Add External Certificates to Essbase

You can add new external certificates to Essbase. After running the update tool, all external certificates that were added before, remain in the trust store file.

Prerequisites

1. Configure Essbase with TLS connection. See Set up Weblogic TLS Connection for Essbase.
2. Stop WebLogic.
3. Set environment variables:
   • JAVA_HOME
   • ORACLE_HOME - Path to Fusion Middleware and Essbase folder
   • DOMAIN_HOME
   See Environment Locations in the Essbase Platform.

Update tool usage and properties file parameters

Before updating certificates, the update tool backs up all necessary files.

The command to run the tool is:

For Linux:

java -jar ${ORACLE_HOME}/essbase/lib/tlsTools.jar <properties file>

For Windows:

java -jar %ORACLE_HOME%\essbase\lib\tlsTools.jar <properties file>

where

properties file is tls_tools.properties, and located at the following path:

• for Linux: ${ORACLE_HOME}/essbase/bin/tls_tools.properties

• for Windows: %ORACLE_HOME%\essbase\bin\tls_tools.properties

and includes the following parameter, to add external certificates to Essbase:

certFile=

certFile parameter is the full path to additional external certificates, in PEM format. This parameter is used for adding new certificates to corresponding files, not for updating certificates.

If certFile parameter (path) has a value, certificates are added to the trust store. Any other parameters are ignored.

Note:

External certificates, in PEM format, are obtained using keytool or openssl.

Run Java command with update tool to update certificates

1. Add certFile parameter to tls_tools.properties file, as described above.
2. Run Java command as shown above.