Configuring Performance Modeller and TM1 Web with CAM Security for TM1 10.2.n

Today I have been working integrating TM1Web 10.2.2, BI 10.2.1 and Performance Modeller for a client. The documentation supplied by IBM doesn’t cover all the aspects to this and the technotes and information on the Web is out of date and relates mostly to very old versions of TM1 (9.5.n). Therefore, I have put the following article together to give you fewer headaches configuring TM1Web, Performance Modeller and securing it against Cognos CAM Security. My example has been worked on latest versions but should apply to all 10.2.n family of TM1 products.

Objective

To configure TM1 Web and Performance Modeller / Planning Service to use CAM Authentication and Single Signon.

Environment

We have two servers, server one (mybiserver) is a BI Gateway, Content Manager and Dispatcher and server two (mytm1server) is a TM1 Server with all TM1 components installed.

Configuring TM1 Web

By default the URL for TM1Web is http://mytm1server:9510/tm1web.

This works by default with the default installation, however, if your TM1 Server is configured to use CAM Security (IntegratedSecurityMode 5) rather than Native (IntegratedSecurityMode 1) then you will hit issues trying to access it.

To configure TM1Web to use CAM Secured Servers do the following:

 

STEP 1 – Create the variables_tm1.xml file

This file links BI to the TM1Web Interface using CAM Authentication. Simply make a copy of the file variables_tm1.xml.sample in the BI Server installation directory …\templates\ps\portal and call it variables_tm1.xml. Once in situ, edit the file to include your tm1server as the example below shows. The file contains a NETBIOS and FQDN value to ensure it works in all circumstances.

image

 

STEP 2 – Add CAMPortalVariableFile to tm1s.cfg

Next you need to add the reference to the variables_tm1.xml file into your TM1 Server and connect BI authentication if it is is not already in place.

Open your TM1 Servers tm1s.cfg file and add/amend the following lines to it.

IntegratedSecurityMode=5

ServerCAMURI=http://mybiserver:9300/p2pd/servlet/dispatch

ClientCAMURI=http://mybiserver/ibmcognos/cgi-bin/cognosisapi.dll

ClientPingCAMPassport=900

CAMPortalVariableFile=portal\variables_TM1.xml

Remember, if your BI Gateway is using CGI and not ISAPI then use cognos.cgi not cognosisapi.dll.

 

STEP 3 – Configuring TM1Web Main Page

The next step is to configure TM1Web and to avoid service errors when accessing TM1Web. To do this you edit the tm1web.html file in the BI Install Location\webcontent\tm1\web directory.

The following change need to be made:

On Line 41 – change the var tm1webServices variable to use references to your TM1 Server as below.

image

 

STEP 4 – Modify the TM1Web Configuration to choose Admin Server

To modify the TM1Web front page to automatically select an admin server and TM1 Server modify the file tm1web_config.xml in directory

TM1 install location\webapps\tm1web\WEB-INF\configuration.

Change the following arguments to select defaults:

<!– If set, users will not be asked to enter Admin Host during login. –>

<add key="AdminHostName" value="mytm1server" />

and optionally

<!– If set, users will not be asked to select a TM1 Server to connect to during login. –>

<add key="TM1ServerName" value="GO_New_Stores" />

When complete, save the file and restart the ‘TM1 Application Server’ windows service for the changes to take effect.


Testing TM1Web

To test TM1Web simply go to http://mytm1server:9510/tm1web and you should be prompted to select from a list of available TM1 Servers. Once you have selected the TM1 Server you will be prompted for appropriate Native or CAM Security before being presented with the TM1 Cube View screen.

clip_image001

TM1Web is now configured for both Native and CAM Secured TM1 Servers.

 

Steps to configure TM1 Performance Modeller

In order to configure Performance Modeller to function correctly with CAM secured TM1 Servers we need to perform some configuration work.

The steps required are as follows:

 

STEP 1 – Add required parameters to support Performance Modeller models.

These parameters and settings need to be added or modified in the TM1 Server tm1s.cfg file and the TM1 Server windows service restarted.

ServerCAMURI=http://mybiserver:9300/p2pd/servlet/dispatch

ClientCAMURI=http://mubiserver/ibmcognos/cgi-bin/cognosisapi.dll

ClientPingCAMPassport=900

CAMPortalVariableFile=portal\variables_TM1.xml

DistributedPlanningOutputDir=tunit

ForceReevaluationOfFeedersForFedCellsOnDataChange=T

AllowSeparateNandCRules=T

Some of the above will already have been added to the configuration file if you have previous configured TM1Web.

 

STEP 2 – Modify the Service Configuration file

Modify the fpm_svc.config file on the TM1 Server. The file resides in the TM1 installation location webapps\pmpsvc\WEB-INF\configuration directory. Stop the TM1 Application server service BEFORE editing this file.

The following arguments need to be completed / corrected:

image

By default, they will be pointing to localhost, you can also change these in Cognos Configuration IF you have NEVER configured TM1 Application Server to run with a Native secured TM1 Server. By checking this file and adding your Gateway and Dispatcher URI’s you will guarantee the correct settings are in place.

 

STEP 3 – Install and modify the BI Interoperability software

In TM1 releases prior to TM1 10.2 you had to use a separate install image to install the BI interoperability components. It is considerably easier now in that we have a single ZIP file called bi_interop.zip that resides in a bi_interop directory of the TM1 installation directory.

Copy this file and expand it into the BI installation directory. This places files in the following directories within the BI installation:

· Variables_plan.xml in \templates\ps\portal

· Planning.html in webcontent

· Pmhub.html in webcontent

· Icon_active_application.gif in webcontent\icd\feeds\images

· Icon_active_application.gif in webcontent\ps\portal\images

 

STEP 4 – Modify the BI Interoperability HTML Files

The two html files extracted into the Webcontent directory need to be modified as follows:

 

 image

 

Testing Performance Modeller

Now the configuration is complete, restart the TM1 application server service to read all the new parameters and test access to the application through the URL http://mytm1server:9510/pmpsvc

If successful your browser will return a blank applications window as below.

clip_image003

 

Click the Open Performance Modeller button on the toolbar. This can take some time to open first time but will look for TM1 Servers that have the correct security and parameters. If more than one are found you will be prompted to choose and then Performance Modeller opens.

clip_image005

 

Good luck, I hope you get this working quicker than I did!!

Advertisements

11 thoughts on “Configuring Performance Modeller and TM1 Web with CAM Security for TM1 10.2.n

  1. Thank you very much.

    Did not manage to find fpm_svc.config. I have fpmsvc_config.xml instead. Tried to modify fpmsvc_config.xml but did not succeed. Still have TM1 not BI credentials prompt when trying to login to Performance Modeller.

    In Architect and TM1Web I have BI credentials prompt as expected.

    Any thoughts?

    Thanks.

  2. This is an excellent post and will be useful to many. Unfortunately I too face the exact same symptoms that Serhiy faced, unfortunately Serhiy didn’t post the solution. Serhiy, if you read this can you add to this post what was your solution, if / when I find the solution I will post. Thanks again Andrew, helped so much.

  3. Finally fixed performance modeller to work with cam. The issue was in the area in file Program Files\ibm\cognos\tm1_64\webapps\pmpsvc\WEB-INF\configuration\fpmsvc_config.xml

    In this section there references to servers still secured by TM authentication as well as the server I setup for CAM. Removing these references from the fpmsvc_config file and leaving just those with CAM setup resolved the issue.

    Looks like its an either / or configuration with performance modeller

    1. Hi Tony,

      Apologies for the delay, got locked out of my account. You are correct, if you have differing types of TM1 servers in the servers section of the fpmsvc_config.xml file it misbehaves badly. If in doubt, clear that section and register them again.

      Regards

      Andy

  4. I was able to get this working correctly but I do have a doubt. Do I have to make any changes in the TM1 configuration tool? I was told that I should point the gateway URI to my BI server (Cognos version 11.0.9) but the default configuration points it to the TM1 server so I don’t know if that’s correct. Also the dispatcher URI, where should that point to?

    Thanks!

    1. Hi Javier,

      The gateway should point to your BI Server always. The dispatcher URI should also point to your BI server or servers in the TM1S.cfg file.
      I have yet to integrate V10.2.2 of TM1 with Cognos Analytics but when I do I will post another article on the subject.

      Andy

      1. Hi Andy,

        Thank you for your reply. I did eventually point them to the BI server. I look forward to your post regarding the TM1 integration with Cognos as that is a step I’m planning to take in the near future.

        Regards,

        Javi

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s