Planning Analytics

 View Only
Expand all | Collapse all

Impossible to open Contributor Node

  • 1.  Impossible to open Contributor Node

    Posted Tue October 30, 2018 03:26 PM
      |   view attached
    Hello,
    I have a problem opening contributor node.
    I reach correctly the pmpsvc page (I can see all the applications), I can see correctly the workflow page, but when I try to open any node the page Contributor.jsp appear, but it is blank. It doesn't load anything.
    I also don't see the splash screen Ibm Cognos doing this operation.
    Do you think is it a java problem, browser problem or just a configuration problem?

    Please note that I can work correctly with tm1web for the same servers tm1.

    Many thanks for your help

    ------------------------------
    massimo federico
    ------------------------------

    #PlanningAnalyticswithWatson


  • 2.  RE: Impossible to open Contributor Node

    Posted Fri January 25, 2019 08:32 AM
    Hi Massimo,
    Did you try to add to "Trusted sites" the TM1 Applications url?
    It seems to be an explorer security issue.

    Regards

    ------------------------------
    Marta de las Heras
    ------------------------------



  • 3.  RE: Impossible to open Contributor Node

    Posted Fri January 25, 2019 08:51 AM
    Did you get an error message at all?

    There are many things that drive TM1 application:

    1. Security - https://www-01.ibm.com/support/docview.wss?uid=swg22002541
    2. CAM ID issues - https://www.ibm.com/communities/analytics/planning-analytics-blog/tm1-applications-workflow-known-issue-for-planning-analytics-on-cloud/
    3. You could also try clearing the cache and then try the workflow again.

    ------------------------------
    paul YOUNG
    ------------------------------



  • 4.  RE: Impossible to open Contributor Node

    Posted Thu January 31, 2019 06:55 AM
    It would help to see a Fiddler trace as the problem is being reproduced. 

    Is SSL enabled on TM1Web and TM1 Applications?  If so, please the section titled Import the CA Certificates Into the Java cacerts File in the following Technote:

    https://www-01.ibm.com/support/docview.wss?uid=swg21998395

    TM1Web and PMPSVC are separate applications that 'talk' to each other.  When SSL is enabled TM1Web needs to trust the CA certs being used by PMPSVC (which should be the same CA certs used PMPSVC).

    ------------------------------
    STUART KING
    ------------------------------



  • 5.  RE: Impossible to open Contributor Node

    Posted Tue April 16, 2019 04:20 PM
    Hi Stuart,
    As said, I have imported the certs following the link "Import the CA Certificates Into the Java cacerts File". I still get the "Certificate chaining error". 
    Link you mentioned:
    https://www-01.ibm.com/support/docview.wss?uid=swg21998395

    The imported certs are our certs and not the third party custom certs. The issue following the third party is the secured certificate created work but when we add our ssl cert above the firewall, it fails.
    Please let us know what our next steps should be.

    Thanks,
    Luther.

    ------------------------------
    Luther Rapaka
    ------------------------------



  • 6.  RE: Impossible to open Contributor Node

    Posted Thu April 18, 2019 09:34 AM
    Hi Luther,
    I had a look to the solution, but at the moment I'm not using third parties certificates.
    The problem I have is using native ssl certificates, or protocol http in alternative.

    ------------------------------
    massimo federico
    ------------------------------



  • 7.  RE: Impossible to open Contributor Node

    Posted Thu April 25, 2019 01:12 PM
    Hi Massimo,
    Is the issue resolved? We got a solution from IBM and it worked. Please let me know if it works or let me know when you get the issue resolved.

    Notes provided and the reason:

    The certificate chaining error on the page had been caused by the fact that there is another webserver/balancer that sits in front of the TM1 Web / TM1 Application URLs. And that the webserver/balancer is secured using SSL. For this type of configuration to work, you must trust the Root and Intermediate Certificate Authority of the webserver/balancer with your TM1 Configuration. To trust the Certificate Authorities, import the certificates in to the appropriate keystore:

      

    *Import in to TM1Store keystore:*

     -Open Command Prompt, and navigate to <installdir>\tm1_64\jre\bin\

     -Type: keytool -import -trustcacerts -file "C:\Test\ca-chain.cert.pem" -keystore "C:\Program Files\ibm\cognos\tm1_64\bin64\ssl\tm1store" -alias certchain -storepass applix

     *-file "C:\Test\ca-chain.cert.pem" *<--Update to reflect the location of your Root and Intermediate certificates, in this example both certificates have been added to a single file*

     *-keystore "C:\Program Files\ibm\cognos\tm1_64\bin64\ssl\tm1store" *<--Update the path to the tm1store file for your install directory*

     *-alias certchain *<--Provide a relevant alias for your certificate*


    Thanks,
    Luther.

    ------------------------------
    Luther Rapaka
    ------------------------------



  • 8.  RE: Impossible to open Contributor Node

    Posted Mon April 29, 2019 05:39 AM
    Hello,
    I don't find a jre folder in <installdir>\tm1_64\jre\bin\
    I've found in the tm1 <installdir> 3 jre folders:
    - C:\Program Files\ibm\cognos\tm1_64\bin\jre
    - C:\Program Files\ibm\cognos\tm1_64\bin64\jre
    - C:\Program Files\ibm\cognos\tm1_64\perfmodeler\plugins\com.ibm.jre7.win32.x86_64_10.3.1.v00021\jre

    Which of these should I use to Import in to TM1Store keystore?

    Concerning your explaination:

    "The certificate chaining error on the page had been caused by the fact that there is another webserver/balancer that sits in front of the TM1 Web / TM1 Application URLs. And that the webserver/balancer is secured using SSL. For this type of configuration to work, you must trust the Root and Intermediate Certificate Authority of the webserver/balancer with your TM1 Configuration"

    The environment is actually very simple, there is a Cognos BI server used for authentication and dispatcher and a Cognos Tm1 server where tm1 is installed.

    If you have other questions, please let me know.
    Thank you for your patience.

    Massimo

    ------------------------------
    massimo federico
    ------------------------------



  • 9.  RE: Impossible to open Contributor Node

    Posted Mon April 29, 2019 05:59 AM

    Contributor Node issue (does this technote resolve your issue?) https://www-01.ibm.com/support/docview.wss?uid=ibm10882082



    ------------------------------
    paul YOUNG
    ------------------------------



  • 10.  RE: Impossible to open Contributor Node

    Posted Mon April 29, 2019 10:19 AM
    Hi Massimo,
    Couple of things. The issue we had was because there is another webserver/balancer that sits in front of the TM1 Web / TM1 Application URLs. Is this your case? If yes, you can follow the link that Paul has sent  (the details I sent are the same.) You have to import your company SSL certs. They can be saved to a file in any format. Format does not matter as long as certs are valid. Let me know if you are stuck on this.

    The path to the TM1Store and other files is where the websphere is installed . We call this application server. 

    Paths to various files.
    D:\Program Files\ibm\cognos\tm1_64\bin64\jre\7.0\bin\keytool.exe
    D:\Program Files\ibm\cognos\tm1_64\bin64\ssl\tm1store

    Please let me know if there issues.

    Thanks,
    Luther.

    ------------------------------
    Luther Rapaka
    ------------------------------