Troubleshooting
Problem
This Technote provides details about configuring CAM authentication for Cognos TM1 when the Cognos BI Server dispatcher uses SSL.
Resolving The Problem
The following parameters should be set in the tm1s.cfg file:
IntegratedSecurityMode=5
ClientCAMURI=https://bi.canlab.ibm.com/ibmcognos/cgi-bin/cognosisapi.dll
ServerCAMURI=https://bi.canlab.ibm.com:9300/p2pd/servlet/dispatch
CAMSSLCertificate=C:\Program Files\ibm\cognos\tm1_64\samples\tm1\PlanSamp\cognoscert.cer
If the SSL certificate that is provided by IBM for the Cognos BI Server dispatcher is being used, the following parameter must also be set in the tm1s.cfg file
SkipSSLCAMHostCheck=T
The cognoscert.cer file in the above example contains all CA certificates used by the Cognos BI Serve dispatcher in base64 encoding. If the cognoscert.cer file is opened with a text editor you should see content similar to this:
-----BEGIN CERTIFICATE-----
MIIDuzCCAqOgAwIBAgIQAyXWL0XHwqVNXxm41LOtZjANBgkqhkiG9w0BAQsFADBk
MRMwEQYKCZImiZPyLGQBGRYDY29tMRMwEQYKCZImiZPyLGQBGRYDaWJtMRYwFAYK
...
c652Q2u6Zkze1cEqlcN6NNmXVt01V0UryzgNtGneLP04C/Rc1i26OGWG1xZ8d3RV
3hEHvkP8k5XtZbSloGxXTXSBzGi1EvXGxsgdsbp3HjgzMHea51WJrKegJ90rEdw=
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIEYTCCA0mgAwIBAgIKYWSJLQAAAAAAAzANBgkqhkiG9w0BAQsFADBkMRMwEQYK
CZImiZPyLGQBGRYDY29tMRMwEQYKCZImiZPyLGQBGRYDaWJtMRYwFAYKCZImiZPy
LGQBGRYGY2FubGFiMSAwHgYDVQQDExdjYW5sYWItVk9UVFNUVUFSVFZJUi1DQTAe
...
NS+u6z3eoTc4CFsq0FkjHkDNxKfHDsgp/xpmGacaPOUZS/aTR21VFyqx89ONPIvm
pFVf0JymGbjQX6LIRL4PEzU1VJ/Z29OH53zDnQ9McYDHzbNNPZdVyOf6eB96aMYi
8q6NMPfcrokYYxlJ+Ll6TUamfUk9
-----END CERTIFICATE-----
The Cognos BI Server CA certificates can be obtained by using a web browser to access the Cognos BI Dispatcher URL (e.g https://bi.canlab.ibm.com:9300/p2pd/servlet/dispatch), then exporting the certificates from the Windows certificate viewer into a base64 encoded file.
There are no additional configuration steps required for TM1 Architect, TM1 Perspectives, or TM1Web. However, the pmpsvc web application does communicate with the Cognos BI Server dispatcher. Instructions to configure TM1 Applications (pmpsvc web application) for CAM authentication with SSL can be found here:
Was this topic helpful?
Document Information
Modified date:
15 June 2018
UID
swg21980367