Installation on IBM Cloud

Overview

The IBM Verify Identity Governance - Container supports deployment on the Red Hat OpenShift platform on the IBM Cloud, utilizing all the supported Databases and Directory Servers.

Red Hat OpenShift on IBM Cloud offers a managed solution for creating clusters of compute hosts. This allows you to deploy and manage containerized applications on the IBM Cloud platform.

Optionally, you can also use IBM DB2 service on the IBM Cloud platform, as an external database for the IBM Verify Identity Governance - Container. For more details, see the Setting up IBM Db2 service on IBM Cloud section.

Before you begin

[Optional] Setting up IBM DB2 service on IBM Cloud

Overview

You have the option to utilize IBM DB2 service as an external database for IBM Verify Identity Governance - Container within your IBM Cloud cluster. This a fully-managed cloud SQL database powered by an accelerated Db2 engine. For comprehensive details, refer to the IBM DB2 documentation.

Note that this section is optional. If you do not want to use IBM DB2 service on IBM Cloud, go directly to the Deployment procedure.

Steps

If you want to set up IBM DB2 service on IBM Cloud, perform the following steps:

1. From IBM Catalog, search for IBM db2, and create an instance.
2. Access your IBM Cloud DB2 Console. Go to the Administration tab, and then select Connection to view connection properties.
3. Within Administration tab, go to User Management to generate an Admin User (for example: db2admin).
4. Create a regular user (for example: db2user).
   Note: To enable the usage of CREATE_EXTERNAL_ROUTINE and facilitate the deployment of a regex-dependent jar in IBM Cloud DB2, you need to initiate a support ticket with the IBM Cloud Team and include the following details:

   • [Mandatory] Request a permission for granting CREATE_EXTERNAL_ROUTINE.
   • [Optional] If you want to perform regex-related operations, use the starter/config/db/jars/isim_regexp-1.0.jar and submit a request to upload isim_regexp-1.0.jar jar to the specified location: /mnt/blumeta0/home/db2inst1/sqllib/function, equivalent to $HOME/sqllib/function.
5. Utilize the connection properties and the previously created user to establish a connection with the DB2 Cloud instance.
6. For SSL connections, retrieve the SSL Certificate by clicking Download SSL Certificate.
7. Convert the downloaded certificate into PEM format and store it in the starter/config/cert directory using the following bash command:

   openssl x509 -inform der -in certificate.cer -out certificate.pem

8. During installation, while executing configure.sh script, specify the name of this certificate for the truststore.
9. Provide relevant details when executing starter/bin/configure.sh script.

   Here is a sample of the DB2 section in the config.yaml file:

   
   db:
      user: db2user
      password:{user_password}
      dbtype: db2
      ip: {database_link}
      port: {database_port}
      name: {database_name}
      admin: db2admin
      adminPwd: {admin_password}
      security.protocol: ssl
      tablespace.location.data:
      tablespace.location.indexes:
   

10. When establishing connections through DB Clients, ensure that the DB2 4 Driver is accessible. Utilize the subsequent connection string similar to:

    jdbc:db2://{database_link}:{database_port}/{database_name}:sslConnection=true;

11. Provide the username details for authentication.

Deployment procedure

Post-installation steps

Next steps

If you are deploying a fresh installation of IBM Verify Identity Governance - Container, then proceed to configuration activities.