anchor.diff:  |*Property*|*Description*
   |nifi.registry.web.war.directory|This is the location of the web war directory. The default value is `./lib`.
   |nifi.registry.web.http.host|The HTTP host. It is blank by default.
  -|nifi.registry.web.http.port|The HTTP port. The default value is `8080`.
  +|nifi.registry.web.http.port|The HTTP port. The default value is `18080`.
   |nifi.registry.web.https.host|The HTTPS host. It is blank by default.
   |nifi.registry.web.https.port|The HTTPS port. It is blank by default. When configuring NiFi Registry to run securely, this port should be configured.
   |nifi.registry.web.jetty.working.directory|The location of the Jetty working directory. The default value is `./work/jetty`.
  
positive.code: Sensitive configuration values are encrypted by the tool by default, however you can encrypt any additional properties, if desired.
  To encrypt additional properties, specify them as comma-separated values in the `nifi.registry.sensitive.props.additional.keys` property.
  
  If the 'nifi-registry.properties' file already has valid protected values, those property values are not modified by the tool.
  
  When applied to 'identity-providers.xml', the property elements are updated with an `encryption` attribute:
  
  ----
  <!-- LDAP Provider -->
  <provider>
         <identifier>ldap-provider</identifier>
         <class>org.apache.nifi.registry.security.ldap.LdapProvider</class>
         <property name="Authentication Strategy">START_TLS</property>
         <property name="Manager DN">someuser</property>
         <property name="Manager Password" encryption="aes/gcm/128">q4r7WIgN0MaxdAKM||SGgdCTPGSFEcuH4RraMYEdeyVbOx93abdWTVSWvh1w+klA</property>
         <property name="TLS - Keystore"></property>
         <property name="TLS - Keystore Password" encryption="aes/gcm/128">Uah59TWX+Ru5GY5p||B44RT/LJtC08QWA5ehQf01JxIpf0qSJUzug25UwkF5a50g</property>
         <property name="TLS - Keystore Type"></property>
        ...
     </provider>
  ----
  
  [encrypt_config_property_migration]
  
negative.code: * Configurable User Group Provider - A configurable user group provider.
  * User Group Provider - The identifier of user group providers to load from. The name of each property must be unique, for example: "User Group Provider A", "User Group Provider B", "User Group Provider C" or "User Group Provider 1", "User Group Provider 2", "User Group Provider 3"
  
  After you have configured a UserGroupProvider, you must configure an AccessPolicyProvider that will control Access Policies for the identities in the UserGroupProvider.
  The default AccessPolicyProvider is the FileAccessPolicyProvider, however, you can develop additional AccessPolicyProvider as extensions.  The FileAccessPolicyProvider has the following properties:
  
  * User Group Provider - The identifier for an User Group Provider defined above that will be used to access users and groups for use in the managed access policies.
  * Authorizations File - The file where the FileAccessPolicyProvider will store policies.
    By default, 'authorizations.xml' in the 'conf' directory is chosen.
  * Initial Admin Identity - The identity of an initial admin user that will be granted access to the UI and given the ability to create additional users, groups, and policies.
    For example, a certificate DN, LDAP identity, or Kerberos principal.
  * NiFi Identity - The identity of a NiFi instance/node that will be accessing this registry. Each NiFi Identity will be granted permission to proxy user requests, as well as read any bucket to perform synchronization status checks.
  
  NOTE: The identities configured in the Initial Admin Identity and NiFi Identity properties must be available in the configured User Group Provider. Initial Admin Identity and NiFi Identity properties are only read by NiFi Registry when the Authorizations File is missing or empty on startup in order to seed the initial Authorizations File.
  Changes to the configured Initial Admin Identity and NiFi Identities will not take effect if the Authorizations File is populated.
  
  The default Authorizer is the StandardManagedAuthorizer, however, you can develop additional Authorizers as extensions. The StandardManagedAuthorizer has the following properties:
  
  * Access Policy Provider - The identifier for an Access Policy Provider defined above.
  
  [[initial-admin-identity]]
  Initial Admin Identity  (New NiFi Registry Instance)
  