Additional technical configuration tasks (as needed) Jump to main content

Product Manuals

eperi sEcure Platform
Adapter for Microsoft 365
Adapter for Salesforce
Database Anonymizer
Data Protection API
REST Protection Proxy
Release Notes
Contact

Home
eperi sEcure Platform
Information and resources to help you get started installing, configuring and managing eperi sEcure Platform.
Configuration How-Tos
This section describes additional technical configuration tasks that are required as needed.

eperi sEcure Platform
Information and resources to help you get started installing, configuring and managing eperi sEcure Platform.
- About this manual
  Welcome to the eperi sEcure Platform Administrator Manual. It explains how to install, configure and administer eperi sEcure Platform.
- Introduction
  Learn more about eperi sEcure Platform and how it protects sensitive data of your SaaS application.
- System requirements
  Please take note of the system requirements for eperi sEcure Platform.
- Installation and configuration
  This section describes how to install and configure eperi sEcure Platform for a test or POC environment. For a production environment, we recommend a cluster setup for performance reasons. If so, follow the steps as described in section administrator_manuals/en/concepts/egfca_cluster_setup.html.
- Cluster setup
  For a production environment, a cluster setup is recommended for performance reasons. In such a setup, a loadbalancer distributes the incoming browser requests to multiple eperi sEcure Platform instances. The eperi sEcure Platform instances are connected to a Solr and a database cluster (e.g., a MariaDB Cluster).
- CLI-based administration
  eperi sEcure Platform runs as the service eperi-gateway on your operating system. In order to start, stop or restart the eperi sEcure Platform service, you could use the standard commands according to your Linux operating system.
- Console-based administration
  The eperi sEcure Admin Console Admin Console is a web-based interface available for IT system administrators to manage proxies, apps, keys, users, token profiles, data protection policies, and other settings.
- Operational Tasks
  This section provides instructions on operational tasks, such as backup and restore or upgrading to a new release.
- Configure additional features
  In addition to the standard features, eperi sEcure Platform offers additional features, such as the encryption and decryption of CSV files. Learn how to set up and use these additional eperi sEcure Platform features.
- Configuration How-Tos
  This section describes additional technical configuration tasks that are required as needed.
  - Configure logging
    The eperi sEcure Platform is shipped with a default logging configuration. If necessary, you can adjust the configuration to your needs.
  - Assigning the eperi sEcure Platform license to another customer account
    How to assign the license of one eperi sEcure Platform instance to another customer account.
  - Changing the eperi sEcure Platform database connection
    If necessary, you can connect the eperi sEcure Platform to another eperi sEcure Platform database.
  - Configuring local system settings
    In special cases it might be necessary to change some local system settings of eperi sEcure Platform.
  - Configure JVM memory allocation
    Increasing the memory available to the Java JVM can help eperi sEcure Platform performance. Try to give your Tomcat server as much memory as you can.
  - Creating a subordinate CA Certificate for a Forward Proxy
    How to create a subordinate CA Certificate for a Forward Proxy using the Windows Enterprise CA.
  - Creating a root CA Certificate for a Forward Proxy
  - Creating a PKCS#12 key store from a PKCS#7 certificate bundle
    To import an SSL certificate in the eperi sEcure Platform, it needs to be in the PKCS#12 format. Learn how to create a PKCS#12 key store from a PKCS#7 certificate bundle.
  - Enabling Tomcat server for Smart card Authentication
    If necessary, you can set up smart card authentication in the Tomcat server. In this case, an administrator who wants to access the eperi sEcure Admin Console must additionally authenticate via smart card.
  - Freeing your license in offline mode
    If you run eperi sEcure Platform on a server which has no Internet access, you can free your license in the offline mode.
  - Info about the CSP header
    As a safety measure, the Content Security Policy (CSP) header is set by default in the eperi sEcure Platform.
  - Replacing the default Tomcat error page
    The default Tomcat error page shows a full stacktrace which discloses sensitive information such as the Tomcat version. To avoid this, we recommend to modify the server configuration as follows.
  - Setting up an upstream proxy
    The eperi sEcure Platform requires connection to the Internet, in order to access your SaaS application. If you are using an upstream proxy within your corporate network, it is necessary to configure your upstream proxy within the eperi sEcure Platform.
- Apps reference
  Here we explain the intended use and the possible settings of apps available with eperi sEcure Platform. There are special apps available for each SaaS application that are available once you have installed the appropriate adapter for your SaaS application.
- Audit logging reference
  eperi sEcure Platform generates syslog messages for certain user actions. You can use these messages for the audit logging of your company.
- Token profiles reference
  Learn more about the default token profiles available in the eperi sEcure Platform.
- Troubleshooting
  This section describes various troubleshooting scenarios. It contains information about how to identify or resolve specific issues.
- Support
  Contact eperi support if you need help with your eperi Cloud Data Protection solution.

Additional technical configuration tasks (as needed)

This section describes additional technical configuration tasks that are required as needed.

Adjusting the logging configuration
The eperi sEcure Platform is shipped with a default logging configuration. If necessary, you can adjust the configuration to your needs.
Assigning the eperi sEcure Platform license to another customer account
How to assign the license of one eperi sEcure Platform instance to another customer account.
Changing the eperi sEcure Platform database connection
If necessary, you can connect the eperi sEcure Platform to another eperi sEcure Platform database.
Configuring local system settings
In special cases it might be necessary to change some local system settings of eperi sEcure Platform.
Configuring the memory available to the Java JVM
Increasing the memory available to the Java JVM can help eperi sEcure Platform performance. Try to give your Tomcat server as much memory as you can.
Creating a subordinate CA Certificate for a Forward Proxy
How to create a subordinate CA Certificate for a Forward Proxy using the Windows Enterprise CA.
Creating a root CA Certificate for a Forward Proxy
Creating a PKCS#12 key store from a PKCS#7 certificate bundle
To import an SSL certificate in the eperi sEcure Platform, it needs to be in the PKCS#12 format. Learn how to create a PKCS#12 key store from a PKCS#7 certificate bundle.
Enabling Tomcat server for Smart card Authentication
If necessary, you can set up smart card authentication in the Tomcat server. In this case, an administrator who wants to access the eperi sEcure Admin Console must additionally authenticate via smart card.
Freeing your license in offline mode
If you run eperi sEcure Platform on a server which has no Internet access, you can free your license in the offline mode.
Info about the CSP header
As a safety measure, the Content Security Policy (CSP) header is set by default in the eperi sEcure Platform.
Replacing the default Tomcat error page
The default Tomcat error page shows a full stacktrace which discloses sensitive information such as the Tomcat version. To avoid this, we recommend to modify the server configuration as follows.
Setting up an upstream proxy
The eperi sEcure Platform requires connection to the Internet, in order to access your SaaS application. If you are using an upstream proxy within your corporate network, it is necessary to configure your upstream proxy within the eperi sEcure Platform.

© 2026 eperi GmbH. All rights reserved. | Privacy Policy | Terms & Conditions