15

Click here to load reader

IBM Cognos TM1 SSL Expiry Nov 24 - How to fix Clients

Embed Size (px)

Citation preview

SSL Certificate - Client installations

SSL Certificate - Client installations

Do not proceed with updating your TM1 Client Applications, unless your TM1 Server Applications have already been configured to use the new certificates. Switching your client to use the new TM1 SSL Certificates before your server has been updated - will result in being unable to connect to / open any TM1 Server connections.To update your IBM Cognos TM1 Architect or Perspectives Client, the below steps can be followed: 10.2.2: http://www.ibm.com/support/fixcentral/swg/quickorder?parent=Cognos&product=ibm/Information+Management/Cognos+TM1&release=10.2.2&platform=All&function=fixId&fixids=10.2.2-BA-CTM1-SSL-IF002

1. Extract and copy the installation files to all TM1 Client install locationsTo facilitate the installation of these EXE files across enterprise, we have to share them in a shared drive. So create two folders on R drive named SSL64bitClient and SSL32bitClient and copy the downloaded files accordingly.

2. Close any/all open TM1 Client applications, as well as Microsoft Excel (in the case of Perspectives)3. Run the installer you downloaded as an Administrator

4. Click your way through the installer, ensuring that the updater is being applied over top of the correct TM1 install directory

5. After the installation has finished, the following directories will contain the updated TM1 Certificate files:

\tm1_64\bin\ssl

\tm1_64\bin64\sslBefore the installation the screen capture is below

After the installation you can see the Date Modified has changed from 5/1/2014 to 6/17/2016

6. Navigate to both the directories below

\tm1_64\bin64\ssl \tm1_64\bin64\sslC:\Program Files\ibm\cognos\tm1_64\bin\sslC:\Program Files\ibm\cognos\tm1_64\bin64\ssl

7. Execute the uninstallSSL.bat file, to uninstall old keys from the Windows Keystore

8. Execute the importsslcert.exe file, to install the new keys in to the Windows Keystore

Your IBM Cognos TM1 Architect / TM1 Perspectives applications should now be updated.How to Update Your IBM Cognos TM1 Performance Modeler / Cognos Insight Client Installations - Updater Kit - ALL VERSIONS

Content

BEFORE YOU BEGIN:

Do not proceed with updating your TM1 Client Applications, unless your TM1 Server Applications have already been configured to use the new certificates. Switching your client to use the new TM1 SSL Certificates before your server has been updated - will result in being unable to connect to / open any TM1 Server connections.

This application updates all TM1 SSL files for Cognos Insight and Performance Modeler upon a machine on which it is run. It can be run in any location from a command prompt.

In the default mode it will run once for the logged on user

If any machine-wide installs are detected it will run again automatically in order to update those instances.

In the default mode all replaced files will be backed up in-place by appending ".bak_" to the filename.

To perform a test run (i.e. no files are changed) use the -w or --noWrite switch.

Full list of options:

-h or --help Show help

-p or --pause Pause when complete

-b or --noBackup Don't backup the original ssl files before overwriting

-w or --noWrite Test run - don't actually write any files

-v or --verbose Give more detail

INSTALLATION STEPS:1. Download/obtain the RcpSslUpdater file(s) from the following

2. location:http://www.ibm.com/support/fixcentral/swg/quickorder?parent=Cognos&product=ibm/Information+Management/Cognos+TM1&release=10.2&platform=All&function=fixId&fixids=10.2.2-BA-CTM1-SSL-SE-IF001 For 32bit Operating Systems, download the RcpSslUpdater.exe

For 64bit Operating Systems, download the RcpSslUpdater64.exe

You may notice the URL above indicates version 10.2.2, however the file and steps are applicable toALLVersions of TM1 Performance Modeler / Cognos Insight (TM1 10.1 through TM1 10.2.2)

3. Move the downloaded RcpSslUpdater file to a folder. We are using shared R drive for sharing the executable and updater, So we will place the RcpSslUpdater64.exe/RcpSslUpdater.exe file in to shared R drive into a folder named TM1RCPUpdaterBefore applying this update, suppose if you want to capture the date of old certificate, go to the folder where you have been installed the Cognos Insight and Cognos Performance Modeler and take screen captures as seen below.C:\Program Files\ibm\cognos\tm1_64\coginsightC:\Program Files\ibm\cognos\tm1_64\perfmodeler

4. Run the executable file by double clicking after opening with admin privileges from the shared R drive from where we saved the executable files. R:\TM1RCPUpdaterIf your Laptop has a 32 bit Microsoft Windows operating system, you need to execute the 32 bit installer as seen below.

If your Laptop has a 32 bit Microsoft Windows operating system, you need to execute the 32 bit installer as seen below.

If you have any issues in executing the updaters, Open Windows Command Prompt as an Administrator, and navigate to R:\TM1RCPUpdater\Execute the following command to update Performance Modeler / Cognos Insight:RcpSslUpdater64.exe (or RcpSslUpdater.exe)After the installation you can see the Date Modified has changed

from 9/25/2014 to 11/1/2016.

This has confirmed that the SSL certificate has been updated effectively.After the above steps have been followed, your IBM Cognos TM1 Performance Modeler / Cognos Insight applications will have been updated successfully._1539510343/RcpSslUpdater.exe

_1539510364/RcpSslUpdater64.exe