Page 1 of 1

Post SSL certificate update TM1 admin server doesn't stop

Posted: Thu Nov 03, 2016 10:49 am
by BariAbdul
HI Gurus, W have successfully updated the SSL certificates in our UAT environment. Post upgrade when I try to stop TM1 admin server it is giving me an error (Please see the attachment).It showing always in start mode.I have also try to shut down by going to services to no avail.
It is pre FP4 environment and I have followed all the steps listed here:

http://www-01.ibm.com/support/docview.w ... wg21991546

We have followed all the steps in Application server except the below three:
1. Navigate to <tm1_install_dir>\bin64\ and open/edit the service_pmpsvc.bat file
o Find the line beginning with 'set BASE_JVM_OPTIONS'
o Append the following to the end of the string:
;-Dcom.ibm.cognos.tm1.bin=%PMPSVC_ROOT%\bin64
***Use %PMPSVC_ROOT% as is, you are not expected to modify this variable as it sets itself via the batch script. Do not forget the semi-colon at the beginning of the string.
o Save your changes and close the open service_pmpsvc.bat file
2. Open Windows Command Prompt as an Administrator, and navigate to <tm1_install_dir>\tm1_64\bin64\
3. Execute the following commands in the sequence below. Nothing is really being 'uninstalled' - just re-registering the TM1 Services. If your TM1 Services were configured to run as a service account, be sure to update the service to include the service account again - as it will likely be lost with this step.
o service_pmpsvc stop
o service_pmpsvc uninstall
o service_pmpsvc install

We couldn’t find service_pmpsvc.bat file in the application server so we left out these 3 steps, where as we found it in Web server and we have updated it accordingly.

Is it something to do with it ? Our window admin says he can cludge the process,It is sort of force shut down,I am not sure what sort of troubles it would lead to if we do that.

I would appreciate if someone let me know the way out of this , What steps needs to be taken to fix the issue? Thanks

Re: Post SSL certificate update TM1 admin server doesn't stop

Posted: Thu Nov 03, 2016 12:50 pm
by gtonkin
Hi Bari, had similar issues when at first I moved my SSL folder rather than overwriting the file within.
Please check that you have TM1Cipher and TM1Key in your SSL folder.

Re: Post SSL certificate update TM1 admin server doesn't stop

Posted: Sat Nov 05, 2016 4:13 am
by BariAbdul
Thanks for tip, gtonkin. I did overwrite SSL folder when it moved in.Restarting the box bought the things to normal.Thanks again.

Re: Post SSL certificate update TM1 admin server doesn't stop

Posted: Mon Nov 07, 2016 8:55 am
by dsproffitt
BariAbdul wrote:Thanks for tip, gtonkin. I did overwrite SSL folder when it moved in.Restarting the box bought the things to normal.Thanks again.
The reason restarting the box worked is that the new certs created a new security profile for the server instances.
All actions relating to implementing SSL certs should account for the fact you are more than likely going to need to restart the admin server/instances and even the physical box itself (although the box restart is rare)