TM1 Issue Configure TM1RunTI.exe after update to SSL

Post Reply
AnonimusMax
Posts: 60
Joined: Thu Nov 17, 2016 2:13 pm
OLAP Product: TM1
Version: 10.2.2
Excel Version: 2013

TM1 Issue Configure TM1RunTI.exe after update to SSL

Post by AnonimusMax »

Hi,

I have a question, I am using EXECUTECOMMAND in a lot of process and now with this update to SSL i don t know where to include this chage.
I found this on the IBM site:
"Add '-certversion 2' as a parameter in the TM1RunTi.exe command line or certversion=2 to the ini file being used with the TM1RunTi.exe command line. "
where should i add this ?
Where i used execute command I didn t use this parameter, and that means I should update a loot of processes if i want to add this as a parameter now.
Is there another solution to this?
What INI file does TM1RunTI.exe is using?

Thank you,
User avatar
qml
MVP
Posts: 1094
Joined: Mon Feb 01, 2010 1:01 pm
OLAP Product: TM1 / Planning Analytics
Version: 2.0.9 and all previous
Excel Version: 2007 - 2016
Location: London, UK, Europe

Re: TM1 Issue Configure TM1RunTI.exe after update to SSL

Post by qml »

AnonimusMax wrote:now with this update to SSL
There are a few possible ways to update/replace the expiring SSL certs, so you need to say exactly which one you chose. The changes to tm1runti.exe calls will depend on which method you went with. The 'certversion=2' change only applies to a situation where you have switched to the bundled 2048-bit certificate rather than patched your environment to use a replacement for the standard v1 certificate. If you have upgraded both the server and client on the server using the Interim Fix Updater kits there should be no need to alter your code.
Kamil Arendt
AnonimusMax
Posts: 60
Joined: Thu Nov 17, 2016 2:13 pm
OLAP Product: TM1
Version: 10.2.2
Excel Version: 2013

Re: TM1 Issue Configure TM1RunTI.exe after update to SSL

Post by AnonimusMax »

Thank you for your response.

The steps from this link have been performed.
http://www-01.ibm.com/support/docview.w ... wg21697266

I also want to do the steps from the following link
http://www.ibm.com/support/docview.wss?uid=swg21991787
Do you think after i ll do this the ExecuteCommand will be ok without any changes?

Thank you
User avatar
qml
MVP
Posts: 1094
Joined: Mon Feb 01, 2010 1:01 pm
OLAP Product: TM1 / Planning Analytics
Version: 2.0.9 and all previous
Excel Version: 2007 - 2016
Location: London, UK, Europe

Re: TM1 Issue Configure TM1RunTI.exe after update to SSL

Post by qml »

If you perform the steps from the second link ('How to Update Your Expiring TM1 SSL Certificates - Updater Kit') you should not need to make any changes to your tm1runti config or calls.

The first link ('How to configure TM1 to use the bundled 2048-bit SSL certificate') presents another, alternative method of getting around the certificate expiry issue. If you decide to stick with it you will need changes to your tm1runti config and calls.

The summary of 4 main available options can be found here. Out of these 4 options you have initially chosen #4, but now you are saying you want to go with option #2, which is easier from the tm1runti perspective.

Hope that clarifies things.
Kamil Arendt
AnonimusMax
Posts: 60
Joined: Thu Nov 17, 2016 2:13 pm
OLAP Product: TM1
Version: 10.2.2
Excel Version: 2013

Re: TM1 Issue Configure TM1RunTI.exe after update to SSL

Post by AnonimusMax »

Hi,

unfortunately, the kit from http://www.ibm.com/support/docview.wss?uid=swg21991787 does not apply for TM1 10.2.2 which we are using.
Do you know a similar kit that can work on 10.2.2?

I had to manually update the configuration and certificates using the following guide: http://www-01.ibm.com/support/docview.w ... wg21991545
So know the only option that i have now is to manually update all ExecuteCommand ?

Thank you :)
User avatar
qml
MVP
Posts: 1094
Joined: Mon Feb 01, 2010 1:01 pm
OLAP Product: TM1 / Planning Analytics
Version: 2.0.9 and all previous
Excel Version: 2007 - 2016
Location: London, UK, Europe

Re: TM1 Issue Configure TM1RunTI.exe after update to SSL

Post by qml »

AnonimusMax wrote: I had to manually update the configuration and certificates using the following guide: http://www-01.ibm.com/support/docview.w ... wg21991545
So know the only option that i have now is to manually update all ExecuteCommand ?
If you went with option #1 (updating v1 certificates manually) then you won't need to make changes to tm1runti calls.
Kamil Arendt
Post Reply