IBM Support

How to Update Your TM1 Architect / TM1 Perspectives Client Installations - ALL VERSIONS

Fix Readme


Please ensure that you have already reviewed all of the relevant detail on the following page before you proceed:

IBM Cognos TM1 SSL Expiration - Manual Fix Approach - Landing Page


To update your IBM Cognos TM1 Architect or Perspectives Client, the below steps can be followed:

  1. Download the updated TM1 SSL Certificates from the following location:
  2. Extract the downloaded file/archive and extract it to any directory. For the purpose of this document, our files will be extracted in to <tm1_client_install_dir>\tm1_64\NewSSLCerts\
  3. After extracting the files, look inside of your extracted folder <tm1_client_install_dir>\tm1_64\NewSSLCerts\ . The following files should be present.
    • applixca.der
    • applixca.pem
    • applixcacrl.p7b
    • applixcacrl.pem
    • tm1admsvrcert.pem
    • tm1store
    • tm1svrcert.pem
  4. Back up the following directories in your <tm1_client_install_dir>
    • <tm1_client_install_dir>\tm1_64\bin\ssl
      *(or equivalent for older versions or 32 bit clients like <tm1_client_install_dir>\tm1\bin\ssl)
    • <tm1_client_install_dir>\tm1_64\bin64\ssl
      *Depending on the version of TM1 you are using, you may NOT have a bin64 directory. If you do not, simply skip this step as it is not required.
  5. Copy the contents of the folder you extracted earlier <tm1_client_install_dir>\tm1_64\NewSSLCerts\ , and place them inside of the 2 directories listed above in Step 4. During this process, you will be required to REPLACE all conflicting files as we must replace the old certificate files with new ones.
  6. After all files have been copied successfully, navigate to <tm1_client_install_dir>\tm1_64\bin\ssl\
  7. Execute the uninstallSSL.bat file, to uninstall old keys from the Windows Keystore
    • If uninstallSSL.bat does not exist, run importsslcert.exe -remove from Command Line
  8. Execute the importsslcert.exe file, to install the new keys in to the Windows Keystore

    At this stage, (and assuming your IBM Cognos TM1 Server components have been set up correctly and are running) - you should be able to confirm that you are able to successfully connect to your TM1 Server via IBM Cognos TM1 Architect or IBM Cognos TM1 Perspectives.

[{"Product":{"code":"SS9RXT","label":"Cognos TM1"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"TM1","Platform":[{"code":"PF033","label":"Windows"}],"Version":"10.1.0;10.1.1;10.2;10.2.2","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
15 June 2018