If you are unable to create a new account, please email support@bspsoftware.com

 

News:

MetaManager - Administrative Tools for IBM Cognos
Pricing starting at $2,100
Download Now    Learn More

Main Menu

How to add SSL certificate to cert8.db

Started by richard@AA, 08 Mar 2019 03:39:49 PM

Previous topic - Next topic

richard@AA

I'm trying to add an SSL certificate to cert8.db for the CM to use for . I found two IBM articles (bottom) and they say to use the following command. The issue is that certutil does not have any "options" with a single letter like -A, I'm getting an unknown arg for -A. We have either not dine this before or the person(s) who did are no longer with us.

Example from IBM docs below:
certutil -A -n certificate_name -d certificate_directory -i server_certificate.cert -t P

My command:
certutil -A -n sldap.corpaa.aa.com -d d:\Program Files\ibm\ADDatabase\cert8.db -i sldap.myserver.com.crt -t P


IBM URLs
https://www-01.ibm.com/support/docview.wss?uid=swg21344083

https://www.ibm.com/support/knowledgecenter/en/SSEP7J_10.2.1/com.ibm.swg.ba.cognos.c8pp_inst.10.2.1.doc/t_stp_ssl_ldap.html

richard@AA

Update on this for C11 at least. If you navigate to the <CM install location>\bin or bin64 folder the command works. We have both C10 and C11 installed in separate folders, but both point to the same SSL cert location (d:\Program Files\ibm\ADDatabase\cert8.db). While the command worked for C11, it does not work for C10. I tried navigating to the bin or bin64 folder for the C10 CM install, but it does not have the correct certutil program like C11 does. If in C10 folder, if you do a certutil -? you will see no commands that are a single letter like -A, if you're in C11 bin or bin64 folders you will see those single letter commands. I'm still looking for a way to update for C10. thanks