Configuring PMHub to use SSL on Windows (Cognos TM1)

Content

These steps should be done after Cognos TM1 has been configured to use SSL.

1. On the server where PMHub is running, copy the fpmpsvc_config.xml file from:
   =%PMPSVC_ROOT%\webapps\pmpsvc\WEB-INF\configuration to
   =%PMPSVC_ROOT%\webapps\pmpsvc\WEB-INF\bin[64]
2. Copy the certificate files: tm1ca_v2.pem and tm1ca_v2.der from:
   =%PMPSVC_ROOT%\webapps\pmpsvc\WEB-INF\bin[64]\ssl to
   =%PMPSVC_ROOT%\webapps\pmpsvc\WEB-INF\bin[64]
3. If you are using your own certificates and not the ones that come with the installation, copy these files to
   =%PMPSVC_ROOT%\webapps\pmpsvc\WEB-INF\bin[64]
   These certificates will have the following file extensions: .pem and .pfx
4. Go to the TM1_installation_location/bin[64] folder and do the following:
   1. Open the service_pmpsvc.bat file in an editor.
   2. Go to the set BASE_JVM_OPTIONS command and add one of the following options at the end of the command:
   • For Windows 32-bit operating systems, add:
     

     ;-Dcom.ibm.cognos.tm1.certificate.dir=%PMPSVC_ROOT%\webapps\pmpsvc\WEB-INF\bin

   • For Windows 64-bit operating systems, add:
     

     ;-Dcom.ibm.cognos.tm1.certificate.dir=%PMPSVC_ROOT%\webapps\pmpsvc\WEB-INF\bin64

   • For example, for a Windows 64-bit operating system, the code would look like this:
     

     rem Set JVM parameters

     set BASE_JVM_OPTIONS=-Dfile.encoding=UTF-8;-Dcatalina.base=%CATALINA_BASE%;-

     Dcatalina.home=%CATALINA_HOME%;-Djava.endorsed.dirs=%CATALINA_HOME%\common\endorsed;-

     Djava.io.tmpdir=%CATALINA_TMPDIR%;-

     Dorg.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true;-

     Dcom.ibm.cognos.tm1.certificate.dir=%PMPSVC_ROOT%\webapps\pmpsvc\WEB-INF\bin64

5. Open IBM Cognos Configuration, and click Save. This updates the JVM options for the service.
6. Click to expand the Environment node.
7. Right-click TM1 Application Server and click Stop. When the server is stopped, right-click the server again and click Start.
8. Confirm that the admin_host name parameter in the fpmsvc_config.xml is the same as the admin host property in PMHub by following these steps:
1. Open the fpmsvc_config.xml file in the \webapps\pmpsvc\WEB-INF\configuration folder and find the admin_host name.
2. Open PMHub, for example: //local host:9510/pmhub/pm/admin, and on the Configuration page, expand the Configurations folder.
3. Select com.ibm.ba.pm.resource.tm1 com.ibm.ba.pm.resource.tm1.dictionary and check that the host property value is the same as the admin_host name.