To configure Transport Layer Security (TLS) for IBM® Planning
Analytics Workspace, you create a privacy enhanced mail
(pem) file that contains your security certificates.
Before you begin
You must have the private key, primary, intermediate, and root certificates from your certificate
authority provider.
Procedure
-
Open a text editor and paste the body of each certificate into the file in the following order.
Make sure you include the beginning and end tags on each certificate:
- private key
- <your_domain_name>.key
- primary certificate
- <your_domain_name>.crt
- intermediate certificate
- IntermediateCA.crt
- root certificate
- TrustedRoot.crt
Here is an
example:
-----BEGIN RSA PRIVATE KEY-----
(Your Private Key: your_domain_name.key)
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
(Your Server certificate: your_domain_name.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Intermediate certificate: IntermediateCA.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Root certificate: TrustedRoot.crt)
-----END CERTIFICATE-----
- Save the file as pa-workspace.pem and then copy or move it to the
following location:
- <paw_install_location>/config/ssl directory for Microsoft Windows Server
2016 OS.
- <paw_install_location>/config directory for Linux OS.
If the pa-workspace.pem already exists in the directory, overwrite it.
- For Microsoft Windows Server 2016 OS:
- Open the <paw_install_location>/config/paw.ps1 file and add
the following lines at the
end:
$env:EnableSSL="true"
$env:ServerName="<paw-server-name>"
where
<paw-server-name> is the name of the server on which
Planning Analytics Workspace is installed.
- Save the <paw_install_location>/config/paw.ps1
file.
- For Linux OS:
- Open the <paw_install_location>/config/paw.env file and add
the following lines at the
end:
export EnableSSL=true
export ServerName=<paw-server-name>
where
<paw-server-name> is the name of the server on which
Planning Analytics Workspace is installed.
- Save the <paw_install_location>/config/paw.env
file.
- Open the Planning Analytics Workspace administration
tool and restart all
services.