How to Update Your Cognos BI TM1 Client Components

Content

BEFORE YOU BEGIN:

-If your IBM Cognos BI Installation for TM1 Reporting resides on UNIX and is not on 10.2.1 FP11, 10.2.2 FP5, or newer - you MUST apply the following Cognos BI Security Updater to your BI Environment before you proceed with updating your IBM Cognos TM1 Certificates: http://www-01.ibm.com/support/docview.wss?uid=swg21979767 .

-If you use IBM Cognos Analytics 11.0.4 or lower - you must follow the steps within this document. IBM Cognos Analytics 11.0.5 will come bundled with the new TM1 Certificates when the release is made available

-It is assumed that when on UNIX, your TM1_PATH environment variable is pointing to Cognos BI's own /bin/ or /bin64/ directory. If your TM1_PATH points elsewhere, be sure to update the /ssl/ folder within, using the new certificate files listed in Step 2.

-If your IBM Cognos BI Installation has multiple report servers, ensure that all report servers are updated accordingly.

To update your IBM Cognos BI TM1 Client Components, the below steps can be followed:

1. Download the updated TM1 SSL Certificates from the following location: http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FInformation+Management%2FCognos+TM1&fixids=BA-CTM1-SSL-ZIP-IF001
2. Stop your IBM Cognos BI Services
3. Extract the downloaded file/archive and extract it to any directory. For the purpose of this document, our files will be extracted in to <cognos_bi_install_dir>\NewSSLCerts\
4. After extracting the files, look inside of your extracted folder <cognos_bi_install_dir>\NewSSLCerts\ . The following files should be present.
• applixca.der
• applixca.pem
• applixcacrl.p7b
• applixcacrl.pem
• tm1admsvrcert.pem
• tm1store
• tm1svrcert.pem
5. If Cognos BI is installed on Windows - back up the following directories in your <tm1_client_install_directory>
• <tm1_client_install_directory>\bin\ssl
• <tm1_client_install_directory>\bin64\ssl
6. If Cognos BI is installed on UNIX - back up the following directories in your <cognos_bi_install_dir>
• <cognos_bi_install_dir>\bin\ssl
• <cognos_bi_install_dir>\bin64\ssl
7. Copy the contents of the folder you extracted earlier <cognos_bi_install_dir>\NewSSLCerts\ , and place them inside of the 2 directories listed above in Step 5 or Step 6 (depending on your Architecture). During this process, you will be required to REPLACE all conflicting files as we must replace the old certificate files with new ones.
8. Start your IBM Cognos BI services
   
   At this stage, (and assuming your IBM Cognos TM1 Server components have been set up correctly and are running) - you should be able to confirm that you are able to successfully connect to your TM1 Server via IBM Cognos BI