Skip to main content
HMCTS
Live
Menu
Support
Documentation
GitHub
Table of contents
Search (via Google)
Search
Operations Runbooks
Contribution Guide
Adding Pages
Editing Pages
Testing Changes
Troubleshooting
Example Guides
How-To Guide Template
Troubleshooting Template
Maintenance Guide Template
GitHub
GitHub PATs
Terraform Comment
Azure Pipelines (ADO)
Creating a new pipeline
ADO Pipeline Agents
Agent Pool Networking
ADO Service Connections
ADO Pipeline Agents PAT Usage
ADO Artifacts - Token Renewal
Neuvector
Resetting Neuvector Password
Updating Neuvector Policies
Access and Permissions
Requesting RBAC access via Access Packages
Granting read access to production environments
Implementing Conditional Access Policies
AKS
AKS Scripts
Workload Identity Migration
AKS Known Issues
Flux
Flux Key Vault Credentials
Flux Bootstrapping
Flux Deploy Keys
Flux Image Automation
Flux Github App Authentication
ExternalDNS Patching Example
Prometheus/Grafana Patching Example
Upgrading Crime AKS Clusters
Upgrading AKS Clusters
nodelocaldns or node-local-dns Patching Example
Artifactory Patching
kured Patching Example
Neuvector Patching
Patching AKS Apps Overview
Pact-Broker Patching Example
DNS Node Cache Patching
Flux Patching Example
Dynatrace Patching Example
Traefik Patching Example
KEDA Patching Example
Backstage Patching Example
AzureServiceOperator Patching Example
Introduction
Upgrade Steps
Troubleshooting
Rebuilding AKS Clusters
Restricted Pod Security
Crime AKS System Component Post-Upgrade Verification
How to switch PTL Clusters Runbook
Crime AKS Cluster Switchover
If Something Goes Wrong
Azure Container Registry
Creating a temporary Azure Container Registry
ACR and AKS Synchronisation Monitoring
Delete all failed pods
Change this line in check-acr-aks-sync-rest.sh
to:
Check Flux reconciliation
Dual ACR publish (Jenkins)
Monitoring
Incident Bot
Azure Application Insights
Setting Up Application Insights Reporting
Availability Tests in App Insights
Botkube
Raise a Dynatrace Monitoring Request
Updating Palo Alto SNMP settings
Dynatrace
Updating Dynatrace OneAgent on VM hosts
Connecting to Dynatrace VMs (ActiveGate)
Dynatrace private locations
Refreshing Dynatrace API tokens on private ActiveGates
Renovate
DTSSE Grafana Installation And Management
Dynatrace & Palo Alto Alerting
Camunda
Camunda Setup
Camunda How To Guides
Camunda Troubleshooting
Certificates
How to Create or Renew SSL Certificates using Let’s Encrypt
Requesting SSL Certificates via Hashicorp Vault
Requesting SSL Certificates
Manually Generated Certificates
How to add the ACME Function App to a new subscription
Managed certificates
Java Upgrade How To Guide
Databases
Executing Queries
Deleting a case from CCD Datastore Database
Gaining Admin Access to PostgreSQL Flex DBs in Limbo State
Create modes in postgres flexible server
Restoring OWASP Dependency Check DB in Sandbox
Restoring a deleted postgres flexible server
Restoring a Single Server Azure PostgreSQL Database
Migrating to Flexible Server
Connecting to Flexible Server
Connecting to Azure Cache for Redis and Azure Managed Redis
ASO PostgreSQL version overrides and in-place upgrades
Vendor & Other Support
Networking
F5
Update GeoIP
Client Troubleshooting
VPN Config
CloudGateway
Operations Guide
Cloud Gateway VPN Gateways
Cloud Gateway Express Route
IPAM
Using IPAM to get available address space
Palo Alto & Panorama
Palo Alto Failover
Panorama - Software Updates
Software Upgrade
Troubleshooting
Connecting to Panorama and Palo Alto Firewalls
Updating Panorama SSL Certs
Hub NAT Considerations
Renew Expired Palo Device Certificate
Admin Portal
Palo Alto Threat Content Update Process
Panorama Disaster Recovery
NAT Gateway - Egress Traffic Flow
Heritage
Patching Heritage Virtual Machines
Updating the DARTS IDAM certificates
Heritage VM Disk Expansions
Heritage Virtual Machine List
Accessing Heritage EXTSVC Virtual Machines
Gaps2 Database Restore Pipeline
Jenkins
Upgrade Java for Jenkins
How SonarQube works on Jenkins
Troubleshooting builds starting slowly
Run command on all agents
How Jenkins agents work
Fortify on Demand (FoD) scanning on Jenkins
How to downgrade a Jenkins plugin
How to add new packages to Jenkins VM Builders
Jenkins GitHub Apps
Crime
APIM
APIM - Trusted Service Connectivity Retirement
Alfresco
Alfresco Deployments
Alfresco Updates
Alfresco Further Reading
Azure Bastion Access for Crime Services
General SSH use
SSH Port Forwarding and services
Using Azure Portal
Troubleshooting
Additional guidance via links
Barracuda Web Application Firewall
Troubleshooting
Barracuda Web Application Firewall Deployments
Adding a Barracuda WAF to the Control Center
Barracuda Further Reading
Updating VPN Routes for Tunnelblick
DARTS Connectivity (Crime -> SDS)
App Registration Secret Automation
Decommission App Gateway
CRIME Auto Startup/Shutdown
Current State (Azure DevOps + Confluence)
Review CNP account sync
Services
allpay
Migrating Azure Redis Data to Azure Managed Redis
Atlassian Infrastructure
Atlassian Staging Build
Crime Portal
Data Boarding
Docker Hub SSO Overview
Github Overview
Github Accounts
Globalscape / EFT Enterprise
LEDS FTPS Gateway
LibraGoB
MET Containers
LaunchDarkly
Mailrelay Essentials
Power Platform Gateways
Upgrading Azure API Management platform version
ServiceNow MySQL Database Restore
ServiceNow MySQL Database Authentication
XDR Agent Installation - HMCTS
XDR Agent Installation - Crime (DEPRECATED)
XDR Agent Installation - Crime
Nessus Agent Installation - Crime
Updating Docmosis Variables
Onboarding Checklist
BAU Onboarding
#dtspo-daily-checks
Crime Account Access
Jira and Confluence Access
PlatOps Utilities
Common ZSHRC Extensions
Macbook Utilities
Guide to Switch from One MacBook to Another
Useful Websites
Useful tools
Security tools
Microsoft VS Code Extensions
On Call
Patch Guides
OS Patch Management
APIM Migration
Patching CCD ELK VMs
Azure Update Manager - Operations Guide
Scripting AUM
Azure Update Manager - Manual Operations Guide
Individual VM Updates
Ad Hoc Jobs For Multiple VMs
Azure Update Manager Troubleshooting
Patching CRIME VMs - Operations Guide
JIRA OS Patching Epics
Patching Process
Upgrading Ubuntu 20.04 to 24.04 on VM
Change Management
Raise a change request
BAIS
BAIS EFT Globalscape Documentation
BAIS Server Access
BAIS NSG Rules
BAIS Windows Firewall Rules
Security Operations
Splunk datadisk configuration
Tenable Nessus Documentation
What is Tenable nessus
configuring Tenable nessus
Deploying nessus agents
Support from Tenable
Basic Troubleshooting
Splunk Server Access
Tenable Nessus
FinOps
Using Spot instances with deployments
Tagging Resources Manually
BAU & Live Services
Slack PlatOps Help Request
Generating an SAS Token
Domain Services
DNS Records
FSLogix Application Masking
FFSLogix-Java Rule Editor
Hide Notepad Demo
Testing Changes
Use Helm Template to test chart library changes
Create a draft release for testing purposes
Use GitRepository in Flux to test charts from a branch
MSIX App Attach for Windows Server
Converting Installer Files to VHDX Images
Configuring App Attach
Modified AppAttach Scripts
Terraform
Terraform Variable Validation
Importing Resources Into Terraform
Terraform Known Issues
Installing terraform-docs
Elastic-Search-and-Logstash
ElasticSearch Reindexing Guidance
Elastic Search Support
How to delete Elastic Search Index
Useful Elastic Search Commands and Examples
How to reindex using Reindex API on Elastic Search
How to restart the Elastic Search service
How to reindex when Elastic Search and Database are out of sync
ElasticSearch License Update
Adding a new language to the platform
BAIS
BAIS Overview
BAIS Globalscape Repo
Azure DevOps Pipeline