> For the complete documentation index, see [llms.txt](https://academy.pentaho.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://academy.pentaho.com/solution-architect-path-sandbox/solution-architect.md).

# Solution Architect

The Certified Solution Architect learning path: five courses in a set order — DI Developer, Installation, Containers, High Availability and Enterprise Security — leading to the certification.

{% hint style="warning" %}
**🧪 SANDBOX — draft learning path page**

For review only. The Certified Solution Architect learning path is five courses in a set order — DI Developer — Practitioner, Installation — Certified, then the Containers, High Availability and Enterprise Security Speciality courses — leading to the certification. The course outlines are generated from Pentaho Content Manager, with module and lesson names, kinds and times taken from the lab manifests. The High Availability course has no exam yet, and Enterprise Security has no lab content yet.
{% endhint %}

<p align="center"><i class="fa-compass-drafting">:compass-drafting:</i></p>

<h2 align="center">Pentaho Solution Architect</h2>

<p align="center">Know the whole Pentaho platform from the ground up — build with Data Integration, install the platform yourself end to end, design the deployment architecture around it, then secure it for the customers and tenants it serves.</p>

{% columns %}
{% column %}

<p align="center"><i class="fa-layer-group" style="color:blue;">:layer-group:</i><br><strong>5 courses</strong><br><em>in a set order, then certification</em></p>
{% endcolumn %}

{% column %}

<p align="center"><i class="fa-list-check" style="color:green;">:list-check:</i><br><strong>87 lessons</strong><br><em>across 24 modules</em></p>
{% endcolumn %}

{% column %}

<p align="center"><i class="fa-server" style="color:cyan;">:server:</i><br><strong>Hands-on labs</strong><br><em>you build, install, deploy and secure</em></p>
{% endcolumn %}
{% endcolumns %}

{% hint style="success" icon="server" %}
**A mandatory path, built on Data Integration.**

Unlike the other paths there is no choice of level: every Solution Architect takes the same five courses in the same order. You start as a Data Integration practitioner, install the Pentaho platform yourself, specialise in how it is deployed — in containers, and for high availability — then secure it: who signs in, where their roles come from, and how each tenant's data stays its own.
{% endhint %}

***

<h3 align="center">The learning path</h3>

<p align="center">Take the courses in this order. Each step opens the course outline — the same sequence the Lab Guide shows inside every course.</p>

{% stepper %}
{% step %}

### <i class="fa-diagram-next" style="color:blue;">:diagram-next:</i> DI Developer — Practitioner

`Level 1 · 37 lessons · 6 modules · ~12h 15m`

Build, run and operate Pentaho Data Integration pipelines: components and concepts, data sources, enriching a dataset, an enterprise solution, and a capstone project. The same course that opens the PDI Developer path.

<a href="/solution-architect-path-sandbox/solution-architect/di-developer-practitioner.md" class="button primary" data-icon="arrow-right">Open the DI Developer outline</a>
{% endstep %}

{% step %}

### <i class="fa-server" style="color:blue;">:server:</i> Installation — Certified

`Level 3 · 12 lessons · 4 modules · ~5h 10m`

Install the whole Pentaho 11 platform from the archive on Linux — the Pentaho Server on Tomcat 10 with its PostgreSQL repository, the server plugins, the client tools, post-install tasks and a service pack.

<a href="/solution-architect-path-sandbox/solution-architect/level-3-professional.md" class="button primary" data-icon="arrow-right">Open the Installation outline</a>
{% endstep %}

{% step %}

### <i class="fa-box" style="color:blue;">:box:</i> Containers — Speciality

`Level 2 · 10 lessons · 6 modules · ~4h 50m`

Take the platform you installed by hand and containerise it: build the EE image, run it with Podman Compose against PostgreSQL, then deploy it to K3s with raw manifests and Helm.

<a href="/solution-architect-path-sandbox/speciality-courses/containers.md" class="button primary" data-icon="arrow-right">Open the Containers outline</a>
{% endstep %}

{% step %}

### <i class="fa-network-wired" style="color:blue;">:network-wired:</i> High Availability — Speciality

`Level 2 · 6 lessons · 2 modules · ~4h 5m`

The second deployment speciality: make the server highly available — two Pentaho nodes behind an HAProxy pair with a Keepalived virtual IP, a shared repository, the Jackrabbit cluster journal and clustered Quartz, then a Carte cluster driven by Tray.io.

<a href="/solution-architect-path-sandbox/speciality-courses/high-availability.md" class="button primary" data-icon="arrow-right">Open the High Availability outline</a>
{% endstep %}

{% step %}

### <i class="fa-shield-keyhole" style="color:blue;">:shield-keyhole:</i> Enterprise Security — Speciality

`Level 2 · 22 lessons · 6 modules · ~10h 40m`

The third Speciality, and the last course before certification: put OpenID Connect sign-on with Keycloak, Microsoft Entra ID or Okta in front of the server you deployed, extend the Spring Security provider chain when configuration runs out, isolate each tenant's data, content and look, and harden transport and secrets. No lab content yet — the outline is scoped and every time is an estimate.

<a href="/solution-architect-path-sandbox/speciality-courses/enterprise-security.md" class="button primary" data-icon="arrow-right">Open the Enterprise Security outline</a>
{% endstep %}

{% step %}

### <i class="fa-award" style="color:orange;">:award:</i> Certified Solution Architect

`Certification`

With the five courses complete, you hold the Certified Solution Architect credential. REPLACE-ME — confirm whether a separate proctored exam or a reviewed capstone closes the path, and where it is taken.
{% endstep %}
{% endstepper %}

```mermaid
%%{init: {"theme":"base","themeVariables":{"fontFamily":"Arial, Helvetica, sans-serif","fontSize":"13px","lineColor":"#64748b","clusterBkg":"#fafaf9","clusterBorder":"#d6d3d1","edgeLabelBackground":"#ffffff"},"flowchart":{"curve":"basis","nodeSpacing":28,"rankSpacing":44,"padding":22,"wrappingWidth":600,"htmlLabels":true}}}%%
flowchart TB
  classDef tool fill:#dbeafe,stroke:#1d4ed8,color:#1e3a8a,text-align:left,rx:6,ry:6
  classDef server fill:#ede9fe,stroke:#6d28d9,color:#3b0764,text-align:left,rx:6,ry:6
  classDef store fill:#dcfce7,stroke:#15803d,color:#14532d,text-align:left,rx:6,ry:6
  classDef check fill:#fef3c7,stroke:#b45309,color:#78350f,text-align:left,rx:6,ry:6
  DI["<b>1 · DI Developer — Practitioner</b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>Level 1 · a hosted lab&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>build and run pipelines in Spoon&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"]:::tool
  IN["<b>2 · Installation — Certified</b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>Level 3 · your own Ubuntu host&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>install the platform from the archive&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"]:::server
  CO["<b>3 · Containers — Speciality</b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>Level 2 · the same host&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>the server as an image:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>Compose, K3s and Helm&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"]:::server
  HA["<b>4 · High Availability — Speciality</b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>Level 2 · eight virtual machines&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>two nodes behind HAProxy,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>and a Carte cluster&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"]:::store
  ES["<b>5 · Enterprise Security — Speciality</b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>Level 2 · the server you deployed&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>OpenID Connect, custom providers,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>tenant isolation&nbsp;&nbsp;&nbsp;&nbsp;"]:::server
  CE["<b>Certified Solution Architect</b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>the credential that closes the path&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"]:::check
  DI -->|"pipelines the platform runs&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"| IN
  IN -->|"the server, as an image&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"| CO
  CO -->|"two servers behind a balancer&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"| HA
  HA -->|"the deployment, secured&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"| ES
  ES --> CE
```

<p align="center"><em>Each course builds on the one before it — where it runs, and what carries over to the next</em></p>

***

<h3 align="center">Is this path for you?</h3>

{% columns %}
{% column %}
{% hint style="success" icon="circle-check" %}
**Yes — if you**

* Design the wider Pentaho architecture, not just individual pipelines
* Own security, scalability and integration decisions
* Advise teams on how Pentaho components fit together
* Need a broad, cross-product view of the platform
  {% endhint %}
  {% endcolumn %}

{% column %}
{% hint style="info" icon="signs-post" %}
**Try another path if you**

* Build and run pipelines day-to-day — **PDI Developer**
* Administer and harden a Pentaho Server — **Administrator**
* Consume the output in reports and dashboards — **Business Analyst**
  {% endhint %}
  {% endcolumn %}
  {% endcolumns %}

***

<h3 align="center">How to get access</h3>

{% stepper %}
{% step %}
**Read the course outlines**

Open each step of the path above and check the modules cover the platform you'll build on, install, design around and secure.
{% endstep %}

{% step %}
**Talk to your Pentaho Account Executive**

Courses and subscriptions are purchased through your Pentaho Account Executive — a single seat or the whole team. They'll size it with you and get the order placed. No Account Executive yet? Email <academy@pentaho.com> and we'll connect you.
{% endstep %}

{% step %}
**Receive your voucher code**

You'll be sent a voucher code giving access to the course or courses you bought.
{% endstep %}

{% step %}
**Redeem your code and start your lab**

Redeem the code on the Pentaho training portal and your hosted lab deploys with the Lab Guide built in. Every screen is shown step by step in the voucher walkthrough.

{% embed url="<https://pentaho.selfpaced.training/access/login>" %}

<figure><img src="https://2974708810-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FD8OCPAs0ox63GRPioSZt%2Fuploads%2FVV0qvAA2Apua6nvVTLtn%2Fportal.png?alt=media&#x26;token=38b74933-f824-4e15-ba10-ec3a5270ddec" alt="The Pentaho training portal sign-in page"><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}

***

## At a glance

<table><thead><tr><th width="200"></th><th></th></tr></thead><tbody><tr><td><i class="fa-layer-group" style="color:blue;">:layer-group:</i> <strong>Courses</strong></td><td>5, in a set order — DI Developer — Practitioner (Level 1), Installation — Certified (Level 3), then Containers — Speciality, High Availability — Speciality and Enterprise Security — Speciality (Level 2) — then the certification</td></tr><tr><td><i class="fa-chalkboard-user">:chalkboard-user:</i> <strong>Format</strong></td><td>A mix of hands-on workshops and short reading pages, self-paced</td></tr><tr><td><i class="fa-clock" style="color:cyan;">:clock:</i> <strong>Time</strong></td><td>~12h 15m DI Developer · ~5h 10m Installation · ~4h 50m Containers · ~4h 5m High Availability · ~10h 40m Enterprise Security (estimated)</td></tr><tr><td><i class="fa-cloud" style="color:cyan;">:cloud:</i> <strong>Delivery</strong></td><td>REPLACE-ME — confirm where the Ubuntu 24.04 LTS machine for the installation labs comes from</td></tr><tr><td><i class="fa-door-open">:door-open:</i> <strong>Entry requirements</strong></td><td>None beyond the path itself — it starts with DI Developer — Practitioner. REPLACE-ME — confirm whether an existing PDI Developer or Administrator credential is recognised in its place</td></tr><tr><td><i class="fa-tag" style="color:$primary;">:tag:</i> <strong>Built against</strong></td><td>Pentaho 11.0 GA archive packages (11.0.0.0-237). The Installation course then applies service pack 11.0.0.3-312.</td></tr><tr><td><i class="fa-globe" style="color:purple;">:globe:</i> <strong>Language</strong></td><td>English</td></tr><tr><td><i class="fa-award" style="color:orange;">:award:</i> <strong>Certification</strong></td><td>Certified Solution Architect. REPLACE-ME — confirm whether the exam is proctored.</td></tr><tr><td><i class="fa-clock-rotate-left" style="color:cyan;">:clock-rotate-left:</i> <strong>Last updated</strong></td><td>REPLACE-ME</td></tr></tbody></table>

***

## Common questions

<details>

<summary>What order do I take the courses in?</summary>

The order of the path above: DI Developer — Practitioner first, then Installation — Certified, then the three Specialities — Containers, then High Availability, then Enterprise Security. The certification closes the path.

</details>

<details>

<summary>Do I need my own Pentaho environment?</summary>

No Pentaho environment is needed beforehand. The DI Developer labs are hosted, and for Installation the install is the course: you need a Linux machine (Ubuntu 24.04 LTS) to install onto, and a Pentaho Customer Portal account to download the Enterprise packages.

</details>

<details>

<summary>How long does the Installation course take?</summary>

About 5h 10m of guided work: 4h 40m of timed workshops and the Before You Start page, plus roughly 30 minutes of reading across What's New, Components and the Archive Installation overview. Installing onto slower hardware, or reading the linked documentation as you go, will stretch that.

</details>

<details>

<summary>What's in the Containers speciality?</summary>

It takes the platform you installed by hand and containerises it: building the Pentaho Server EE image, running it with Podman Compose against PostgreSQL, deploying the same thing to K3s with raw manifests and then Helm.

</details>

<details>

<summary>What's in the High Availability speciality?</summary>

A production HA topology on virtual machines: two Pentaho nodes behind an HAProxy pair with a Keepalived virtual IP, a shared PostgreSQL repository, the Jackrabbit cluster journal and Quartz clustering, plus a Carte cluster for Pentaho Data Integration execution that Tray.io drives through the Carte REST API.

</details>

<details>

<summary>What's in the Enterprise Security speciality?</summary>

Identity architecture for Pentaho 11 — OpenID Connect sign-on with Keycloak, Microsoft Entra ID or Okta, Kerberos for domain-joined users, roles from LDAP — then custom Spring Security providers and voters, multi-tenant isolation with a Dynamic Schema Processor and metadata security, and hardening of transport and secrets. It is scoped from the Pentaho 11 documentation and the earlier SA\_1000 security labs, which are being rebuilt for Pentaho 11.

</details>

<details>

<summary>I've already done the PDI Developer path — do I repeat DI Developer?</summary>

REPLACE-ME — confirm whether a completed DI Developer — Practitioner course from the PDI Developer path counts towards this one.

</details>

<details>

<summary>Can my whole team take this path?</summary>

Yes. Your Account Executive can size the order for the team and have vouchers issued for each learner.

</details>

<details>

<summary>How long do I have access to the labs?</summary>

REPLACE-ME — confirm the access period a voucher grants, and what happens when it ends.

</details>

***

<h3 align="center">Still have questions?</h3>

{% columns %}
{% column %}
{% hint style="info" icon="gitbook-assistant" %}
**Quick answers about the content**

Which tools a module covers, whether a system is included, how the levels differ. Press <kbd>Ctrl</kbd> + <kbd>K</kbd> and click **Ask** for an instant answer from these pages.

<button type="button" class="button primary" data-action="ask" data-icon="gitbook-assistant">Ask about this path...</button>
{% endhint %}
{% endcolumn %}

{% column %}
{% hint style="info" icon="envelope" %}
**Talk to the Academy team**

For anything the assistant can't answer — pricing, licensing, access periods, or sizing a programme for your team — email us at <academy@pentaho.com>.

We read every message and reply as soon as we can. If it's easier to talk it through, we'll set up a call from there.
{% endhint %}
{% endcolumn %}
{% endcolumns %}

***

<p align="center"><a href="https://academy.pentaho.com/academy-landing-v2-sandbox/" class="button secondary" data-icon="arrow-left">Back to all learning paths</a></p>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://academy.pentaho.com/solution-architect-path-sandbox/solution-architect.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.