IBM Support

Configure TM1 for CAM authentication when SSL is used on the Cognos BI dispatcher.

Troubleshooting


Problem

This Technote provides details about configuring CAM authentication for Cognos TM1 when the Cognos BI Server dispatcher uses SSL.

Resolving The Problem

The following parameters should be set in the tm1s.cfg file:

IntegratedSecurityMode=5

ClientCAMURI=https://bi.canlab.ibm.com/ibmcognos/cgi-bin/cognosisapi.dll

ServerCAMURI=https://bi.canlab.ibm.com:9300/p2pd/servlet/dispatch

CAMSSLCertificate=C:\Program Files\ibm\cognos\tm1_64\samples\tm1\PlanSamp\cognoscert.cer

If the SSL certificate that is provided by IBM for the Cognos BI Server dispatcher is being used, the following parameter must also be set in the tm1s.cfg file



SkipSSLCAMHostCheck=T

The cognoscert.cer file in the above example contains all CA certificates used by the Cognos BI Serve dispatcher in base64 encoding. If the cognoscert.cer file is opened with a text editor you should see content similar to this:


-----BEGIN CERTIFICATE-----
MIIDuzCCAqOgAwIBAgIQAyXWL0XHwqVNXxm41LOtZjANBgkqhkiG9w0BAQsFADBk
MRMwEQYKCZImiZPyLGQBGRYDY29tMRMwEQYKCZImiZPyLGQBGRYDaWJtMRYwFAYK
...
c652Q2u6Zkze1cEqlcN6NNmXVt01V0UryzgNtGneLP04C/Rc1i26OGWG1xZ8d3RV
3hEHvkP8k5XtZbSloGxXTXSBzGi1EvXGxsgdsbp3HjgzMHea51WJrKegJ90rEdw=
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIEYTCCA0mgAwIBAgIKYWSJLQAAAAAAAzANBgkqhkiG9w0BAQsFADBkMRMwEQYK
CZImiZPyLGQBGRYDY29tMRMwEQYKCZImiZPyLGQBGRYDaWJtMRYwFAYKCZImiZPy
LGQBGRYGY2FubGFiMSAwHgYDVQQDExdjYW5sYWItVk9UVFNUVUFSVFZJUi1DQTAe
...
NS+u6z3eoTc4CFsq0FkjHkDNxKfHDsgp/xpmGacaPOUZS/aTR21VFyqx89ONPIvm
pFVf0JymGbjQX6LIRL4PEzU1VJ/Z29OH53zDnQ9McYDHzbNNPZdVyOf6eB96aMYi
8q6NMPfcrokYYxlJ+Ll6TUamfUk9
-----END CERTIFICATE-----

The Cognos BI Server CA certificates can be obtained by using a web browser to access the Cognos BI Dispatcher URL (e.g https://bi.canlab.ibm.com:9300/p2pd/servlet/dispatch), then exporting the certificates from the Windows certificate viewer into a base64 encoded file.

There are no additional configuration steps required for TM1 Architect, TM1 Perspectives, or TM1Web. However, the pmpsvc web application does communicate with the Cognos BI Server dispatcher. Instructions to configure TM1 Applications (pmpsvc web application) for CAM authentication with SSL can be found here:

http://www-01.ibm.com/support/docview.wss?uid=swg21979697

[{"Product":{"code":"SS9RXT","label":"Cognos TM1"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"TM1 Server","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"10.1.0;10.1.1;10.2;10.2.2","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
15 June 2018

UID

swg21980367