IBM Support

Planning Analytics SSL Configuration on TM1Web (or any Web Tier components) does not work as expected

Troubleshooting


Problem

After having completed the SSL Configuration for the Planning Analytics Web Tier components, the sites do not work.  The certificates appear valid in the keystore, and all steps had been followed correctly.

Symptom

When hitting the website (TM1Web for example), the following is returned:
 
In Google Chrome:
This site can’t be reached localhost unexpectedly closed the connection.
Try:
•Checking the connection
•Checking the proxy and the firewall
•Running Windows Network Diagnostics
In Internet Explorer:
Can’t reach this page
•Make sure the web address https://localhost:9510 is correct
•Search for this site on Bing
•Refresh the page

Cause

Unsupported Cipher/Encryption Suite being used.

Diagnosing The Problem

Review the <PA_Install_Dir>\logs\tm1_messages.log file.  The following line will be present (or a similar line to the following), should you be facing the same issue resolved by this technote:

FFDC1015I: An FFDC Incident has been created: "java.lang.IllegalArgumentException: Cannot support SSL_RSA_WITH_AES_256_CBC_SHA with currently installed providers com.ibm.ws.channel.ssl.internal.SSLConnectionLink 238" at ffdc_19.08.09_11.21.01.0.log
 
*Note: The cipher in your error may very

Resolving The Problem

The Cipher Suite used by the configured certificates, are not supported by the IBM JRE by default.  To enable stronger encryption types, the Unrestricted SDK JCE policy files must be used.  To enable the Unrestricted SDK JCE policy files with Planning Analytics, perform the following steps:
  1. Stop your IBM Cognos TM1 services (Web Tier services)
  2. Navigate to <PA_Install_Dir>\jre\lib\security\ directory
  3. Edit the java.security file
  4. Find and change the line crypto.policy=limited to crypto.policy=unlimited
  5. Save the file changes
  6. Start your IBM Cognos TM1 services (Web Tier services) and retest

Related Information

Document Location

Worldwide

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSD29G","label":"IBM Planning Analytics"},"Component":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
09 August 2019

UID

ibm10967137