Configuring Cognos® for encrypted connections
Set up IBM® Cognos® to handle secure https URLs.
About this task
Procedure
- Import certificates into IBM® Cognos® Transformer Trust Store.
- Launch a Command Prompt on the machine Transformer installed
on. Change directory into the ..\<transformer installation>\bin.
For example:
- IBM® AIX®, Linux™: /opt/IBM/CognosTF/bin/
- Microsoft™ Windows™: C:\IBM\CognosTF\bin
- Repeat the following command for each certificate (root
and intermediate-level certificates):
- AIX® or Linux™: ./ThirdPartyCertificateTool.sh -T -i -r CA_certificate_fileName -p password
- Windows™: ThirdPartyCertificateTool.bat -T -i -r CA_certificate_fileName -p password
CA_certificate_fileName
with the correct filenames of the Root and Intermediate-level certificates.Tip: The trust store password should have been set automatically by the installation wizard during the installation; the default is NoPassWordSet. If the ThirdPartyCertificateTool is unable to locate a valid JRE, you have to set theFor example:JAVA_HOME
environment variable to the Java™ Runtime Environment (JRE) that the product is configured to use. ThirdPartyCertificateTool needs a 32-bit Java to run. If you use, for example, the 64-bit Java installed with WebSphere, the following error occurs:Exception in thread "main" java.lang.NoClassDefFoundError: com.cognos.accman.jcam.crypto.jni.JNISystemProperties (initialization failure) ... Caused by: java.lang.UnsatisfiedLinkError: JCAM_Crypto_JNI (./libJCAM_Crypto_JNI.so: wrong ELF class: ELFCLASS32) will show.
To fix, either install a 32-bit Java on the operating system level or use the Java runtime of the IBM Installation Manager, typically the 32-bit version as specified in the Connections system requirements. To use the Java runtime of the IBM Installation Manager use one of these examples:- AIX® or Linux™: export JAVA_HOME=/opt/ibm/InstallationManager/eclipse/jre_7.0.9000.20150514_1022/jre/
- Windows: set JAVA_HOME=\IBM\InstallationManager\eclipse\jre_7.0.9000.20150514_1022\jre\
- AIX® or Linux™: export JAVA_HOME=/usr/java/jre
- Windows™: set JAVA_HOME=<Cognos_Installation>\bin\jre\6.0
- AIX® or Linux™: ./ThirdPartyCertificateTool.sh -T -i -r c:\hostname_Certificate.cer -p NoPassWordSet
- Windows™: ThirdPartyCertificateTool.bat -T -i -r c:\hostname_Certificate.cer -p NoPassWordSet
- Launch a Command Prompt on the machine Transformer installed
on. Change directory into the ..\<transformer installation>\bin.
- Configure Cognos® Transformer
and BI to use HTTPS.
- Configuring Cognos® Transformer
as follows:
- (IBM® AIX® or Linux™) Set the JAVA_HOME variable: Navigate to the WAS_install_root/bin directory, for example: /opt/IBM/WebSphere/AppServer/bin
- (AIX® or Linux™) Run the following command: setupCmdLine.sh
- (AIX® or Linux™) Set environment variables to point to
the Cognos® BI Server’s /bin
directory by running the following command. By default, the Transformer’s
environment variables point to its own directory, so you must change
them to point to the BI Server’s directory:
- AIX®: export LIBPATH=/opt/IBM/CognosBI/bin64/
- Linux™: export LD_LIBRARY_PATH=/opt/IBM/CognosBI/bin64/
- Start the Cognos® Transformer
Configuration Tool: Navigate to the /bin directory of the Cognos® BI server installation
directory. For example:
- IBM® AIX®, Linux™:/opt/IBM/CognosTF/bin/
- Microsoft™ Windows™: C:\IBM\CognosTF\bin
- Start the Cognos® Configuration
tool by running the following command:
- AIX®, Linux™: ./cogconfig.sh
- Windows™: cogconfigw.exe
- ExpandLocal Configuration > Environmentand edit the URLs for the following properties by replacing the http URLs with https
URLs.
- Gateway Settings
- Other URI Settings
Attention: The URLs must be updated to point to the HTTP server's host name and port number. The port number must be included even if it is the standard port 443. - Save your changes.
- Exit the Cognos® Configuration tool. You do not need to restart the Transformer component.
- Configure Cognos® BI
to use https as follows:
- Start the Cognos® Configuration
Tool by navigating to the /bin64 directory of the Cognos® BI server installation directory. For
example:
- IBM® AIX®, Linux™: /opt/IBM/CognosBI/bin64/
- Windows™: C:\IBM\CognosBI\bin64
- Start the Cognos® Configuration
tool by running the following command:
- AIX®, Linux™: ./cogconfig.sh
- Windows™: cogconfigw.exe
- ExpandLocal Configuration > Environment to edit the URLs for the following properties by replacing http URLs with https
URLs.Attention: The URLs must be updated to point to the HTTP server's host name and port number. The port number must be included even if it is the standard port 443.
In the Gateway Settings section, change only the Dispatch URIs for gateway attribute.
In the Other URI Settings section, change only the Dispatcher URI for external applications attribute.
- Save your changes.
- Exit the Cognos® Configuration
tool, making sure to select No at the following
prompt:
The service 'IBM Cognos' is not running on the local computer. Before you can use it your computer must start the service. Do you want to start this service before exiting?
- Restart the Cognos® server.
- Start the Cognos® Configuration
Tool by navigating to the /bin64 directory of the Cognos® BI server installation directory. For
example:
- Configuring Cognos® Transformer
as follows: