How To
Summary
This document describes how to configure IBM Cognos Controller web to integrate with Cognos Analytics authentication. Cognos Analytics is configured for HTTPS.
Objective
Customer wants to integrate Cognos Analytics HTTPS authentication with IBM Cognos Controller. IBM Cognos Controller is not configured with HTTPS by choice.
This technote describes how to achieve this configuration, when you are using the included CA certificate. You need to adjust the same steps, when you are using a 3rd party certificate instead.
This technote describes how to achieve this configuration, when you are using the included CA certificate. You need to adjust the same steps, when you are using a 3rd party certificate instead.
Environment
IBM Cognos Controller web (http)
Cognos Analytics (https)
Steps
This configuration requires keystores for IBM Cognos Controller web to allow communication with Cognos Analytics. The IBM Cognos Controller keystores contain the Cognos Analytics certificate.
This technote repeats some of the steps provided on the technote labeled "How to configure IBM Cognos Controller Web to use SSL (HTTPS)".
Steps:
Export the Cognos Analytics certificate for IBM Cognos Controller web
1. From an internet browser, enter the Cognos Analytics gateway url
2. Click on the lock to open the security details of this website
3. Once you have the certificate open on screen:
- select CA and click Export
- select CA and click Export
- select the certificate file as a DER-encoded binary type
Create IBM Cognos Controller keystores and import CA certificate
1. Create a Java™ keystore (called "key.jks"), used by IBM Cognos Controller Web to store the Cognos Analytics SSL certificate.
2. Right-click on ‘Start’ and choose ‘Command Prompt (Admin)’
cd c:\Program Files\ibm\cognos\ccr_64\fcmweb\jre\bin
3. Run the following command
keytool -keystore key.jks -importcert -alias CARoot -file C:\UTILS\CAroot.der
3. Run the following command
When prompted:
- Password = changeit
- New password = changeit
- ‘Trust this certificate’ = y
4. Copy this key.jks file from cd c:\Program Files\ibm\cognos\ccr_64\fcmweb\jre\bin to cd c:\Program Files\ibm\cognos\ccr_64\fcmweb\jre\lib\security
5. Navigate to the installation directory and look for the server.xml file under C:\Program Files\ibm\cognos\ccr_64\fcmweb\wlp\usr\servers\fcm.web
8. Find the section that looks like:
9. Add an extra line so that this section now looks similar to the following (remember to modify 'changeit' for your system's password):
10. Save the file
6. Inside the section “<featureManager>” look for this line:
7. Remove the comment brackets (to activate SSL usage), so it looks similar to:
7. Remove the comment brackets (to activate SSL usage), so it looks similar to:
<featureManager>
<feature>jpa-2.1</feature>
<feature>localConnector-1.0</feature>
<feature>jaxrs-2.0</feature>
<feature>ssl-1.0</feature>
<feature>jsp-2.3</feature>
<feature>websocket-1.1</feature>
</featureManager>
(Note. This step creates the directories resources\security that are required for step 11.)
<feature>jpa-2.1</feature>
<feature>localConnector-1.0</feature>
<feature>jaxrs-2.0</feature>
<feature>ssl-1.0</feature>
<feature>jsp-2.3</feature>
<feature>websocket-1.1</feature>
</featureManager>
(Note. This step creates the directories resources\security that are required for step 11.)
8. Find the section that looks like:
9. Add an extra line so that this section now looks similar to the following (remember to modify 'changeit' for your system's password):
</webApplication>
<keyStore id="defaultKeyStore" password="changeit" sslProtocol="SSL_TLS" />
</server>
<keyStore id="defaultKeyStore" password="changeit" sslProtocol="SSL_TLS" />
</server>
10. Save the file
11. Copy the keystore file from C:\Program Files\ibm\cognos\ccr_64\fcmweb\jre\bin to C:\Program Files\ibm\cognos\ccr_64\fcmweb\wlp\usr\servers\fcm.web\resources\security
12. Restart the Windows services ‘IBM Cognos Controller Web UI’ and ‘IBM Cognos Controller Web’
12. Restart the Windows services ‘IBM Cognos Controller Web UI’ and ‘IBM Cognos Controller Web’
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS9S6B","label":"IBM Cognos Controller"},"ARM Category":[{"code":"a8m0z000000GoLUAA0","label":"Controller-\u003EBA - Cognos Controller-\u003ECAM"},{"code":"a8m0z000000GnFaAAK","label":"Controller-\u003EBA - Cognos Controller-\u003EController WEB"},{"code":"a8m0z000000cvrDAAQ","label":"Controller-\u003EBA - Cognos Controller-\u003ESSL"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
22 June 2023
UID
ibm17005967