Configure TLS for Planning Analytics Workspace Local

To configure Transport Layer Security (TLS) for IBM® Planning Analytics Workspace, you create a privacy enhanced mail (pem) file that contains your security certificates.

1. Open a text editor and paste the body of each certificate into the file in the following order. Make sure you include the beginning and end tags on each certificate:

   private key

   <your_domain_name>.key

   primary certificate

   <your_domain_name>.crt

   intermediate certificate

   IntermediateCA.crt

   root certificate

   TrustedRoot.crt

   Here is an example:

   -----BEGIN RSA PRIVATE KEY----- 
    (Your Private Key: your_domain_name.key) 
   -----END RSA PRIVATE KEY-----  
   -----BEGIN CERTIFICATE----- 
    (Your Server certificate: your_domain_name.crt) 
   -----END CERTIFICATE-----  
   -----BEGIN CERTIFICATE----- 
    (Your Intermediate certificate: IntermediateCA.crt) 
   -----END CERTIFICATE-----  
   -----BEGIN CERTIFICATE----- 
    (Your Root certificate: TrustedRoot.crt) 
   -----END CERTIFICATE-----

2. Save the file as pa-workspace.pem and then copy or move it to the following location:
   • <paw_install_location>/config/ssl directory for Microsoft Windows Server 2016 OS.
   • <paw_install_location>/config directory for Linux OS.

   If the pa-workspace.pem already exists in the directory, overwrite it.

3. For Microsoft Windows Server 2016 OS:
   1. Open the <paw_install_location>/config/paw.ps1 file and add the following lines at the end:

      $env:EnableSSL="true"
      $env:ServerName="<paw-server-name>"

      where <paw-server-name> is the name of the server on which Planning Analytics Workspace is installed.
   2. Save the <paw_install_location>/config/paw.ps1 file.
4. For Linux OS:
   1. Open the <paw_install_location>/config/paw.env file and add the following lines at the end:

      export EnableSSL=true
      export ServerName=<paw-server-name>

      where <paw-server-name> is the name of the server on which Planning Analytics Workspace is installed.
   2. Save the <paw_install_location>/config/paw.env file.
5. Open the Planning Analytics Workspace administration tool and restart all services.
   For information about how to open the administration tool, see Check the status of the services.