Installing ASI
This guide describes how to install and configure ASI in Standalone mode on a single server.
Before proceeding, ensure all Standalone Requirements are met — including Java, PostgreSQL, filesystem layout, and sudo rules.
Install the RPM's
Install the asi and core packages using your local or remote repository:
# install core
sudo dnf install -y iss-core-1.5.2-1.x86_64
# install asi 3.3.1
sudo dnf install -y iss-asi-3.3.1-1.x86_64
For details on downloading and setting up a local repository, see Repository Setup.
Verify Database Connectivity
Before configuring ASI, test connectivity to the PostgreSQL database:
psql -h <DATABASE_SERVER> -U postgres -d postgres -c "\l"
If the command succeeds, the ASI host can communicate with the database server.
Ensure the database server includes the required extensions:
pgcryptoandsemver.
Set Local Credentials
This step is only required if you are using a BES-managed PostgreSQL 15+ database.
In that case, you must retrieve the existing database account passwords from the BES environment and register them in the ASI system using the setAuth command:
/opt/ISS/asi/bin/setAuth asiadmin <PASSWORD>
/opt/ISS/asi/bin/setAuth authdbadmin <PASSWORD>
/opt/ISS/asi/bin/setAuth vaultdbadmin <PASSWORD>
Replace <PASSWORD> with the corresponding values retrieved from the BES server.
Note:
If you are using a local or standalone PostgreSQL instance, this step can be skipped — ASI will automatically create and configure these accounts during setup.
Setup ASI
Initialize the ASI instance and configure the database connection.
/opt/ISS/asi/bin/setupAsi -d <DATABASE_SERVER> -w <POSTGRES_PASSWORD>
- Replace
<DATABASE_SERVER>with your PostgreSQL hostname or IP address. - Replace
<POSTGRES_PASSWORD>with the PostgreSQL admin or service account password. - The setup command will create and initialize the ASI databases (
asidb,authdb,vaultdb).
Start ASI Services
Once setup completes successfully, start ASI using the provided wrapper:
/opt/ISS/asi/bin/startAsi
This command starts all ASI services under the iss-asi.target group.
Validate Installation
Check service status:
/opt/ISS/asi/bin/asiStatus
You should see output similar to:
iss-asi-authenticator.service: Running
iss-asi-management-service.service: Running
iss-asi-legacy.service: Running
iss-asi-core.service: Running
iss-asi-dashboards.service: Running
Open a browser and navigate to:
https://<HOSTNAME>:52000
Log in using the admin user.
To retrieve the admin secret, run:
/opt/ISS/asi/bin/getAuth admin
Use this secret as the password when logging in for the first time.
If you encounter any issues, follow the Troubleshooting page to help diagnose.
Post installation
Your standalone ASI server is now operational and ready for configuration.
Recommended tasks: