anchor.diff:  </xa-datasource>
   ----
   endif::PAM[]
  -. In the `security-setting` element of the `activemq` subsystem in the `"full-ha"` profile, add the `kie-server` role:
  ++
  +[WARNING]
  +====
  +You must use two different databases for {KIE_SERVER} runtime data and EJB timer data.
  +====
  ++
  +.  In the `<subsystem xmlns="urn:jboss:domain:messaging-activemq:2.0">` element, make the following changes:
  +.. Replace `<cluster password="${jboss.messaging.cluster.password:CHANGE ME!!}"/>` with `<cluster user="<CLUSTER_USER>" password="<CLUSTER_PWD>"/>` where `<CLUSTER_USER>` is the user used by EAP to form a messaging cluster and `<CLUSTER_PWD>` is the password for that user.
  +.. In the `security-setting` element add the `kie-server` role:
   +
   [source]
   ----
  
positive.code: ** PostgreSQL: `org.hibernate.dialect.PostgreSQL82Dialect`
  ** PostgreSQL plus: `org.hibernate.dialect.PostgresPlusDialect`
  ** Sybase: `org.hibernate.dialect.SybaseASE157Dialect`
  
  
  
negative.code:             <role name="kie-server" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
          </security-setting>
  ---- 
  
  
  . Add the following properties to the `<system-properties>` element:
  +
  