IBM Tivoli

This article covers the creation of a certificate request, importing the certificate authority chain, receiving the new certificate, enabling SSL, and disabling non-SSL access to the TEPS.

Assumptions\Defaults for the purposes of this article

The following steps will describe the process for exporting a previously generated certificate request on the Tivoli Integrated Portal (TIP) 2.2 for Impact or OMNIbus.  This may work with other versions of TIP as well, but I have only tried it on TIP 2.2. 

Before this step you must have already:

1. Generate a Certificate Request on TIP 2.2.

After this step you will need to:

The following steps will describe the process for enabling your new SSL Certificates for use in SSL Encryption replacing the Default SSL Certificate on the Tivoli Integrated Portal (TIP) 2.2 for Impact or OMNIbus.  This may work with other versions of TIP as well, but I have only tried it on TIP 2.2. 

Before this step you will need to:

The following steps will describe the process for importing Certificate Authority Chain Certificates on the Tivoli Integrated Portal (TIP) 2.2 for Impact or OMNIbus.  This may work with other versions of TIP as well, but I have only tried it on TIP 2.2. 

Before this step you will need to:

The following steps will describe the process for Importing a Certificate Authority Signed Certificate on the Tivoli Integrated Portal (TIP) 2.2 for Impact or OMNIbus.  This may work with other versions of TIP as well, but I have only tried it on TIP 2.2. 

Before this step you will need to:

The following steps will describe the process for creating a certificate request on the Tivoli Integrated Portal (TIP) 2.2 for Impact or OMNIbus.  This may work with other versions of TIP as well, but I have only tried it on TIP 2.2. 

After this step you will need to:

Starting a fresh install of ITM 6.2 hangs at KFW1002I Starting Service: 'JVM v1.0'. Tried applying FP5 with no joy. Same issue.

Trolling through the logs I also noticed this line: (52B0BFE0.0067-10F0:kbbssge.c,52,"BSS1_GetEnv") KFW_USE_EMBEDDED="N"

This is a known issue in ITM 6.2, and if you reconfigure the TEPS through the MTEMS these settings will revert and you will have to change them back.

To fix this issue you will need to have access to the console using the same OS account used to install TIP. 

You want to display a map or event list, but you don’t want to waste space on the navigation tree.   Here is a quick tip on how to hide the Navigation Tree by default on login.

Recently upgraded to OMNIbus 7.3.1 FixPack 7 and decided to test our failover capability.  When the Gateway on the backup server was retarted, the following errors appeared in the NCOMSB.log: