How to Update Your Expiring TM1 SSL Certificates - Manual Steps - Cognos Express 10.1 / 10.2.1 Client Components

Content

To update your IBM Cognos Express 10.1 and 10.2.1 client components, the below steps can be followed:

Updating IBM Cognos Architect for Cognos Express

1. Download the updated TM1 SSL Certificates from the following location: http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FInformation+Management%2FCognos+TM1&fixids=BA-CTM1-SSL-ZIP-IF001
2. Extract the downloaded file/archive and extract it to any directory. For the purpose of this document, our files will be extracted in to <tm1_express_client_install_dir>\NewSSLCerts\
3. After extracting the files, look inside of your extracted folder <tm1_express_client_install_dir>\NewSSLCerts\ . The following files should be present.
• applixca.der
• applixca.pem
• applixcacrl.p7b
• applixcacrl.pem
• tm1admsvrcert.pem
• tm1store
• tm1svrcert.pem
4. Back up the following directories in your <tm1_client_install_dir>
• <tm1_express_client_install_dir>\Architect\bin\ssl
5. Copy the contents of the folder you extracted earlier <tm1_express_client_install_dir>\Architect\NewSSLCerts\ , and place them inside of the directory listed above in Step 4. During this process, you will be required to REPLACE all conflicting files as we must replace the old certificate files with new ones.
6. After all files have been copied successfully, navigate to <tm1_express_client_install_dir>\Architect\bin\ssl\
7. Double click the applixca.der file and follow the prompts to install the new certificate in to the Windows Keystore
• You will want to ensure that the old/expiring certificate is removed from the Windows Keystore via Microsoft Management Console. For more detail see the following: http://www-01.ibm.com/support/docview.wss?uid=swg21992572

Updating IBM Cognos Xcelerator for Cognos Express

1. Download the updated TM1 SSL Certificates from the following location: http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FInformation+Management%2FCognos+TM1&fixids=BA-CTM1-SSL-ZIP-IF001
2. Extract the downloaded file/archive and extract it to any directory. For the purpose of this document, our files will be extracted in to <tm1_express_client_install_dir>\NewSSLCerts\
3. After extracting the files, look inside of your extracted folder <tm1_express_client_install_dir>\NewSSLCerts\ . The following files should be present.
• applixca.der
• applixca.pem
• applixcacrl.p7b
• applixcacrl.pem
• tm1admsvrcert.pem
• tm1store
• tm1svrcert.pem
4. Back up the following directories in your <tm1_client_install_dir>
• <tm1_express_client_install_dir>\Xcelerator Client\bin\ssl
5. Copy the contents of the folder you extracted earlier <tm1_express_client_install_dir>\Xcelerator Client\NewSSLCerts\ , and place them inside of the directory listed above in Step 4. During this process, you will be required to REPLACE all conflicting files as we must replace the old certificate files with new ones.
6. After all files have been copied successfully, navigate to <tm1_express_client_install_dir>\Xcelerator Client\bin\ssl\ using Windows Command Prompt
7. Double click the applixca.der file and follow the prompts to install the new certificate in to the Windows Keystore
• You will want to ensure that the old/expiring certificate is removed from the Windows Keystore via Microsoft Management Console. For more detail see the following: http://www-01.ibm.com/support/docview.wss?uid=swg21992572

Updating IBM Cognos Framework Manager for Cognos Express

1. Download the updated TM1 SSL Certificates from the following location: http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FInformation+Management%2FCognos+TM1&fixids=BA-CTM1-SSL-ZIP-IF001
2. Extract the downloaded file/archive and extract it to any directory. For the purpose of this document, our files will be extracted in to <tm1_express_client_install_dir>\NewSSLCerts\
3. After extracting the files, look inside of your extracted folder <tm1_express_client_install_dir>\NewSSLCerts\ . The following files should be present.
• applixca.der
• applixca.pem
• applixcacrl.p7b
• applixcacrl.pem
• tm1admsvrcert.pem
• tm1store
• tm1svrcert.pem
4. Back up the following directories in your <tm1_client_install_dir>
• <tm1_express_client_install_dir>\Framework Manager\bin\ssl
5. Copy the contents of the folder you extracted earlier <tm1_express_client_install_dir>\Framework Manager\NewSSLCerts\ , and place them inside of the directory listed above in Step 4. During this process, you will be required to REPLACE all conflicting files as we must replace the old certificate files with new ones.
6. After all files have been copied successfully, navigate to <tm1_express_client_install_dir>\Framework Manager\bin\ssl\ using Windows Command Prompt
7. Double click the applixca.der file and follow the prompts to install the new certificate in to the Windows Keystore
• You will want to ensure that the old/expiring certificate is removed from the Windows Keystore via Microsoft Management Console. For more detail see the following: http://www-01.ibm.com/support/docview.wss?uid=swg21992572

Updating IBM Cognos Performance Modeler / Cognos Insight for Cognos Express
See: How to Update Your Performance Modeler / Cognos Insight Client Installations - ALL VERSIONS: http://www.ibm.com/support/docview.wss?uid=swg21991656