How To
Summary
The document describes how to create keystore from using CERTUTIL to connect to LDAPs namespace
Objective
Create secured connection using LDAPs between Cognos CM Server and LDAP server.
Before beginning with the process make sure Root CA certificate from LDAP server is present.
Following process must be followed on a machine where Cognos Analytics is installed.
Steps
1. Create a directory for the certificate database.
2. Copy the Root Certificate from LDAP server under this directory.
3. Open CMD as Administrator and access the newly created directory
4. Run this command to create cert8.db and key3.db files (path may vary as per Cognos Installation directory, certutil is present under bin64 folder of Cognos installation). Use password as per your requirement.
"C:\Program Files\ibm\cognos\analytics\R5\bin64\certutil.exe" -N -d .
Syntax: certutil -N -d certificate_directory
Where certificate_directory is the directory that you created in step 1.
. is required at the end
5. Add the certificate authority to newly created database file with following command : "C:\Program Files\ibm\cognos\analytics\R5\bin64\certutil.exe" -A -n test -d "C:\Certificate_database" -i CA.cer -t C,C,C
Syntax : certutil -A -n certificate_name -d certificate_directory -i CA.cert -t C,C,C
Where certificate_name is an alias that you assign, such as the CA name or host name andcertificate_directory is the directory that you created in step 1
6. Reference this file in Cognos Configuration under LDAP configuration :
Test the namespace and Start Cognos Services.
Additional Information
IBM Cognos Support will not be responsible for any issues with certutil.exe file.
Related Information
Document Location
Worldwide
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTSF6","label":"IBM Cognos Analytics"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]
Was this topic helpful?
Document Information
Modified date:
05 March 2020
UID
ibm15692934