Installation Checklist

Bare-bones Instructions For Standing Up A TDS Production Server

Prior To Installation

1. Purchase a certificate from a certificate authority for your TDS domain/host.
2. Create a dedicated user/group for running the Tomcat server.

Install Java

1. Install the JDK

Install And Configure Tomcat

1. Install Tomcat
2. Create a setenv.sh file in ${tomcat_home}/bin to set JVM options and the TDS $CONTENT_ROOT.
3. Make the following modifications to ${tomcat_home}/conf/server.xml:
   • Enable digested password support by modifying the UserDatabaseRealm.
   • Enable TLS/SSL in tomcat using you CA certificate.
   • Enable Compression in the Tomcat connectors.
   • Modify the Tomcat AccessLogValve log format and changed the prefix and suffix and pattern attributes for the access log file.
4. Create a digested password using the algorithm specified in the UserDatabaseRealm of the ${tomcat_home}/conf/server.xml file.
5. Make the following modifications to ${tomcat_home}/conf/tomcat-users.xml:
   • Create roles for manager-gui, tdsConfig and tdsMonitor.
   • Create a user with the digested password with access to the manager-gui, tdsConfig, and tdsMonitor roles.
6. If you choose to use the Tomcat manager application, modify the deployment descriptor (${tomcat_home}/webapps/manager/WEB-INF/web.xml) to force access to occur only via HTTPS.
7. Remove all unused web applications from the ${tomcat_home}/webapps directory.
8. Modify the permissions of ${tomcat_home} to restrict access.

Deploying The TDS

1. Download the TDS WAR file.
2. If needed, rename the WAR file to thredds.war.
3. Deploy the thredds.war file to the ${tomcat_home}/webapps directory.
4. Start/restart Tomcat so that it has a chance to create initial files in ${tomcat_home}/content/thredds.
5. Modify ${tomcat_home}/content/thredds/catalog.xml for your site.
6. Modify ${tomcat_home}/content/thredds/threddsConfig.xml for your site in the following manner:
   • Add the needed information to the ServerInformation element.
   • Enable any other optional services like WMS or WCS.

Continued Maintenance

1. Be sure to periodically check to make sure you are running the latest versions of Java, Tomcat and the TDS.
2. If you have enabled access logging (and you should), zip up the unused access logs in ${tomcat_home}/logs/ and archive them off to another directory.
3. Likewise, zip up the unused TDS servlet logs in ${tomcat_home}/content/thredds/logs and archive them as well.
4. Manually rotate Tomcat’s catalina.out log file when it grows too large.

Upgrading The TDS

Upgrading Tomcat