Application Integrator Configuration

The following procedures describe how to configure Application Integrator:

Zone 1 SSL Configuration: Describes how to set up SSL between Control-M Web Server and Control-M Desktop applications for use by Application Integrator.
User and Role Authorizations: Describes how to create users and roles and set up authorizations for access to Application Integrator.
Configuring a Proxy Server for the Application Integrator Web Interface: Describes how to configure a connection to a proxy server for the Application Integrator web interface.
Setting Application Integrator Log Levels: Describes how to set log levels and control the amount and severity of log messages issued by Application Integrator.
Configuring Job Output Files: Describes how to set the naming convention and permissions of the files that save the output from Application Integrator jobs.
Creating a Communication Configuration File: Describes how to change the default login GUI server through a communication configuration file if you have multiple GUI servers.
Setting Up SSL for Control-M Application Integrator on Agents: Describes how to set up SSL for Control-M Application Integrator jobs on the Control-M/Agents.
Configuring Application Integrator to Run Jobs through a Proxy Server: Describes how to configure Control-M Application Integrator on the Agents to run jobs through a proxy server.

Configuring a Proxy Server for the Application Integrator Web Interface

This procedure describes how to configure proxy server settings for the Application Integrator web interface. If the Application Integrator runs on a machine that has a Proxy server installed, you need to connect to the proxy server when accessing other machines. For example, when you import a WSDL.

Begin

From the Application Integrator title bar, click the name of the logged-in user, and select Settings.

The Settings window appears.
Under the Proxy Settings heading, select Enable proxy.
Type the Proxy Settings values, as described in Application Integrator Proxy Server Parameters.
Click Save.

Application Integrator Proxy Server Parameters

The following table describes the Proxy Server parameters.

Parameter	Description
Enable SSL	Enables SSL security between the proxy server and other authorized machines.
Host name	(Mandatory) Defines the proxy host.
Port	Defines the proxy server port.
Non-proxy Hosts	(Optional) Defines a list of hostnames where the proxy is not used. Hostnames in this list are separated by a \| (vertical bar). The following value is specified in Non-proxy Hosts: mycompany.com\|localhost This results in the exclusion of all of the following URLs: www.mycompany.com/rest/api www.mycompany.com/rest/api2/call https://localhost/rest/api/call
Username	Defines the username of the proxy host.
Password	Defines the password of the proxy host.

Ensure that endpoints to the localhost and 127.0.0.1 IP addresses are not routed to the proxy server, as these endpoints are required by Control-M processes to facilitate communication between processes.

To bypass the redirection to the proxy:

UNIX: In the /etc/profile.d/proxy.sh file, set the following variable:

NO_PROXY=localhost,127.0.0.1
Windows: Consult your system administrator.

Setting Application Integrator Log Levels

This procedure describes how to define log levels for Control-M Application Integrator without the need to restart.

Begin

Do one of the following:
- In the CCM, do the following:
  1. Right-click the Application Integrator service and select Control Shell.
  2. In the Control Shell dialog box, type the following control shell command line:
    diagl -l=<log_level>
    
    In this command, <log_level> can be one of the following:
    - Error: Writes to the log file on the disk only when there is an issue with data consistency, network connectivity, or expected received data structure.
    - Warning: Writes to the log file all error-level messages and some uncommon behavior that might indicate problems.
    - Info: Writes both error and warning messages and messages that might explain a complete flow or an alert of requests to a server and their type.
    - Debug: Includes error, warning, and info messages and important information that might occur during every procedure.
    Default: Error
    
    Info and debug are used only during problem analysis, as they both consume high disk space resources.
- In the services-cli utility, type the following command:
  services-cli -s aisrv-web -i "all" -c diagl -level <log_level>
The following message appears:
Root log level is changed successfully to <log_level>

Configuring Job Output Files

This procedure describes how to set the naming convention and permissions of the files that save the output from Application Integrator jobs.

Begin

Log in to the Control-M/Agent computer where Application Integrator is installed.
Add Job Output File Parameters or modify their values in the following configuration file:
- Windows: <Agent install dir>\cm\AI\data\cm_container_conf.xml
- UNIX: <Agent install dir>/cm/AI/data/cm_container_conf.xml
Stop and then start the Control-M/Agent by typing the following commands:

shut-ag

start-ag

Application Integrator starts automatically.

Job Output File Parameters

The following table describes the parameters that are available for the management of Job Output files:

Parameter	Description
SysoutFileFormat	Determines the naming convention for Job Output files. Valid Values: DEFAULT: orderNumber_runNumber , where the runNumber does not contain leading zeros. For example: 00003_1 JOBNAME: jobName_orderNumber_runNumber, where leading zeros are included. For example: TESTJOB_000003_00002 <SysoutFileFormat>JOBNAME</SysoutFileFormat>
SysoutFileOwner	Defines the file's user owner for access permissions on Linux. You can set a new value only if the Agent is running under root. Default: The user currently running the Agent <SysoutFileOwner>dbauser</SysoutFileOwner>
SysoutFileGrp	Defines the file's group owner for access permissions on Linux. You can set a new value only if the Agent is running under root. Default: The group of the user currently running the Agent <SysoutFileGrp>dbauser</SysoutFileGrp>

Parameter

Description

SysoutFileFormat

Determines the naming convention for Job Output files.

Valid Values:

DEFAULT: orderNumber_runNumber , where the runNumber does not contain leading zeros.
For example: 00003_1
JOBNAME: jobName_orderNumber_runNumber, where leading zeros are included.
For example: TESTJOB_000003_00002

<SysoutFileFormat>JOBNAME</SysoutFileFormat>

SysoutFileOwner

Defines the file's user owner for access permissions on Linux.

You can set a new value only if the Agent is running under root.

Default: The user currently running the Agent

<SysoutFileOwner>dbauser</SysoutFileOwner>

SysoutFileGrp

Defines the file's group owner for access permissions on Linux.

You can set a new value only if the Agent is running under root.

Default: The group of the user currently running the Agent

<SysoutFileGrp>dbauser</SysoutFileGrp>

Creating a Communication Configuration File

This procedure describes how to create a communication configuration file. This configuration file is necessary if you have multiple GUI servers defined in your environment and you want to change the default Control-M/EM GUI Server that Application Integrator connects to.

If you do not need multiple GUI servers, you can stop them and delete them in the Control-M Configuration Manager.

Begin

Open a text editor and type the following:

Copy

NsHost=<name server hostname>
NsPort=13075
GuiServer=<GUI server name>

Save the file as ai.cfg and add it to one of the following directories:
- UNIX: <EM_HOME>/etc/emweb/tomcat/AIRepo/_AICFG
- Windows: <EM_HOME>\emweb\tomcat\AIRepo\_AICFG
Log in to Control-M Application Integrator.

Setting Up SSL for Control-M Application Integrator on Agents

This procedure describes how to set up SSL for Control-M Application Integrator jobs that run on the Control-M/Agents.

Begin

Import the new SSL certificate from CA to the keystore, using the following command:

$JAVA_HOME/bin/keytool -import -alias <alias_name> -keystore <Agent_instance>/cm/AI/data/security/apcerts -storepass appass -file <path/to/the/ssl_cert.cer>

Note that appass is the default password and it can be changed.
(Optional) Confirm the keystore content by typing the following command:

$JAVA_HOME/bin/keytool -list -v -keystore <Agent_instance>/cm/AI/data/security/apcerts > output_filename
Restart Application Integrator (the cm container process) for the action to take effect.

Configuring Application Integrator to Run Jobs through a Proxy Server

This procedure describes how to configure Control-M Application Integrator on the Agents to run jobs through a proxy server.

Begin

Navigate to the following directory:
- UNIX: <Agent_instance>/cm/AI/data
- Windows: <Agent_instance>\CM\AI\data
Create a file named aicm.properties.

(Windows only) Name the file aicm, and the .properties extension is appended automatically.
Include the following parameters in the aicm file with the required values:
Copy
```
proxy.host=
proxy.port=
proxy.user=//if required
proxy.pass=//if required, base64 encoded
proxy.nonProxyHosts=//optional
proxy.ssl=//true or false (default is false)
```
Do not include space characters before or after the = sign.

For descriptions of these parameters, see Proxy Server Parameters for Running Jobs.
Navigate to the following directory:
- UNIX: <Agent_instance>/cm/AI/exe
- Windows: <Agent_instance>\CM\AI\exe
Restart Control-M Application Integrator by running one of the following commands:
- UNIX: ./cm_container stop
- Windows: cm_container stop

Proxy Server Parameters for Running Jobs

The following table describes Proxy Server parameters for Application Integrator to run jobs on the Agents.

Parameter	Description
proxy.host	(Mandatory) Defines the proxy host.
proxy.port	Defines the proxy server port.
proxy.user	Defines the username of the proxy host.
proxy.pass	Defines the password of the proxy host. The password must be Base64-encoded. See https://www.base64encode.net.
proxy.nonProxyHosts	(Optional) Defines a list of hostnames where the proxy is not used. Hostnames in this list are separated by a \| (vertical bar). The following value is specified in Non-proxy Hosts: mycompany.com\|localhost This results in the exclusion of all of the following URLs: www.mycompany.com/rest/api www.mycompany.com/rest/api2/call https://localhost/rest/api/call
proxy.ssl	Enables SSL security between the proxy server and other authorized machines. Valid Values: true false Default: false