MongoDB Enterprise Configuration
By default,PTC Arbortext Content Delivery provides the MongoDB community edition to migrate from Mongo community to enterprise version. You must separately install the enterprise version and restore the dump exported from the community database followed by enabling encryption and then configure the encrypted Mongo to PTC Arbortext Content Delivery.
To migrate from Mongo community to Mongo 3.4.24 enterprise version, complete the following steps:
1. Create or take the existing dumps from the community edition. mongodump --db db_name --out folderpath --host MongoHostname -u uname -p pwde.g mongodump --db Inservice--out D:\ mongodump --host pwdcsv-insview9.ptcnet.ptc.com -u test -p test123
2. Click here to download MongoDB 3.4.24 enterprise version.
3. Refer this link to install and start the MongoDB 3.4.24 version..
4. Restore the content exported in step 1 to the installed MongoDB enterprise.mongorestore --db db_name -u uname -p pwd --dir dump_dir_path mongorestore --db InService -u dev -p dev --dir C:\mongoDump\InService
MongoDB 3.4.24 version supports two types of encryption Encryption — MongoDB Manual:
1. Encryption at rest
2. Transport encryption
Encryption at Rest
This feature allows MongoDB to encrypt data files. Only parts with the decryption key can decode and read the data.PTC Arbortext Content Delivery achieved the encryption at rest Local Key Management
 |
Changes are not required from PTC Arbortext Content Delivery when encryption at rest is enabled.
|
Transport Encryption
To use TLS or SSL with MongoDB, you must have the TLS or SSL certificate as PEM files, which are combined certificate containers.
MongoDB can use any valid TLS or SSL certificate issued by a certificate authority or a self-signed certificate.
Refer this link to enable SSL in Mongo.
|
|
The below step 1 is not required while using certificate issued by a certificate authority.
|
1. After the in-transit or transport encryption is enabled with self-signed certificate. we must import the .crt exported from .PEM file used for Mongo encryption.
a. Export the .crt from .PEM file of the Mongo server.
b. Copy the .crt file from this <INS_HOME>\InS_SW\SW\System\WildFly\standalone\configuration\
location.
c. Navigate the <INS_HOME>\InS_SW\SW and import this certificate toPTC Arbortext Content Delivery Java with importCertifiacte.bat/sh script followed by the certificate name.
▪ For Linux: ./ importCertificate.sh crt_full_name./ importCertificate.sh pwdcsv-insview9.ptcnet.ptc.com
▪ For Windows: importCertificate.bat crt_full_nameimportCertificate.bat pwdcsv-insview9.ptcnet.ptc.com
2. Add property <Property default="true" name="mongoDB.sslEnabled"/> in db.properties.xconf file which is located in Ins_SW/SW/Applications/Windchill.ear/codebase.war/com/ptc/sc.xconf
3. Configure the encrypted MongoDB server details on the PTC Arbortext Content Delivery Configurator user interface and restart the server. For more information, see Editing Properties of the Configurator Entities
4. Restart the JBoss service.