PingIntelligence

Starting and stopping ASE

Learn how to start and stop ASE.

Before you begin

For ASE to start, the ase_master.key must be present in the /opt/pingidentity/ase/config directory. If you have moved the master key to a secured location for security reasons, copy it to the config directory before executing the start script.

Before starting ASE, make sure that the nofile limit in /etc/security/limits.conf is set to at least 65535 or higher on the host machine. Run the following command on the ASE host machine to check the nofile limit:

ulimit -n

About this task

You can start ASE in one of the following two ways:

  • Using service script available in the util directory, or

  • Using the start.sh script available in the bin directory.

Steps

  1. Start ABS.

    Choose from:

    • To start ASE as a service:

      1. Navigate to the util directory and run the following command to install ASE as a service:

        #sudo ./install-systemctl-service.sh pi-ase
      2. Start the service by entering the following command:

        systemctl start pi-ase.service
    • To start ASE using the start.sh script:

      1. Change the working directory to bin.

      2. Run the start.sh script:

        /opt/pingidentity/ase/bin/start.sh
        Starting API Security Enforcer 5.0...
        please see /opt/pingidentity/ase/logs/controller.log for more details
  2. Stop ASE.

    Choose from:

    • To stop ASE using the stop.sh script:

      1. Change the working directory to bin.

      2. Run the stop.sh script:

        /opt/pingidentity/ase/bin/stop.sh -u admin –p admin
        checking API Security Enforcer status…
        sending stop request to ASE. please wait…
        API Security Enforcer stopped
    • To stop ASE using a service script:

      1. Run the following command:

        systemctl stop pi-ase.service