Here are the steps to generate a certificate and install it with Essbase
Step 1: Stop Essbase
Go to the Essbase bin path and execute stop.sh in most cases it is the below path
/essbase/config/essbase_domain/esstools/bin/stop.sh
Step 2 : Generate the certificate using openssl, here adserver will be your Active Directory server
openssl s_client -showcerts -connect adserver:port </dev/null 2>/dev/null|openssl x509 -outform PEM>/test/cert.pem
Step 3: If you think there is already an AD certificate in the java key store, take a backup of it
cp /essbase/config/essbase_domain/config/fmwconfig/ovd/default/keystores/adapters.jks /../adapters.jks_$(date +%Y%m%d-%H%M%S)
Step 4: Now delete the certificate from keystore inorder not to add the same certificate again
keytool -delete -alias adserver -keystore /../adapters.jks -storepass ${keystore_password} #keystore_password
# Reference : https://docs.oracle.com/javase/6/docs/technotes/tools/solaris/keytool.html
Step 5 : Now add the certificate to the java key store
keytool -import -noprompt -keystore /.../adapter.jks -alias adserver -file /.../cert.pem -storepass ${keystore_password}
Step 6 : Verify the added certificate using key tool
keytool -list -v -keystore /.../adapters.jks
Step 7 : Start Essbase
essbase/config/essbase_domain/esstools/bin/start.sh
No comments:
Post a Comment