Configuring a secure connection to the Oracle database server

You can configure a secure connection to encrypt transactions between the IBM® Control Center engine and Oracle database instances and between Cognos® Business Intelligence and Oracle database instances. You can configure the secure connection in either a high availability or non-high availability environment.

Before you begin

  • Before you configure IBM Control Center to enable secure connections to the databases, complete the following tasks for the Oracle database server:
    1. Create an Oracle wallet.
    2. Create a self-signed certificate (trusted database server certificate).
    3. Export the self-signed certificate.
    4. Configure an Oracle listener for SSL traffic.
    5. Ensure that the listener is receiving requests.
  • Create and configure the keystore and truststore files in IBM Control Center.

In a high availability environment, every event processor's keystore certificate must be trusted by your other event processors in the cluster. In every event processor's truststore, you must include the certificate. You can use the same keystore and truststore files for every event processor in your high availability environment. You might receive a browser security warning when you access the web console on an event processor where the common name does not match the host name that you are connecting to.

Consult the Oracle web site for information on configuring these items.

About this task

Use this procedure to enable encryption and SSL authentication between Cognos Business Intelligence and Oracle databases. To configure the secure connection in either a high availability or non-high availability environment:

Procedure

  1. Install IBM Control Center.
  2. During the installation, select Oracle as the database type and provide information about the Oracle databases (production and reporting).
    Important: The IBM Cognos connection to the Cognos Report Content Store cannot be secured. However, the IBM Cognos connection to the IBM Control Center production database can be secured.
  3. Import the trusted database server certificate you exported during the Oracle database server set up into the IBM Control Center engine truststore.
  4. Use one of the following methods to run the configCC utility:
    Microsoft Windows UNIX
    Double-click configCC.bat in installation directory\bin. Run the configCC.sh utility from installation directory/bin.
  5. When you are prompted to secure the connection to the IBM Control Center database (production), type Y.
  6. Type Y to confirm your configuration changes.
Parent topic: Creating a secure connection between the event processor and the databases