For ASE to start, the ase_master.key must be present in the /opt/pingidentity/ase/config directory. If you have moved the master key to a secured location for security reasons, copy it to the config directory before executing the start script.

Before starting ASE, make sure that the nofile limit in /etc/security/limits.conf is set to at least 65535 or higher on the host machine. Run the following command on the ASE host machine to check the nofile limit: 
ulimit -n

You can start ASE in one of the following two ways:

  • Using service script available in the util directory, or
  • Using the start.sh script available in the bin directory.
  1. Start ABS.
    • To start ASE as a service:
      1. Navigate to the util directory and run the following command to install ASE as a service: 
        #sudo ./install-systemctl-service.sh pi-ase
      2. Start the service by entering the following command: 
        systemctl start pi-ase.service
    • To start ASE using the start.sh script:
      1. Change the working directory to bin.
      2. Run the start.sh script:
        /opt/pingidentity/ase/bin/start.sh
Starting API Security Enforcer 5.0...
please see /opt/pingidentity/ase/logs/controller.log for more details
  2. Stop ASE.
    • To stop ASE using the stop.sh script:
      1. Change the working directory to bin.
      2. Run the stop.sh script:
        /opt/pingidentity/ase/bin/stop.sh -u admin –p admin
checking API Security Enforcer status…
sending stop request to ASE. please wait…
API Security Enforcer stopped
    • To stop ASE using a service script:
      1. Run the following command:
        systemctl stop pi-ase.service