Installation and Configuration Guide > Part III: Run the Big Data Suite Installer > Create a Domain and Install All Big Data Products > Configure the Domain
  

Configure the Domain

This task includes installer prompts to configure the domain. You will provide information to create a domain, configure the domain security, domain repository, and application services.
When you complete the preliminary tasks, you will continue with the installer prompts to configure Enterprise Data Catalog.

Configure the Domain Options

After you review the Pre-Installation summary, you can enter the domain information.
    1. Press 1 to create a domain.
    When you create a domain, the node that you create becomes a gateway node in the domain. The gateway node contains a Service Manager that manages all domain operations.
    2. Select whether you want to enable secure communication for services in the domain.
    1. a. Press 1 to disable secure communication for the domain.
    2. b. Press 2 to enable secure communication for the domain.
    By default, if you enable secure communication for the domain, the installer sets up an HTTPS connection for the Informatica Administrator. You can also create a domain configuration repository on a secure database.
    3. Specify the connection details for Informatica Administrator.
    1. a. If you do not enable secure communication for the domain, you can specify whether to set up a secure HTTPS connection for the Informatica Administrator.
    2. The following table describes the options available to enable or disable a secure connection to Informatica Administrator:
      Option
      Description
      Enable HTTPS for Informatica Administrator
      Set up a secure connection to Informatica Administrator.
      Disable HTTPS
      Do not set up a secure connection to Informatica Administrator.
    3. b. If you enable secure communication for the domain or if you enable HTTPS connection for the Informatica Administrator, enter the keystore file and port number for the HTTPS connection to Informatica Administrator.
    4. The following table describes the connection information you must enter if you enable HTTPS:
      Option
      Description
      Port
      Port number for the HTTPS connection.
      Keystore file
      Select whether to use a keystore file generated by the installer or a keystore file you create. You can use a keystore file with a self-signed certificate or a certificate signed by a certification authority.
      1 - Use a keystore generated by the installer
      2 - Specify a keystore file and password
      If you select to use a keystore file generated by the installer, the installer creates a self-signed keystore file named Default.keystore in the following location: <Informatica installation directory>/tomcat/conf/
    5. c. If you specify the keystore, enter the password and location of the keystore file.
    6. d. If you enabled secure communication for the domain, the Domain Security - Secure Communication section appears.
    7. e. If you did not enable secure communication for the domain, the Domain Configuration Repository section appears. Skip to Configure Domain Repository Details.
    4. Select whether to enable SAML authentication to configure Security Assertion Markup Language (SAML)-based single sign-on (SSO) support for web-based Informatica applications in an Informatica domain.
    The following table describes the information you must enter to enable SAML authentication:
    Prompt
    Description
    Enable SAML authentication
    Select whether to enable SAML authentication:
    1 - No
    If you select No, skip to Configure Domain Security.
    2 - Yes
    If you select Yes, configure the SAML authentication.
    5. Enter the Identity Provider URL for the domain.
    6. Enter the identity provider assertion signing certificate alias name.
    7. Select whether to use the default Informatica SSL certificates or to use your SSL certificates to enable secure communication in the domain.
    The following table describes the SSL certificate options for SAML authentication:
    Option
    Description
    Use the default Informatica SSL certificate file.
    Select to use the default Informatica truststore file for SAML authentication.
    Enter the location of the SSL certificate file.
    Select to use a custom truststore file for SAML authentication. Specify the directory containing the custom truststore file on gateway nodes within the domain. Specify the directory only, not the full path to the file.
    8. If you provide the security certificates, specify the location and passwords of the keystore and truststore files.
    The following table describes the location and password of the truststore file:
    Property
    Description
    Truststore Directory
    Specify the directory containing the custom truststore file on gateway nodes within the domain. Specify the directory only, not the full path to the file.
    Truststore Password
    The password for the custom truststore file.
The Configure Domain Security appears.

Configure Domain Security

After you configure the domain, you can configure domain security.
    1. In the Domain Security - Secure Communication section, specify whether to use the default Informatica SSL certificates or to use your SSL certificates to secure domain communication.
    1. a. Select the type of SSL certificates to use.
    2. The following table describes the options for the SSL certificates that you can use to secure the Informatica domain:
      Option
      Description
      Use the default Informatica SSL certificates
      Use the default SSL certificates contained in the default keystore and truststore.
      Note: If you do not provide an SSL certificate, Informatica uses the same default private key for all Informatica installations. If you use the default Informatica keystore and truststore files, the security of your domain could be compromised. To ensure a high level of security for the domain, select the option to specify the location of the SSL certificate files.
      Use custom SSL certificates
      Specify the path for the keystore and truststore files that contain the SSL certificates. You must also specify the keystore and truststore passwords.
      You can provide a self-signed certificate or a certificate issued by a certificate authority (CA). You must provide SSL certificates in PEM format and in Java Keystore (JKS) files. Informatica requires specific names for the SSL certificate files for the Informatica domain. You must use the same SSL certificates for all nodes in the domain. Store the truststore and keystore files in a directory accessible to all the nodes in the domain and specify the same keystore file directory and truststore file directory for all nodes in the same domain.
    3. b. If you provide the SSL certificate, specify the location and passwords of the keystore and truststore files.
    4. The following table describes the parameters that you must enter for the SSL certificate files:
      Property
      Description
      Keystore file directory
      Directory that contains the keystore files. The directory must contain files named infa_keystore.jks.
      Keystore password
      Password for the keystore infa_keystore.jks.
      Truststore file directory
      Directory that contains the truststore files. The directory must contain files named infa_truststore.jks and infa_truststore.pem.
      Truststore password
      Password for the infa_truststore.jks file.
    The Domain Configuration Repository section appears.

Configure Domain Repository Details

After you configure domain security, you can configure domain repository details.
    1. Select the database to use for the domain configuration repository details.
    The following table lists the databases you can use for the domain configuration repository:
    Prompt
    Description
    Database type
    Type of database for the domain configuration repository. Select from the following options:
    1 - Oracle
    2 - Microsoft SQL Server
    3 - IBM DB2
    4 - Sybase ASE
    The Informatica domain configuration repository stores metadata for domain operations and user authentication. The domain configuration repository must be accessible to all gateway nodes in the domain.
    2. Enter the properties for the database user account.
    The following table lists the properties for the database user account:
    Property
    Description
    Database user ID
    Name for the domain configuration database user account.
    User password
    Password for the domain configuration database user account.
    3. Select whether to create a secure domain configuration repository.
    You can create a domain configuration repository in a database secured with the SSL protocol. To create a domain configuration repository in a secure database, press 1 and skip to step 5.
    To create a domain configuration repository in an unsecure database, press 2.
    4. If you do not create a secure domain configuration repository, enter the parameters for the database.
    1. a. If you select IBM DB2, select whether to configure a tablespace and enter the tablespace name.
    2. The following table describes the properties that you must configure for the IBM DB2 database:
      Property
      Description
      Configure tablespace
      Select whether to specify a tablespace:
      1 - No
      2 - Yes
      In a single-partition database, if you select No, the installer creates the tables in the default tablespace. In a multi-partition database, you must select Yes.
      Tablespace
      Name of the tablespace in which to create the tables. Specify a tablespace that meets the pageSize requirement of 32768 bytes.
      In a single-partition database, if you select Yes to configure the tablespace, enter the name of the tablespace in which to create the tables.
      In a multi-partition database, specify the name of the tablespace that resides in the catalog partition of the database.
    3. b. If you select Microsoft SQL Server, enter the schema name for the database.
    4. The following table describes the properties that you must configure for the Microsoft SQL Server database:
      Property
      Description
      Schema name
      Name of the schema that will contain domain configuration tables. If this parameter is blank, the installer creates the tables in the default schema.
    5. c. To enter the JDBC connection information using the JDBC URL information, press 1. To enter the JDBC connection information using a custom JDBC connection string, press 2.
    6. d. Enter the JDBC connection information.
    5. If you create a secure domain configuration repository, enter the parameters for the secure database.
    If you create the domain configuration repository on a secure database, you must provide the truststore information for the database. You must also provide a JDBC connection string that includes the security parameters for the database.
    The following table describes the options available to create a secure domain configuration repository database:
    Property
    Description
    Database truststore file
    Path and file name of the truststore file for the secure database.
    Database truststore password
    Password for the truststore file.
    Custom JDBC Connection String
    JDBC connection string to connect to the secure database, including the host name and port number and the security parameters for the database.
    In addition to the host name and port number for the database server, you must include the following secure database parameters: You can use the following syntax for the connection strings:
    EncryptionMethod
    Required. Indicates whether data is encrypted when transmitted over the network. This parameter must be set toSSL.
    ValidateServerCertificate
    Optional. Indicates whether Informatica validates the certificate that the database server sends.
    If this parameter is set to True, Informatica validates the certificate that the database server sends. If you specify the HostNameInCertificate parameter, Informatica also validates the host name in the certificate.
    If this parameter is set to False, Informatica does not validate the certificate that the database server sends. Informatica ignores any truststore information that you specify
    Default is True.
    HostNameInCertificate
    Optional. Host name of the machine that hosts the secure database. If you specify a host name, Informatica validates the host name included in the connection string against the host name in the SSL certificate.
    cryptoProtocolVersion
    Required. Specifies the cryptographic protocol to use to connect to a secure database. You can set the parameter to cryptoProtocolVersion=TLSv1.1 or cryptoProtocolVersion=TLSv1.2 based on the cryptographic protocol used by the database server:
    Note: The installer does not validate the connection string. Verify that the connection string contains all the connection parameters and security parameters required by your database.
    6. If the database contains a domain configuration repository for a previous domain, select to overwrite the data or set up another database.
    The following table describes the options of overwriting the data or setting up another database when you create a domain configuration repository for a previous domain:
    Option
    Description
    1 - OK
    Enter the connection information for a new database.
    2 - Continue
    The installer overwrites the data in the database with new domain configuration.
The Domain Security - Encryption Key section appears.

Configure the Encryption Key

After you configure domain repository, you can configure encryption key.
    bulletIn the Domain Security - Encryption Key section, enter the keyword and directory for the encryption key for the Informatica domain.
    The following table describes the encryption key parameters that you must specify when you create a domain:
    Property
    Description
    Keyword
    Keyword to use to create a custom encryption key to secure sensitive data in the domain. The keyword must meet the following criteria:
    • - From 8 to 20 characters long
    • - Includes at least one uppercase letter
    • - Includes at least one lowercase letter
    • - Includes at least one number
    • - Does not contain spaces
    The encryption key is created based on the keyword that you provide when you create the Informatica domain.
    Encryption key directory
    Directory in which to store the encryption key for the domain. By default, the encryption key is created in the following directory: <Informatica installation directory>/isp/config/keys.
    The installer sets different permissions to the directory and the files in the directory. For more information about the permissions for the encryption key file and directory, see Secure Files and Directories.
The Domain and Node Configuration section appears.

Configure the Domain and Node

After you configure the encryption key, you can configure the domain and node.
    1. Enter the information for the domain and the node that you want to create.
    The following table describes the properties that you set for the domain and gateway node.
    Property
    Description
    Domain name
    Name of the Informatica domain to create. The default domain name is Domain_<MachineName>.
    The name must not exceed 128 characters and must be 7-bit ASCII only. The name cannot contain a space or any of the following characters: ` % * + ; " ? , < > \ /
    Node name
    Name of the node to create.
    Node host name
    Host name or IP address of the machine on which to create the node.
    If the machine has a single network name, use the default host name. If the a machine has multiple network names, you can modify the default host name to use an alternate network name.
    Note: The node host name cannot contain the underscore (_) character. Do not use localhost. The host name must explicitly identify the machine.
    Node port number
    Port number for the node. The default port number for the node is 6005. If the port number is not available on the machine, the installer displays the next available port number.
    Domain user name
    User name for the domain administrator. You can use this user name to initially log in to Informatica Administrator. Use the following guidelines:
    • - The name is not case sensitive and cannot exceed 128 characters.
    • - The name cannot include a tab, newline character, or the following special characters: % * + / ? ; < >
    • - The name can include an ASCII space character except for the first and last character. Other space characters are not allowed.
    2. Select whether you want to enable password complexity to secure sensitive data in the domain.
    The following table describes the password complexity:
    Prompt
    Description
    Password complexity
    Select whether you want to enable password complexity.
    1 - Yes
    2 - No
    If you select Yes, the password must meet the following requirements:
    It must be at least eight characters long and contain at least one alpha character, one numeric character, and one special character.
    Domain password
    Password for the domain administrator. The password must be more than 2 characters and must not exceed 16 characters.
    Not available if you configure the Informatica domain to run on a network with Kerberos authentication.
    Confirm password
    Enter the password again to confirm.
    Not available if you configure the Informatica domain to run on a network with Kerberos authentication.
    3. Select whether to display the default ports for the domain and node components assigned by the installer.
    The following table describes the advanced port configuration page:
    Prompt
    Description
    Display advanced port configuration page
    Select whether to display the port numbers for the domain and node components assigned by the installer:
    1 - No
    2 - Yes
    If you select Yes, the installer displays the default port numbers assigned to the domain components. You can specify the port numbers to use for the domain and node components. You can also specify a range of port numbers to use for the service process that will run on the node. You can use the default port numbers or specify new port numbers. Verify that the port numbers you enter are not used by other applications.
    4. If you display the port configuration page, enter new port numbers at the prompt or press Enter to use the default port numbers.
    The following table describes the ports that you can set:
    Port
    Description
    Service Manager port
    Port number used by the Service Manager on the node. The Service Manager listens for incoming connection requests on this port. Client applications use this port to communicate with the services in the domain. The Informatica command line programs use this port to communicate to the domain. This is also the port for the SQL data service JDBC/ODBC driver. Default is 6006.
    Service Manager Shutdown port
    Port number that controls server shutdown for the domain Service Manager. The Service Manager listens for shutdown commands on this port. Default is 6007.
    Informatica Administrator port
    Port number used by Informatica Administrator. Default is 6008.
    Informatica Administrator HTTPS port
    No default port. Enter the required port number when you create the service. Setting this port to 0 disables an HTTPS connection to the Administrator tool.
    Informatica Administrator shutdown port
    Port number that controls server shutdown for Informatica Administrator. Informatica Administrator listens for shutdown commands on this port. Default is 6009.
    Minimum port number
    Lowest port number in the range of dynamic port numbers that can be assigned to the application service processes that run on this node. Default is 6014.
    Maximum port number
    Highest port number in the range of dynamic port numbers that can be assigned to the application service processes that run on this node. Default is 6114.
    5. Select if you want to create Enterprise Data Catalog Application Services.
    The following table describes the option to configure the application services:
    Prompt
    Description
    Create Enterprise Data Catalog Application Services
    Select whether you want to configure the Model Repository Service and Data Integration Service.
    1 - Yes
    2 - No
    If you select Yes, you can create the application services.
    If you select No, you can create the application services from the Administrator tool.
    6. Select if you want to create a monitoring Model Repository Service to monitor domain statistics.
    The following table describes the options to configure monitoring Model Repository :
    Prompt
    Description
    Create a monitoring Model Repository Service
    Select whether you want to create a monitoring Model Repository Service.
    1 - Yes
    2 - No
    If you select Yes, you can create a monitoring Model Repository Service.
    If you select No, you can create a monitoring Model Repository Service from the Administrator tool.
If you choose to create Enterprise Data Catalog Application Services, the Model Repository Database section appears. If you choose not to create Enterprise Data Catalog Application Services, the Post-Installation Summary section indicates whether the installation completed successfully. The summary also shows the status of the installed components and their configuration.

Configure Model Repository Database Details

After you configure the domain and the node, you can configure the Model repository database properties.
    1. Select the database to configure Model repository database.
    The following table lists the database type for the Model repository:
    Prompt
    Description
    Database type
    Type of database for the Model repository. Select from the following options:
    1 - Oracle
    2 - Microsoft SQL Server
    3 - IBM DB2
    2. Enter the properties for the database user account.
    The following table lists the properties for the database user account:
    Property
    Description
    Database user ID
    Name for the Model repository database user account.
    User password
    Password for the Model repository user account.
    3. Select whether to create a secure Model repository database.
    You can create a Model repository in a database secured with the SSL protocol. To create a Model repository in a secure database, press 1 and skip to step 4.c.
    To create a Model repository in an unsecure database, press 2.
    4. If you do not create a secure Model repository, enter the parameters for the database.
    1. a. If you select IBM DB2, select whether to configure a tablespace and enter the tablespace name.
    2. The following table describes the properties that you must configure for the IBM DB2 database:
      Property
      Description
      Configure tablespace
      Select whether to specify a tablespace:
      1 - No
      2 - Yes
      In a single-partition database, if you select No, the installer creates the tables in the default tablespace. In a multi-partition database, you must select Yes.
      Tablespace
      Name of the tablespace in which to create the tables. Specify a tablespace that meets the pageSize requirement of 32768 bytes.
      In a single-partition database, if you select Yes to configure the tablespace, enter the name of the tablespace in which to create the tables.
      In a multi-partition database, specify the name of the tablespace that resides in the catalog partition of the database.
    3. b. If you select Microsoft SQL Server, enter the schema name for the database.
    4. The following table describes the properties that you must configure for the Microsoft SQL Server database:
      Property
      Description
      Schema name
      Name of the schema that will contain domain configuration tables. If this parameter is blank, the installer creates the tables in the default schema.
    5. c. To enter the JDBC connection information using the JDBC URL information, press 1. To enter the JDBC connection information using a custom JDBC connection string, press 2.
    6. d. Enter the JDBC connection information.
The Service Parameters section appears.

Configure Monitoring Model Repository Database Details

If you chose to create a monitoring Model Repository Service, you can provide connection information about the repository database.
    1. Select the database for the monitoring Model repository.
    The following table lists the database type for monitoring Model repository:
    Prompt
    Description
    Database type
    Type of database type for monitoring Model repository. Select from the following options:
    1 - Oracle
    2 - Microsoft SQL Server
    3 - IBM DB2
    2. Enter the properties for the database user account.
    The following table lists the properties for the database user account:
    Property
    Description
    Database user ID
    Name for the monitoring Model repository database user account.
    User password
    Password for the Monitoring model repository database user account.
    3. Select whether to create a secure monitoring Model repository.
    You can create a monitoring Model repository in a database secured with the SSL protocol. To create a monitoring Model repository in a secure database, press 1 and skip to step 4.c.
    To create a monitoring Model repository in an unsecured database, press 2.
    4. If you do not create a secure monitoring Model repository, enter the parameters for the database.
    1. a. If you select IBM DB2, select whether to configure a tablespace and enter the tablespace name.
    2. The following table describes the properties that you must configure for the IBM DB2 database:
      Property
      Description
      Configure tablespace
      Select whether to specify a tablespace:
      1 - No
      2 - Yes
      In a single-partition database, if you select No, the installer creates the tables in the default tablespace. In a multi-partition database, you must select Yes.
      Tablespace
      Name of the tablespace in which to create the tables. Specify a tablespace that meets the pageSize requirement of 32768 bytes.
      In a single-partition database, if you select Yes to configure the tablespace, enter the name of the tablespace in which to create the tables.
      In a multi-partition database, specify the name of the tablespace that resides in the catalog partition of the database.
    3. b. If you select Microsoft SQL Server, enter the schema name for the database.
    4. The following table describes the properties that you must configure for the Microsoft SQL Server database:
      Property
      Description
      Schema name
      Name of the schema that will contain domain configuration tables. If this parameter is blank, the installer creates the tables in the default schema.
    5. c. To enter the JDBC connection information using the JDBC URL information, press 1. To enter the JDBC connection information using a custom JDBC connection string, press 2.
    6. d. Enter the JDBC connection information.
The Service Parameters section appears.

Configure the Application Service Parameters

After you configure the Model Repository database, you can configure the service parameters for the application services.
    1. Enter the following service parameter information:
    Port
    Description
    Model Repository Service name
    Name of the Model Repository Service to create in the Informatica domain.
    Data Integration Service name
    Name of the Data Integration Service to create in the Informatica domain.
    HTTP protocol type
    Type of connection to the Data Integration Service. Select one of the following options:
    • - HTTP. Requests to the service uses an HTTP connection.
    • - HTTPS. Requests to the service uses a secure HTTP connection.
    • - HTTP&HTTPS. Requests to the service can use either an HTTP or HTTPS connection.
    HTTP port
    Port number to used for the Data Integration Service. Default is 9085.
    HTTPS port
    Port number to used for the Data Integration Service. Default is 9085.
    2. Select the SSL certificates contained to secure the Data Integration Service.
    Option
    Description
    Use the default Informatica SSL certificate files
    Use the default Informatica SSL certificates contained in the default keystore and truststore.
    Note: If you do not provide an SSL certificate, Informatica uses the same default private key for all Informatica installations. If you use the default Informatica keystore and truststore files, the security of your domain could be compromised. To ensure a high level of security for the domain, select the option to specify the location of the SSL certificate files.
    Use custom SSL certificates
    Use custom SSL certificates. You must specify the location of the keystore and truststore files.
    You can provide a self-signed certificate or a certificate issued by a certificate authority (CA). You must provide SSL certificates in PEM format and in Java Keystore (JKS) files. Informatica requires specific names for the SSL certificate files for the Informatica domain. You must use the same SSL certificates for all nodes in the domain. Store the truststore and keystore files in a directory accessible to all the nodes in the domain and specify the same keystore file directory and truststore file directory for all nodes in the same domain.
    If you choose to use custom SSL certificates, enter the following information.
    Property
    Description
    Keystore file directory
    Directory that contains the keystore files. The directory must contain files named infa_keystore.jks and infa_keystore.pem.
    Keystore password
    Password for the keystore infa_keystore.jks.
    Truststore file directory
    Directory that contains the truststore files. The directory must contain files named infa_truststore.jks and infa_truststore.pem.
    Truststore password
    Password for the infa_truststore.jks file.
    3. Select if you want to use the Spark engine to run Sqoop mappings or process a Java transformation.
    Property
    Description
    Run Sqoop mappings or process a Java transformation
    Select whether you want to use the Spark engine to run Sqoop mappings or process a Java transformation.
    1 - Yes
    2 - No
    If you select Yes, specify the JDK home directory for the Data Integration Service. The JDK version that the Data Integration Service uses must be compatible with the JRE version on the cluster.
    If you select No, you can configure the JDK home directory property later when you want to use the Spark engine to run Sqoop mappings, including mass ingestion specifications that ingest data using a Sqoop connection, or to process a Java transformation.
    For more information, see the Informatica Big Data Management User Guide and the Informatica Big Data Management Hadoop Integration Guide.
    4. Select whether you want to configure profiling warehouse connection.
    1. a. Press 1 to configure the profiling warehouse connection.
    2. b. Press 2 to skip configuring the profiling warehouse connection.
    3. c. If you choose to configure the profiling warehouse connection, the Profiling Warehouse Connection Database section appears.
    4. d. If you choose to skip the profiling warehouse connection, the Post-Installation Summary section indicates whether the installation completed successfully. The summary also shows the status of the installed components and their configuration.
    5. Select whether you want to configure the Content Management Service for data domain discovery.
    1. a. Press 1 to configure the Content Management Service for data domain discovery.
    2. b. Press 2 to skip configuring the Content Management Service for data domain discovery.
    3. c. If you choose to configure the Content Management Service for data domain discovery, the Content Management Service Parameters and Database section appears.
    4. d. If you choose to skip configure the Content Management Service for data domain discovery, the Post-Installation Summary section indicates whether the installation completed successfully. The summary also shows the status of the installed components and their configuration.