Configuring Cognos for Smart Card and certificate login (OnCommand Insight 7.3.5 through 7.3.9)

You must modify the OnCommand Insight Data Warehouse configuration to support Smart Card (CAC) and certificate logins for the Cognos server.

Before you begin

This procedure is for systems running OnCommand Insight 7.3.5 through 7.3.9.

Note: For the most up to date CAC and Certificate instructions, see the following Knowledgebase articles (Support login required):

Procedure

  1. Add certificate authorities (CAs) to the Cognos trustore.
    1. In a command window, go to ..\SANscreen\cognos\analytics\configuration\certs\
    2. Use the keytool utility to list the trusted CAs: ..\..\jre\bin\keytool.exe -list -keystore CAMKeystore.jks -storepass NoPassWordSet
      The first word in each line indicates the CA alias.
    3. If no suitable files exist, supply a CA certificate file, usually a .pem file.
    4. Optional: To include customer's CAs with OnCommand Insight trusted CAs, go to ..\SANscreen\cognos\analytics\configuration\certs\.
    5. Use the keytool utility to import the .pem file: ..\..\jre\bin\keytool.exe -importcert -keystore CAMKeystore.jks -alias my_alias -file 'path/to/my.pem' -v -trustcacerts
      my_alias is usually an alias that would easily identify the CA in the keytool -list operation.
    6. When prompted for a password, enter NoPassWordSet.
    7. Answer yes when prompted to trust the certificate.
  2. To enable CAC mode, execute ..\SANscreen\bin\cognos_cac\enableCognosCAC.bat
  3. To disable CAC mode, execute ..\SANscreen\bin\cognos_cac\disableCognosCAC.bat
Parent topic: Smart Card and certificate login support
Copyright © 1994-2021, NetApp, Inc. All rights reserved.
Part number: 215-12041_2021-06_en-us
June 2021
Updated for OnCommand Insight 7.3.12