Configure JFrog Platform in an Air-gapped Environment

An air-gapped environment is a system that has no access to outside Internet. JFrog Platform uses theJFConnect microservice to fetch entitlements that enable the usage of various services. For more information, see JFConnect Microservice.

As of Artifactory version 7.68.7, you can configure the JFrog Platform to run in an air-gapped environment.

Do the following steps to configure the JFrog Platform to work in an air-gapped environment.

Set the following values in the Artifactory System YAML file.

jfconnect:
    enabled: true
    airgap:
        enabled: true
    usage:
        enabled: true

Generate an admin scoped token.
For more information, see Create an Admin Scoped Token.Create an Admin Scoped Token
Generate an offline request token with the JFConnect Start Register API with the bearer token that you obtained in the previous step in the air-gapped JPD.
The API returns an offline request token.
Run the Post Offline Request Token to JFrog Entitlements Service API with the offline request token in the body from a machine that has access to the Internet.
For example:
```
curl --location 'https://jes.jfrog.io/api/v1/offline_register' \
--header 'Content-Type: application/json' \
--data '{
    "offline_request_token": "<token>"
}' > entitlements.json
```
If you run the previous command, you an ensure that the entitlements JSON that you receive from JES will have the same checksum as intended since you are writing the response body to a file.
In addition, the response header also contains an offline_response_token that you need to provide to the air-gapped JPD.

Run the JFConnect Offline Register API with the offline response token and the entitlements file in the machine that hosts the air-gapped JFrog Platform installation.

curl --location 'http://localhost:8082/jfconnect/api/v1/offline/register' 
\ --header 'Authorization: Bearer <token>' \ 
--form 'entitlements=@entitlements.json;type=application/json' 
\ --form 'offline_response_token=""'