Configure JFrog Platform in an Air-gapped Environment

An air-gapped environment is a system that has no access to outside Internet. JFrog Platform uses the JFConnect microservice to fetch entitlements that enable the usage of various services. For more information, see JFConnect Microservice.

As of Artifactory version 7.68.7, you can configure the JFrog Platform to run in an air-gapped environment.

Note

This procedure is only required when there is no internet connectivity yet entitlements are required from the platform, for example if you are running JFrog Advanced Security with the platform. With the air-gap functionality, you can get the entitlements and upload them to the platform.

Do the following steps to configure the JFrog Platform to work in an air-gapped environment.

Set the following values in the Artifactory System YAML file.

jfconnect:
    enabled: true
    airgap:
        enabled: true
    usage:
        enabled: true

Generate an admin scoped token.
For more information, see Create an Admin Scoped Token.Create an Admin Scoped Token
Generate an offline request token with the JFConnect Start Register API with the bearer token that you obtained in the previous step in the air-gapped JPD.
The API returns an offline request token.
Run the Post Offline Request Token to JFrog Entitlements Service API with the offline request token in the body from a machine that has access to the Internet.
For example:
```
curl --location 'https://jes.jfrog.io/api/v1/offline_register' \
--header 'Content-Type: application/json' \
--data '{
    "offline_request_token": "<token>"
}' > entitlements.json
```
If you run the previous command, you an ensure that the entitlements JSON that you receive from JES will have the same checksum as intended since you are writing the response body to a file.
In addition, the response header also contains an offline_response_token that you need to provide to the air-gapped JPD.

Run the JFConnect Offline Register API with the offline response token and the entitlements file in the machine that hosts the air-gapped JFrog Platform installation.

curl --location 'http://localhost:8082/jfconnect/api/v1/offline/register' 
\ --header 'Authorization: Bearer <token>' \ 
--form 'entitlements=@entitlements.json;type=application/json' 
\ --form 'offline_response_token=""'