Chapter 7. Configuring Ansible Automation Platform You can configure Ansible Automation Platform from the Settings menu using the following selections: Subscriptions Platform gateway User Preferences Troubleshooting Note The other selections available from the Settings menu are specific to automation execution. For more information, refer to the Configuring automation execution guide. 7.1. Configuring subscriptions You can use the Subscription menu to view the details of your subscription, such as compliance, host-related statistics, or expiry, or you can apply a new subscription. Procedure From the navigation panel, select Settings Subscription . The Subscription page is displayed. Click Edit subscription . You can either enter your Red Hat Username and Password, or attach a current Subscription Manifest in the Welcome page. Click and agree to the terms of the license agreement. Click to review the subscription settings. Click Finish to complete the configuration. 7.2. Platform gateway The platform gateway is the service that handles authentication and authorization for Ansible Automation Platform. It provides a single ingress into the Platform and serves the Platform's user interface. From the Settings Platform gateway menu, you can configure Platform gateway , Security , Session , Platform Security , Custom Login , and Other settings. Procedure From the navigation panel, select Settings Platform gateway . The Platform gateway settings page is displayed. To configure the options, click Edit platform gateway settings . You can configure the following platform gateway options: Platform gateway proxy url : URL to the platform gateway proxy layer. Platform gateway proxy url ignore cert : Ignore the certificate to the platform gateway proxy layer. Click Save platform gateway settings to save the changes or proceed to configure the other platform options available. 7.2.1. Configuring platform security From the Platform gateway settings page, you can configure platform security settings. Procedure From the navigation panel, select Settings Platform gateway . The Platform gateway settings page is displayed. To configure the options, click Edit . You can configure the following Security settings: Allow admin to set insecure : Whether a superuser account can save an insecure password when editing any local user account. Gateway basic auth enabled : Enable basic authentication to the platform gateway API. Turning this off prevents all basic authentication (local users), so customers need to make sure they have their alternative authentication mechanisms correctly configured before doing so. Turning it off with only local authentication configured also prevents all access to the UI. Social auth username is full email : Enabling this setting alerts social authentication to use the full email as username instead of the full name. Gateway token name : The header name to push from the proxy to the backend service. Warning If this name is changed, backends must be updated to compensate. Gateway access token expiration : How long the access tokens are valid for. Jwt private key : The private key used to encrypt the JWT tokens sent to backend services. This should be a private RSA key and one should be generated automatically on installation. Note Use caution when rotating the key as it will cause current sessions to fail until their JWT keys are reset. (Read only) Jwt public key : The private key used to encrypt the JWT tokens sent to backend services. This should be a private RSA key and one should be generated automatically on installation. Note See other services' documentation on how they consume this key. Click Save changes to save the changes or proceed to configure the other platform options available. 7.2.2. Configuring platform sessions From the Platform gateway settings page, you can configure platform session settings. Procedure From the navigation panel, select Settings Platform gateway . The Platform gateway settings page is displayed. To configure the options, click Edit platform gateway settings . Enter the time in seconds before a session expires in the Session cookie age field. Click Save platform gateway settings to save the changes or proceed to configure the other platform options available. 7.2.3. Configuring a platform password security policy From the Platform gateway settings page, you can configure a password security policy. Procedure From the navigation panel, select Settings Platform gateway . The Platform gateway settings page is displayed. To configure the options, click Edit platform gateway settings . You can configure the following Password Security options: Password minimum uppercase letters : How many uppercase characters need to be in a local password. Password minimum length : The minimum length of a local password. Password minimum numerical digits : How many numerical characters need to be in a local password. Password minimum special characters : How many special characters need to be in a local password. Click Save platform gateway settings to save the changes or proceed to configure the other platform options available. 7.2.4. Configuring a custom platform log in From the Platform gateway settings page, you can configure the custom log in options. Procedure From the navigation panel, select Settings Platform gateway . The Platform gateway settings page is displayed. To configure the options, click Edit platform gateway settings . You can configure the following Custom Login options: Custom login info : Provide specific information (such as a

Commands: