There are several methods available to establish a
shared file system, use a method appropriate for your site. The objective is to
allow Apache to access the contents of the Windchill codebase directory.
Set access for the shared file system so that the Apache user account has
read permission to the Windchill codebase and Windchill Help Center
directories. For example:
Windows: C:\ptc\Windchill_<release_level>\codebase and C:\ptc
\Windchill_<release_level>\WHC (where C:\ptc\Windchill_<release_
level> is the default installation directory for Windchill)
UNIX: /opt/ptc/Windchill_<release_level>/codebase and opt/ptc/
Windchill_<release_level>/WHC (where /opt/ptc/Windchill_<release_
level> is the default installation directory for Windchill)
5. Perform the following to apply the most recent Tomcat, Windchill, and
Windchill Help Center changes to Apache:
361
DMOD_JK_AJP13_PORT=<tomcat_listening_port>
Change directory to the location where you copied the apacheConf/configWHC files on the Apache machine and execute the following Ant
command (entire string on one line):
ant -f applyApacheWebAppConfig.xml -DAPACHE_HOME=<file path to
Apache installation> -DdocBase=<file path to Windchill WHC>
Where <ServiceName> is the name you gave the Apache Windows service when
you created it.
Un install with Ant
362
Where <ServiceName> is the name you gave the Apache Windows service when
you created it.
R u n n i n g To m c a t i n D e v e l o p m e n t M o d e
When developers are working on customizations to a solution, you can run Tomcat
in development mode. In this mode, Tomcat automatically recompiles JSP files
when changes are made.
To change to development mode:
1. Start a windchill shell and change to the Tomcat installation directory.
2. Enter the following command:
ant -f config.xml configureJspEngine -Dmode=dev
363
Note
Use this same command to add authentication rules for either Windchill
PDMLink or Pro/INTRALINK when either of these Windchill solutions have
been installed and the A d d S e rv l et A u th en ti c at i on R u le s for A pa c h e installation
option was not selected.
I n s t a l l i n g A p a c h e A S e c o n d Ti m e
If you installed Apache a second time (in a new location or in the same location
but chose not to preserve the initial configuration), or you bypassed the option to
configure Apache when you installed Windchill, then use the following
instructions to configure Apache for Windchill.
To execute these commands, Apache Ant must be installed:
1. Perform the following:
364
DIPv4_Interface=12.34.56.78
If not specific as parameters, the IPv6 address will default to [::1], localhost, and
the IPv4 address will default to 0.0.0.0, all available listening interfaces.
Running this target will result in Apache listening for both IPv6 and IPv4 requests
over HTTP and HTTPS. The listening ports used will be those currenlty used.
For additional details, review the configureForIPv6 target in config.xml by
running:
ant -f config.xml -projecthelp.
Caution
Warning for Windows users. An installation of Apache on or under a Windows
drive letter obtained by using the Windows Map Network Drive utility (for
example, Windows Explorer > Tools) is not supported. Apache does not
operate reliably when located on a mapped drive. Instead, select a local drive
such as C or D for installation.
Complete the following instructions to alter your Apache installation for Windchill.
After these changes are applied, the PTC installers and Ant scripts will be able to
modify your version Apache in the same manner and with the same updates as the
PTC-supplied Apache.
365
1. Configure your Apache so that the PTC installers can process it.
PTC has provided files to overlay and add to your Apache installation. The
files are located on the Windchill Third Party Software CD in the Apache/
ManualInstall directory. These files must be expanded into your Apache
installation to enable the PTC installers to configure your Apache.
a. Insert the Windchill Third Party Software CD.
b. Navigate to the Apache/ManualInstall directory.
c. Expand the compressed files for your platform into the <Apache> directory
(root level).
Note
Any time the overlay is applied, any manual configurations in this file
will need to be redone as this step overwrites the custom configuration.
2. Edit the <Apache>/conf/httpd.conf file and add the following lines:
AddDefaultCharset Off
BrowserMatch "MSIE" force-no-vary
Note
The BrowserMatch entry is used to address a Microsoft Internet Explorer
bug that impacts Windows clients.
3. Save your changes and close the file.
4. Execute the following script after applying the HP-UX Apache overlay:
Non HP-UX
ant -f config.xml configureAJPWorkers -DAJP_PORT=<tomcat_listening_port> DAJP_HOST=<tomcat_host> -DAJP_WORKER_NAME=<ajp_worker>
366
S p e c i f y i n g We b S e rv e r A u t h e n t i c a t i o n
PTC has provided several methods (Ant scripts) to improve and simplify the
configuration of the Apache Web server for Windchill. A commonly used script is
the webAppConfig.xml Ant script. For example, it is used by the installers (along
with config.xml) to perform the configuration of Apaches management of the
Windchill Web application. Other webAppConfig.xml uses include:
Manages the generation (and regeneration) of the app-<Web application>Auth.conf and app-<Web application>.conf files. These files contain the
authentication parameters for the Windchill products. They are reproduced in
their entirety each time an update occurs, thus, manual changes applied to the
files are lost.
Ensures that the Web application settings that apply to the Windchill system are
applied to all the entries in the app-<Web application>-Auth.conf file.
During the update, the webAppConfig.xml script retains the existing data in the
file while it applies the new changes saving you the effort of entering the data that
already exists.
Note
When either Windchill PDMLink or Pro/INTRALINK 10.1 has been installed
and the A dd S er v l e t A ut he n ti c a ti o n R u l e s fo r A p ac he installation option was not
selected, then the ant script described in Installing Apache A Second Time on
page 364 must be run to complete the Apache configuration.
The following sub-sections provide instructions to implement various Windchill
authentication strategies using the webAppConfig.xml Ant script.
Where <Web application name> is the Web name you assigned to Windchill and
where <relative URL of resource to authenticate> is the relative path from the Web
application to the resource to authenticate, for example, the section for the URL
367
LDAP Configuration
For Apache 2.2, multiple LDAP URLs can be defined for authentication. Apache
2.2 uses named authentication providers for each LDAP URL. By default, the
providers are [WebAppName]-EnterpriseLdap and [WebAppName]AdministrativeLdap. When a provider name is specified, "[WebAppName]-" is
automatically pre-pended to the provider name in the Apache configuration.
In Apache 2.2, this command can be used to add additional LDAP URLs for
authentication.
To add users to the LDAP, consult the Windchill Directory Server Administrator's
Guide.
368
Where <your Web application name> is the Web application name you assigned,
for example, Windchill. Where <your realm name> is a value of your choice.
369
18
C o n f i g u ri n g W i n d c h i l l t o Wo rk w i t h
a Remote Apac he
Background ............................................................................................................ 372
Configuring a Split Configuration............................................................................... 372
Additional Apache Configurations ............................................................................. 374
This section describes how to configure Windchill to work with a remote Apache
server, including split configurations and additional Apache configurations.
371
B ac k g round
This section describes the configuration necessary to run Windchill with Apache
installed on a machine other than the machine that Windchill is installed on. This
configuration is known as a split configuration.
PTC recommends that you first get Windchill running with Apache installed on the
same machine as Windchill before reconfiguring Windchill to work in a split
configuration. This ensures that you have functional configurations for both
Windchill and Apache.
After the system is running with Apache installed locally, you then migrate the
Apache configuration to an Apache installation on the remote machine. Note that
the remote Apache must be updated with changes to the Windchill installation
whenever the Tomcat and Windchill configuration files are modified, such as when
a Windchill application is installed or modified. Refer to the section titled
Configuring Apache as a Standalone Component.
Finally, you perform configuration updates on Windchill to enable it to work with
the remote Apache server. The procedure described here includes instructions to
enable Remote Method Invocation (RMI) tunneling. This is not always required,
but is included because oftentimes the same security concerns that influence the
decision to implement a split configuration also discourage the use of direct RMI
to the Windchill server.
372
Note
When updating the wt.properties file, use the xconfmanager utility from
within a windchill shell. .
Set the following properties and propagate to wt.properties:
wt.rmi.clientSocketFactory=wt.boot.WTRMIMasterSocketFactory
wt.rmi.serverSocketFactory=wt.util.WrappedRMISocketFactory
wt.rmi.javarmicgi=servlet/JavaRMIServlet
wt.server.codebase=http://<remote_Apache_hostname>:<webserver port>/<webapp>
373
apacheWebApp.ldapUrl
apacheWebApp.anonBind
apacheWebApp.bindDN
apacheWebApp.bindPwd
-s ldapUrl="ldap://
-s anonBind=false -p
-s bindDn="<DN>" -p
-s bindPwd=<PWD> p
To propagate these settings from a Windchill shell on Windows use the following
command:
cd /d %WT_HOME%\apacheConf\config
ant -f applyApacheWebAppConfig.xml
374
19
Configuring A dditional E nterpris e
Directories
About Configuring Additional Enterprise Directories.................................................... 376
Integration with Established Enterprise Directory Services .......................................... 377
Create and Configure the JNDI Adapter..................................................................... 382
Create a Repository Definition .................................................................................. 387
Modify the wt.properties File ..................................................................................... 388
Set Authentication in the MapCredentials.xml File ...................................................... 389
Update the Apache Configuration ............................................................................. 391
Verify Your Changes ................................................................................................ 392
User and Group LDAP Attribute Value Mapping.......................................................... 392
Note
A Windchill JNDI adapter is automatically configured as part of the Windchill
installation process to interact with the enterprise directory. No further manual
configuration is required.
Continue with the following topics if additional adapters are required or for
additional information on how to modify the configuration as defined during
the installation. For information on configuring the enterprise directory, see
Entering Your LDAP Settings on page 165.
375
Installed and configured the LDAP directory that you intend to connect to
Windchill. For more information, see Entering Your LDAP Settings on page
165.
A copy of the JNDI Adapter Guide
A copy of the Info*Engine Users Guide
A copy of the Info*Engine Implementation Guide
These guides are available from the PTC Reference Documents site:
https://www.ptc.com/appserver/cs/doc/refdoc.jsp
To connect an existing LDAP directory to Windchill, complete the following tasks.
Where applicable, explicit instructions for a Microsoft Active Directory have been
provided. Otherwise, the instructions apply to any LDAP directory:
1. Create a JNDI adapter entry for your directory and set additional properties:
Create and Configure the JNDI Adapter on page 382
2. Create a repository definition that informs Windchill how to query and manage
information in the directory: Create a Repository Definition on page 387
3. Identify the directory in Windchill by modifying the wt.properties file:
Modify the wt.properties File on page 388
4. Set administrative access control privileges for the directory by modifying the
MapCredentials.xml file: Set Authentication in the MapCredentials.xml
File on page 389
376
Enables single user sign-on across the enterprise. When multiple enterprise
applications authenticate their users against a common, shared directory
service, the concept of a single user sign-on is achieved. This avoids the
necessity of creating and maintaining a separate username and password for
each enterprise application (or each instance of Windchill deployed in an
enterprise).
Minimizes the cost of administration. When multiple directory-enabled
applications obtain their information about principals from a single, shared
directory service, it becomes unnecessary to duplicate, maintain, or
synchronize that information in multiple places. It also becomes unnecessary to
deploy and maintain multiple user interfaces for creating and managing that
information.
Enables Public Key Infrastructure. Secure exchange of business data based
upon digital signature technology, both within and between enterprises,
requires that public keys be registered in a place that is easy to access and
maintain. Shared, standards-based directory services such as LDAP directories
are very convenient registries for public keys. A persons public key can be
registered in a directory entry along with all of the other information that
describes that person (for example, name, email and postal addresses,
telephone and fax numbers, and so on).
377
Us er Information
The Windchill class w t . o rg . W T U s e r provides applications with information about
their users. Every Windchill user must have an entry in an LDAP directory service.
The information conveyed by an instance of w t . o rg . W T U s e r is obtained from the
corresponding users LDAP directory entry. In particular, each instance of this
class provides the following information about its user:
name
Specifies the unique name of the user within the scope of the directory context
in which the users entry resides.
fullName
Specifies the users full name.
eMail
Specifies the users email address
locale
Specifies the users locale, primarily for generation of email notifications
addressed to the user.
certificates
Specifies any public certificates registered for the user (for example, for
verifying digital signatures or for encrypting information that only the user can
decrypt).
pos talAdd ress
Specifies the users postal address.
o rg a n i z a t i o n N a m e
Specifies the name of the organization (for example, company or university)
with which the user is employed or associated.
telep honeNumber
Specifies the users telephone number.
faxNumber
Specifies the users fax number.
mo bilePho neNu mb er
Specifies the users cell phone number.
webSite
Specifies the URL of the users website.
Group Information
The Windchill class w t . o rg . W T G r o u p provides applications with information
about related groups of users. Every Windchill group must have an entry in an
LDAP directory service. The information conveyed by an instance of w t . o rg .
378
379
internetDomain
Specifies the name of the web domain associated with the organization.
location
Specifies the postal address of the organization.
sub scrib er
Specifies whether or not the organization is a subscriber to a web exchange
hosted by Windchill.
webSite
Specifies the URL of the organization website.
While all of the detailed information about each user, group, and organization
comes from an LDAP directory, some information about each one is also stored in
the Windchill database. Each such database entry serves mainly as a pointer to an
LDAP directory entry, but it also contains Windchill-specific information about a
user, group, or organization (for example, the Windchill administrative domain in
which the principal resides), and it allows Windchill object references for users,
groups, and organizations to be constructed and associated with other classes of
Windchill objects (for example, creator, modifier, and owner references for parts
and documents).
Windchill Organization Services is responsible for interfacing with LDAP
directories to query and manage information about Windchill principals. This
includes mapping directory attributes to and from the Windchill classes w t . o rg .
W T U s e r , w t . o rg . W T G r o u p , and w t . o rg . W TO rg a n i z a t i o n . It also includes the
automatic creation and management of the database entries that reference entries or
principals in directory services.
380
381
O p t i o n Tw o
Des cription
Issues
User information is maintained in one
You must select which user
or more separate LDAP directories.
administration tools to use. You can use
Using this option, the Windchill
an LDAP administration tool of your
Directory Server would hold the group choice to maintain information in the
and organization information and
enterprise directory as an alternative to
additional LDAP directories would hold using the Windchill administration
the user information.
tools. However, if you use the
Windchill administration tools, then
This option allows the user information
Windchill requires write access to the
to be split between different directories,
existing LDAP directory. For additional
thus addressing the Option One issue
information about Windchill
about maintenance and distribution of
administration tools, see the PTC
the user information in multiple
Windchill Basic Administration Guide.
directories.
There are numerous other solutions that require knowledge and expertise regarding
the deployment of multiple web servers and multiple LDAP directories in a
complex secure environment. Most customers that have an existing LDAP
directory will find Option Two to be the least complicated solution. The following
topics explain how to implement Option Two.
382
name, give special consideration when using the period character (.) as
described below.
D i s t i n g u i s h e d N a m e Use the name suggested by the property
administration utility. If you enter a new service name, the distinguished
name field is updated in response.
R u n t i m e S e r v i c e N a m e This name must be identical to the service name.
You can opt to change these names to match the criteria set up for your site
LDAP entries. However, note that the period character (.) has unique
significance when naming a new JNDI adapter. Including a period character
(.) influences the format of the name that must be used for the corresponding
repository definition.
Many repository names and repository types specify a hierarchical structure,
requiring a value formatted as an Internet domain. Therefore Info*Engine
adapters are commonly given names that reflect their relationship to the
network in which they are deployed. For example:
com.company.host.Ldap
383
Because this service name includes the period character (.), you would need
to reverse parts of the name when creating and naming a new repository
definition. Therefore, if you choose to name your JNDI adapter
com.company.host.Ldap, the corresponding Info*Engine repository
must be named:
Ldap.host.company.com
To avoid this, you can provide an adapter name that does not include the period
(.) character. For example, if you name your JNDI adapter
EnterpriseDirectory1, then you would also name the corresponding
repository definition EnterpriseDirectory1. For instructions on
creating a new repository definition, see Create a Repository Definition on
page 387.
Note
Such naming convention requirements are only necessary when connecting
Windchill to an LDAP directory service that maintains user and group
information. However, no such requirements are necessary for other
Info*Engine integration configurations.
Serv ice C lass
The S er v i c e C l a s s property identifies the Java class for the adapter. Use the
default provided by the property administration utility.
S e r i a l i z a t i o n Ty p e
Host
Port
Pro vid er UR L
Specify the URL used to access your enterprise directory server.
Search Base
Specify the distinguished name of the LDAP node under which all user
information is located. All user searches will use this as the base.
Directory Sy stem Ag ent User
Directory Sy stem Ag ent C red entials
These can be used to define the distinguished name and password of the
Windchill user who access the enterprise directory. However, PTC
recommends that these fields should be left blank and you use the
MapCredentials file instead. For more information, see Set Authentication in
the MapCredentials.xml File on page 389.
384
S e r i a l i z a t i o n Ty p e
Host
Port
Unless you have a specific reason, all other fields should be left blank.
You can find more information on the remaining adapter properties using the
following options:
Hover your cursor over the property name to view a short description of the
property.
Click the property name to open a page describing each property.
Click the help link available from the form.
See the section titled JNDI Adapter Properties in the JNDI Adapter Guide.
385
Note
Paged searches can be configured for any directory type, but are only
enabled by default when using a Microsoft Active Directory. To enable
paged searches for other directory types, set the p a g e S i z e property.
w i n d c h i l l . m a p p i n g . u s e r. a t t r i b u t e s
Specifies the LDAP attributes that are available to Windchill and in the
participant cache. For example, a typical attribute accessed by Windchill might
be:
user.getAttributes().get(<LDAP-attribute-name>);
Enter attributes as a comma-separated list.
w i n d c h i l l . m a p p i n g . u s e r s O rg a n i z a t i o n N a m e
There are two ways to assign an organization name to a user. If a user is not
assigned an organization, they cannot access data in any child contexts (such as
products, projects, and libraries). The method you use depends on whether or
not you need to identify multiple organizations:
386
The value you set for this property represents the organization name
assigned to all users accessed through this adapter.
If used, this property overrides any organization attribute defined in user
entries in the directory server. Only the value of the
u s e r s O rg a n i z a t i o n N a m e property is used by Windchill. For more
information, see Managing User Access to Data in the PTC Windchill
Basic Administration Guide.
For more information on mapping attribute values, see User and Group LDAP
Attribute Value Mapping on page 392.
From the Task Delegate Administration utility, perform the following steps:
1. Click the Ma n ag e R ep o s i to ry link in the menu on the left.
2. Under the C r ea te R ep o s i to ry section, enter the following values:
includes the period character (.), you must reverse the order of the name
components. For more information, see Create and Configure the JNDI
Adapter on page 382.
R e p o s i t o r y Ty p e Select com.ptc.windchill-ldap from the dropdown menu. This is the value for an enterprise directory service used by
Windchill.
We b j e c t P r o c e s s o r Select the JNDI adapter from the list provided.
Ta s k P r o c e s s o r Select the adapter name from the list provided.
Note
Both the We bj e c t P ro c e s s or and Ta s k P r oc e s s or fields should both be set to
the same value as the default LDAP adapter (typically the one used for the
Windchill Directory Server).
3. Click C r ea te to create the repository definition.
387
For more information on the Task Delegate Administration utility, click the H e l p
link available from the utility main page.
Note
You must copy the current value of the property. When adding additional
JNDI adapter names to the value, you must retain the existing values by
including them in your updated property value list.
2. Add any additional JNDI adapter names (using the adapter service name) to the
existing property value. Use a comma to separate the adapter names.
xconfmanager -s wt.federation.org.directoryServices=<JNDI adapter service names>
-t <Windchill>/codebase/wt.properties -p
388
Note
The actual file that stores the property changes is the codebase/WEB-INF/
mapCredentials.txt file. Changes to this file should only be made using
the xconfmanager utility.
Perform the following steps to define access to the enterprise directory:
1. Determine the distinguished name and password to be used by the Windchill
administrator to authenticate to the LDAP directory service.
389
The distinguished name and password you identify in this step are used in later
steps of this procedure.
2. If you want to allow Windchill to access group entries or modify group or user
information, ensure that the distinguished name identified in Step 1 allows
sufficient privileges to read/create/update/delete Windchill objects in the
directory server.
Note
You can enable access using the w i n d c h i l l . c o n f i g . r e a d O n l y and
w i n d c h i l l . c o n f i g . d o e s N o t C o n t a i n G r o u p s properties described in Set
Additional Properties on page 385.
To change the access control privileges set for a user who is defined in
LDAP, you must use the directory server administrative tools.
3. Use the xconfmanager utility to modify the MapCredentials.xml file to
include the distinguished name and password used by the Windchill
administrator to access the directory server (property changes are stored in the
codebase/WEB-INF/mapCredentials.txt file).
The property is formatted as follows:
mapcredentials.admin.adapters=<service_name>^<distinguished_name>^<password>
Using the xconfmanager utility to set values for this property ensures that the
passwords specified are encrypted. For details on encrypting system
passwords, see the PTC Windchill Specialized Administration Guide.
390
If you have made additional customizations to Windchill, you can also set
additional authentication access through adapters that have been created for other
activities in Windchill that require less access. In this case, use the following the
property to add or modify the authentication access to the LDAP directory server
identified in the adapter:
mapcredentials.nonprivileged.adapters=<service_name>^<distinguished_name>^
<password>
This specifies the distinguished name and password for a user who does not have
Windchill administrative privileges, but still needs access to the established
enterprise LDAP adapter.
For example, assume newAdapter is the name of the adapter that has been set up
for accessing an enterprise LDAP directory server. In this scenario, the
distinguished name values are cn=NonprivUser,o=myCompany and the
password is password. The following command adds the authentication access
that is required for the LDAP directory:
xconfmanager --add "mapcredentials.nonprivileged.adapters=
newAdapter^cn=NonprivUser,o=myCompany^password"
-t "codebase/WEB-INF/mapCredentials.txt" -p
Note
Ensure that the distinguished name you specify here allows sufficient
privileges to read the Windchill objects in the directory server.
For additional credentials mapping information, see the Info*Engine User's Guide.
391
Ve r i f y Yo u r C h a n g e s
Complete these steps to implement and verify your changes:
1. Restart the Windchill servers.
2. Navigate to S i te U ti l i ti e s and click P a rti c i pa n t A dm i ni s tra ti o n.
3. Click any toolbar icon to create a new group, user, or organization. In the
window that opens, the LDAP directory that you added should be included in
the D i r ec to ry S e rv er drop-down menu.
U s e r a n d G r o u p L D A P A t t r i b u t e Va l u e
Mapping
Windchill uses a subset of user and group LDAP attributes that are defined in an
Internet-standard LDAP schema. Your directory might not use the exact directory
attributes for user and group entries that Windchill expects by default.
When using an enterprise directory for users or groups, you might need to modify
which attributes are used in the directory or modify which LDAP object classes
define users and groups. This means that when you configure the JNDI adapter
you must provide additional attribute-mapping properties to map the default
Windchill user and group attributes to the corresponding user and group attributes
used by your LDAP directory.
You can map property attributes using the A d di t i on a l P r op e rti e s section of the
LDAP entry form:
The value you enter is saved in the named JNDI configuration property. After the
properties are reloaded, they are then used by the directory service.
When mapping property attributes in the JNDI adapter, the following formats are
used to specify the user, group, and organization attribute properties:
P rincipal
User
Group
Organization
P ro pe rty Fo rma t
<service_name>. w i n d c h i l l . m a p p i n g . u s e r. <map_identifier>
<service_name>. w i n d c h i l l . m a p p i n g . g r o u p . <map_identifier>
<service_name>. w i n d c h i l l . m a p p i n g . o rg . <map_identifier>
where:
<service_name> is the service name specified for the adapter (the S e rv i c e N am e
field in the LDAP property form)
392
To set this property, you would complete the following actions under the A d di ti o n al
P r o p e r t i e s section of the LDAP entry form:
1. In the P ro pe rty field enter:
EnterpriseDirectory1.windchill.mapping.user.object
Class
2. In the Va lu e field, enter:
organizationalPerson
3. Click A d d.
D e f a u l t U s e r a n d G ro u p L D A P A t t ri b u t e Va l u e s
The following sections list the default group LDAP object class and attributes used
by Windchill and the corresponding object class and attributes used for group
objects in other LDAP directories. For Microsoft Active Directory-specific values,
see Microsoft Active Directory Attribute Mapping for User and Group Objects on
page 396.
U s e r O b j e c t L D A P A t t r i b u t e Va l u e s
The default value in Windchill assigned to the LDAP user object class:
Windc hill User Objec t Class
< map_identifier>
Desc ription
o bjectClass
393
The following table lists the default LDAP values for user objects recognized by
Windchill. If necessary, use the <map_identifier> to change the corresponding
default attribute value for your LDAP directory:
Windc hill LDA P User Attri butes
< map_identifier> Desc ription
D e f a u l t Va l u e
cn
cn
Identifies the attribute that
holds the full name (common
name) of a user in the
directory service
X.509
c e r t i f i c a t e Ty p e
Specifies the type of user
certificates that are registered in
the directory service.
mail
Identifies the attribute that
mail
holds the email address of a
user in the directory service.
postalAddress
Identifies the attribute that
postalAddress
holds the postal address of a
user in the directory service.
p r e f e r r e d L a n g u a g e Identifies the attribute that
preferredLanguage
holds the preferred language of
a user in the directory service.
sn
sn
Identifies the attribute that
holds the surname of a user in
the directory service.
o
o
Identifies the attribute that
holds the organization to which
a user in the directory service
belongs.
uid
u niq ueIdAttribu te
u serC ertificate
394
The following table lists the default LDAP values for group objects recognized by
Windchill. If necessary, use the <map_identifier> to change the corresponding
default attribute value for your LDAP directory:
Windchi ll LDAP Group A ttributes
< map_identifier> Des cri ption
D e f a u l t Va l u e
cn
Identifies the attribute that holds cn
the names of groups in the
directory service.
d escriptio n
Identifies the attribute that holds description
the descriptive text about groups
in the directory service.
filter
Specifies an additional expression
that is be added to all LDAP
search filters used in querying
groups that use this JNDI adapter.
By default, no additional
395
u niq ueIdAttribu te
uniqueMember
Note
The mapping values represents the attribute that gets mapped to the map
identifier. For instance, the map identifier o is mapped to the attribute
co mp an y.
Note
The u i d is assumed to be unique since it is the user ID that is used to log on to
the web server, therefore, the value specified for m a p p i n g . u s e r.
u n i q u e I d A t t r i b u t e should always be the same value specified for m a p p i n g .
u s e r. u i d .
396
The following tables list the default attributes for Microsoft Active Directory user
objects as compared to Windchill values:
Windc hill and Microsoft Ac tiv e Directory User Objec t Class
Windchill Default LDAP User
Object Class
i n e t O rg P e r s o n
Note
Some mapping values for Microsoft Active Directory might vary depending on
the Active Directory schema in use, which varies based on the release level of
Windows being used.
397
p referredLang uage
sn
uid
u serPass wo rd
398
399
Mi c ro s of t A c t iv e D ire c to ry Group
Attribute
cn
descrip tion
The out-of-the-box Microsoft Active Directory
does not have a u n i q u e M e m b e r attribute for
group objects. Instead there is the m e m b e r
attribute. To enable Windchill to see Microsoft
Active Directory group members, map the
m e m b e r attribute to u n i q u e M e m b e r on the
JNDI adapter definition.
To enable Windchill to work with Microsoft Active Directory group objects and
group members, the following attribute-mapping properties must be set for group
objects on the JNDI adapter definition:
mapping.group.cn=cn
mapping.group.objectClass=group
mapping.group.uniqueMember=member
400
20
Configuring S ec urity Labels
Security Labels Example Configuration ..................................................................... 402
Before You Begin Configuring Security Labels ........................................................... 404
Security Label Configuration Steps ........................................................................... 407
Additional Security Label Configuration Concerns ...................................................... 447
Best Practices for Security Labels and Agreements.................................................... 457
This section details the steps necessary to configure and enable security labels and
agreements for your site.
401
Download
A uthorized
P articipants A greements A ck nowledgement
US Persons
US Persons
US Persons
US Persons
State Export
Agreement
Commercial
Export
Agreement
AgreementAuthorized
AllAuthorized
For the Export Control security label, users outside of the US Persons group can be
granted temporary clearance for objects marked as License Required - State
through a State Export Agreement. Users granted temporary clearance who attempt
to download objects with content files will be asked to agree to the conditions of
download. Users outside of the US Persons group can be granted temporary
clearance for objects marked as License Required - Commercial through a
Commercial Export Agreement. All users who attempt to download objects with
content files, including those who are members of the US Persons group, will be
asked to agree to the conditions of download. Objects marked as Do Not Export or
Unknown cannot be cleared for users outside of the US Persons group.
Objects marked as No License Required (the null value) are unrestricted and can
be accessed by anyone with the necessary permissions on the object.
402
A g ree me nts
Download
A c k n ow led ge me nt
Non-Disclosure None
Agreement
Internal
Non-Disclosure AgreementAuthorized
Personnel
Agreement
Highly Trusted Non-Disclosure AllAuthorized
Employees
Agreement
While security labels themselves have no hierarchy, this effect can be achieved by
nesting the authorized participant groups. The Highly Trusted Employees group is
a member of the Internal Personnel group, which in turn is a member of the
Employees group. If they have the appropriate access control permissions,
members of the Highly Trusted Employees group can then access objects marked
with the Private, Internal, or Company Most Private label values. Members of the
Internal Personnel group can access objects marked as Private or Internal, while
members of the Employees group can access objects marked as Private. Users
outside of these groups can be granted temporary access through use of a NonDisclosure Agreement. The Non-Disclosure Agreement is a context-based
agreement type because it is a subtype of the ContextBasedAgreement subtype.
Objects marked as Public (the null value) are unrestricted and can be accessed by
anyone with the necessary permissions on the object.
A uthoriz ed
P arti cipants
A g ree me nts
Download
Ack nowledgement
The Legal Information security label is used for purely informational purposes. A
Yes value indicates that the object contains legally sensitive information, but the
object is unrestricted. Anyone with the necessary permissions on the object can
access the object if either label value is set. Using security labels as informative
markings is acceptable, but security labels are intended to restrict access. For more
information, see Best Practices for Security Labels and Agreements on page 457.
403
B e f o r e Yo u B e g i n C o n f i g u r i n g S e c u r i t y
Labels
Before you begin configuring security labels for your site, do the following:
Decide what security labels you want to configure for your site and whether
they will be custom or standard security labels. Establish the list of values for
each standard security label.
You can have multiple security labels defined for different purposes. In order to
see an object, a user must be cleared for all security label values set on the
object.
For more information about custom security labels, see the PTC Windchill
Customization Guide.
Determine who will be the authorized participants for each custom security
label or standard security label value, meaning who will be cleared for access
to objects when that security label value is applied. Consider also if the
authorized participants can be specified using a unique federation identifier
(UFID) or if you will need to write a custom evaluator class to determine
which participants are authorized for each custom or standard label value.
If you specify the authorized participant using a UFID, the UFID can specify a
user, user-defined group, or organization, but most commonly would be a userdefined group. Using a group as an authorized participant allows you to easily
add to or change group membership using the Participant Administration
utility, the O rg an i z a ti o n s Gro u ps page, or a third party LDAP tool to
manage groups within an LDAP directory service.
404
If you specify the authorized participant using a custom evaluator class, the
way the current user is authorized can vary, depending on how you implement
your custom evaluator. For example, the custom evaluator could check to see if
the user is a member of a particular group, which is similar to using the UFID.
Alternatively, the custom evaluator could query a system outside of Windchill
that lists the participants cleared for a particular label value.
For information about which authorized participants work best for your site,
see the Specifying Authorized Participants for Custom Security Labels section
in the PTC Windchill Customization Guide. For information on user-defined
groups, including user-defined groups managed with a third party LDAP tool,
see the Participants (Users, Groups, and Organizations) section of the PTC
Windchill Basic Administration Guide.
If the label value is informative only, you can omit the authorized participant to
indicate that all users will be cleared for the value.
Optionally, create the necessary groups to be used as the authorized
participants.
Note
When creating user-defined groups, be sure to note the distinguished name
of each group, and the directory service in which it is being stored, as this
information is needed during your configuration.
Decide whether agreements will be enabled for your site. If you are going to
enable agreements, you must also:
Create or identify an existing group for agreement managers in the site
context. In the example configuration, this group is the Agreement
Managers group. Be sure to note the distinguished name of the group and
the directory service in which it is being stored as this information is
needed during your configuration. You will also need to set access control
permissions for the members of the agreement managers group. For more
information about setting these permissions, see Setting Access Control
Permissions for Agreement Managers on page 451.
If you want more than one type of agreement to be available, create
subtypes of the Agreement type. Each custom security label or standard
security label value can optionally be associated with one type of
agreement. Be sure to note the internal name of each agreement subtype as
you will need it during your configuration.
405
B es t P ractic e
If you are planning to use context-based agreements, PTC recommends
that you create a subtype for both context-based agreements and for
standard agreements. This makes maintaining policy access control
rules easier for each type as both inherit from the Agreement type by
default.
406
For more information about creating subtypes, see the help available from
the Type and Attribute Management utility. For more information about the
Agreement type, see the agreements help.
Decide whether a download confirmation message will display when users
attempt to download object content.
Decide whether there are certain object types for which you want to hide
security labels, so non-null security label values cannot be set. For the list of
security labeled object types, access the <Windchill>/conf/
exposedSecurityLabelObjects.xml file, where <Windchill> is the
location where your Windchill solution is installed.
Note
Because this configuration involves modifying PTC-provided files, it is
important that you understand and follow the practices detailed in the
Managing Customizations chapter of the PTC Windchill Customization Guide.
Because PTC-provided files can subsequently be updated by PTC in a
maintenance release, you should use a safe area for managing your files so
that your configurations are not lost when maintenance updates are installed.
The Managing Customizations chapter provides information on setting up and
using a safe area for storing your site-modified files, as well as keeping
versions of the original PTC-provided files, and providing other best practice
information. You should familiarize yourself with this information before
proceeding with this configuration.
1. Define Security Labels on page 408
2. Define Standard Security Label Values on page 412
3. Create a Custom Java Evaluator Class on page 414
4. Create a Custom Translator Class on page 414
5. Define Download Acknowledgement on page 414
6. Edit the Security Labels Configuration File on page 416
7. Edit LogicalAttributesSite.xml on page 424
8. Add Security Labels to RuleConfigurableTypeAttribute.properties on page 426
9. Specify Attribute Handler for Label Attribute on page 426
10. Enable Setting Security Labels on Explorer Windows on page 427
11. Enable Agreement Object Type for Search on page 427
12. Enable Agreement Object Type for Auditing on page 429
13. Enable Agreement Object Type for Subscription on page 430
14. Enable Modify Security Label Event for Auditing on page 431
15. Enable Modify Security Label Event for Subscription on page 431
16. Hide Security Labels on Certain Objects on page 432
17. Display Security Labels in Table Views on page 435
407
18. Move Customized Files into the Installation Directory on page 438
19. Set the Security Label Configuration File Location on page 439
20. Enable Agreement Object Type For Search Command on page 439
21. Display Security Labels in Table Views Command on page 440
22. Propagate Changes to Property Files on page 440
23. Restart Windchill Method Servers on page 440
24. Add Agreements to List of Searchable Object Types on page 440
25. Define Object Initialization Rules for Security Labels on page 441
26. Display Security Labels and Security Label Values on Object Information
Pages on page 443
<Windchill>/src/wt/access/accessModelRB.rbInfo
where <Windchill> is the installed location of your Windchill solution. If
you are using a different locale, find the corresponding RBINFO file for that
locale.
2. Copy the accessModelRB.rbInfo file to the following location:
<Windchill>/wtCustom/wt/access
408
Note
If the <Windchill>/wtCustom directory does not already exist in your
installation, and your site has not already implemented a parallel directory
structure for site specific files, complete the following steps to implement
it:
a. Create the following directory:
<Windchill>/wtCustom
By default this is the directory root recognized by Windchill for custom
directories, as specified in the wt.generation.custom.dir property in
tools.properties. For more information see the PTC Windchill
Customization Guide.
b. Create additional subdirectories within the <Windchill>/
wtCustom directory as needed.
3. Open the <Windchill>/wtCustom/wt/access/
accessModelRB.rbInfo file in a text editor.
4. For each security label, add the following lines, making sure not to include any
spaces except in the <DISPLAY_NAME> or the <LONG_DESCRIPTION>:
WCTYPE|wt.access.SecurityLabeled~SCA|<SECURITY_LABEL>.value=<DISPLAY_NAME>
WCTYPE|wt.access.SecurityLabeled~SCA|<SECURITY_LABEL>.dataType=java.lang.String
WCTYPE|wt.access.SecurityLabeled~SCA|<SECURITY_LABEL>.serverFunction=
com.ptc.core.foundation.security.server.impl.SACFSecurityLabel
WCTYPE|wt.access.SecurityLabeled~SCA|<SECURITY_LABEL>.serverFunction.arg1=
PID{<SECURITY_LABEL>}
WCTYPE|wt.access.SecurityLabeled~SCA|<SECURITY_LABEL>.longDescription=
<LONG_DESCRIPTION>
where:
409
Note
A security label name is stored as a server-calculated attribute (SCA).
Each SCA must have a unique name. The Logical Attributes Report
provides a list of all current SCAs. You can access this report from
<Windchill>/netmarkets/jsp/lwcType/
logicalAttributesReport.jsp.
For example, add the following lines to the end of the file for configuring the
example security labels. (These lines have been formatted to fit the page; enter
each WCTYPE definition on one line.)
WCTYPE|wt.access.SecurityLabeled~SCA|CORPORATE_PROPRIETARY.value=
Corporate Proprietary
WCTYPE|wt.access.SecurityLabeled~SCA|CORPORATE_PROPRIETARY.dataType=
java.lang.String
WCTYPE|wt.access.SecurityLabeled~SCA|CORPORATE_PROPRIETARY.serverFunction=
com.ptc.core.foundation.security.server.impl.SACFSecurityLabel
WCTYPE|wt.access.SecurityLabeled~SCA|CORPORATE_PROPRIETARY.serverFunction.arg1=
PID{CORPORATE_PROPRIETARY}
WCTYPE|wt.access.SecurityLabeled~SCA|CORPORATE_PROPRIETARY.longDescription=
The "Corporate Proprietary" label indicates the business object's level
of corporate sensitivity
WCTYPE|wt.access.SecurityLabeled~SCA|EXPORT_CONTROL.value=Export Control
WCTYPE|wt.access.SecurityLabeled~SCA|EXPORT_CONTROL.dataType=java.lang.String
WCTYPE|wt.access.SecurityLabeled~SCA|EXPORT_CONTROL.serverFunction=
com.ptc.core.foundation.security.server.impl.SACFSecurityLabel
WCTYPE|wt.access.SecurityLabeled~SCA|EXPORT_CONTROL.serverFunction.arg1=
PID{EXPORT_CONTROL}
WCTYPE|wt.access.SecurityLabeled~SCA|EXPORT_CONTROL.longDescription=
The "Export Control" label indicates the business object's level
of export sensitivity
WCTYPE|wt.access.SecurityLabeled~SCA|LEGAL_INFORMATION.value=Legal Information
410
WCTYPE|wt.access.SecurityLabeled~SCA|LEGAL_INFORMATION.dataType=java.lang.String
WCTYPE|wt.access.SecurityLabeled~SCA|LEGAL_INFORMATION.serverFunction=
com.ptc.core.foundation.security.server.impl.SACFSecurityLabel
WCTYPE|wt.access.SecurityLabeled~SCA|LEGAL_INFORMATION.serverFunction.arg1=
PID{LEGAL_INFORMATION}
WCTYPE|wt.access.SecurityLabeled~SCA|LEGAL_INFORMATION.longDescription=
The "Legal Information" label indicates whether the business
object contains legally sensitive information
WCTYPE|wt.access.SecurityLabeled~SCA|THIRD_PARTY_PROPRIETARY.value=
Third Party Proprietary
WCTYPE|wt.access.SecurityLabeled~SCA|THIRD_PARTY_PROPRIETARY.dataType=
java.lang.String
WCTYPE|wt.access.SecurityLabeled~SCA|THIRD_PARTY_PROPRIETARY.serverFunction=
com.ptc.core.foundation.security.server.impl.SACFSecurityLabel
WCTYPE|wt.access.SecurityLabeled~SCA|THIRD_PARTY_PROPRIETARY.serverFunction.arg1=
PID{THIRD_PARTY_PROPRIETARY}
WCTYPE|wt.access.SecurityLabeled~SCA|THIRD_PARTY_PROPRIETARY.longDescription=
The "Third Party Proprietary" label indicates the business
object's level of third party corporate sensitivity
Note
Do not delete or alter the existing lines that begin with:
WCTYPE|wt.access.SecurityLabeled~SCA|ALL_
SECURITY_LABELS
WCTYPE|wt.access.SecurityLabeled~SCA|ALL_
STANDARD_SECURITY_LABELS
WCTYPE|wt.access.SecurityLabeled~SCA|ALL_CUSTOM_
SECURITY_LABELS
411
S t e p 2 . D e f i n e S t a n d a r d S e c u r i t y L a b e l Va l u e s Optional
The label values, display names, and descriptions for standard security labels are
defined in the resource file associated with the enumerated type class for the
standard security label. Ten enumerated type classes have been provided out-ofthe-box for use with standard security labels (wt.access.configuration.
SecurityLabel1 through wt.access.configuration.SecurityLabel10). Decide which
class you will use for each standard security label. You will specify the class for
each standard security label in the security labels configuration file in the next step.
For the example configuration, the following classes are used:
Additional enumerated type classes can be created if your site wants to configure
more than ten standard security labels. For more information on creating and
editing enumerated type classes, see the PTC Windchill Customization Guide.
To define the security label values for each standard security label, and the display
name and description for each value, complete the following steps:
1. Copy the resource bundle file for the class from the following source directory:
<Windchill>/src/wt/access/configuration
2. Open the resource bundle file for the class in a text editor. For example, for the
SecurityLabel1 class, open the following file:
<Windchill>/wtCustom/wt/access/configuration/SecurityLabel1RB.rbInfo
412
3. For each standard security label value, add the following lines:
<VALUE>.value=<LOCALIZED_DISPLAY_NAME>
<VALUE>.longDescription=<LONG_DESCRIPTION>
where:
<VALUE> is the security label value name that will be specified in the
securityLabelsConfiguration.xml file.
<LOCALIZED_DISPLAY_NAME> is the name of the security label value
as it will display in the user interface.
<LONG_DESCRIPTION> is the long description of the security label. The
long description is displayed in the automatically generated online help for
the security label, accessed by clicking the view security label information
icon from the S e c u ri ty La b el s table.
Note
The NULL resource key is present automatically for each standard security
label. A meaningful display name and description can be provided for the
NULL key by editing the resource entry, but the entry should not be
deleted. The value associated with the NULL key is always unrestricted. As
a result, the value associated with the NULL key should not be used for a
marking for which you may want to restrict access in the future. Use a nonnull informative marking for this case instead.
For example, the following lines would be modified in or added to the
SecurityLabel1RB.rbInfo file for the sample configuration:
NULL.value=No License Required
NULL.shortDescription=Export of the selected business objects does not
require a license.
413
UNK.value=Unknown
UNK.longDescription=Export restriction status of the selected business
object is not known. Treat as Do Not Export.
S t e p 4 . C r e a t e a C u s t o m Tr a n s l a t o r C l a s s - O p t i o n a l
For custom security labels, a custom translator class can be used to convert the
internal form of the security label value into the external form of the security label
value.
For more information about custom security labels and creating the custom
translator class, see the PTC Windchill Customization Guide.
414
Where:
For example, the following lines would be added for the sample configuration:
LNS_DownloadAck.value=I have read and agree to the terms of the
state export license.
LNS_DownloadAck.comment=State export license user acknowledgement
LNC_DownloadAck.value=I have read and agree to the terms of the
commercial export license.
LNC_DownloadAck.comment=Commercial export license user acknowledgement
PRV_DownloadAck.value=I have read and agree to the company policy
for private content.
PRV_DownloadAck.comment=Private employee user acknowledgement
INT_DownloadAck.value=I have read and agree to the company policy
for internal content.
INT_DownloadAck.comment=Internal employee user acknowledgement
MPRV_DownloadAck.value=I have read and agree to the company policy
for company most private content.
MPRV_DownloadAck.comment=Company most private employee user
acknowledgement
415
ResourceBuild.sh wt.access.configuration
<Windchill>/conf/securityLabelsConfiguration.xml
where <Windchill> is the installed location of your Windchill solution.
You can copy this file to the <Windchill>/wtSafeArea/ptcOrig/conf
and <Windchill>/wtSafeArea/siteMod/conf directories and edit the
file in the safe area for your configuration, or create a new file in your safe area.
The final location of your security labels configuration file will be specified using
a property later in this configuration. This procedure uses the provided
securityLabelsConfiguration.xml.
Note
A sample configuration file, named securityLabelsConfiguration_
sample.xml, is located in the same directory as the out-of-the-box
configuration file. This sample configuration file contains sample data and
detailed comments about the configuration file components. While the sample
configuration file includes sample data similar to the example configuration
used in this guide, actual values from your system are required to successfully
configure security labels.
The content of the securityLabelsConfiguration.xmlfile consists of a
single, complex XML element named SecurityLabelsConfiguration.
When you initially open the securityLabelsConfiguration.xmlfile,
you see the following:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE SecurityLabelsConfiguration
SYSTEM "securityLabelsConfiguration.dtd">
<SecurityLabelsConfiguration enabled="false">
</SecurityLabelsConfiguration>
To enable security labels, make the following changes within the configuration file:
416
Details of these changes are provided in the following sections. When you have
made all of your changes, save and close the security labels configuration file.
AgreementConfiguration Element
Note
For security labels to work, you do not need to enable agreements. If you are
not planning to use agreements, you do not need to include this element.
The AgreementConfiguration element and subelements are specified in the
following manner, using sample information:
<AgreementConfiguration enabled="true">
<AgreementManagersGroup>
<groupUfid>cn=Agreement Managers,ou=people,
cn=AdministrativeLdap,cn=Windchill_9.1,o=ptc
|Ldap.ptcnet.ptc.com|Ldap.ptcnet.ptc.com</groupUfid>
</AgreementManagersGroup>
<AgreementLifecycleState>
<lifecycleState>APPROVED</lifecycleState>
</AgreementLifecycleState>
<AgreementCabinetDomain>
<domainPath>/Default</domainPath>
</AgreementCabinetDomain>
<ContextBasedAgreementType>
<logicalTypeId>com.ptc.security.ContextBasedAgreement</logicalTypeId>
</ContextBasedAgreementType>
<SelectAuthorizedSecurityLabelValuesStep value="show"/>
<AuthorizedSecurityLabelValuesDefault value="all"/>
</AgreementConfiguration>
417
418
A l l Va l u e s . To change the default selection for the drop-down list, specify the
The name attribute of the SecurityLabel element is the string that is stored in
the database for this security label, in this case, EXPORT_CONTROL. For this
security label to be available in your Windchill solution, the enabled attribute
must be set to true. This name value does not generally show in the user
interface; the display name for this security label was defined in Step 1 of this
configuration.
419
Note
Even if security labels are globally disabled, the security label resource keys
specified in the configuration file must exist in the
accessModelRB.rbInfo file in order for the method server to start. For
more information on disabling security labels, see the security labels
administration help.
The SecurityLabelValueResourceClasselement represents the resource
file where the resource keys for the label value localized strings (such as name and
description) are stored. These resource keys were defined in Define Security Label
Values on page 412. This element contains the resource file class name.
The name attribute of the SecurityLabelValue element specifies the string
that is stored in the database for this label value. The same value is used in the
resource file associated with the SecurityLabelValueResourceClass as
the resource key for the security label value localized strings. For the label value to
be available in your Windchill solution, the enabled attribute must be set to
true. The null value for the security label is automatically present and is not
specified here.
Note
The name attribute of the SecurityLabel element and the name attribute
of the SecurityLabelValue element are stored together as a name/value
pair in the database. Although the system allows you to specify as many
security labels as desired, the name/value pairs are stored in a single database
column. The number of security labels that can be set is limited by the column
size (4000). As these values are generally not seen in the user interface, it is
recommended that the values be kept as short as possible, but still be
meaningful.
420
421
for parameter names that exist for the authoring applications. For information on
how this element is used, see Security Label Parameter for CAD Application
Clients on page 448.
C u s to mS e c u ri ty L a b e l e l e me n t
The CustomSecurityLabel element contains the data for defining a custom
security label, the authorized participant for the custom security label values (if not
all users), the agreement type (if any) associated with the custom security label
values, and various mappings used by applications and services to process custom
security labels. There should be one CustomSecurityLabel element for each
custom security label you configure. For example:
<CustomSecurityLabel name="THIRD_PARTY_PROPRIETARY" enabled="true">
<SecurityLabelResourceKey>WCTYPE|wt.access.SecurityLabeled~SCA|
THIRD_PARTY_PROPRIETARY</SecurityLabelResourceKey>
<CustomSecurityLabelValues>
<UnrestrictedPrincipal>
<ufid>cn=Employees,cn=Public,ou=people,cn=AdministrativeLdap,
cn=Windchill_10.1,o=ptc|Ldap.ptcnet.ptc.com|
Ldap.ptcnet.ptc.com</ufid>
<evaluatorClass>
com.ourcompany.CustomEvaluator
</evaluatorClass>
</UnrestrictedPrincipal>
<TranslatorClass>
com.ourcompany.CustomTranslator
</TranslatorClass>
</CustomSecurityLabelValues>
<SecurityLabelParameter>THIRD_PARTY_PROPRIETARY</SecurityLabelParameter>
</CustomSecurityLabel>
422
Note
Even if security labels are globally disabled, the security label resource keys
specified in the configuration file must exist in the
accessModelRB.rbinfo for the method server to start.
For more information on disabling security labels, see Disabling Security
Labels and Values in the Windchill Help Center or the PTC Windchill
Specialized Administration Guide.
The CustomSecurityLabelValueselement can have a single
UnrestrictedPrincipal subelement, which specifies the authorized
participant for the security label values. If the UnrestrictedPrincipal
subelement is omitted, all users are cleared for access to objects with the custom
label values.
The UnrestrictedPrincipal element can have a ufid subelement. The
UFID, or Unique Federation Identifier, specifies a participant, which can be a user,
user-defined group, or organization. The UnrestrictedPrincipal element
can also have an evaluatorClass subelement, which specifies the evaluator
class created in Step 3. Create a Custom Java Evaluator Class on page 414. The
ufid subelement and the evaluatorClass subelement can either be used
together or individually under the UnrestrictedPrincipal element. For
more information about the differences between using a ufid subelement, an
evaluatorClass subelement, or both, see Specifying Authorized Participants
for Custom Security Labels in the PTC Windchill Customization Guide.
The UnrestrictedPrincipal element can optionally have an
AgreementType subelement. An agreement can be used to grant temporary
clearance to users who are not authorized participants for the security label values.
The content for the AgreementType element is specified in the following
format:
<logicalTypeId><AGREEMENT_NAME></logicalTypeId>
423
and
<Windchill>/wtSafeArea/siteMod/codebase
424
425
<ExternalForm>SCA|THIRD_PARTY_PROPRIETARY</ExternalForm>
</Property>
</Class>
Instructions for defining object initialization rules for security labels are found later
in this configuration.
Step 9. Spec ify Attribute Handler for Label Attribute Requi red
Add each security label to the
FoundationAttributeHandler.properties file to specify the attribute
handler to use for the label attribute.
From within a windchill shell, run the following command for each security label:
xconfmanager -s wt.services/svc/default/com.ptc.core.command.server.delegate.io.
AbstractAttributeHandler/<SECURITY_LABEL>/wt.access.SecurityLabeled/0=
com.ptc.core.command.server.delegate.io.SecurityLabelAttributeHandler/singleton
426
-t codebase/com/ptc/core/foundation/FoundationAttributeHandler.properties -p
S t e p 11 . E n a b l e A g re e m e n t O b j e c t Ty p e F o r S e a rc h
- Optional
Note
If you are not enabling agreements, skip this step.
427
To enable the Agreement object type for use in simple and advanced searches,
complete the following steps:
1. Navigate to the following location:
<Windchill>/codebase/com/ptc/windchill/enterprise/search/server
and
<Windchill>/wtSafeArea/siteMod/codebase/com/ptc/windchill/enterprise/search/server
For example,
<!-- If security labels is enabled on your system then add
wt.access.agreement.AuthorizationAgreement to ProjectLink.userSearch:
<AddToProperty name="ProjectLink.userSearch" value=
"wt.access.agreement.AuthorizationAgreement"/>
-->
becomes
<!-- If security labels is enabled on your system then add
wt.access.agreement.AuthorizationAgreement to ProjectLink.userSearch:-->
<AddToProperty name="ProjectLink.userSearch" value=
"wt.access.agreement.AuthorizationAgreement"/>
428
S t e p 1 2 . E n a b l e A g r e e m e n t O b j e c t Ty p e f o r A u d i t i n g
- Optional
Note
If you are not enabling agreements, skip this step.
To enable the agreement object type for auditing, complete the following steps:
1. Navigate to the following source file:
<Windchill>/codebase/com/ptc/core/auditing/
auditing-SearchableType.properties.xconf
and
<Windchill>/wtSafeArea/siteMod/codebase/com/ptc/
core/auditing/auditing-SearchableType.properties.xconf
wt.access.agreement.AuthorizationAgreement to Foundation.
auditSearchFoundation:
<AddToProperty name="Foundation.auditSearchFoundation"
value="wt.access.agreement.AuthorizationAgreement"/>
-->
becomes
<!--
wt.access.agreement.AuthorizationAgreement to Foundation.
auditSearchFoundation: -->
<AddToProperty name="Foundation.auditSearchFoundation"
value="wt.access.agreement.AuthorizationAgreement"/>
429
S t e p 1 3 . E n a b l e A g r e e m e n t O b j e c t Ty p e f o r
Subscription - Optional
Note
If you are not enabling agreements, skip this step.
To enable the agreement object type for subscriptions, complete the following
steps:
1. Navigate to the following source file:
<Windchill>/codebase/com/ptc/core/subscription/
subscription-SearchableTypes.properties.xconf
and
<Windchill>/wtSafeArea/siteMod/codebase/com/ptc/
core/subscription/subscription-SearchableTypes.properties.xconf
becomes
<!-- This property wt.access.agreement.AuthorizationAgreement should
only be added to Foundation.subscriptionTypePicker if the Security Labels
feature is enabled.-->
<AddToProperty name="Foundation.subscriptionTypePicker" value=
"wt.access.agreement.AuthorizationAgreement"/>
430
S tep 14. E nabl e S ec uri ty Label E v ents for A udi ting Optional
By default, Windchill only audits user login and logout events. When full auditing
is enabled, the Modify Security Label and Security Label Download
Acknowledgement events are recorded for all object types that support security
labels or download acknowledgement.
To enable auditing the Modify Security Label or Security Label Download
Acknowledgement event only for a particular object, add the following event key
to the ConfigEntry element for the particular object class:
For more information, see the Customizing Audit Events section in the PTC
Windchill Customization Guide or the auditing administration help.
and
<Windchill>/wtSafeArea/siteMod/codebase/wt/notify/subscriptionConfig.xml
431
432
security labels applied to the object type, remove all security label object
initialization rules for the object type in addition to completing the following
procedure.
Note
Do this before the security label enabled system is made available to your
users.
To hide the S ec u ri ty L a be l s tab in the Ma n ag e S e c ur i ty window and remove the
ability to associate the object type as an authorized object:
1. Navigate to the following source file:
<Windchill>/conf/exposedSecurityLabelObjects.xml
and
<Windchill>/wtSafeArea/siteMod/conf/exposedSecurityLabelObjects.xml
becomes
<!--object name="wt.doc.WTDocument"/-->
Note
Only complete these steps if you enabled security labels for subscription in
Enable Modify Security Label Event for Subscription on page 431.
1. Navigate to the following file:
<Windchill>/wtSafeArea/siteMod/codebase/wt/notify/subscriptionConfig.xml
433
becomes
<!--override type ="wt.doc.WTDocument"/-->
Note
Only complete these steps if you enabled agreements.
1. Navigate to the following source file:
<Windchill>/wtSafeArea/siteMod/codebase/com/ptc/
core/agreements/agreements-SearchableTypes.properties.xconf
434
S t e p 1 7 : D i s p l a y S e c u r i t y L a b e l s i n Ta b l e V i e w s Optional
Security labels and their values can be added to Windchill tables as optional
columns. The optional columns can be added to the table when you create or edit
your table view. First, you must configure the security labels as available attributes
for any object type that you want to include in your table view. After completing
the following steps, the optional security label columns can be added to custom
table views for the object types configured with the security label attributes.
Note
Certain tables may restrict which attributes are available for selection when
creating custom table views.
For more information about creating custom table views, see the Customizing
Table Views topic in the PTC Windchill Help Center.
435
and
<Windchill>/wtSafeArea/siteMod/codebase
436
<Class name="wt.access.SecurityLabeled">
</Class>
The following provides the general syntax to use for specifying a particular
object type and its subtypes:
<Class name="INTERNAL_OBJECT_TYPE">
<Include name="wt.access.SecurityLabeled"/>
</Class>
<Class name="wt.access.SecurityLabeled">
</Class>
Note
You can also use the external form of the security label, but PTC
recommends using the logical form.
For example, after adding the lines necessary for each security label for the
example configuration, the elements in the previous example would appear as
follows:
<Class name="wt.enterprise.RevisionControlled">
<Include name="wt.access.SecurityLabeled"/>
</Class>
<Class name="wt.access.SecurityLabeled">
<Attribute id="CORPORATE_PROPRIETARY"/>
<Attribute id="EXPORT_CONTROL"/>
<Attribute id="LEGAL_INFORMATION"/>
<Attribute id="THIRD_PARTY_PROPRIETARY"/>
</Class>
437
and
<Windchill>/wtSafeArea/siteMod/codebase/com/ptc/core/security
For more information, see Best Practices for Customizing Files Supplied by PTC
in the PTC Windchill Customization Guide.
438
S t e p 2 0 . E n a b l e A g r e e m e n t O b j e c t Ty p e F o r S e a r c h
Command - Optional
Note
If you are not enabling agreements, skip this step.
Complete this step if you enabled the Agreement object type for use in simple and
advanced searches in Step 11. Enable Agreement Object Type For Search on page
427.
From within a windchill shell, run the following command:
xconfmanager -s com.ptc.windchill.search.refreshTypesFromProperties=true -t
codebase/wt.properties -p
Note
This step makes the agreement object type searchable. You must also Add
Agreements to List of Searchable Object Types on page 440.
439
S t e p 2 1 : D i s p l a y S e c u r i t y L a b e l s i n Ta b l e V i e w s
Command - Optional
Complete this step if you enabled the display of security labels in table views in
Step 17: Display Security Labels in Table Views on page 435.
From within a windchill shell, run the following command to update the following
property in the site.xconf file and propagate the change to the
wt.properties file:
xconfmanager -s com.ptc.core.htmlcomp.createtableview.AvailableAttributesDigester.
fileLocation=/com/ptc/core/htmlcomp/createtableview/AvailableAttributes.xml,
AvailableAttributesSite.xml -t codebase/wt.properties -p
After completing the rest of the required configuration steps, users will be able to
add the security labels you specified as columns in custom table views. Security
labels and values do not display in a table unless a table view has been configured
with the appropriate columns.
440
Add the agreement type to the list of searchable object types available on search
windows as follows:
1. Open the S i te U t i l i ti es P re fe re nc e M an a ge me n t from the page on the
tab.
2. Navigate to the S e a rc h A l l A pp l i c ab l e Obj e c t Ty pe s preference.
3. Add WCTYPE|wt.access.agreement.AuthorizationAgreement
to the list of searchable objects to enable searching for all agreements.
Only participants with Read access to the agreement object will be able to find the
agreement object.
441
Ti p
If you are using custom security labels, setting an object initialization rule
with the GetDiscreteSetConstraint attribute constraint allows you
to limit the values a user can specify for the custom security label.
442
</AttrValue>
<AttrConstraint id="EXPORT_CONTROL" algorithm="com.ptc.core.
rule.server.impl.GatherAttributeConstraints">
<Value algorithm="com.ptc.core.rule.server.impl.
GetServerPreGeneratedValue"/>
</AttrConstraint>
443
Note
The internal name must be unique. You can set the internal name to the
logical form of the security label as specified in the
LogicalAttributesSite.xml file, but it is not required. For more
information, see Step 7. Edit LogicalAttributesSite.xml on page 424.
5. Select S tr i ng from the D a ta ty pe drop-down list and click N e x t.
444
Note
You can also set the Ma p pi n g field to the external form of the security label,
but PTC recommends using the logical form.
For more information about each of the attribute properties, see the Attribute
Properties Reference topic in the PTC Windchill Help Center. For more
information about the logical form, see Step 7. Edit LogicalAttributesSite.xml
on page 424.
Note
While it is not required to match the D i s p l a y N a me field to the display
name of the security label as specified in the accessModelRB.rbinfo
file, it is recommended for consistency. For more information, see Step 1.
Define Security Labels on page 408.
7. Click A p pl y to save the current attribute and create another, or click F in i s h to
save the current attribute and close the window.
8. Add the new security label alias attributes to the information page layout for
your object type. For more information, see the Editing Attribute Layouts
topic in the PTC Windchill Help Center.
Ti p
If your Windchill system has more than one locale, you can manually enter
a localized value for the attribute display names by clicking the localize
icon next to the D i s p l a y N a me field on the attribute information page.
For more information, see the Localizing Property Values topic in the
PTC Windchill Help Center.
Repeat these steps for each object type for which you would like security labels to
display.
445
Unspecified
If neither a UFID nor an EvaluatorClass is specified, the label value does not
limit access to the objects with the label value applied and it becomes an
informative marking.
UFID Only
If an authorized participant is specified using a UFID, whether the participant
(user, user-defined group, or organization) is cleared for access to the objects
with the label value applied is indicated by the UFID value.
EvaluatorClass Only
If an evaluator class is specified, its isRestrictedBySecurityLabelValue method
is called when the access rights of a participant are evaluated to determine
whether the participant is cleared for access to objects with the label value
applied.
where
In standard UFIDs, the <GUID> and <DOMAIN> values together represent the
identity of the directory service in which the group resides. In Windchill usage, the
<GUID> and <DOMAIN> values are identical, each being the name of the
446
directory service in which the group resides. If you do not know the directory
service name, it can be found by reversing the value obtained by one of following
means:
For example, if the value of the D i re c to ry S er v i c e field when creating the group
was com.ptc.Ldap, then the value for the <GUID> and <DOMAIN> values is
Ldap.ptc.com.
447
Note
If your site makes use of the nested family tables functionality in Creo
Parametric, lower level instances inherit parameter values from the
intermediate generic. If security label values can vary within lower level
instances, then you should not use the parameter to set security labels.
Each parameter should be defined in the client as a String parameter. The
parameter should also be defined as communicate to PDM system.
If the parameter name does not match the name defined in the
SecurityLabelParameter element, the parameter is not recognized as a
security label and is treated like any other CAD parameter. No corresponding
global attribute definition is needed for the security label communication.
To override an object initialization rule set for the object type, you must set a
parameter for the security label. If you want to use the object initialization rule on
the object type for a particular security label, do not specify the parameter.
For standard security labels, the values for the CAD parameter must be the
RBINFO keys for the label values for the security label. The RBINFO key for the
label value is the same as the name value of the SecurityLabelValue
element. If a parameter value set on the object does not correspond to a valid label
value, the object cannot be uploaded.
448
For custom security labels, the values for the CAD parameter must be the external
form of the label values. If the parameter value set on the object does not
correspond to a valid label value, the object cannot be uploaded. If you specify the
parameter, but leave the value blank, it is the same as explicitly setting it to the
NULL value. As a result, any object initialization rules set for the object type will
not apply when the object is added to Windchill because a NULL value is set.
Users can assign security labels using CAD application parameters only for objects
that are new in the workspace and have never been uploaded. Once an object has
been uploaded, the parameters are considered as being owned by Windchill. For
Creo Parametric, this means that the parameter becomes read-only and cannot be
modified. For Arbortext Editor and the other workgroup managers, the parameters
are considered to be system attributes. They can still be edited within the client, but
any changes to the parameter are ignored when the object is later uploaded or
checked in. Objects created from a template or a start part file stored in Windchill
cannot be used to set a security label via parameter because the parameter value is
already set. To set a security label,
After an object has been uploaded or checked in for the first time, security labels
can only be set using the Ma n ag e S ec ur i ty action. When an object is later
downloaded, the parameter reflects the currently-assigned security label as the
parameter value.
For more information on parameters, see the Windchill Workgroup Manager
Administrator's and User's Guide for your workgroup manager.
449
This principal is used as the session principal for a replication session for that
replica site. For objects to be replicated to the replica site, the principal specified
for that site must have access to that object. When security labels are enabled, this
means that for an object to be replicated to the replica site, the user or group
specified as the site principal must be an authorized participant for all security label
values on that object.
The following types of replication are impacted:
450
Scheduled replication Only objects to which the site principal has access are
replicated.
User initiated replication When replication is initiated, only objects to which
the site principal for chosen replica site has access are replicated, even if the
user initiating the replication has access to the objects.
Ad-hoc replication The object is only added to the user's preferred replica site
if the site principal for that site has access to the object. If the site principal
does not have access to the object, the user is provided a direct download URL
from the proximity site.
Predictive replication If the site principal does not have access to the object, a
predictive cache rule is not created. If a predictive cache rule already exists for
the object, but the site principal does not have access to it (either the site
principal has been changed, or the access rights on the object have changed so
that the site principal no longer has access), the object is not replicated.
For more information on replication, see the Replication section of the PTC
Windchill Enterprise Administration Guide and the File Vaulting and Replication
help.
Note
If agreements are configured for your site but the agreements domain has not
been created in existing contexts, the A g re e me nt s page is available to
agreement managers, but the page displays an error message.
For more information about creating a domain, see the Contexts section of the PTC
Windchill Basic Administration Guide or the Policy Administrator help.
Additional domains can be created and associated with the folders created and
managed from the A g re em en ts page.
451
AuthorizationAgreement
Cabinet
SubFolder
Some permissions may already exist on the Cabinet and SubFolder object types
and on their parent type, WTObject.
Not all agreement managers are required to have full control over agreements.
Permissions can be set for an individual agreement manager, a group of agreement
managers, or the entire agreement manager group. Additionally, not all agreement
managers need permissions in all contexts. You can set the rules so that some
agreement managers can only create or modify agreements, while others have
additional permissions, such as Delete.
Only agreement managers with Read access to the agreements cabinet for a
particular context can see the A g re em en ts page in that context. For example, an
agreement manager has permission to access the agreements cabinet in a project
context, but the same agreement manager does not have permission to access the
agreements cabinet in the organization context. As a result, this agreement
manager is only able to see the A g re em en ts page in a project context.
Read permission is required to access any object and view its information page.
The following table illustrates additional access control permissions required for
actions often completed by an agreement manager. The object location column has
the following values. Use these values to determine the domain in which to grant
access control permissions.
Target Location - the location where the agreement will reside when the action
is complete.
Source Location - the current location of the agreement.
Checked-out Location - the location where the working copy of the agreement
resides.
O b j e c t Ty p e
Obje c t Lo c a tion P e rmis s io ns
Action
New Agreement AuthorizationAgreement Target Location
Create
Subfolder
Target Location
Modify
or
Cabinet
452
Object Location
Source Location
Checked-out
Location
Subfolder
Checked-out
Location
Edit
AuthorizationAgreement Checked-out
Location
Check In
AuthorizationAgreement Source Location
Subfolder
Checked-out
Location
or (if not owner of checkout)
AuthorizationAgreement Source Location
Undo Checkout AuthorizationAgreement Checked-out
Location
Subfolder
Checked-out
Location
or (if not owner of checkout)
AuthorizationAgreement Source Location
Action
Check Out
O b j e c t Ty p e
AuthorizationAgreement
AuthorizationAgreement
P e rmis s io ns
Modify
Create
Modify
Modify
Modify
Modify
Administrative
Delete
Modify
Administrative
or
View
Information
Rename
New Revision
Set State
AuthorizationAgreement
Checked-out
Location
Source Location
AuthorizationAgreement
Source Location
AuthorizationAgreement
(existing revision)
AuthorizationAgreement
(new revision)
AuthorizationAgreement
Read
Modify (change
name)
Source Location
Modify Identity
(change
number)
Revise
Target Location
Create
Source Location
Set State1
or
Cut/Paste
AuthorizationAgreement
Source Location
Administrative
Change
Domain2
Change
Context3
453
Action
O b j e c t Ty p e
AuthorizationAgreement
Subfolder
or
Cabinet
Subfolder
Target Location
Modify
Target Location
Target Location
Create
Modify
Source Location
Source Location
Delete
Modify
Source Location
Source Location
Read
Read
or
Copy/Paste
Cabinet
AuthorizationAgreement
Subfolder
or
Delete
Cabinet
AuthorizationAgreement
Subfolder
or
Subscribe
Manage
Security
Cabinet
AuthorizationAgreement
AuthorizationAgreement
1. To set the state of an object, there must be a valid state transition between the current state
and the target state. For information about the Set State action and the permissions required,
see the Planning Object State Change Policies topic in the PTC Windchill Help Center.
2. The Change Domain permission is only required if the object is pasted in a new domain.
3. The Change Context permission is only required if the object is pasted in a new context.
4. The Create By Move permission is only required if the object is pasted in a new domain.
454
Wa t e r m a r k s a n d S e c u r i t y L a b e l s
Security label settings can be included in watermarks, similar to other object
attributes. When publishing an assembly or structure, the security labels associated
with the top-level object being published are the security labels included in the
watermark. If the security label setting is different on a child part within the
structure, that difference is not reflected in the watermark.
Security labels and their settings are stored in property groups. There are three
property groups: WindchillEPM, WindchillPart, and WindchillDocument. These
property groups are stored in the Structure or PVS file for Creo View, and can be
viewed from within Creo View.
The security label properties display in the following format:
<PROPERTY_GROUP>_sl<SECURITY_LABEL_NAME>
where
For example, the security label property for the Export Control security label in the
WindchillPart property group displays as follows:
part_slExport_Control
When a standard security label is selected from one of the property groups and
included in a watermark, the localized label value displays based on the locale of
the server. When a custom security label is selected from one of the property
groups and included in a watermark, the external value displays.
Initially, a representation inherits the security labels from the object it is
representing, known as the representable object. Use the Ma n ag e S e c uri t y action to
update the security labels set on the representation. The properties available for
selection on a watermark depend on the representation being viewed, and its
representable object.
455
456
were set at the time the representation was copied to its current location.
There is no connection between the representation and the original
document.
If the representable object is a document:
The WindchillDocument security label properties for representations are
those of the representable document and are dynamically updated whenever
the security labels on the representable document are updated.
If a representation was copied from a part, the WindchillPart security label
properties for the representation are the security labels as they were set at
the time the representation was copied to its current location. There is no
connection between the representation and the original part.
If a representation was copied from an EPM document, the WindchillEPM
security label properties for the representation are the security labels as they
were set at the time the representation was copied to its current location.
There is no connection between the representation and the original EPM
document.
Set a null security label value on objects that do not contain sensitive
information. Setting a non-null informative marking is also acceptable. Objects
with null security label values and non-null informative markings do not
restrict access, which means your Windchill system will not need to verify that
the user is an authorized participant.
Use security labels only when one or more values restrict access to an object.
Otherwise, use global attributes rather than non-null informative markings on
an object. Security labels that are purely informative markings are not a
replacement for global attributes.
For objects that do contain sensitive information, add participants to the label
value's authorized participant's group unless the participants only need access
457
All the name/value pairs applied to a business object are stored together in a
single database column with a size limit of 4000. For standard security labels,
keep the name attribute of the SecurityLabel element and the name
attribute of the SecurityLabelValue element as short as possible as these
values are not generally seen in the user interface. For more information, see
Edit the Security Labels Configuration File on page 416. For custom security
labels, keep the name attribute of the CustomSecurityLabel element and
the internal custom security labels values as short as possible. You can use a
custom translator to reduce the size of the internal values stored in the database.
For more information, see Create a Custom Translator Class on page 414.
Use caution when specifying an authorized participant for a security label value
or an agreement. Specifying a group or an organization as an authorized
participant gives those with permission to change group or organization
membership control over who is authorized by the security label value or
agreement. Make sure that you select groups and organizations whose
membership can only be modified by administrators that should be allowed to
extend access to objects with the security label value applied or that are
associated with the agreement. For example, if you select a system group
associated with a context team role as the authorized participant for an
agreement, by default the context administrator is able to change the team
membership and therefore also change who is an authorized participant for the
agreement. Unless the context administrator is also an agreement administrator,
the context administrator may not understand the impact of changing the team
membership.
If you are using custom security labels, PTC recommends adding validation to
the user interface if users are able to enter values manually, such as by using
the text field provided by default when custom security labels are configured.
A custom translator class is recommended to validate the values to prevent
458
unexpected values from being stored in the database, either if the user enters an
invalid value in the user interface or if an invalid value is specified in an import
file.
459
21
Installation Logs and
Tr o u b l e s h o o t i n g
Installation Log Files ................................................................................................ 461
Troubleshooting Your Initial Installation...................................................................... 462
The PTC Solution Installer Global Registry ................................................................ 477
This section describes where to find the log files that can help you debug issues
that arrise during installation. It also describes known issues and actions you can
take to resolve them.
460
Note
The <installer short name>_InstallLog.xml is only available after the installer
terminates.
When multiple executions of the same installer are performed to the same
installation directory, these log files are backed up and the file names are changed
to include a sequence number. The sequence numbers begin with 000. For
example, the log files for the first execution of the installer would be named as
follows:
461
Note
On Windows, the Local Settings directory may be hidden by default. If you
cannot find the Local Setting directory using the Windows Explorer, check
your folder options to ensure that hidden folders are displayed.
On UNIX, the logs are temporarily written to either /var/tmp or /tmp (JVM
implementation dependent). If the installer does not have permission to write to
the temporary directory, it writes the <installer short name>_InstallLog.xml file
to the user's <HOME> directory, but the <installer short name>_PtcInstall.log
is held in memory until they are both written to <Windchill>/installer/logs. If
the installation fails before you have actually clicked I ns ta ll , there is no
<installer short name>_PtcInstall.log written when the installer does not have
permission to write to the temporary directory.
When the installer is executed in a language other than English, messages in the
<installer short name>_PtcInstall.log files are written in both English and the
translated form. Not all messages have a translated form.
If problems occur during the installation, write down the location of the log files
and be prepared to send them to PTC Technical Support for analysis. If an installer
fails before the install has actually started, the files are located in the directory
identified by the operating system as noted previously.
Tr o u b l e s h o o t i n g Yo u r I n i t i a l I n s t a l l a t i o n
Reading through the following common problem descriptions may help you in
troubleshooting your installation problems.
P ro ble m:
When an installation fails, the installer logs are not written to the standard output
directory of <installation directory>/installer/logs.
462
Action:
In this case, the installer displays the location of the installation log files that it has
produced. Write down the location specified by the installer. The location of the
log files depends upon when in the installation process the installation fails. Refer
to Installation Log Files on page 461 for details.
P ro ble m:
When installing on Windows, the installation fails after the PTC Solution Installer
(PSI) closes before completing the installation.
Action:
This can result from the Windchill Directory Server or Java not being installed on a
local drive. The following error will be found in the WINDCHILLDS_PtcInstall.
log:
javax.naming.CommunicationException: Could not connect to the LDAP Server
See the section titled Setting the Installation Directory on Windows on page 51 in
the PTC Windchill Installation and Configuration Guide. If a prohibited file path
was specified in PSI for installation, reinstall using a non-prohibited file path.
P ro ble m:
If you are installing Windchill Directory Server on an IBM AIX Platform, the
installation may fail with the following error:
javax.naming.CommunicationException: Could not connect to the LDAP Server,
ldap
at com.ptc.ldapserver.install.
port: 389 ldap
manager: cn=Manager
actions.CheckServerStatus.process(CheckServerStatus.java:78)
at com.ptc.windchill.install.framework.InstallAction.run(InstallAction.java:476)
By default, the IBM JVM initially uses Internet Protocol Version 6 (IPv6) for all
network accesses, followed by using IPv4. If a sites Domain Name Server is not
set up properly to respond to IPv6 requests, the IPv6 requests may time out before
IPv4 use is attempted. For example, even a simple request to get the local host
name can cause such timeouts. The Windchill Directory Server code makes several
local host name requests and, therefore, may take a long time to start on some AIX
sites.
The Windchill Directory Server installation process only waits 120 seconds for the
Windchill Directory Server to start before continuing with installation tasks and the
server must be running for the installation to complete successfully. If, as a result
of the DNS timeouts, the Windchill Directory Server takes longer than 120 seconds
to start, then the Windchill Directory Server installation may fail with the error that
463
is identified above. Although the Windchill Directory Server may eventually start,
the installation does not complete successfully and you will not be able to connect
to the Control Panel.
Action:
This is an issue with a sites IPv6 DNS configuration in conjunction with the way
IPv6 is used by the IBM JVM. For additional information on the issue, see
information on the IBM site that is available from:
http://www-01.ibm.com/support/docview.wss?uid=swg21170467 .
Also see RFC 4074 that is available from:
http://www.ietf.org/rfc/rfc4074.txt.
One way to resolve the issue is to update the DNS to respond properly to IPv6
requests, as described in section 3 of RFC 4074.
After you have fixed the problem, rerun the installer.
Alternatively, if you are not using IPv6, you can set the IP configuration to use
only IPv4 by adding the following line to the /etc/netsvc.conf file:
hosts=bind4,local
Using IPv4 fixes the timeout problem that was causing the Windchill Directory
Server installation to fail.
After you have fixed the problem, rerun the installer.
P ro ble m:
On a UNIX system, the installer does not run.
This can happen if the TMP directory does not have the disk space required by the
installer.
Action:
Set the environment variable LAX_DEBUG=1 in the shell where the installer was
launched and restart the installer. This should result in output being written to the
console window.
If the output produced indicates that the amount of /tmp disk space required to
perform this installation is greater than what is available, you can set the
IATEMPDIR environment variable to a directory on a disk partition with enough
free disk space. Then restart the installer.
464
To set the variable, enter one of the following commands at the UNIX command
line prompt before running this installer again:
P ro ble m:
The installer cannot find a valid Java Virtual Machine (JVM).
This can happen in the following situations:
If you try running the installer using an executable file that is located in a
NoVM directory.
You are trying to install one of the products from the Windchill Third Party
Software CD or the Windchill Services CD over a network connection, and
you do not have a supported JVM on your local machine. For the installers, the
supported JVM is a version of Java 1.5.
Either or the following messages could be returned:
The installer requires Java 1.5 in your path. (on UNIX)
Could not find a valid JVM to load. (on Windows).
Action:
If you were not using a setup script that is located at the root directory on the CD,
rerun the installer using the setup script located in the root directory. Running the
installer from the root directory ensures that the JVM bundled with the installer is
used.
If you are installing over a network connection, locate a supported JVM and rerun
the installer using the setup command with the following as the first two arguments
on the command line.
UNIX:
<install_dir>/<setup_script> LAX_VM <java_install_dir>/bin/java
Wi n d o w s :
<install_dir>/<setup_script> LAX_VM <java_install_dir>/bin/java.exe
Where <install_dir> is the directory path to the setup file, <setup_script> is the
setup script in the root directory of the CD for the product you are installing (such
as setup_tomcat.vbs), and <java_install_dir> is the installation directory for the
JVM. The second argument is the actual Java VM executable, not a directory. If
any other arguments are passed in, they must follow these two arguments.
465
Alternative Meth od :
An alternative to running the setup script from command line and including the
LAX_VM option is to set the LAX_VM environment variable to the same value
that would be used on the command line. When this variable is set, running the
setup script that is in the root directory on the CD automatically adds LAX_VM
and <java_install_dir>/bin/java to the command line for the installer that you are
starting.
P ro ble m:
On AIX, the installer core dumps and does not launch.
Action:
This can happen if the IBM_MIXED_MODE_THRESHOLD environment
variable is set. Unset the IBM_MIXED_MODE_THRESHOLD variable.
P ro ble m:
Technical Support asks you to provide additional diagnostic information about
how the installer launches and what JRE is used to execute the installer.
Action:
There are two ways to obtain additional diagnostics:
On some Windows versions, you can press the CTRL key when you doubleclick on the setup.vbs script that is at the root level of the CD. This brings up a
command shell window with diagnostic information. You can copy this
information into a file to send to Technical Support.
On UNIX and Windows, you can set the environment variable LAX_DEBUG
to 1. Then execute the setup script for the installer that is at the root level of the
CD. The diagnostics are shown in the same command window (UNIX) or in a
pop-up window (Windows).
P ro ble m:
The installer does not run. The error message returned indicates that one of the
following requirements is not true:
Action:
Ensure that you are running on a supported platform. Although the message does
not indicate that Windows XP is supported, the installers can run on Windows XP
also.
466
Additionally, ensure that you are running the installer using the scripts located in
the root directory of the CD. This ensures that Java Virtual Machine bundled with
the installer is being used.
P ro ble m:
Sometimes the installer appears to skip over a step.
Action:
The installers behave in a wizard-like fashion with N ex t and P r ev i o us buttons. In a
system where the response is slow, the wizard may not advance to the next or
previous step as quickly as expected and you may click the N e x t or P re v i ou s
button again (repeatedly). This mouse click event is queued up and acted upon
when the system responds. This may advance the windows beyond the expected
window.
Once the N ex t or P re v i o u s button has been clicked, wait for the installer to respond
and advance to the intended window.
Under normal system conditions, the installer moves forward and backward
through the windows with little noticeable delay.
This issue has been filed as a bug with the software vendor Macrovision.
P ro ble m:
On Windows, the installer C a n c e l Ins ta l l at i on dialog box demands the user
interface focus.
Action:
When you try to cancel the installer through the C an c el In s t al l a ti o n dialog box, the
window monopolizes the window focus on the desktop.
To release the focus, click either the cancel (the X in the upper right corner of the
dialog box) or R e s u me button.
467
P ro ble m:
During an installation, the installer displays the following:
Action:
The appearance of this window indicates that the installer could not locate a
required file from the current media set.
If you are installing over a network, the window can be an indication that the
response time across the network is too slow for the installer. Click C a n c e l and
rerun the installer. If the windows appears again, try running the installer when
there is less network traffic or from another network, or copy the installation files
to your local system.
If you are installing from the installation CDs or a local directory, then the
installation data set is incomplete. Try downloading the installation files again. If
this fails to correct the problem, contact Technical Support for assistance.
P ro ble m:
The following error message appears when you are doing a keyword search in
Windchill Index Search:
Resource limit Exceeded
P ro ble m:
The following error message appears on a UNIX system during a data load if the
Windchill Index Search server is not running:
Indexing Queue is Experiencing Problems
Action:
PTC recommends you disable indexing during data loads and use the Bulk Index
Tool for a more performant load.
Also, you need to make sure that Windchill Index Search has enough time to start
completely before the data load is started, and the indexing queue is ready. You
need to check this directly.
468
If the error still occurs, start Windchill Index Search manually. See the information
in Completing Configuration - Manual Steps.
Note
The indexing errors clear once Windchill Index Search is up and running
correctly. Everything then should run normally.
P ro ble m:
On AIX, installing the Windchill solution with multiple optional products fails.
Action
The last JAR to be loaded from the JDK should always be tools.jar.
AIX limits the classpath, so long classpaths get truncated when there are many
optional products installed. The best way to diagnose this is when the classpath
listing at the top of the MethodServer log arbritrarily truncates the last line(s) of the
path as listed below. A common secondary symptom is the exception on the
subject line
- wt.util.WTException: java.lang.NoClassDefFoundError:
com.sun.tools.javac.Main (also in the MethodServer log).
E x a m p l e , N o n - Wo r k i n g M e t h o d S e r v e r L o g
Mon 6/30/08 16:27:15: main: ------------------------------------------------------------------------------
: wt.method.server.startup -
Starting MethodServer
: wt.method.server.startup -
: wt.method.server.startup -
: wt.method.server.startup -
Class path =
469
/mnt/disk2/ptc/Windchill/codebase
470
471
Mo n 6 /3 0 /08 1 6 :27 :1 5 : ma in :
/mnt/disk 2/ptc /
: wt.method.server.startup -
: wt.method.server.startup -
E x a m p l e , Wo r k i n g M e t h o d S e r v e r L o g
Thu 6/26/08 18:20:36: main: ------------------------------------------------------------------------------
472
: wt.method.server.startup -
Starting MethodServer
: wt.method.server.startup -
: wt.method.server.startup -
: wt.method.server.startup -
Class path =
/mnt/disk2/ptc/Windchill/codebase
473
474
/mnt/disk2/ptc/Windchill/codebase/WEB-INF/lib/scmiWeb.jar
: wt.method.server.startup -
: wt.method.server.startup -
P ro ble m:
When installing as a root user on UNIX, the PTC Solution Installer terminates after
hitting In s tal l .
Action:
Clear the SESSION_MANAGER variable. This issue will not occur if using the
PSI as a non-root user.
475
Tr o u b l e s h o o t i n g t h e We b S e r v e r, S e r v l e t E n g i n e a n d
Method S erver
You can gather information on Web server, servlet engine, and method serve
communication to help you troubleshoot issues before contacting technical
support. Perform the following:
1. Start the Web server, servlet engine, and method server.
2. From a windchill shell, change to the <Windchill>\codebase directory
and enter the following command:
ant -f ServerConnTest.xml -Dusername=<UserName> Dpassword=<password>
3. Select each of the links. The following list describes a successful result:
If all of these links show successful messages, the communication between the
Web server, servlet engine and method server is working. Any failure messages
include more information on troubleshooting the issue.
476
Wi n d o w s
<drive>\User Profiles\<user_name>\Application Data\PTC\ Windchill\<instance_id>
Within the <instance_id> is the actual registry file psi_iir.xml which contains
information about that instance. There may be some numbered backups such as
psi_iir.000.xml as well.
477
478
22
Loading and Mounting the CDROM on UNIX
Determining the SCSI ID of the CD-ROM Drive .......................................................... 480
Loading and Mounting the CD-ROM Locally .............................................................. 482
Loading and Mounting the CD-ROM Remotely........................................................... 483
Most UNIX systems automatically mount the CD-ROM after it is loaded into the
CD-ROM drive. For users whose machines do not mount automatically, the
following instructions explain how to load and mount the CD-ROM both locally
and remotely.
Note
Sun Solaris 2.x has automatic CD mounting. For more specific information on
how to mount CDs on Sun hardware, visit http://docs.sun.com/.
479
480
For external CD-ROM drives, the SCSI ID can be found on the back of your
CD-ROM drive. Look for a single-digit switch. The displayed number is the
SCSI ID number.
For internal CD-ROM drives, use the following table to find the command(s)
you need to enter to determine the SCSI ID (the number in bold is the ID).
Co mman ds U s e d to Find th e S CS I ID o f t he C D D ev ic e
System
HP-UX
SCSI ID
3
<device>should be replaced
with each item in the /dev/dsk
directory.
For the device file identified as
type: CD-ROM, the SCSI ID is
to the right of the letter t in this
example of a device file name:
c0t3 d0
SUN
AIX
Note
The identified device file name
is the same file name that is
used in the command to mount
the CD-ROM.
Automatically mounts the CDROM.
lsdev -C -c cdrom -H
IBM eServer p5 and pSeries
systems have IDE CD-ROM Drive
4
(in the string 0008
00#0)
Note
The inclusion of a system in this table does not indicate support for that
system; this information is only included to help you determine the SCSI ID
for CD-ROM drives that are remotely mounted to your workstation. See the
software platform matrix (available from http://www.ptc.com/appserver/cs/doc/
refdoc.jsp) for information on supported systems and platforms.
481
3. To mount the CD-ROM drive, enter the command appropriate for your UNIX
workstation system.
In the command line, replace the # symbol with the SCSI ID of the drive.
Example:
/dev/dsk/c5t2do /cdrom pfs-rrip xlat=unix 0 0
b. Perform this step (and steps c through e) as the root user. Run the
following file:
# nohup /usr/sbin/pfs_mountd &
482
If you have not configured a CD-ROM device in /etc/fstab or did not allow the Red
Hat installer to automatically configure a CD-ROM device in your /etc/fstab, refer
to Red Hat documentation for instructions. You can find Red Hat documentation
at:
http://www.redhat.com/docs/manuals/enterprise/
Sun
File to Edit
/etc/exports
/etc/exports
/etc/dfs/dfstab
Line to Add
/cdrom -ro
/cdrom -ro (AIX
5.2)
/cdrom -sec=sys,
ro (AIX 5.3)
share -F nfs -o ro
/cdrom
C omma nd
exportfs /cdrom
/usr/sbin/exportfs
/cdrom
shareall
483
5. If the /cdrom directory does not already exist on your local UNIX workstation,
create it using the following command:
mkdir /cdrom
6. The CD-ROM directory must be mounted from the remote UNIX system to
your local workstation. Use the following table to identify your local UNIX
workstation type and execute the corresponding command. In the command,
specify values, as follows:
<node>is the name of the remote UNIX system to which the CD-ROM
drive is connected.
<cdmount>is the CD-ROM mount directory used on the remote UNIX
system.
System
HP-UX
AIX
Sun
Note
If problems occur while using an installer from
a remote-mounted CD-ROM, you can try
remounting the remote CD-ROM using one of
the following commands:
For Sun systems
mount -o ro,hard,vers=2 <node>:<cdmount> /cdrom
7. If your system does not automatically mount the CD-ROM, enter the required
command. For example, for Hewlett Packard systems:
/etc/mount -F cdfs -o ro /dev/dsk/c?t#d0 /cdrom
Note
In the preceding example, the number sign (#) represents the SCSI ID of
the CD-ROM drive.
484
8. The CD-ROM file system must be exported before a remote UNIX system
allows access to the CD-ROM from your local UNIX workstation. To
accomplish this, you must add a line to a file on your local UNIX workstation,
and, in some cases, execute a command.
9. Use the following table, to identity your remote system; add the text in the Li n e
t o A d d column to the file listed in the F i l e t o E d i t column. You must have the
correct write permissions to edit the files. If necessary, execute the command
listed in the C o mma n d column. For additional information, see your hardwarespecific documentation.
System
HP-UX
Sun
File to Edit
/etc/exports
/etc/dfs/dfstab
Line to Add
/cdrom -ro
share -F nfs -o ro
/cdrom
C omma nd
exportfs /cdrom
shareall
485
23
Recov ering an Installation
If your installation was unsuccessful and you re-run the PTC Solutions Installer on
the same machine, you are given the option to recover your installation. This gives
you the opportunity to fix the issue that caused the installation from that point.
Note
During the recovery some panels may be disabled.
To recover a failed installation, use the following procedure:
1. Execute the PTC Solution Installer (PSI).
2. On the first screen with the PTC logo, select the installer language and click
Nex t.
3. Review the Before You Begin and click N e x t.
4. Review the license and have the appropriate person accept it. Click N ex t.
5. A Recover Failed Installation message is displayed. Click Yes to recover the
most recent failed installation; if you have more than one, click N o and
continue to the next screen.
6. Perform the following based on your action from step 5:
a. If you clicked Ye s in step 5, verify the installation information and correct
the information that caused the failure.
b. If you clicked N o in step 5, select R e c o v er and click N e x t.
i. Select your installation instance to complete and click N e x t.
ii. Verify the installation information and correct the information that
caused the failure.
486
24
S tarting and Stopping Windchill
Starting and Stopping Apache and the Windchill Method Server .................................. 488
Using a URL to Access Windchill .............................................................................. 489
Running Windchill as a Windows Service .................................................................. 490
This chapter provides instructions on managing the Windchill servers (start and
stop), how to initiate the Windchill home page, and how to configure Windchill to
run as a Windows service.
487
This shortcut is created by the Info*Engine installer. You can optionally elect
to create the start file shortcut during the Info*Engine installation.
Run <Apache>/bin/httpd.exe.
488
Select one of the following shortcut options to start the Windchill method server
and to launch the windchill shell:
Where <webapp> represents the Web Application Context Root value you
specified during the Info*Engine installation, for example, Windchill.
Desktop Icon:
Click on the Wi n d c h i l l Me th od S er v e r icon.
Click on the w i n dc hi l l s he l l icon.
If you configured Windchill for HTTPS, then the format would be:
https://<hostname>:<port>/<webapp>
The default port number for HTTPS is 443. If you assigned a value other than the
default value, then include the port number in the HTTPS URL string.
489
On Windows, if shortcuts are created by the Windchill Services installer (see Using
a Windows Shortcut above), a shortcut is included that will open a web browser
window directly to the Windchill home page. For example, to access Windchill
you can navigate to S ta rt P r og ra ms < w e ba p p> , and click W i nd c hi l l H o me
P a g e . This shortcut is provided solely as a convenience for the administrator; it is
accessible only through the Windows system on which Windchill is installed.
The shortcut target file is <Windchill>/bin/HomePage.html (where <Windchill> is
the Windchill installation directory); the installer writes the Windchill URL into
this file using the format described above.
Note
The URL stored in HomePage.html is written only once by the Windchill
Services installer. If the URL subsequently changes (e.g., because of a port
change), the administrator needs to manually edit this file accordingly to
continue to use the shortcut.
490
Tr o u b l e s h o o t i n g T i p s
If the JNI error finding main class or Unable to change the working directory
messages are displayed in the Windows Event Viewer, then try the following:
Where <ServiceName> is the name you gave the Windchill Windows service when
you created it.
491