Universal Controller runs on Java 17 or Java 21 (headless recommended) with Apache Tomcat 10.x.

For servers with no internet or no access to a dnf repository, download the Red Hat build of OpenJDK 21 portable JDK (.portable.jdk_x86_64.tar.xz) from Red Hat Developers on a machine that has internet access. Copy it to the server next to setup.sh and compare sha256sum with the checksum on the download page.

The script extracts the archive into the install folder you choose (default /opt/java) and points a jdk-21 symlink inside it at the extracted JDK. It then registers /usr/bin/java with alternatives. The Tomcat systemd unit gets JAVA_HOME=<install folder>/jdk-21 directly. Tick "set JAVA_HOME and PATH for all users" only if people also need them in their login shells; it writes /etc/profile.d/java.sh. Every command uses literal paths, so each line still works when pasted on its own. To upgrade, extract a newer archive and re-point the ln -sfn link.

If the Controller connects over TLS to a database, LDAP or SMTP server signed by an internal CA, import that CA into <install folder>/jdk-21/lib/security/cacerts with keytool -importcert.

No Tomcat 10 package is published for RHEL/CentOS or Amazon Linux 2023, so the manual tar.gz path is selected automatically there. Ubuntu/Debian ships tomcat10 via apt.

By default the whole Tomcat directory is handed to the Tomcat user. With this option, root takes back bin/, lib/ and conf/, so a compromised Tomcat cannot rewrite its own startup scripts, drop a jar or edit server.xml. The install root itself stays owned by the Tomcat user because Universal Controller creates uc_logs/ and uc_export/ underneath it, and logs/, temp/, work/ and webapps/ stay writable by inheritance.

Choosing a heap size writes a setenv.sh in the Tomcat bin/ directory that sets CATALINA_OPTS. Default leaves Tomcat's built-in settings alone. See the Sizing Calculator for heap sizing guidance. The file is written with sudo sh -c because the manual install has already handed that directory to the Tomcat user — a plain redirect would fail with "Permission denied", and so would sudo cat >, since the redirection still runs in your own shell.

Only needed for tar.gz installs — package installs register their own unit. JAVA_HOME is optional; leave it blank to get a commented-out placeholder. Run systemctl daemon-reload after copying the file.

The generator scripts MySQL, MariaDB and PostgreSQL. Oracle and SQL Server are supported by the Controller but must be prepared by hand — follow the Stonebranch Database Installation Guide.

Universal Agent needs a few system libraries: libxcrypt-compat on Amazon Linux/RHEL. Install them before running the agent installer.