Configuring the Solr services in eperi sEcure Platform

Configure the Solr services for all instances of eperi sEcure Platform, so that they are connected with the Solr cluster.

Before you begin

  • The version of eperi sEcure Platform is 19.4.1.0 or higher.
  • You have enabled SSL in your Solr setup as described in Installing the Apache Solr cluster.
  • You have enabled the Basic Authentication in Solr as described in section Enabling Basic Authentication in Solr.
  • Solr must run in SolrCloud mode. (This is the case when the parameter ZK_HOST is set in the Solr configuration.)
  • Required permissions in eperi sEcure Admin Console:
    • Permission "Show Solr Schema" (assigned to the Application Manager, Auditor, and Global Administrator)
    • Permission "Modify Solr Schema" (assigned to the Application Manager and Global Administrator)

Procedure

  1. Access the eperi sEcure Admin Console and log in.
  2. Add the Solr client authentication keystore as follows:
    1. Select the TLS (TLS Keys) tab, then click Import.
    2. In the pop-up menu, select your client.p12 keystore file.
    3. Enter the password, then click Next.
    4. Set the Name to solr-ssl, then click Submit.
  3. Import the Trusted Certificate (for self-signed CA certificates) as follows:
    1. Select TLS (Trusted TLS Issuer) tab, then click Import.
    2. In the pop-up menu, select your server certificate and click Submit.
  4. Set up the connection to your SolrCloud:
    1. Select the Settings (Solr) tab, then click Configure
    2. In the pop-up menu, provide the required connection details and click Submit.
      Option Description
      Zookeeper endpoints Enter a comma separated list of hosts running Zookeeper along with the connection port (2181 is the default). Example: solr01:2181,solr02:2181
      Solr URLs Enter a comma separated list of Solr URLs. Example: https://solr1:8983/solr,https://solr2:8983/solr
      Important: Please make sure to enter each Solr URL exactly in the following format: https://hostname:port/solr
      Username Enter the name of the user for the Basic Authentication in Solr.
      Password Enter the password of the user for the Basic Authentication in Solr.
      SSLKey Required, if Solr client authentication is enabled: Enter the name of the Solr client authentication keystore as added in the Keys tab before.
      Disable indexing (Optional) Tick the checkbox and then click Apply to disable Solr indexing. When indexing is disabled, searching and sorting on encrypted or tokenized data will not work.
  5. Still in the Solr tab, click Test Connection.
    On successful configuration, the following status should be displayed, for example:

    Note: The status information will be updated within the same session as soon as you click the Test Connection button.

Results

You have successfully configured the Solr services for all eperi sEcure Platform instances in the cluster.