Planning Analytics

Planning Analytics

Get AI-infused integrated business planning

 View Only
Back to discussions
Expand all | Collapse all

Setting Up CAM Security

  • 1.  Setting Up CAM Security

    Posted Mon October 21, 2019 04:34 PM
    Hi PA Group,

    I am looking to setup CAM Security but we dont own COGNOS Analytics. 
    This was suggested by Support team as we were having issues with TM1 Web not being able to authenticate AD.
    We are currently using 10.2.2 in PROD and in process of doing an upgrade to 2.0.8.37. 

    Any assistance would be appreciated. 

    Vikas Bhatia

    ------------------------------
    Vikas Bhatia
    ------------------------------

    #PlanningAnalyticswithWatson


  • 2.  RE: Setting Up CAM Security

    Posted Mon October 21, 2019 04:45 PM
    Hi,

    TM1/Planning Analytics comes with a limit license to install and use Cognos Analytics.  On your previous instance were you using CAM authentication?

    ------------------------------
    Scott Brown
    ------------------------------

    Original Message


  • 3.  RE: Setting Up CAM Security

    Posted Mon October 21, 2019 05:01 PM
    Planning Analytics uses IBM federated security process - https://www.ibm.com/support/knowledgecenter/en/SSD29G_2.0.0/com.ibm.swg.ba.cognos.tm1_cloud_mg.2.0.0.doc/c_federated_authentication.html
    Ibm remove preview
    View this on Ibm >


    ------------------------------
    paul YOUNG
    ------------------------------

    Original Message


  • 4.  RE: Setting Up CAM Security

    Posted Mon October 21, 2019 08:13 PM
    Hi Scott,

    We are using Kerberos with SPN which has been working well in 10.2.2. 

    IBM Support wasnt able to assist on getting this working with PA hence suggested using CAM. 

    With what i see now as part of our downloads via Passport Advantage all i see is the as part of install is Framework Manager.

    Vikas

    ------------------------------
    Vikas Bhatia
    ------------------------------

    Original Message


  • 5.  RE: Setting Up CAM Security

    Posted Tue October 22, 2019 07:49 AM
    Hi Vikas,

    For on-premise installation and configuration, the security you previously had with our legacy TM1 10.2.x would still be applicable once you have upgraded to Planning Analytics.

    Scott above was asking if this worked before or if you had CAM security configured. If you did then this would most likely mean that you had Cognos BI installed as well, can you confirm this? TM1 by itself was not able to have CAM security even with our legacy TM1, it needed Cognos BI to piggy back off its CAM security. So in summary, the same security you had can be achieved with Planning Analytics.

    Do you know what TM1security Mode you have been using? Are you able to expand a bit more on the setup / authentication piece?
    Also, unsure if you have previously seen our programs we offer, I'll paste them here in case you would like to discuss and schedule with us. Or if you want to connect with me directly to discuss please feel free.



    ------------------------------
    Robert VAUTOUR
    ------------------------------

    Original Message


  • 6.  RE: Setting Up CAM Security

    Posted Tue October 22, 2019 10:14 AM
      |   view attached
    Hi Robert,

    See attached Tm1s.cfg setting.
    [TM1S]
    ServerLogging=T
    SecurityPackageName=Kerberos
    IntegratedSecurityMode=3
    ServicePrincipalName=tm1s/V12BFLCOGAPPDV2.ame.bvcorp.corp

    UseSSL=T
    ServerName=maxxam_cpm
    DataBaseDirectory=E:\tm1_apps\tm1_db\
    LoggingDirectory=E:\tm1_apps\tm1_log\
    AdminHost=V12BFLCOGAPPDV2
    PortNumber=13358
    HTTPPortNumber=5005
    Language=ENG
    SaveTime=
    DownTime=
    ProgressMessage=True
    ParallelInteraction=T
    AuditLogOn=T
    AuditLogMaxFileSize= 100 MB
    AuditLogUpdateInterval=60
    IdleConnectionTimeOutSeconds=7200
    AutomaticallyAddCubeDependencies=F

    MaximumCubeLoadThreads=1
    MaximumViewSize=2000
    AllowSeparateNandCRules=T
    DistributedPlanningOutputDir=tunit
    ClientMessagePortNumber=

    DisableSandboxing=T

    GroupsCreationLimit=125

    HTTPSessionTimeoutMinutes=120


    We have never used CAM authentication. Only reason we are exploring CAM this as IBM support wasn't able to assist with TM1Web NOT working with AD.

    Our PROD Setup has the Web and Application server being separate, but we are doing in DEV first (which as both the application and web server on the same server).     

    Vikas

    ------------------------------
    Vikas Bhatia
    ------------------------------

    Original Message


  • 7.  RE: Setting Up CAM Security

    Posted Tue October 22, 2019 12:30 PM
    Hi Vikas,

    Does the authentication work with client tools like Architect? I'm guessing it won't work either by looking at the configuration. Just to be clear, the authentication should work with the client tools like architect first otherwise it will never work with TM1Web.

    Also, TM1 doesn't have a direct connection to AD. But it can communicate to a LDAP v3 compliant which may be AD in your case. To configure ldap, have you reviewed these docs? I'm unsure what configurations / or steps you have used to this point but these steps would be the ones for configuring ldap. 
    https://www.ibm.com/support/knowledgecenter/en/SSD29G_2.0.0/com.ibm.swg.ba.cognos.tm1_inst.2.0.0.doc/c_ldapauthentication_nd0007.html

    and 
    https://www.ibm.com/support/knowledgecenter/en/SSD29G_2.0.0/com.ibm.swg.ba.cognos.tm1_inst.2.0.0.doc/c_etldaputility_n80007.html

    ------------------------------
    Robert VAUTOUR
    ------------------------------

    Original Message


  • 8.  RE: Setting Up CAM Security

    Posted Tue October 22, 2019 02:44 PM

    Hi Vikas,
    while this won't necessarily help you resolve your situation, I can relate some experience on two aspects of your original post: (I use CAPS for emphasis here):

    a) on the topic of CAM:  with the PA entitlement, you SHOULD be able to download the components to set up & run CAM with PA (namely Cognos Analytics sw).   Not sure why you would not have this sw available to you.


    b) on the topic of TM1 Web with PA and Active Directory - yes it IS possible to make TM1 Web work with AD, but the two cases I am aware of at customers both took a VERY long time to sort out, and MUCH troubleshooting with IBM to achieve.  (neither of those customers was open to doing CAM, so the lengthy efforts were necessary).  IBM has helped on those cases, so I would also expect that you could press for assistance as well. I've set up CAM enough to know it is the somewhat easier route (but still has its share of effort).



    ------------------------------
    Sarah Milius
    Master Consultant
    QueBIT Consulting
    CT
    smilius@quebit.com
    ------------------------------

    Original Message


  • 9.  RE: Setting Up CAM Security

    Posted Wed November 06, 2019 10:49 AM
    Thank you all! We decided to go CAM and its been a fairly simple setup. 

    Vikas

    ------------------------------
    Vikas Bhatia
    ------------------------------

    Original Message


Related Content