# Activating user authentication for file upload on Talend Runtime

Available in...

* Data Fabric
* Data Services Platform
* ESB
* Qlik Talend Cloud Enterprise Edition
* Qlik Talend Cloud Premium Edition
* Real-Time Big Data Platform

Activate user authentication to restrict the permission of uploading files to Talend Runtime to authenticated users only.

## Before you begin

* Download and apply the R2022-09 monthly update patch on Talend Administration Center and Talend Studio.

  * For further information about applying a monthly patch for Talend Studio, see [Updating Studio](https://help.qlik.com/talend/r/en-US/Cloud/installation-guide-windows/updating-talend-studio).
  * For further information about how to update Talend Administration Center, see [Checking for updates](https://help.qlik.com/talend/r/en-US/8.0/administration-center-user-guide/checking-for-updates).

  If this is the first time you apply a patch, learn about the best practice by following [Testing and applying a Talend Studio monthly update](https://help.qlik.com/talend/en-US/installation-guide-linux/8.0/best-practice-testing-talend-studio-monthly-update "Before installing a monthly update on your Talend Studio and migrating your projects to a newer version on the production branch, it is recommended to test project migration on testing branches first to keep your production branch safe.").

* Download and apply the following patches on each Talend Runtime.

  * 8.0: [TPS-5360](https://help.qlik.com/talend/r/en-US/8.0/tps-5360)

  For information about how to obtain the patches, reach out to your Support contact with the patch numbers above.

* Global protection for authentication to Talend Runtime must have been activated. For instructions, see [Authenticating with Talend ESB](https://help.qlik.com/talend/en-US/esb-infra-services-configuration-guide/8.0/authentication-with-talend-esb).

Backward compatibility: Existing configurations for Talend Studio, Talend Administration Center, and Talend Runtime remain compatible after applying these patches.

## Procedure

1. Stop Talend Studio and enable this feature in Talend Studio.

   Open the <Studio\_installation>/Talend-Studio-\*.ini file, add the following line:
   ```
   -Dorg.talend.remote.jobserver.client.old=false
   ```
2. Stop Talend Administration Center and enable this feature in it.

   Open the TAC\_installation/apache-tomcat/bin/setenv.sh or the TAC\_installation/apache-tomcat/bin/setenv.bat file, add the following system property to the JAVA\_OPTS variable.
   ```
   org.talend.remote.jobserver.client.old=false
   ```

   This should make the JAVA\_OPTS line look like:
   ```
   export JAVA_OPTS="$JAVA_OPTS -Xmx4096m -Dfile.encoding=UTF-8 -Dorg.talend.remote.jobserver.client.old=false"
   ```
3. Restart Talend Studio and Talend Administration Center.

   The servers may report exceptions because Talend Studio and Talend Administration Center attempt to use the new protocol before reverting to the legacy protocol. However, all Jobs continue to run successfully.
4. Stop your Talend Runtime and enable this feature on the server side.

   Open the <Runtime\_installation>/etc/org.talend.remote.jobserver.server.cfg file to add the following line:
   ```
   org.talend.remote.jobserver.commons.config.JobServerConfiguration.FILESERVER_AUTHORIZATION=true
   ```
5. Restart your Talend Runtime.

   After approximately one hour, all clients such as Talend Studio and Talend Administration Center recognize and apply the new user authentication for file uploading.

   If you exclude any Talend Runtime instances from the patch, they continue to function without this authentication protection. Consequently, clients report hourly exceptions when attempting to locate the new protocol before reverting to the legacy version. All Jobs continue to run successfully despite these exceptions.