Configure HFM environment with SSL

Question

Hi all
I am in the middle of process to install HFM environment
For the first time I need to configure HFM environment with SSL
Before I started to install the HFM environment with SSL
I read the SSL CONFIGUATION GUIDE to understand what I need to configure
My environment based on web logic web server version Bea WebLogic_9.1_Express
As I started I read the part of information on configuring your web server for SSL
The next step was creating CA. The Company created for me CA ( file *.cer ) that I can continue with the issue, and this is what I do:
I configure the HSS for SSL Using a text editor, open Hub.properties. Create the following entry in Hub.properties. sslEnabled=true
And. Saved the file Hub.properties.
The next step was configure the HSS Server on WebLogic
I Log on to the Web Logic Administration Console.
Select Servers > Shared Services (admin).
From General tab, I select SSL Listen Port Enabled.
Specify the port (for example, 58082) on which Shared Services will listen for SSL communication
At last I Navigate to Keystore tab and set up the identity and trust keystore
And fill the parameters
At the end I restarted HSS services and Log on to User Management Console as Shared Services Administrator. Connect using the secure
URLhttps://<host>:<SSL-port>/interop; for example, https://myServer:58082/
interop.
The things doesn’t seems that they work, I don’t know how can I be sure that all the parameter's that I fill is right?
Nothing writes on Hyperion SSL PDF
The web logic doesn't notify any error, all I can is just to get to the standard port 58080
Thank
Renan

Answer 1

Hi Renan,
One thing to realize is you don't need to have Shared Services in SSL mode to have HFM in SSL mode.
The main reason you would want Shared Services in SSL mode was if IT/Info security mandated that your directory service (active directory, ldap, ...) be encrypted. If the corporate directory service is not encrypted you should skip making Shared Services encrypted which will simplify things some.
Also once you had gotten shared services up on 58082 you would need to unregister/register all the installs to use 58082 and check the SSL box on the Shared Services install.
Good Luck,
-John