Cognos ReportNetTM Installation and Configuration Guide

Chapter 7: Advanced Configuration Options
9. Import the signing certificate by typing the following command:
• On UNIX, type:
ThirdPartyCertificateTool.sh -i -s -r signCertificate.cer -k
../configuration/signkeypair/jSignKeystore -p password -t ca.cer
• On Windows, type:
ThirdPartyCertificateTool.bat-i -s -r signCertificate.cer -k
../configuration/signkeypair/jSignKeystore -p password -t ca.cer
Important: You must type jSignKeystore as the name of the signing key store.
10. Import the encryption certificate by typing the following command:
• On UNIX, type:
ThirdPartyCertificateTool.sh -i -e -r encryptCertificate.cer -k
../configuration/encryptkeypair/jEncKeystore -p password -t ca.cer
• On Windows, type:
ThirdPartyCertificateTool.bat -i -e -r encryptCertificate.cer -k
../configuration/encryptkeypair/jEncKeystore -p password -t ca.cer
Important: You must type jEncKeystore as the name of the encryption key store.
11. Import the CA certificate by typing the following command:
• On UNIX, type:
ThirdPartyCertificateTool.sh -T -i -r ca.cer -k
../configuration/signkeypair/jCAKeystore -p password
• On Windows, type:
ThirdPartyCertificateTool.bat -T -i -r ca.cer -k
../configuration/signkeypair/jCAKeystore -p password
Important: You must type jCAKeystore as the name of the certificate authority key store.
Now, you must use your third-party certificate authority configuration tool to add the ReportNet
keys and certificate signing requests to your certificate authority. For more information, see your
third-party certificate authority documentation.
Configure ReportNet to use a Third-Party Certificate Authority
You must configure each ReportNet computer to use an external certificate authority by setting
the appropriate property in Cognos Configuration.
By setting this property, ReportNet assumes that all required keys have been generated and
vetted by the external certificate authority.
Ensure that the key store locations and password in Cognos Configuration match the ones you
typed in the command-line tool.
Steps
1. Start Cognos Configuration
2. In the Explorer window, under Security, Cryptography, click Cognos.
3. In the Properties window, under Certificate Authority settings property group, click the
Value box next to the Use third party CA property and then click True.
Note: When you set this property to true, all properties for the certificate authority and
identity name are ignored
4. Configure the following properties to match the ones you typed in the command line utility:
• Signing key store location
• Signing key store password
• Encryption key store location
• Encryption key store password
• Certificate Authority key store password
5. From the File menu, click Save.
6. If you want to start the ReportNet service, from the Actions menu, click Start.
Installation and Configuration Guide 89