Application Protector Java on

Understanding the Architecture

Mon, 01 Jan 0001 00:00:00 +0000

This page describes the architecture, the individual components, and the workflow of the Protegrity Application Protector (AP) solution.

The following figure illustrates the deployment architecture of the Application Protector (AP).

The following table describes the components of the AP deployment architecture.

Component	Description
Customer Application	Built in supported programming languages and integrates with AP for data protection.
Application Protector	Core protection engine that enforces security policies and performs data protection operations.
Configuration File (config.ini)	Contains initialization parameters passed to AP during startup.
Native Interface	Native interface between AP and the C layer. Java: Java Native Interface (JNI) layer Python: Python.h layer
Package Enforcement and Deployment	Downloads policy packages from the RP Agent and executes protection operations, such as, protect, unprotect, and reprotect.
Log Forwarder	Collects logs from AP and forwards them to the Audit Store for centralized auditing.
Resilient Package (RP) Agent	Standalone process that retrieves policy packages from ESA and shares them with AP processes using shared memory IPC.

The following steps describe the workflow of a sample AP deployment in the production environment.

Mon, 01 Jan 0001 00:00:00 +0000

The following table lists the minimum hardware configurations.

Hardware Component	Configuration Details
CPU	Depends on the application.
Disk Space	Under 200 MB - including LogForwarder, RP Agent, and AP Java or AP Python.
RAM	Memory usage depends on the AP flavor and application behavior. Refer to AP Java and AP Python

Mon, 01 Jan 0001 00:00:00 +0000

Before installing Protegrity Application Protector (AP) Java on a Linux platform, ensure the following prerequisites are met:

The Enterprise Security Administrator (ESA) is installed, configured, and running.
The IP address or host name of the Load Balancer, Proxy, or ESA is noted.
The Policy Management (PIM) is initialized on the ESA. It creates cryptographic keys and the policy repository for data protection.
For more information about initializing the PIM, refer to Initializing the Policy Management.

Mon, 01 Jan 0001 00:00:00 +0000

To extract the setup scripts and package:

Download the ApplicationProtector_Linux-ALL-64_x86-64_JRE-1.8-64_<version>.tgz file to any location on the machine where you want to install the protector.
Extract the AP Java installation package using the following command.
```
tar –xvf ApplicationProtector_Linux-ALL-64_x86-64_JRE-1.8-64_<version>.tgz
```
The following setup files are extracted:
- ApplicationProtector_Linux-ALL-64_x86-64_JRE-1.8-64_<version>.tgz
- signatures/ApplicationProtector_Linux-ALL-64_x86-64_JRE-1.8-64_<version>.sig
Verify the digital signature of the signed AP Java build.
For more information about verifying the signed AP Java build, refer to Verification of Signed Protector Build.
Extract the AP Java installation package again using the following command.
```
tar –xvf ApplicationProtector_Linux-ALL-64_x86-64_JRE-1.8-64_<version>.tgz
```
The following setup files are extracted:
- LogforwarderSetup_Linux_x64_<version>.sh
- RPAgentSetup_Linux_x64_<version>.sh
- APJavaSetup_Linux_x64_<version>.sh

The steps to install the Log Forwarder on a Linux platform using the Interactive mode or through the Silent mode are described in this section.

Mon, 01 Jan 0001 00:00:00 +0000

To configure the AP Java on the Linux platform:

Setup the Java classpath.

Operating System Classpath

Linux /opt/protegrity/sdk/java/lib
Before the trusted application can successfully load the ApplicationProtectorJava.jar file, ensure that -
- The Java classpath is set accurately.
- The path to jcorelite.plm is configured properly.
Deploy a policy to test the application.

For more information about deploying a policy, refer to Deploying Policies.

Operating System	Classpath
Linux	`/opt/protegrity/sdk/java/lib`

For more information about configuring the various parameters for the AP Java using the config.ini file, refer to Config.ini file for Application Protector.