TM1 Server 10.2.2 (FP4 IF 1 and later) Certificates Upgrade
For all questions regarding TM1 certificates please visit the IBM Blog:
http://ibm.biz/TM1SSLCertificate
1. Download the updated TM1 SSL Certificates from the following location:
http://www.ibm.com/support/fixcentral...
2. Stop IBM Cognos Tm1 Services
3. Copy the new certificates to 3 destinations on your server installation
tm1_install_dir\tm1_64\bin\ssl
tm1_install_dir\tm1_64\bin64\ssl
tm1_install_dir\tm1_64\webapps\pmpsvc\WEB-INF\bin64\ssl
4. Execute the following batch files to delete the old certificates from Windows Keystore and reimport it
Open Command Prompt and go to the following directory
cd C:\Program Files\ibm\cognos\tm1_64\bin64\ssl
uninstallSSL.bat
importsslcert.exe
5. Update Java keystore
Open Command Prompt as Administrator
cd C:\Program Files\ibm\cognos\tm1_64\bin64\jre\7.0\bin
keytool -delete -alias applixca -keystore ..\lib\security\cacerts -storepass changeit
keytool -keystore ..\lib\security\cacerts -alias applixca -import -file "C:\Program Files\ibm\cognos\tm1_64\bin64\ssl\applixca.der" -storepass changeit -noprompt
6. Edit service_pmpsvc.bat file
Windows Explorer C:\Program Files\ibm\cognos\tm1_64\bin64
open service_pmpsvc.bat with notepad++ and search for line beginning with: set BASE_JVM_OPTIONS
Paste ;-Dcom.ibm.cognos.tm1.certificate.dir=%PMPSVC_ROOT%\webapps\pmpsvc\WEB-INF\bin64 to the end of the line
save the file
7. Uninstalling and Reinstalling service pmpsvc
Open Command Prompt
cd C:\Program Files\ibm\cognos\tm1_64\bin64
service_pmpsvc stop
service_pmpsvc uninstall
service_pmpsvc install
8. copying fpmsvc_config.xml from C:\Program Files\ibm\cognos\tm1_64\webapps\pmpsvc\WEB-INF\configuration
to C:\Program Files\ibm\cognos\tm1_64\webapps\pmpsvc\WEB-INF\bin64\
9. Start IBM Cognos TM1 Services
Find the official IBM Technote here:
www-01.ibm.com/support/docview.wss?uid=swg21991653