IBM Support

How to Update the TM1 SSL Certs for Cognos Business Viewpoint Components

Question & Answer


Question

Please ensure that you have already reviewed all of the relevant detail on the following page before you proceed: IBM Cognos TM1 SSL Expiration - Manual Fix Approach - Landing Page http://www-01.ibm.com/support/docview.wss?uid=swg21991653

Answer


To update your IBM Cognos Business Viewpoint Components, the below steps can be followed:


For both Cognos Business Viewpoint Server and Cognos Business Viewpoint Client

  1. Download the updated TM1 SSL Certificates from the following location: http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FInformation+Management%2FCognos+TM1&fixids=BA-CTM1-SSL-ZIP-IF001
  2. Extract the downloaded file/archive to any directory. After extracting the files, look inside of the extracted folder. Confirm the following files are present.
    applixca.der
    applixca.pem
    applixcacrl.p7b
    applixcacrl.pem
    tm1admsvrcert.pem
    tm1store
    tm1svrcert.pem

    1.
For IBM Cognos Business Viewpoint Server
  1. Stop the Cognos Business Viewpoint service
  2. Make a backup of the <cognos>\BusinessViewpoint\bin\ssl\ directory. For example, C:\Program files\IBM\cognos\BusinessViewpoint\bin\sslBAK\
  3. Copy the extracted SSL certificate files into the <cognos>\BusinessViewpoint\bin\ssl\ directory. Overwrite any files of the same name
  4. Start the Cognos Business Viewpoint service


For IBM Cognos Business Viewpoint Clients
  1. Make sure the the Cognos Business Viewpoint client is closed
  2. Rename the <cognos>\BusinessViewpointClients\IntegrationComponents\TM1\tm1store file to <cognos>\BusinessViewpointClients\IntegrationComponents\TM1\tm1storeBAK
  3. Copy the tm1store file from the extracted new certificate files into the <cognos>\BusinessViewpointClients\IntegrationComponents\TM1\ directory
  4. Open and run Windows Command Prompt as an Administrator. Navigate to <cognos>\BusinessViewpointClients\bin\jre\6.0\bin . Execute the following commands:
    • keytool -delete -alias applixca -keystore <cognos>\BusinessViewpointClients\bin\jre\6.0\lib\security\cacerts -storepass changeit
    • keytool -keystore <cognos>\BusinessViewpointClients\bin\jre\6.0\lib\security\cacerts -alias applixca -import -file <extractedSSLCerts>\applixca.pem -storepass changeit -noprompt
IN the second command, replace <extractedSSLCerts> with the directory where the updated cert files were extracted.

[{"Product":{"code":"SSWRXS","label":"Cognos Business Viewpoint"},"Business Unit":{"code":"BU002","label":"Business Analytics"},"Component":"Business Viewpoint","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"10.1.1;10.1","Edition":"All Editions"}]

Document Information

Modified date:
15 June 2018

UID

swg21993278