Java 11 Upgrade for Platform Analytics - Linux
Before the Upgrade
The Java 11 upgrade procedure can only be started if you have completed the following tasks:
• Upgrade your Platform Analytics to release 9.1.
• Install Java 11. For more information, see the Amazon Corretto.
Update the Service Files
Use the steps below to update the necessary service files.
1. Shut down your Platform Analytics so that it is not running.
2. Note the following file path related to your Java 11 installation:
◦ Java 11 executable – Sample file path: /usr/lib/jvm/java-11-amazon-corretto/bin/java
3. In a text editor, open each of the following service files, located in the /etc/systemd/system/ file path, and update the variable described in the table below:
◦ twpas-descriptive-analytics-service.service
◦ twpas-property-transform-service.service
|
Variable
|
What to Update
|
Sample Configuration
|
|---|---|---|
|
ExecStart
|
Update each service so the initial section of the variable points to the Java 11 executable.
|
ExecStart=/usr/bin/nohup "/usr/lib/jvm/java-11-amazon-corretto/bin/java" ...
|
4. Open a terminal window as a root user and execute the following command to reload the updated services:
systemctl daemon-reload
Update the Platform Analytics Environment Properties
1. Open a terminal window as a root user and navigate to the platform-analytics-environment.properties file.
Example: /opt/ThingWorxAnalytics/PlatformAnalytics/platform-analytics-environment.properties
2. Update the broker.ssl.server.trust.store parameter to point to the Java 11 cacerts file.
Sample file path: broker.ssl.server.trust.store=/usr/lib/jvm/java-11-amazon-corretto/lib/security/cacerts
Import SSL Certificates
If you have enabled SSL support for any component using self-signed certificates, you must import certain certificate files into the Java 11 cacerts file. In some cases, you might need to extract the certificate files from your old Java cacerts before you can import them to the Java 11 file. Follow the instructions in the table below to import the necessary SSL certificate files.
 |
If you are using certificates from a trusted Certificate Authority, they will already be available in the Java 11 cacerts file.
|
|
Files
|
Instructions
|
|---|---|
|
ThingWorx SSL certificate
(a PEM or CER file)
|
Extract command:
keytool -keystore <path to ../java8/jre/lib/security/cacerts> -alias<assigned certificate alias> -export-file<path and file name of the certificate>.cer
Import command:
keytool -keystore<path to ../java11/lib/security/cacerts>-alias<assigned certificate alias> -import-trustcacerts -file<path and file name of the certificate>.cer
|
|
RabbitMQ CA bundle file
(ca_certificate.pem)
|
Import command:
keytool -import-alias<assigned certificate alias>-keystore<path to ../java11/lib/security/cacerts> -file "ca_certificate.pem"
|
|
Flink REST SSL certificate
(a CER file)
|
Extract command:
keytool -exportcert -keystore <path to ../java8/jre/lib/security/cacerts> -alias<REST Flink certificate alias> -storepass <key password for the REST keystore>-file<path and file name of the Flink certificate>.cer
Import command:
keytool -importcert -keystore<path to ../java11/lib/security/cacerts>-alias<REST Flink certificate alias> - file<path and file name of Flink certificate>.cer -storepass <key password for the REST keystore> -noprompt
|
|
ThingWorx Analytics keystore
(a JKS file)
|
Import command:
keytool -importkeystore-srckeystore<path to the Analytics Server keystore>-destkeystore<path to ../java11/lib/security/cacerts>
|
Final Upgrade Steps
1. Configure your JAVA_HOME environment variable to point to the path of the Java 11 installation directory.
2. Restart Platform Analytics.