Copying the CA certificate to IBM Cognos servers

After copying the IBM® Cognos® certificate to other servers, copy the certificate from the certificate authority to the IBM Cognos server.

Some servers that the IBM Cognos Analytics server needs to trust, have their certificates signed by a third-party Intermediate Certificate Authority (ICA). The ICA certificate can be signed either by one or more ICAs or by the final third-party Certificate Authority.

You need to import the full root of trust into the Cognos keystore, starting with the Root Certificate Authority, and each ICA involved in the signing of the server certificate that the CA certificate needs to establish trust with.

Procedure

  1. Copy the certificate from your certificate authority to a secure location on the IBM Cognos server.

    Ensure that the CA certificate is in Base-64 encoded X.509 format.

  2. Go to the install_location/bin directory.
  3. Import the CA certificate by typing the following command:

    • On UNIX or Linux® operating systems, type the following:

      ThirdPartyCertificateTool.sh -T -i -r CA_certificate_file -p NoPassWordSet

    • On Microsoft Windows operating systems, type

      ThirdPartyCertificateTool.bat -T -i -r CA_certificate_file -p NoPassWordSet