Getting Started with th e .NET Agent Installation

9

Overview of .NET Agent Installation

Ver ifying the .N ET Agent Installation

Restarting IIS and Viewing the Ne w .NET Agent

Troubleshooting Tips for the .NET Agent

Uninstalling a .NET Agent

Re starting IIS and Viewing th e New .NET Agent

Getting Started with t he Java Agent Installation

Overview of Java Agent Installation

Ad ding the Agent to an App lication Server or Service Running Java

Adding the Agent to a Standalone Apache Tomcat Server

Adding the Agent to an Apache Tomcat Windows Service

Adding the Agent to an IBM WebSphere Server Using the Server Administrative

Adding the Agent to an IBM WebSphere Server Using wsadmin

Adding the Agent to a Red Hat JBoss Server

Adding the Agent to an Oracle WebLogic Ser ver

Adding the Agent to a System Service

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 3 of 30

Installation Guide

Adding the Agent to a Standalone Java Application

Adding the Agent to a Host Machine That Has More Than One Protected

Ver ifying the Ja va Agent Installation

Troubleshooting Tips for the Jav a Agent

Uninstalling a Java Agent

Send Documentation Feedback

30

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 4 of 30

Installation Guide

Contacting Micro Focus Fortify Customer Support

Preface

Contacting Micro Focus Fortify Customer Support

Visit the Support website to:

l

Manage licenses and entitlements

Create and manage technical assistance requests

Browse documentation and knowledge articles

Download software

Explore the Community

https://www.microfocus.com/support

For More Information

For more information about Fortify software products:

https://www.microfocus.com/cyberres/application-security

About the Documentation Set

The Fortify Software documentation set contains installation, user, and deployment guides for all

Fortify Software products and components. In addition, you will find technical notes and release

notes that describe new features, known issues, and last-minute updates. You can access the

latest versions of these documents from the following Micro Focus Product Documentation

website:

https://www.microfocus.com/support/documentation

To be notified of documentation updates between releases, subscribe to Fortify Product

Announcements on the Micro Focus Community:

https://community.microfocus.com/cyberres/fortify/w/fortify-product-announcements

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 5 of 30

Installation Guide

Fortify Product Feature Videos

You can find videos that highlight Fortify products and features on the Fortify Unplugged

YouTube channel:

https://www.youtube.com/c/FortifyUnplugged

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 6 of 30

Installation Guide

Fortify Product Feature Videos

Change Log

The following table lists changes made to this document. Revisions to this document are

published only if the changes made affect product functionality.

Software Release / Document Version Change

22.2.0

22.1.0

21.2.0

21.1.0

Updated: Release information

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 7 of 30

Installation Guide

Fortify Product Feature Videos

Installing the WebInspect Agent

To install the agent, go to one of the following sections:

"Overview of Java Agent Installation" on page 14

"Overview of .NET Agent Installation" on the next page

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 8 of 30

Installation Guide

Installing the .NET Agent

Topics covered in this section:

Getting Started with the .NET Agent Installation

Overview of .NET Agent Installation

Verifying the .NET Agent Installation

Restarting IIS and Viewing the New .NET Agent

Troubleshooting Tips for the .NET Agent

Uninstalling a .NET Agent

Restarting IIS and Viewing the New .NET Agent

Getting Started with the .NET Agent Installation

Topics covered in this section:

Overview of .NET Agent Installation

"Installing the .NET Agent" below

Overview of .NET Agent Installation

The runtime agent protects all applications running under a supported .NET Framework on a

supported version of IIS.

Note: If you need to protect a particular subset of applications, you must configure that

subset as an application pool and protect that application pool.

Note: If you are upgrading a previous installation of a .NET agent, you must install the new

agent without uninstalling the old agent, to preserve your protection settings.

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 9 of 30

Installation Guide

Installing the .NET Agent

To install the runtime agent and add it to IIS, follow these steps:

Step

Description

Instructions

1.

Ensure that your target

application runs on

See the Fortify WebInspect Agent

Requirements section in the Micro Focus

supported versions of .NET Fortify Software System Requirements

Framework and IIS.

document for this release.

2.

3.

Run the agent installer.

Restart IIS and view the new "Verifying the .NET Agent Installation" on the

agent. next page

Installing the .NET Agent

Important:

l

The agent must have the same permissions on the computer as the user who is responsible

for starting IIS.

Fortify recommends that you install the agent in a secure directory having limited access on

your computer.

To install the agent:

1. Copy the agent installation file to the computer on which you are going to install the agent, if

the file was downloaded to a different computer.

Where xx.x represents the Runtime version number:

l

For 64-bit Windows, the file name is

Fortify_WebInspect_Runtime_Agent_Dotnet_xx.x.windows_x64.exe

l

For 32-bit Windows, the file name is

Fortify_WebInspect_Runtime_Agent_Dotnet_xx.x_windows_x86.exe

2. Run the installer from the directory where the extracted files are stored.

By default, the installer places the files in the following directory:

<install_dir>\WebInspect_RuntimeAgt_Dotnet_xx.x

but you can use a different location. These instructions assume that you use the default

location.

Important: The full path to this installation directory is referred to as <install_dir> in

these instructions.

For example, if the WebInspect_RuntimeAgt_Dotnet_xx.x directory is located at C:\, you

replace <install_dir> with C:\WebInspect_RuntimeAgt_Dotnet_xx.x

wherever these instructions refer to <install_dir>.

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 10 of 30

Installation Guide

Installing the .NET Agent

Silent Install

You can streamline the .NET installation process with a silent installation. To install the .NET agent

from the command line:

l

Run the installation .exe file from the command line with the option --mode unattended.

or

l

Run the installation .exe file from the command line with the option --help to access a list of

options.

Verifying the .NET Agent Installation

Topics covered in this section:

Restarting IIS and Viewing the New .NET Agent

Troubleshooting Tips for the .NET Agent

Uninstalling a .NET Agent

11

12

Restarting IIS and Viewing the New .NET Agent

To restart IIS and view the new agent:

1. As an administrative user, execute the following command to activate Runtime:

<install_dir>\WebInspect_RuntimeAgt_Dotnet_xx.x\

tools\IISControl.exe register restart

Note: If you need to protect a particular subset of applications on the server, configure

that subset as an application pool and add

-a <application pool name> to the command. For example:

<install_dir>\WebInspect_RuntimeAgt_Dotnet_xx.x\

tools\IISControl.exe -a MyAppPool register restart

2. .NET requires that you open your application from a browser. When you do so, IIS starts both

the application and Runtime.

3. After the server has started, make sure the new agent appears:

a. Start WebInspect.

b. Start a scan.

c. In the Scan Dashboard page, verify that in the Scan section in the right pane, the Agent

field is displayed as Detected.

d. If the new agent is not operating as described above, see "Troubleshooting Tips for the

.NET Agent" on the next page.

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 11 of 30

Installation Guide

Installing the .NET Agent

Troubleshooting Tips for the .NET Agent

A new agent does not appear

If, after restarting IIS, the new agent does not appear as described in "Restarting IIS and Viewing

the New .NET Agent" below, check the agent's log file for errors as follows:

1. In the log file

<install_dir>\WebInspect_RuntimeAgt_Dotnet_xx.x\

log\system.log

look for a message similar to the following:

[<PID> <TIMESTAMP> INFO] Micro Focus Fortify Runtime setup

complete

2. Ensure that the timestamp on the message corresponds to the time that IIS was started. Also

ensure that there are no messages in the log with the prefix ERROR or FATAL.

The log file does not exist or IIS startup messages are not present

If the log file does not exist or if messages that correspond to the IIS startup time are not present,

it indicates that the agent is not running. In this case, see whether an error has been reported in

the Windows system event log.

Uninstalling a .NET Agent

To deactivate a .NET runtime agent and remove the agent from your system:

1. As an administrative user, execute the following command:

<install_dir>\WebInspect_RuntimeAgt_Dotnet_xx.x\

tools\IISControl.exe unregister restart

2. Select Control Panel > Programs and Features.

3. Right-click Fortify WebInspect Runtime Agent Dotnet xx.x where xx.x represents the

version number, and perform the uninstall.

Restarting IIS and Viewing the New .NET Agent

To restart IIS and view the new agent:

1. As an administrative user, execute the following command to activate Runtime:

<install_dir>\WebInspect_RuntimeAgt_Dotnet_xx.x\

tools\IISControl.exe register restart

Note: If you need to protect a particular subset of applications on the server, configure

that subset as an application pool and add

-a <application pool name> to the command. For example:

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 12 of 30

Installation Guide

Installing the Java Agent

<install_dir>\WebInspect_RuntimeAgt_Dotnet_xx.x\

tools\IISControl.exe -a MyAppPool register restart

2. .NET requires that you open your application from a browser. When you do so, IIS starts both

the application and Runtime.

3. After the server has started, make sure the new agent appears:

a. Start WebInspect.

b. Start a scan.

c. In the Scan Dashboard page, verify that in the Scan section in the right pane, the Agent

field is displayed as Detected.

d. If the new agent is not operating as described above, see "Troubleshooting Tips for the

.NET Agent" on the previous page.

Installing the Java Agent

Topics covered in this section:

Getting Started with the Java Agent Installation

Overview of Java Agent Installation

Adding the Agent to an Application Server or Service Running Java

Adding the Agent to a Standalone Apache Tomcat Server

Adding the Agent to an Apache Tomcat Windows Service

Adding the Agent to an IBM WebSphere Server Using the Server Administrative Console

Adding the Agent to an IBM WebSphere Server Using wsadmin

Adding the Agent to a Red Hat JBoss Server

Adding the Agent to an Oracle WebLogic Server

Adding the Agent to a System Service

Adding the Agent to a Standalone Java Application

Adding the Agent to a Host Machine That Has More Than One Protected Application

Verifying the Java Agent Installation

Troubleshooting Tips for the Java Agent

Uninstalling a Java Agent

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 13 of 30

Installation Guide

Installing the Java Agent

Getting Started with the Java Agent Installation

Topics covered in this section:

Overview of Java Agent Installation

"Installing the Java Agent" below

14

Overview of Java Agent Installation

The runtime agent protects all applications running under a supported Java Runtime

Environment (JRE) on a supported application server or service.

Note: If you need to protect a particular subset of applications, you must run that subset

under its own JVM.

To install the runtime agent and add it to an application server or service, follow these steps:

Step

Description

Instructions

1.

Ensure that your target application runs See the Fortify WebInspect Agent

on supported versions of Java Runtime Requirements section in the Micro Focus

Environment (JRE) and the application Fortify Software System Requirements

server or service.

document for this release.

2.

3.

Install the Java agent.

Add the agent to an application server

or service.

"Adding the Agent to an Application

Server or Service Running Java" on the

Restart the application server and view "Verifying the Java Agent Installation" on

the new agent. page 28

Installing the Java Agent

Important:

l

The agent must have the same permissions on the computer as the user who is

responsible for starting the application server.

Fortify recommends that you install the agent in a secure directory having limited

access on your computer or in a subdirectory of the application server. If you use a

WebSphere server, make sure the directory path does not contain any spaces.

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 14 of 30

Installation Guide

Installing the Java Agent

To install the agent:

1. Copy the agent installation file to the computer on which you are going to install the agent.

Where xx.x represents the Runtime version number:

l

For UNIX or Linux, the file name is

Fortify_WebInspect_Runtime_Agent_Java_xx.x_Linux.tar.gz

l

For Windows, the file name is

Fortify_WebInspect_Runtime_Agent_Java_xx.x_windows.zip

2. Expand the agent installation file:

l

UNIX or Linux:

Use the following command:

tar -xzf Fortify_WebInspect_Runtime_Agent_Java_xx.x_Linux.tar.gz

l

Windows: Logged in as an administrator, expand the file using unzip software.

By default, the extracted files are installed in a directory named:

Fortify_WebInspect_Runtime_Agent_Java_xx.x_Linux

Important: The full path to this installation directory is referred to as <install_

dir> in these instructions.

For example, if the Fortify_WebInspect_Runtime_Agent_Java_xx.x directory

is located at C:\, you replace <install_dir> with

C:\Fortify_WebInspect_Runtime_Agent_Java_xx.x

wherever these instructions refer to <install_dir>.

Adding the Agent to an Application Server or Service Running

Java

The instructions for adding an agent vary depending on the application server or service to which

you are adding the agent. The following topics provide instructions for adding the agent to each

supported application server or service.

In general, adding the agent to an application server involves adding an appropriate -javaagent

argument to the server startup.

Topics covered in this section:

Adding the Agent to a Standalone Apache Tomcat Server

Adding the Agent to an Apache Tomcat Windows Service

Adding the Agent to an IBM WebSphere Server Using the Server Administrative Console

Adding the Agent to an IBM WebSphere Server Using wsadmin

Adding the Agent to a Red Hat JBoss Server

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 15 of 30

Installation Guide

Installing the Java Agent

Adding the Agent to an Oracle WebLogic Server

Adding the Agent to a System Service

Adding the Agent to a Standalone Java Application

Adding the Agent to a Host Machine That Has More Than One Protected Application

Adding the Agent to a Standalone Apache Tomcat Server

To configure a standalone Apache Tomcat server to start with the agent, perform the steps in this

topic if you are doing one of the following:

l

Adding the first agent (you are adding the agent to a system that does not already have an

agent)

l

Adding another agent (the system already has an agent)

If you are adding the agent to a host machine that is running more than one protected

application, follow the instructions in "Adding the Agent to a Host Machine That Has More Than

UNIX or Linux

To add the agent:

1.

Open <Tomcat_home>/bin/catalina.sh.

2. Do one of the following:

l

To add the first agent, add the following line beneath the JAVA_OPTS section and above

the Execute The Requested Command comment:

CATALINA_OPTS="-javaagent:<install_dir>/lib./FortifyAgent.jar

$CATALINA_OPTS"

l

To add another agent, add the -javaagent startup option (shown in bold text below) to

the beginning of the option for the existing agent. For example:

CATALINA_OPTS="-javaagent:<install_dir>/lib./FortifyAgent.jar,

<existing_agent> $CATALINA_OPTS"

Windows

To add the agent:

1.

Open <Tomcat_home>\bin\catalina.bat.

2. Do one of the following:

l

To add the first agent, add the following line beneath the JAVA_OPTS section and above

the Execute The Requested Command comment:

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 16 of 30

Installation Guide

Installing the Java Agent

set CATALINA_OPTS="-javaagent:<install_dir>\lib\FortifyAgent.jar

%CATALINA_OPTS%"

l

To add another agent, add the -javaagent startup option (shown in bold text below) to

the beginning of the option for the existing agent. For example:

set CATALINA_OPTS="-javaagent:<install_dir>\lib\FortifyAgent.jar,

<existing_agent> %CATALINA_OPTS%"

Adding the Agent to an Apache Tomcat Windows Service

To configure an Apache Tomcat Windows service to start with the agent, perform the steps in this

topic if you are doing one of the following:

l

Adding the first agent (you are adding the agent to a system that does not already have an

agent)

l

Adding another agent (the system already has an agent)

If you are adding the agent to a host machine that is running more than one protected

application, follow the instructions in "Adding the Agent to a Host Machine That Has More Than

To add the agent:

1. Start the Apache Tomcat configuration application. For example, for Apache Tomcat 7, this is

tomcat7w.exe.

2. Do one of the following:

l

To add the first agent, add the following line to the Java Options section under the

Java tab:

"-javaagent:<install_dir>\lib\FortifyAgent.jar"

l

To add another agent, add the -javaagent startup option (shown in bold text below) to

the beginning of the option for the existing agent. For example:

"-javaagent:<install_dir>\lib\FortifyAgent.jar, <existing_agent>"

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 17 of 30

Installation Guide

Installing the Java Agent

Adding the Agent to an IBM WebSphere Server Using the Server Administrative

Console

To add the agent to an IBM WebSphere server using the IBM WebSphere administrative console,

perform the steps in this topic if you are doing one of the following:

l

Adding the first agent (you are adding the agent to a system that does not already have an

agent)

l

Adding another agent (the system already has an agent)

If you are adding the agent to a host machine that is running more than one protected

application, follow the instructions in "Adding the Agent to a Host Machine That Has More Than

UNIX or Linux

To add the agent:

1. On the WebSphere Application Servers page, select the server for which you want to add the

agent.

2. Do one of the following:

l

To add the first agent, add the following option to the Generic JVM Arguments

section:

-javaagent:<install_dir>/lib./FortifyAgent.jar

l

To add another agent, add the -javaagent startup option (shown in bold text below) to

the beginning of the option for the existing agent in the Generic JVM Arguments

section. For example:

-javaagent:<install_dir>/lib./FortifyAgent.jar, <existing_agent>

3.

If using WebSphere 7 or higher, add the following option to the Generic JVM Arguments

section:

-Xshareclasses:none

Windows

To add the agent:

1. On the WebSphere Application Servers page, select the server for which you want to add the

agent.

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 18 of 30

Installation Guide

Installing the Java Agent

2. Do one of the following:

l

To add the first agent, add the following option to the Generic JVM Arguments

section:

-javaagent:<install_dir>\lib\FortifyAgent.jar

l

To add another agent, add the -javaagent startup option (shown in bold text below) to

the beginning of the option for the existing agent in the Generic JVM Arguments

section. For example:

-javaagent:<install_dir>\lib\FortifyAgent.jar, <existing_agent>

3.

If you are using WebSphere 7 or higher, add the following option to the Generic JVM

Arguments section:

-Xshareclasses:none

Adding the Agent to an IBM WebSphere Server Using wsadmin

To add the agent to an IBM WebSphere server using the IBM WebSphere wsadmin command-line

utility:

1.

In the <WebSphere_home>/profiles/AppSrvN/bin directory, execute the following

command:

Note: On UNIX or Linux systems, you must use a forward slash (/) when specifying the

path to the wsadmin command-line utility. On Windows, use a backslash (\).

UNIX or Linux

wsadmin -conntype none -f <install_dir>/tools/

websphereJvmSetup.jacl -fortifyHome <install_dir>

Windows

wsadmin.bat

2. If the application server does not have default WebSphere settings, one or more of the

following options might need to be added to the wsadmin command:

Parameter

Description

Specifies the WebSphere server’s cell

-cell

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 19 of 30

Installation Guide

Installing the Java Agent

Parameter

Description

Specifies the WebSphere server’s name

-server

Default: server1

Specifies the WebSphere server’s node name

-node

Adding the Agent to a Red Hat JBoss Server

To configure a Red Hat JBoss server to start with the agent, perform the steps in this topic if you

are doing one of the following:

l

Adding the first agent (you are adding the agent to a system that does not already have an

agent)

l

Adding another agent (the system already has an agent)

If you are adding the agent to a host machine that is running more than one protected

application, follow the instructions in "Adding the Agent to a Host Machine That Has More Than

"JBoss 5.2.0 or Lower" below

This topic contains the following sections:

l

l

"JBoss 6.0.1 or Higher" on the next page

JBoss 5.2.0 or Lower

Configure JBoss 5.20 or lower to start with the agent.

UNIX or Linux

To add the agent:

1.

Open <JBoss_home>/bin/run.sh.

2. Do one of the following:

l

To add the first agent, add the following line:

JAVA_OPTS="-javaagent:<install_dir>/lib./FortifyAgent.jar $JAVA_OPTS"

To add another agent, add the -javaagent startup option (shown in bold text below) to

the beginning of the option for the existing agent. For example:

JAVA_OPTS="-javaagent:<install_dir>/lib./FortifyAgent.jar,

<existing_agent> $JAVA_OPTS"

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 20 of 30

Installation Guide

Installing the Java Agent

Windows

To add the agent:

1.

Open <JBoss_home>\bin\run.bat.

2. Do one of the following:

l

To add the first agent, add the following line:

set JAVA_OPTS="-javaagent:<install_dir>\lib\FortifyAgent.jar %JAVA_

OPTS%"

l

To add another agent, add the -javaagent startup option (shown in bold text below) to

the beginning of the option for the existing agent. For example:

set JAVA_OPTS="-javaagent:<install_dir>\lib\FortifyAgent.jar,

<existing_agent> %JAVA_OPTS%"

JBoss 6.0.1 or Higher

Configure JBoss version 6.0.1 or higher to start with the agent.

UNIX or Linux

To add the agent:

1.

Open <JBoss_home>/bin/standalone.sh.

2. Do one of the following:

l

To add the first agent, add the following lines:

JAVA_OPTS="-javaagent:<install_dir>/lib./FortifyAgent.jar $JAVA_OPTS"

PROCESS_CONTROLLER_JAVA_OPTS =

"-javaagent:<install_dir>/lib./FortifyAgent.jar

$PROCESS_CONTROLLER_JAVA_OPTS"

l

To add another agent, add the -javaagent startup option (shown in bold text below) to

the beginning of the option for the existing agent. For example:

JAVA_OPTS="-javaagent:<install_dir>/lib./FortifyAgent.jar,

<existing_agent> $JAVA_OPTS"

PROCESS_CONTROLLER_JAVA_OPTS =

"-javaagent:<install_dir>/lib./FortifyAgent.jar,

<existing_agent> $PROCESS_CONTROLLER_JAVA_OPTS"

3.

Add the lines described in step 2 to <JBoss_home>/bin/domain.sh.

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 21 of 30

Installation Guide

Installing the Java Agent

4.

Modify the standalone.conf file as follows:

a.

Append the following to the -Djboss.modules.system.pkgs=org.jboss.byteman

JVM option:

,org.jboss.logmanager,com.fortify

b.

Add the following JVM options, depending on the version of JBoss. Replace <JBoss_

home> with the full path to the JBoss home, and replace

<jar_file_version> with the version of the jar file for your JBoss release.

If the JBoss version is 6.0.1:

-Djava.util.logging.manager=org.jboss.logmanager.LogManager

-Xbootclasspath/p:<JBoss_home>/modules/org/

jboss/logmanager/main/

jboss-logmanager-<jar_file_version>.jar

If the JBoss version is 6.1.0 or higher:

-Djava.util.logging.manager=org.jboss.logmanager.LogManager

-Xbootclasspath/p:<JBoss_home>/modules/

system/layers/base/org/jboss/logmanager/main/

jboss-logmanager-<jar_file_version>.jar

For example, if you are running JBoss 6.2.0 and it is located in

/usr/bin/jboss/jboss-eap-6.2, you add JVM options similar to the following:

-Djava.util.logging.manager=org.jboss.logmanager.LogManager

-Xbootclasspath/p:/usr/bin/jboss/jboss-eap-6.2/modules/

system/layers/base/org/jboss/logmanager/main/

jboss-logmanager-1.5.1.Final-redhat-1.jar

5.

Perform the procedures of step 4 for domain.conf.

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 22 of 30

Installation Guide

Installing the Java Agent

Windows

To add the agent:

1.

Open <JBoss_home>\bin\standalone.bat.

2. Do one of the following:

l

To add the first agent, add the following lines:

set JAVA_OPTS="-javaagent:<install_dir>\lib\FortifyAgent.jar

%JAVA_OPTS%"

set PROCESS_CONTROLLER_JAVA_OPTS =

"-javaagent:<install_dir>\lib\FortifyAgent.jar

%PROCESS_CONTROLLER_JAVA_OPTS%"

l

To add another agent, add the -javaagent startup option (shown in bold text below) to

the beginning of the option for the existing agent. For example:

set JAVA_OPTS="-javaagent:<install_dir>\lib\FortifyAgent.jar,

<existing_agent> %JAVA_OPTS%"

set PROCESS_CONTROLLER_JAVA_OPTS =

"-javaagent:<install_dir>\lib\FortifyAgent.jar,

<existing_agent> %PROCESS_CONTROLLER_JAVA_OPTS%"

3.

4.

Add the lines described in step 2 to <JBoss_home>\bin\domain.bat.

Modify the standalone.conf.bat file as follows:

a.

Append the following to the -Djboss.modules.system.pkgs=org.jboss.byteman

JVM option:

,org.jboss.logmanager,com.fortify

b.

Add the following JVM options, depending on the version of JBoss. Replace <JBoss_

home> with the full path to the JBoss home, and replace

<jar_file_version> with the version of the jar file for your JBoss release.

If the JBoss version is 6.0.1:

-Djava.util.logging.manager=org.jboss.logmanager.LogManager

-Xbootclasspath\p:<JBoss_home>\modules\org\

jboss\logmanager\main\

jboss-logmanager-<jar_file_version>.jar

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 23 of 30

Installation Guide

Installing the Java Agent

If the JBoss version is 6.1.0 or higher:

-Djava.util.logging.manager=org.jboss.logmanager.LogManager

-Xbootclasspath\p:<JBoss_home>\modules\

system\layers\base\org\jboss\logmanager\main\

jboss-logmanager-<jar_file_version>.jar

For example, if you are running JBoss 6.2.0 and it is located in C:\bin\jboss\jboss-

eap-6.2, you add JVM options similar to the following:

-Djava.util.logging.manager=org.jboss.logmanager.LogManager

-Xbootclasspath\p:C:\bin\jboss\jboss-eap-6.2\modules\

system\layers\base\org\jboss\logmanager\main\

jboss-logmanager-1.5.1.Final-redhat-1.jar

5.

Perform the procedures of step 4 for domain.conf.bat.

Adding the Agent to an Oracle WebLogic Server

To configure an Oracle WebLogic server to start with the agent, perform the steps in this topic if

you are doing one of the following:

l

Adding the first agent (you are adding the agent to a system that does not already have an

agent)

l

Adding another agent (the system already has an agent)

If you are adding the agent to a host machine that is running more than one protected

application, follow the instructions in "Adding the Agent to a Host Machine That Has More Than

UNIX or Linux

To add the agent:

1.

Open <WebLogic_home>/bin/startWebLogic.sh.

2. Do one of the following:

l

To add the first agent, add the following line:

JAVA_OPTIONS="-javaagent:<install_dir>/lib./FortifyAgent.jar $JAVA_

OPTIONS"

Micro Focus Fortify WebInspect Agent (22.2.0)

Page 24 of 30

Installation Guide

Installing the Java Agent

l

To add another agent, add the -javaagent startup option (shown in bold text below) to

the beginning of the option for the existing agent. For example:

JAVA_OPTIONS="-javaagent:<install_dir>/lib./FortifyAgent.jar,

<existing_agent> $JAVA_OPTIONS"

Windows

To add the agent:

1.

Open <WebLogic_home>\bin\startWebLogic.cmd.

2. Do one of the following:

l

To add the first agent, add the following line:

set JAVA_OPTIONS="-javaagent:<install_dir>\lib\FortifyAgent.jar

%JAVA_OPTIONS%"

l

To add another agent, add the -javaagent startup option (shown in bold text below) to

the beginning of the option for the existing agent. For example:

set JAVA_OPTIONS="-javaagent:<install_dir>\lib\FortifyAgent.jar,

<existing_agent> %JAVA_OPTIONS%"

Adding the Agent to a System Service

To add runtime agent protection to a Java Virtual Machine (JVM) or application server running as

a system service for UNIX, Linux, or Windows, perform the steps in this topic if you are doing one

of the following:

l

Adding the first agent (you are adding the agent to a system that does not already have an

agent)

l

Adding another agent (the system already has an agent)

If you are adding the agent to a host machine that is running more than one protected

application, follow the instructions in "Adding the Agent to a Host Machine That Has More Than