How To
Summary
The purpose of this document is to provide additional information to make more clear how to use the ParquetMigrate script in a full SSL Cognos environment (https gateway and https dispatcher) as the documentation currently does not cover using this script with HTTPS.
Environment
Full SSL Cognos environment (https Gateway and https Dispatcher)
Steps
When we run ./ParquetMigrate.xx in SSL environment, (./ParquetMigrate.xx -k -d -t -n namespace -u username -p password) failed with error message:
javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target.
Use dispatcher cert and import it into the java_path environment:
1. Extract the dispatcher cert using ThirdPartyCertificateTool:
- Navigate to the "cognos_location/bin" folder
- Run the following command:
./ThirdPartyCertificateTool.sh -E -T -r cacert.cer -p NoPassWordSet
javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target.
Use dispatcher cert and import it into the java_path environment:
1. Extract the dispatcher cert using ThirdPartyCertificateTool:
- Navigate to the "cognos_location/bin" folder
- Run the following command:
./ThirdPartyCertificateTool.sh -E -T -r cacert.cer -p NoPassWordSet
2. Import the cert into the keystore of the Java being used when they run ParquetMigrate.sh.
- Navigate to the "java_location\bin" folder. If using the default Java™ that comes with Cognos, this is "cognos_location /ibm-jre/jre/bin"
- Execute the following command:
./keytool -importcert -file cognos_location/bin/cacert.cer -keystore java_path/jre/lib/security/cacerts
Where cognos_location is your Cognos installation location, and java_path is the path to the Java™ you are using.
- When prompted for the keystore password, enter: change_it
After importing the cert into the Java™ keystore run ParquetMigrate script:
ParquetMigrate.xx -d -h https://server_name:server_port -n namespace -u username -p
Related Information
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTSF6","label":"IBM Cognos Analytics"},"ARM Category":[{"code":"a8m50000000Cl3zAAC","label":"Administration"}],"ARM Case Number":"TS007091092","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
27 October 2021
UID
ibm16509126