Unable to install the SSL certificate in TM1 10.2.2

Post Reply
Sudheer
Posts: 2
Joined: Thu Mar 12, 2015 11:47 am
OLAP Product: Tm1
Version: 10.1.1 and 10.2
Excel Version: 2007
Location: Inida

Unable to install the SSL certificate in TM1 10.2.2

Post by Sudheer »

Hi ,

i am trying to install the SSL certificate in TM1 web. we have got the signed (verisign) certificate (tm1.cer) from vendor. i was follwing with the ibm document (http://www-01.ibm.com/support/knowledge ... r_SSL.html)but here i confused with .pem format. i asked my vendor to provide us the .pem format but they do provide only .cer or .p12 format.
i stil tried with .cer format usin the ibm provided syntax,but its not working.

later i tried with ….keytool.exe -importcert -file "Tm-dev.cer" -keystore "D:\CognosTM1\bin64\jre\7.0\lib\security\cacerts" -storepass "changeit" -alias "TM1 " syntax and certificate is stored. but stil the tm1 web is not working with https.

coulg anybody help me on this.
note: we need to secure the tm1web only(https://servername:9510/tm1web)
deadsea
Posts: 10
Joined: Mon Aug 31, 2015 9:07 pm
OLAP Product: PowerPlay and Tm1
Version: 10 2 1
Excel Version: 2010

Re: Unable to install the SSL certificate in TM1 10.2.2

Post by deadsea »

Hello Sudheer:

I was planning to start my own thread but noticed that your issue may be same as mine.

Did you manage to get this issue resolved? What was the resolution?

Thanks for sharing with the forum.
dsproffitt
Posts: 66
Joined: Wed Jul 16, 2014 9:20 am
OLAP Product: All of them
Version: All of them
Excel Version: 2003 -2013

Re: Unable to install the SSL certificate in TM1 10.2.2

Post by dsproffitt »

1) Convert a DER file (.crt .cer .der) to PEM
openssl x509 -inform der -in certificate.cer -out certificate.pem

2) When you created the Certificate Signing Request, did you also put the private key into the encryptkeypair/signkeypair stores of the TM1 CAM store?
3) You should have recd three files from your Certificate Authority
1 x Certificate Authority certificate
1 x encryptkey.pem
1 x signkey.pem

These need also to be imported into the CAM Keystore

You need to put the CA certificate into the JAVA keystore (to make TM1 Web work)
Finally import the CA Cert into the Windows Cert store (via the MMC or browser)

I made a Prezi on how to do it using OpenSSL and 10.2.2
http://prezi.com/cnjjuhree8hx/?utm_camp ... c=ex0share

BE AWARE

10.2.2 FP4 has a bug in it that will not allow SSL to work.
Code fix imminent
thomaskday
Posts: 8
Joined: Mon Apr 26, 2010 2:38 am
OLAP Product: TM1 / Planning Analytics Local
Version: PA2 Local 2.0910, PAW 2.074
Excel Version: 2016 and 365
Location: Sydney, Australia

Re: Unable to install the SSL certificate in TM1 10.2.2

Post by thomaskday »

Hi,

We stumbled on the ssl issue when upgrading to 10.2.2 Fix Pack 4 in our DEV environment last week.
However FP4 + Interim Fix 9 resolves this issue.

Thomas
Post Reply