TM1 Forum

Hi ,

i am trying to install the SSL certificate in TM1 web. we have got the signed (verisign) certificate (tm1.cer) from vendor. i was follwing with the ibm document (http://www-01.ibm.com/support/knowledge ... r_SSL.html)but here i confused with .pem format. i asked my vendor to provide us the .pem format but they do provide only .cer or .p12 format.
i stil tried with .cer format usin the ibm provided syntax,but its not working.

later i tried with ….keytool.exe -importcert -file "Tm-dev.cer" -keystore "D:\CognosTM1\bin64\jre\7.0\lib\security\cacerts" -storepass "changeit" -alias "TM1 " syntax and certificate is stored. but stil the tm1 web is not working with https.

coulg anybody help me on this.
note: we need to secure the tm1web only(https://servername:9510/tm1web)

Hello Sudheer:

I was planning to start my own thread but noticed that your issue may be same as mine.

Did you manage to get this issue resolved? What was the resolution?

Thanks for sharing with the forum.

1) Convert a DER file (.crt .cer .der) to PEM
openssl x509 -inform der -in certificate.cer -out certificate.pem

2) When you created the Certificate Signing Request, did you also put the private key into the encryptkeypair/signkeypair stores of the TM1 CAM store?
3) You should have recd three files from your Certificate Authority
1 x Certificate Authority certificate
1 x encryptkey.pem
1 x signkey.pem

These need also to be imported into the CAM Keystore

You need to put the CA certificate into the JAVA keystore (to make TM1 Web work)
Finally import the CA Cert into the Windows Cert store (via the MMC or browser)

I made a Prezi on how to do it using OpenSSL and 10.2.2
http://prezi.com/cnjjuhree8hx/?utm_camp ... c=ex0share

BE AWARE
10.2.2 FP4 has a bug in it that will not allow SSL to work.
Code fix imminent

Hi,

We stumbled on the ssl issue when upgrading to 10.2.2 Fix Pack 4 in our DEV environment last week.
However FP4 + Interim Fix 9 resolves this issue.

Thomas