Planning Analytics Workspace Configure SSL Certificate

Planning Analytics Workspace (PAW) is a web-based planning analytics interface used to access TM1 cubes. Configuring SSL Certificate to a web service adds another layer of security that verify the website’s identity.

Pre-requisite

The following conditions must be met before you can configure SSL for Planning Analytics Spreadsheet Services:

• SSL certificate file must either be PKCS12/PFX format and contain the complete certificate chain or all the 3 certificate chain (root, intermediate and server certificate)
• Private key

Import SSL Certificate PFX File

Before you can proceed to configuring the PAW to utilise the SSL Certificate. You need

Do the following step if you were only given pfx file and not the individual files of the certificate chain ( root certificate, intermediate certificate and end-user certificate).

1. Run MMC and right-click Run as Administrator.
2. Under File select Add or Remove Snap-ins

3. Select Certificate and click on Add>

4. Select COMPUTER ACCOUNT.

5. Select Local Computer and click Finish and then OK.

6. Under Trusted Root Certificate Authorities, right-click on Certificate and click on All Task -> Import and click Next.

7. Click on Browse… and select the location of the .pfx file (NOTE: Make sure to change the type to Personal Information Exchange) and then click Next.

8. Enter the password of the pfx file and click Next.

10. In the MMC, Under Trusted Root Certificate Authority -> Certificate select the server certificate. The default view is shown as below. Make sure the certificate is issue for the correct server.

Export Root, Intermediate and End-User Certificate from PFX File

1. Under Trusted Root Certificate Authorities, click on the imported certificate.

2. Go under Certificate Path, in this page you should be able to verify the certificate chain. The top is the root certificate, underneath it is the intermediate certificate and the last is the end-user certificate.

3. Under Details, click on Copy to File… and click Next.

4. Click No, do not export the private key. (NOTE: Selecting Yes, export the private key will only allow you to export the file in pfx file)

5. Select Browse… and browse to the directory where you want to keep you certificates.

6. Save the end-user certificate as cacert, intermediate certificate as caint and root certificate as caroot.
7. Repeat the same for all the other certificates.

Configure SSL Certificate in Planning Analytics Workspace

1. In the PAW Server, <paw installation location>/config/ssl and search for the pa_workspace.pem file.

2. Update the file in the following format and sequence.

Update paw.ps1 configuration file

1. Open paw.ps1 under the config folder.

$env:EnableSSL=”true”

$env:ServerName=”<paw-server-name>”

2. Open Window Powershell as Administrator.
3. Go to <paw installation> and run the script ./scripts/paw.ps1 stop.
4. Once its completed, run the script ./scripts/paw.ps1.

If you are utilising Cognos Analytics for Planning Analytics security, you can look into Cognos Analytics to Recognise Cognos Analytics SSL Certificate.

Need Help?

If you have any questions about installing Planning Analytics and configuring SSL Certificate, please reach out to us. We’d be delighted to help.