Monday, 07 November 2016 08:51

Blog: TM1 SSL Certificate set to expire 24 Nov 2016



Issue

SSL certificates bundled with Cognos TM1 will expire on 24/11/2016.



Effect

TM1 will not work after 25/11/2016 unless steps are taken.

Detailed Article

http://www-01.ibm.com/support/docview.wss?uid=swg21990869

IBM Landing Page to Fix Issue

http://www-01.ibm.com/support/docview.wss?uid=swg21991790



Blog on TM1 Expiry html 6d44126b

Screenshot shows the Valid dates in the current system

The ssl files in the following locations have an expiry date of 24/11/2016, to correct this you will need to carry out the following steps to ensure TM1 works as expected from 25/11/2016 onwards.

  • <tm1_install_dir>\tm1_64\bin\ssl

  • <tm1_install_dir>\tm1_64\bin64\ssl

  • <tm1_install_dir>\tm1_64\webapps\pmpsvc\WEB-INF\bin64\ssl

The following pages hand pick some of the same links from the IBM Landing Page with some findings

In this blog, you will find links to Windows and UNIX versions, select the link right for your environment and carry out the instructions to continue using TM1 after 24/11/2016.

The following links should be applied to the server where TM1 resides

Operating System: WINDOWS

Blog on TM1 Expiry html 27e9ab4



Version: TM1 Version 10.1.X

http://www-01.ibm.com/support/docview.wss?uid=swg21991547



Version: TM1 Version 10.2.X

http://www-01.ibm.com/support/docview.wss?uid=swg21991546



Version: TM1 Version 10.2.2 FP4 IF1 +

http://www-01.ibm.com/support/docview.wss?uid=swg21991545



Based on the version we have, we applied the steps in the FP4 link, be aware of the following:



  • Step 13 - Run CMD after each statement if the session shuts after each.



The following links should be applied to the server where TM1 resides

Operating System: Unix

Blog on TM1 Expiry html 53becff7



Version: TM1 Version 10.2.X



http://www-01.ibm.com/support/docview.wss?uid=swg21991549



Version: TM1 Version 10.2.2 FP4 IF1 +



http://www-01.ibm.com/support/docview.wss?uid=swg21991550



Testing:

  • Test the environment by changing the server date to a date later than 24/11/2016.

  • Ensure TM1 Servers appear in the server tree as before.



The following link should be followed and applied to Architect / TM1 Perspectives Client Installation



Version: TM1 Perspectives / Architect Client

Blog on TM1 Expiry html 4e3a16c6

IMPORTANT: Do not proceed with updating your TM1 Client Applications, unless your TM1 Server Applications have already been configured to use the new certificates. Switching your client to use the new TM1 SSL Certificates before your server has been updated will result in being unable to connect to / open any TM1 Server connections.



Version: All

http://www-01.ibm.com/support/docview.wss?uid=swg21991793



The following link should be followed and applied to the IBM Cognos Insight / IBM CognosTM1 Performance Modeler Installations



Version: IBM Cognos Insight / TM1 Performance Modeler

Blog on TM1 Expiry html 90487ec Blog on TM1 Expiry html m49329b13



Version: All

http://www-01.ibm.com/support/docview.wss?uid=swg21991797



NOTE: If you use IBM Cognos TM1 10.2.2, you may instead update the TM1 Application Server Provisioning Agent so that your TM1 Performance Modeler / Cognos Insight users obtain the new certificates automatically

See:

http://www.ibm.com/support/docview.wss?uid=swg21992411





Check the IBM Landing page for a full list of links

http://www-01.ibm.com/support/docview.wss?uid=swg21991790



The new SSL certificate will expire in 2026!!



Good luck.



Any problems contact BSG and we will be happy to help.