Octopus.WildFlyCertificateDeploy exported 2026-07-22 by Octopus Deploy belongs to ‘Certificate’ category.
Configure a certificate in WildFly 10+ or JBoss EAP 6+ standalone or domain server.
Parameters
When this step is included in a project’s deployment process, the parameters below can be set.
Management host or IP
WildFly.Deploy.Controller (required)
The hostname or IP address of the application server that the certificate will be configured in.
Default: localhost
Example: localhost
Management port
WildFly.Deploy.Port
The management port that the application server is listening to.
Default: 9990
Example: 9990
Management protocol
WildFly.Deploy.Protocol
The management protocol that the application server is listening to.
Default: remote+http
Example: remote+http
Management user
WildFly.Deploy.User
The username to use with the management interface. By default WildFly does not require credentials for local connections.
Management password
WildFly.Deploy.Password
The password to use with the management interface. By default WildFly does not require credentials for local connections.
Standalone or domain server
WildFly.Deploy.ServerType
Select the kind of server you are deploying to.
Allowed values: Standalone, Domain
Default: Standalone
Keystore creation
WildFly.Deploy.DeployCertificate
Whether to create a new keystore or reference an existing keystore. Only applicable for standalone servers.
Allowed values: True, False
Default: True
Certificate variable
Java.Certificate.Variable
The certificate variable to deploy. Used when creating a new keystore.
Keystore filename
Java.Certificate.KeystoreFilename
The path of the keystore file. When creating a new keystore, this must be an absolute path. When referencing an existing keystore, this can be relative to a base path. If left blank when creating, a new file is created in the server’s configuration directory.
Private key password
Java.Certificate.Password
An optional password assigned to the private key. If left blank, the default password of ‘changeit’ will be used.
Keystore alias
Java.Certificate.KeystoreAlias
The optional alias to assign the private key to. If left blank, the default alias of ‘Octopus’ will be used.
Relative base path
WildFly.Deploy.CertificateRelativeTo
The relative path that the keystore file will be resolved from. Select ‘NONE’ if the keystore filename is an absolute path.
Allowed values: NONE, jboss.home.dir, user.home, user.dir, java.home, jboss.server.base.dir, jboss.server.config.dir, jboss.server.data.dir, jboss.server.log.dir, jboss.server.temp.dir, jboss.controller.temp.dir, jboss.domain.base.dir, jboss.domain.config.dir, jboss.domain.data.dir, jboss.domain.log.dir, jboss.domain.temp.dir, jboss.domain.deployment.dir, jboss.domain.servers.dir
Default: NONE
Domain profiles
WildFly.Deploy.CertificateProfiles
A comma-separated list that defines the domain server groups where the certificate will be configured. Only applicable for domain servers.
Default: default
HTTPS socket binding name
WildFly.Deploy.HTTPSPortBindingName
The port binding used to listen to HTTPS requests in the application server. If left blank, defaults to ‘https’.
Legacy security realm name
WildFly.Deploy.SecurityRealmName
The name of the security realm that will be created in applicable application servers. If left blank, defaults to ‘OctopusHttps’.
Elytron key store name
WildFly.Deploy.ElytronKeystoreName
The name of the Elytron key store. If left blank, defaults to ‘OctopusHttpsKS’.
Elytron key manager name
WildFly.Deploy.ElytronKeymanagerName
The name of the Elytron key manager. If left blank, defaults to ‘OctopusHttpsKM’.
Elytron server SSL context name
WildFly.Deploy.ElytronSSLContextName
The name of the Elytron server SSL context. If left blank, defaults to ‘OctopusHttpsSSC’.
Step configuration using OCL
Example in Octopus Configuration Language (OCL):
step "deploy-cert-to-wildfly" {
name = "Deploy cert to WildFly"
properties = {
Octopus.Action.TargetRoles = "wildfly-server"
}
action {
action_type = "Octopus.WildFlyCertificateDeploy"
properties = {
Java.Certificate.KeystoreAlias = "wildfly"
Java.Certificate.KeystoreFilename = "/opt/wildfly/standalone/configuration/keystore.jks"
Java.Certificate.Password = "#{KeystorePassword}"
Java.Certificate.Variable = "Certificates-MyCert"
Octopus.Action.RunOnServer = "false"
WildFly.Deploy.Controller = "localhost"
WildFly.Deploy.DeployCertificate = "True"
WildFly.Deploy.Port = "9990"
WildFly.Deploy.Protocol = "remote+http"
WildFly.Deploy.ServerType = "Standalone"
}
}
}Page updated on Wednesday, July 22, 2026