Scheduler

This section provides a step-by-step guide to installing, configuring, and using the Scheduler.

Configuration

Note – all actions required for setting up and configuring emCA Scheduler should be done using administrator privileges

Environment Variables For scheduler.properties

This file is used to configure database related properties like dialect, driver class name, URL, Username, password (database user should have full privilege to the schema created for emCAScheduler) as well as logs.

Variable name: EMCA_SCHEDULER_CONFIGURATION_PATH

Variable value: location of property files (scheduler.properties)

For Linux

For setting the environment variable in Linux, run the following command.

sudo -H gedit /etc/environment

It will open the environment folder and set emCAScheduler path inside that

EMCA_SCHEDULER_CONFIGURATION_PATH for scheduler.properties file .

Once the Environment variable is set for scheduler.properties, the user can open the scheduler.properties to configure various options which includes configuring of connection to emCASheduler well as logs.

Snapshot

Please find below is the scheduler.properties file snapshot for reference:

[This property is meant for configuring MySQL database connection]
hibernate.dialect=org.hibernate.dialect.MySQLDialect
jdbc.driverClassName=com.mysql.jdbc.Driver
jdbc.url=jdbc:mysql://127.0.0.1:3306/emca
jdbc.username=[EMCA DB User]
jdbc.password=[ENCRYPTED DB PASSWORD]
 
[This property is meant for checking the certificate status]
reinstatedays=1
 
revokeCertificate=true
updatecrl=true
 
#FTP scheduler
emca.repository.crl=false
emca.repository.cert=true
emca.repository.upload=true
 
#FTP Details[This property is meant for checking the certificates copied into file folder]
server = 127.0.0.1
port = 21
user = [FTP USER]
pass = [FTP PASSWORD]
path=[FTP FOLDER NAME]
 
#Ldap Config [This property is meant for checking the certificates published to LDAP server]
emca.ldap.crl=true
emca.ldap.cert=true
emca.ldap.os=w
 
#Local Repository
localFilePath=[LOCAL Repository PATH TO PUBLISH THE CRL'S]
emca.local.crl=true

Deployment

The following component is required for deployment.

emCAScheduler.bat

emCAScheduler comes as a .bat file which has to run and provide configuration through properties file.

Please configure and save all the properties defined in section –‘(B) For scheduler.properties’ under section 5.10.1.1. Environment Variables. Then run the emCASchedule .bat file.

Please find below steps to run the scheduler in windows:

Copy the emCAScheduler.bat inside C:\emCA

run emCAScheduler.bat you will get the window as given below:

For scheduling task or emCAScheduler follow the steps given below :

1. Go to start in windows → search for Task Scheduler and open it as shown below

2. Click on ‘Create Basic Task’ from the right side of window. The Create Basic Task Wizard window will be displayed. Enter the Name of the scheduler as required. The Description is optional as shown below.

3. Click on Next. You will be redirected to another window where the Task start time can be selected.

4. Click on ‘Next’. You will be redirected to another window. Set the date and time as given below:

5. Click on ‘Next’. Select the ‘Action’ as shown below.

6. Once done, enter the Program/Script to start a program and enter the argument to run the scheduler. Argument can be either single or multiple. Arguments can be entered with space as follows:

crl file suspendedCerts ftp ldap

a) crl : Run the command ‘crl scheduler’ to update the CRL where validity is less than the current date.

b) file: Run the command ‘file scheduler’ to copy all the CRL into local file folder.

c) suspendedCerts : Run the command ‘suspendedCerts’ to revoke the suspended certificates.

d) ftp: Run the command ‘ftp’ to copy all the Root, CA, certificates which is created through emCA application into a file server.

f) ldap: Run the command ‘ldap’ to publish all the Root, CA and User certificates in LDAP server.

7. Click on ‘Next’ button. The following window will be displayed.

8. Click on ‘Finish’. You can see the task scheduled as ‘emCAScheduler’ by clicking on ‘Task Scheduled Library’ on the left side of the window given below.

Quick Check Guide

To verify if the emCAScheduler is successfully run, follow the below steps.

FTP: View the certificate in FTP with the credentials given in properties as FTP details:

Give the Login Url: ftp:// 127.0.0.1. in the properties file (server: 127.0.0.1). The system will request for username and password as shown below:

• Enter the user name and password as mentioned in the properties file: user = [FTP USER], pass = [FTP PASSWORD], and click on the Sign in button.

• Now click on the folder as given in the properties file: path=[FTP FOLDER NAME] . you can see all the certificates.