IBM Support

Connecting IBM FileNet Deployment Manager to a Kubernetes-based deployment

How To


Summary

Attempts to connect to IBM FileNet Deployment Manager (FDM) to an IBM FileNet Content Manager (CPE) instance deployed in a containerized environment on Red Hat OpenShift, the connection fails.

Example message returned from using FDM:

2023-04-26T07:08:08.559 0000003E CE:FDM ERROR The URI for server communication cannot be determined from the connection object https://cpe-cp4bademo.apps.lunatic.cp.fyre.ibm.com/wsi/FNCEWS40MTOM/. Duration 55 milliseconds.
2023-04-26T07:08:08.595 00000001 CE:FDM ERROR Content Platform Engine - Test Connection
Unable to connect to the Content Platform Engine.

The URI for server communication cannot be determined from the connection object https://cpe-cp4bademo.apps.lunatic.cp.fyre.ibm.com/wsi/FNCEWS40MTOM/. Duration 55 milliseconds.

Steps

Log in to the Red Hat OpenShift console.
Go to ConfigMaps.
Filter on the word 'access'.
image-20230426071256-1

Click the returned ConfigMap.
Scroll down until you see the 'cpe-access-info' section.
image-20230426071756-2
Copy the 'FileNet P8 Content Engine Web Service page' url.
Paste this url into your browser.
You should get back XML similar to this:
image-20230426072001-3

Click the lock icon at the start of the url field.
Then, click 'Connection not secure', followed by clicking on 'More information.
image-20230426072246-4

image-20230426072520-5

In the new window, click 'View Certificate'.
image-20230426072637-6
A new browser tab is opened showing the certificate information.

image-20230426072814-7

Scroll down until you get to the 'Miscellaneous' section of the certificate.
image-20230426072923-8
click the 'PEM (cert)' to download the certificate.
Copy the downloaded certificate (for example: icp4a-fncm-svc.pem) to where you can then import it into the certificate store used by the java that IBM FileNet Deployment Manager uses.
To determine where and what java instance the IBM FileNet Deployment Manager is using, open the 'DeploymentManager.ini' file.
image-20230426075412-9

image-20230426075608-10

In this example an IBM java instance is used, so use iKeyman in the java instance bin directory to add the certificate to the cacerts store for this instance of java.
The default password for java cacerts certificate store is 'changeit'.  If your site 'changed it', refer to the administration team that changed the password.
Once iKeyman is open, click open and go to the 'java/lib/security' directory and select cacerts.
Once open, change to 'Signer Certificates', then click 'Add'.
image-20230426081217-12

Browse to where the downloaded certificate was saved.

image-20230426081600-13

Click 'OK' and give the certificate a name.
image-20230426081656-15

Once the certificate is added, close iKeyman.

Now (close if still open) reopen IBM FileNet Deployment Manager.
Go to the FDM environment for CP4BA and test connection.

image-20230426082421-16
 

 

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNVNV","label":"FileNet Content Manager"},"ARM Category":[{"code":"a8m50000000L3C7AAK","label":"Content Engine-\u003EDeployment Manager"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
02 May 2023

UID

ibm16986335

Page Feedback