Installing and Logging in to WI

Before Installation

Confirm that you have either a Google Chrome or Mozilla Firefox internet browser.
Extensions applications may require additional hardware and resources, depending on utilization. Consider expanding your resources if heavy use of the application is intended.
If you are not using Tufin OS, we recommend that you open a support ticket for a walkthrough before installing an Extension application for the first time. Note the initial setup for all Extensions applications is the same.

In SecureChange:
- Create the necessary workflows before adding them to WI.
- Add the permission View Workflows tab and configure workflows for every WI user or group of users who use WI.
- Create a WI admin user with the following permissions:
  - View Settings tab and configure Orchestration Suite settings
  - View Workflows tab and configure workflows
  - Create and handle tickets on behalf of another user (via API only)
  Log into SecureChange with the WI admin user.

If you are integrating a workflow with an ITSM solution, you will find an additional set of Prerequisites after the procedures for installing and getting Workflow Integrator started.

Install Process

You may need to install a new version of WI in these cases:

You are installing WI on a new environment.
You uninstalled WI.
You need to upgrade to a TOS Aurora version that requires a new installation.

Retrieve Installation File

You can download all Extensions application files, either locally or downloaded to a relevant server, from the Customer Portal Download Center.

From the Download Center, select the Extension to download.
Select the method for downloading the installation package: Download to Computer or Copy link (valid for 10m). Using the link requires the server to have access to download from https://tosportaldownloads.tufin.com.
If you downloaded the package, upload it from your local computer to the primary data node to the directory c:/opt. Upload the file as is; do not extract it first.
If you copied the link, run the following command. If the link has expired, get a new link from the Download Center.
```
curl -o workflowintegrator-v<APP-VERSION>-k3s.run “<LINK>”
```
curl -o workflowintegrator-v<APP-VERSION>-k3s.run “<LINK>”
where
- <APP-VERSION> is the version number as seen in the file name in the Download Center.
- <LINK> is the link you copied from the Download Center.

Procedure

Using SSH, log into the TOS Aurora server.
Create a directory called /opt/extensions.
Copy the installer run file (already downloaded) to /opt/extensions.
Go to /opt/extensions.
Go to the root directory and run the installer file:

# sh workflowIntegrator-v<VERSION>.k3s.run

WI is installed in the TOS Aurora cluster on the data node.

Troubleshooting Installation

Error Message	Next Steps
Error: TOS isn't running	If you receive this message while trying to install an Extension and you are not using Tufin OS, the issue may be related to your OS user permissions. Please contact Tufin Support for instructions.

Post Installation/Upgrade Instructions

Set up the Time Zone

To change the time zone from inside the pod every time the pod restarts, run these commands:

# kubectl set env deployment/workflowintegrator TZ=<TIME_ZONE>

# kubectl set env deployment/workflowintegrator TZ=<TIME_ZONE>

# kubectl rollout restart deployment/workflowintegrator

# kubectl rollout restart deployment/workflowintegrator

Log into WI

You can access WI from inside SecureTrack or by logging in directly. WI integrates with SecureTrack usernames.

Access WI from SecureTrack

From TOS Aurora release R23-1, use the app launcher icon (), select Workflow Integrator.

Note that this option only appears after WI installation.

Log in to WI Directly

In your browser, enter the following URL:
https://<TOS_Aurora_Host>/apps/workflowintegrator
where <TOS_Aurora_Host> is your TOS Aurora IP address. WI uses TOS Aurora for authentication.
The Login page appears.
Enter your TOS Aurora user credentials and click Log In.