How to Update the TM1 SSL Certs for Cognos Business Viewpoint Components

Answer

To update your IBM Cognos Business Viewpoint Components, the below steps can be followed:


For both Cognos Business Viewpoint Server and Cognos Business Viewpoint Client

1. Download the updated TM1 SSL Certificates from the following location: http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FInformation+Management%2FCognos+TM1&fixids=BA-CTM1-SSL-ZIP-IF001
3. Extract the downloaded file/archive to any directory. After extracting the files, look inside of the extracted folder. Confirm the following files are present.

applixca.der
applixca.pem
applixcacrl.p7b
applixcacrl.pem
tm1admsvrcert.pem
tm1store
tm1svrcert.pem

1.

1. Stop the Cognos Business Viewpoint service
3. Make a backup of the <cognos>\BusinessViewpoint\bin\ssl\ directory. For example, C:\Program files\IBM\cognos\BusinessViewpoint\bin\sslBAK\
5. Copy the extracted SSL certificate files into the <cognos>\BusinessViewpoint\bin\ssl\ directory. Overwrite any files of the same name
7. Start the Cognos Business Viewpoint service

1. Make sure the the Cognos Business Viewpoint client is closed
3. Rename the <cognos>\BusinessViewpointClients\IntegrationComponents\TM1\tm1store file to <cognos>\BusinessViewpointClients\IntegrationComponents\TM1\tm1storeBAK
5. Copy the tm1store file from the extracted new certificate files into the <cognos>\BusinessViewpointClients\IntegrationComponents\TM1\ directory
7. Open and run Windows Command Prompt as an Administrator. Navigate to <cognos>\BusinessViewpointClients\bin\jre\6.0\bin . Execute the following commands:

• keytool -delete -alias applixca -keystore <cognos>\BusinessViewpointClients\bin\jre\6.0\lib\security\cacerts -storepass changeit

• keytool -keystore <cognos>\BusinessViewpointClients\bin\jre\6.0\lib\security\cacerts -alias applixca -import -file <extractedSSLCerts>\applixca.pem -storepass changeit -noprompt