2.1 Docker/Podman

Running ZTrust SSO on Docker/Podman

Local Container Engine such as Docker or Podman

This section provides instructions for running ZTrust SSO in a Docker or Podman environment.

1. Before you start Before starting, ensure that Docker or Podman is installed on your system and you have downloaded the latest container image of the ZTrust SSO.

2. Download the ZTrust SSO image To download the ZTrust container image, first you need to log in to the Prodevans’ container registry using docker login command.

3. Save the Certificate & Key files Before running container image, save the certificate and key files in your system at your desired location.

4. To get the credentials, reach out to the ZTrust Team at [e-mail] Then use,

   docker pull <image-address>

5. Start ZTrust SSO Container To start the ZTrust SSO container, execute the following command in your terminal:

   docker run -d -p 8443:8443 \
     -v <path/to/cert-files>:/opt/ZTrust/conf:ro \
     -e ZTRUST_ADMIN=admin \
     -e ZTRUST_ADMIN_PASSWORD=<pasword> \
     -e ZT_DB=postgres \
     -e ZT_DB_URL=jdbc:postgresql://<db-host:db-port>/<db-name> \
     -e ZT_DB_USERNAME=<db-username> \
     -e ZT_DB_PASSWORD=<db-password> \
     -e ZT_HTTPS_CERTIFICATE_FILE=/opt/ZTrust/conf/cert.crt \
     -e ZT_HTTPS_CERTIFICATE_KEY_FILE=/opt/ZTrust/conf/key.pem \
     -e ZT_HOSTNAME=<hostname> \
     <image-id:tag>

6. This command launches ZTrust SSO in your Docker or Podman environment. The admin console is accessible on port 8443 and establishes an initial admin user with the username "admin" and the password you set above in the command. 'path/to/cert-files' is the location of your certificate and key files in your system.

7. Log in to the Admin Console Go to the ZTrust Administration Console URL. Log in to the ZTrust Admin Console using the credentials that you created earlier. You will land on the “Master Realm” page, which is the default for a new installation of ZTrust SSO. To create a new realm and continue with other configurations, check the Realm Setup section.