20.07.2014 Views

Cognos ReportNetTM Installation and Configuration Guide

Cognos ReportNetTM Installation and Configuration Guide

Cognos ReportNetTM Installation and Configuration Guide

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Chapter 4: Configuring ReportNet<br />

Tomcat Connectors<br />

When the internal <strong>and</strong> external dispatcher URIs are the same, only one HTTP/1.1 connector is<br />

required in Tomcat’s configuration file, the server.xml file, located in the<br />

crn_location/tomcat4.1.18/conf directory. The port number in the dispatcher URIs is used to<br />

update the port number in the appropriate non-SSL Coyote HTTP/1.1 or SSL Coyote HTTP/1.1<br />

connector.<br />

If the internal dispatcher URI is prefixed with http but the external dispatcher URI is prefixed with<br />

https, or vice versa, both the non-SSL Coyote HTTP/1.1 <strong>and</strong> SSL Coyote HTTP/1.1 connectors<br />

are enabled in the server.xml file.<br />

Distributed <strong>Installation</strong>s<br />

In distributed installations, if you are using the ReportNet certificate authority service, you must<br />

first configure all ReportNet computers to use the non-secure (http) protocol before you<br />

configure ReportNet to use the SSL protocol. You must do this because you cannot set up the<br />

SSL protocol before trust has been established.<br />

Also, ensure that you follow the required order of configuring computers in a distributed<br />

environment. That means that you must first configure the computer where Content Manager is<br />

installed <strong>and</strong> then start the services on this computer before you configure other computers or<br />

start services on other computers. By first configuring the Content Manager computer <strong>and</strong><br />

starting the services, you ensure that the certificate authority service on the Content Manager<br />

computer can issue certificates to other computers in the ReportNet environment.<br />

After you configure all computers in the distributed installation to use the default, non-secure<br />

protocol, we recommend that you test your installation to ensure that ReportNet is working<br />

properly. After you test your installation, you can configure the SSL protocol.<br />

When you configure ReportNet to use the SSL protocol, ensure that you first configure the<br />

Content Manager computer to use the protocol <strong>and</strong> start the services on the Content Manager<br />

computer. After you do this, you can configure the SSL protocol on other ReportNet computers<br />

in your environment.<br />

Add a Computer to an <strong>Installation</strong><br />

If you later add a computer to your distributed environment <strong>and</strong> SSL is enabled for external<br />

connections, you must reconfigure the Content Manager computer to use the non-secure<br />

protocol. Then, you start the services on the Content Manager computer. This ensures that the<br />

certificate authority service that is installed on the Content Manager computer can issue a<br />

certificate to the new computer. After the Content Manager computer is configured <strong>and</strong> running,<br />

you must configure the new computer to use the non-secure protocol. You must then save your<br />

configuration on the new computer so that the computer can get the certificate from the Content<br />

Manager computer.<br />

After this occurs, you can re-enable SSL on the Content Manager computer <strong>and</strong> then configure<br />

the new component to use SSL.<br />

Add a Component to a Computer<br />

You can later add a component to the same location as other ReportNet components. If the<br />

existing components currently use the SSL protocol, you do not have to disable the SSL<br />

protocol on the Content Manager computer before configuring the new component to use SSL.<br />

The computer has a certificate <strong>and</strong> the certificate is in a known location.<br />

However, you can also add a component to a different location on the same computer as other<br />

ReportNet components. If the existing components use SSL, you must disable the SSL protocol<br />

on the Content Manager computer before configuring the new component to use SSL. Another<br />

certificate is issued for this new installation when you save your new configuration. After this<br />

occurs, you can re-enable SSL on the Content Manager computer <strong>and</strong> then configure the new<br />

component to use SSL.<br />

Steps for a new installation<br />

1. Start <strong>Cognos</strong> <strong>Configuration</strong>.<br />

2. In the Explorer window, click Environment.<br />

3. To use SSL protocol, you must specify passwords for the ReportNet encryption key stores.<br />

48 <strong>Cognos</strong> ReportNet TM

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!