Hello,
I don't find a jre folder in <installdir>\tm1_64\jre\bin\
I've found in the tm1 <installdir> 3 jre folders:
- C:\Program Files\ibm\cognos\tm1_64\bin\jre
- C:\Program Files\ibm\cognos\tm1_64\bin64\jre
- C:\Program Files\ibm\cognos\tm1_64\perfmodeler\plugins\com.ibm.jre7.win32.x86_64_10.3.1.v00021\jre
Which of these should I use to Import in to TM1Store keystore?
Concerning your explaination:
"The certificate chaining error on the page had been caused by the fact that there is another webserver/balancer that sits in front of the TM1 Web / TM1 Application URLs. And that the webserver/balancer is secured using SSL. For this type of configuration to work, you must trust the Root and Intermediate Certificate Authority of the webserver/balancer with your TM1 Configuration"
The environment is actually very simple, there is a Cognos BI server used for authentication and dispatcher and a Cognos Tm1 server where tm1 is installed.
If you have other questions, please let me know.
Thank you for your patience.
Massimo
------------------------------
massimo federico
------------------------------
Original Message:
Sent: Thu April 25, 2019 01:11 PM
From: Luther Rapaka
Subject: Impossible to open Contributor Node
Hi Massimo,
Is the issue resolved? We got a solution from IBM and it worked. Please let me know if it works or let me know when you get the issue resolved.
Notes provided and the reason:
The certificate chaining error on the page had been caused by the fact that there is another webserver/balancer that sits in front of the TM1 Web / TM1 Application URLs. And that the webserver/balancer is secured using SSL. For this type of configuration to work, you must trust the Root and Intermediate Certificate Authority of the webserver/balancer with your TM1 Configuration. To trust the Certificate Authorities, import the certificates in to the appropriate keystore:
*Import in to TM1Store keystore:*
-Open Command Prompt, and navigate to <installdir>\tm1_64\jre\bin\
-Type: keytool -import -trustcacerts -file "C:\Test\ca-chain.cert.pem" -keystore "C:\Program Files\ibm\cognos\tm1_64\bin64\ssl\tm1store" -alias certchain -storepass applix
*-file "C:\Test\ca-chain.cert.pem" *<--Update to reflect the location of your Root and Intermediate certificates, in this example both certificates have been added to a single file*
*-keystore "C:\Program Files\ibm\cognos\tm1_64\bin64\ssl\tm1store" *<--Update the path to the tm1store file for your install directory*
*-alias certchain *<--Provide a relevant alias for your certificate*
Thanks,
Luther.
------------------------------
Luther Rapaka
------------------------------