Java 11 Upgrade for Platform Analytics - Windows
Before the Upgrade
The Java 11 upgrade procedure can only be started if you have completed the following tasks:
• Upgrade your Platform Analytics to release 9.1.
• Install Java 11. For more information, see the Amazon Corretto.
Update the Service Files
Use the steps below to update the necessary service files.
1. Shut down your Platform Analytics so that it is not running.
2. Note the following file paths related to your Java 11 installation:
◦ Java 11 bin directory – Sample file path: C:\Program Files\Amazon Corretto\jdk11.0.8_10\bin
◦ Java 11 executable – Sample file path: C:\Program Files\Amazon Corretto\jdk11.0.8_10\bin\java.exe
3. For each of the following service files, launch a command line prompt as an Administrator. When the command line window opens, enter the following command to open the NSSM program: nsmm edit <service name>. Update the variables listed in the table below.
◦ twpas-descriptive-analytics-service
◦ twpas-property-transform-service
|
Variable
|
What to Update
|
Sample Configuration
|
|---|---|---|
|
Application Path
|
On the Application tab, point to the path of the Java 11 executable.
|
C:\Program Files\Amazon Corretto\jdk11.0.8_10\bin\java.exe
|
|
Startup Directory
|
On the Application tab, point to the path of the Java 11 bin directory.
|
C:\Program Files\Amazon Corretto\jdk11.0.8_10\bin
|
Update the Platform Analytics Environment Properties
1. Open a command line prompt as an Administrator and navigate to the platform-analytics-environment.properties file.
Example: C:\Program Files\ThingWorxAnalytics\PlatformAnalytics\platform-analytics-environment.properties
2. Update the broker.ssl.server.trust.store parameter to point to the Java 11 cacerts file.
Sample file path: broker.ssl.server.trust.store=\C:\PROGRA~1\AMAZON~1\JDK110~1.8_1\lib\security\cacerts
Import SSL Certificates
If you have enabled SSL support using self-signed certificates, you must import certain certificate files into the Java 11 cacerts file. In some cases, you might need to extract the certificate files from your old Java cacerts before you can import them to the Java 11 file. Follow the instructions in the table below to import the necessary SSL certificate files.
 |
If you are using certificates from a trusted Certificate Authority, they will already be available in the Java 11 cacerts file.
|
|
Files
|
Instructions
|
|---|---|
|
ThingWorx SSL certificate
(a PEM or CER file)
|
Extract command:
keytool -keystore <path to ..\java8\jre\lib\security\cacerts> -alias<assigned certificate alias> -export-file<path and file name of the certificate>.cer
Import command:
keytool -keystore<path to ..\java11\lib\security\cacerts>-alias<assigned certificate alias> -import-trustcacerts -file<path and file name of the certificate>.cer
|
|
RabbitMQ CA bundle file
(ca_certificate.pem)
|
Import command:
keytool -import-alias<assigned certificate alias>-keystore<path to ..\java11\lib\security\cacerts> -file "ca_certificate.pem"
|
|
Flink REST SSL certificate
(a CER file)
|
Extract command:
keytool -exportcert -keystore <path to ..\java8\jre\lib\security\cacerts> -alias<REST Flink certificate alias> -storepass <key password for the REST keystore>-file<path and file name of the Flink certificate>.cer
Import command:
keytool -importcert -keystore<path to ..\java11\lib\security\cacerts>-alias<REST Flink certificate alias> -file<path and file name of Flink certificate>.cer -storepass <key password for the REST keystore> -noprompt
|
|
ThingWorx Analytics keystore
(a JKS file)
|
Import command:
keytool -importkeystore-srckeystore<path to the Analytics Server keystore>-destkeystore<path to ..\java11\lib\security\cacerts>
|
Final Upgrade Steps
1. Configure your JAVA_HOME environment variable to point to the path of the Java 11 installation directory.
2. Restart Analytics Server.