Description:
After enabling SSL for OHS , it is no longer possible to access FR Studio using https://URL
Cause:
The default java keystore does not have the OHS certificates imported.
Solution I:
1. Keep the certificates handy
2. Locate FR Studio folder on the system
3.Launch Command prompt and navigate to below location <FR_STUDIO_JRE_BIN>\ and run following command
keytool.exe -import -alias dexrootca -keystore "C:\Program Files (x86)\Oracle\FinancialReportingStudio\common\JRE\Sun\1.6.0\lib\security\cacerts" -trustcacerts -file D:\WildCard\Dex-CA.crt -storepass changeit
Login to FR Studio now. It will successfully login.
This is the simplest way and one other way is to create a keystore and import it on all client machines where FR Studio is installed. In this case FR studio already has its own keystore in which we are adding our certificates. Keystore is like the guest list of a party. :)
Solution II
This solution is useful for someone implementing SSL on an environment and then he has to share updates URLs to the users/client.I would recommend creating a keystore and sharing it with trusted users who use FR Studio, EAS Console or any java based client from the system. It becomes easy all they have to do is edit a piece of registry.
Follow steps below to create keystore
Go to jrocket keytool.exe
D:\Oracle\Middleware\jdk160_35\bin
Note: keyname would be alias that is used to refer to keys individually in a Keystore.
Create request
Similarly add all other certificates like intermediate certificate, OHS certificate to the KeyStore
keytool -importcert -alias OHSCERT -file D:\WildCard\OHSCERT.cer -keystore D:\WLKeystore\EPMStore.jks -storepass <pswd>
To list the certificates imported
Once this is ready, we can copy the EPMStore.jks and provide it to all users. Now the users can edit their registry as shown below and access the FR Studio via HTTPS.
Share below steps with the user
1. Copy EPMKeystore.jks from the mail to machine where FR Studio is installed
2. Run regedit commmand and go to
HKEY_LOCALMACHINE\SOFTWARE\Wow6432Node\Hyperion Solutions\Hyperion Reports\HReports\JVM
3. Add JVMOption key e.g JVMOption9 and set value to :
-Djavax.net.ssl.trustStore=D:\EPM\EPMStore.jks
4. Increase the jvmOptionCount by 1 since we have added an entry manually.
5. Login to FR Studio with https://URL now it should be accessible.
After enabling SSL for OHS , it is no longer possible to access FR Studio using https://URL
Cause:
The default java keystore does not have the OHS certificates imported.
Solution I:
1. Keep the certificates handy
2. Locate FR Studio folder on the system
3.Launch Command prompt and navigate to below location <FR_STUDIO_JRE_BIN>\ and run following command
keytool.exe -import -alias dexrootca -keystore "C:\Program Files (x86)\Oracle\FinancialReportingStudio\common\JRE\Sun\1.6.0\lib\security\cacerts" -trustcacerts -file D:\WildCard\Dex-CA.crt -storepass changeit
Login to FR Studio now. It will successfully login.
This is the simplest way and one other way is to create a keystore and import it on all client machines where FR Studio is installed. In this case FR studio already has its own keystore in which we are adding our certificates. Keystore is like the guest list of a party. :)
Solution II
This solution is useful for someone implementing SSL on an environment and then he has to share updates URLs to the users/client.I would recommend creating a keystore and sharing it with trusted users who use FR Studio, EAS Console or any java based client from the system. It becomes easy all they have to do is edit a piece of registry.
Follow steps below to create keystore
Go to jrocket keytool.exe
D:\Oracle\Middleware\jdk160_35\bin
keytool -genkeypair
-keyalg RSA -alias <keyname>_key -keysize 2048 -keystore D:\WLKeystore\EPMStore.jks
-storepass <pswd> -keypass <pswd>
Note: keyname would be alias that is used to refer to keys individually in a Keystore.
Create request
keytool -certreq -alias <keyname>_key
-Keypass <pswd> -keystore D:\WLKeystore \EPMStore.jks -storepass <pswd>
-file D:\WLKeystore\<keyname>.csr
Import Request
keytool
-importcert -alias root1 -file
D:\WildCard\root1.crt -keystore D:\WLKeystore\EPMStore.jks –storepass
<pswd>
keytool -importcert -alias
root2 -file D:\WildCard\root2.cer
-keystore D:\WLKeystore\EPMStore.jks -storepass <pswd>
keytool -importcert -alias
root2 -file D:\WildCard\root2.cer
-keystore D:\WLKeystore\EPMStore.jks -storepass <pswd>
keytool -importcert -alias OHSCERT -file D:\WildCard\OHSCERT.cer -keystore D:\WLKeystore\EPMStore.jks -storepass <pswd>
To list the certificates imported
keytool
-list -keystore D:\WLKeystore\EPMStore.jks -storepass <pswd>
Once this is ready, we can copy the EPMStore.jks and provide it to all users. Now the users can edit their registry as shown below and access the FR Studio via HTTPS.
Share below steps with the user
1. Copy EPMKeystore.jks from the mail to machine where FR Studio is installed
2. Run regedit commmand and go to
HKEY_LOCALMACHINE\SOFTWARE\Wow6432Node\Hyperion Solutions\Hyperion Reports\HReports\JVM
3. Add JVMOption key e.g JVMOption9 and set value to :
-Djavax.net.ssl.trustStore=D:\EPM\EPMStore.jks
4. Increase the jvmOptionCount by 1 since we have added an entry manually.
5. Login to FR Studio with https://URL now it should be accessible.
0 comments:
Post a Comment