Configuring and Deploying IBM Cognos 8 Go! Office

IBM Cognos 8 Go! Office is available for deployment with all IBM Cognos 8 products, except for IBM Cognos 8 Metrics Manager.

To configure and deploy IBM Cognos 8 Go! Office, you can make the client files available for users to install or you can install the client on the user computers, depending on your environment.

To deploy IBM Cognos 8 Go! Office with PowerPlay, you can configure gateway mappings so that IBM Cognos 8 Go! Office users can access PowerPlay reports that reside on a PowerPlay server. You can also configure the size of report that can be imported from IBM Cognos 8 to IBM Cognos 8 Go! Office. For more information about gateway mappings and report size limits, see the Administration and Security Guide.

Use the following checklist to configure IBM Cognos 8 Go! Office:

	Copy IBM Cognos 8 Go! Office files to the LAN for deployment, if required.
	Enable secure sockets layer support, if required.
	Enable anonymous access, if required.
	Deploy IBM Cognos 8 Go! Office to client environments.

Copy IBM Cognos 8 Go! Office Client Files to a Central LAN Location

Before users can deploy IBM Cognos 8 Go! Office to their computer, they need access to the installation files. You can give users the installation CD that is included with IBM Cognos 8 PowerPlay or you can copy the files from the CD to a central location on the LAN or a Web site.

Step

• From the IBM Cognos 8 Go! Office CD or a directory where the installation files were downloaded and extracted, copy the following components to the LAN location:

  • the KB908002 folder

  • the setup.exe file

  • the CognosOfficeSetup.msi file

Users can then run the setup.exe file from the LAN location to deploy IBM Cognos 8 Go! Office.

Enable SSL Support for the HTTPS Interface to PowerPlay

If your environment includes IBM Cognos Series 7 PowerPlay Enterprise Server and you are using the HTTPS interface to access PowerPlay, you must enable Secure Sockets Layer (SSL) support. To enable SSL support for the PowerPlay gateway and the IBM Cognos 8 dispatcher, you must define a password for the IBM Cognos 8 key store and then create and store the Web server Certificate Authority (CA) certificate in the IBM Cognos 8 key store.

Steps to Enable SSL Support

1. Save the Web server CA certificate in the c8_location\bin directory and name it ca.cer.

2. If you did not define a password for the IBM Cognos 8 key store, do it now in IBM Cognos Configuration:

   • In the Explorer window, click Cryptography, Cognos.

   • In the Properties window, under Certificate Authority settings, set the Certificate Authority key store password.

   • From the File menu, click Save.

   • From the Actions menu, click Restart.

3. From the command line, go to the c8_location\bin directory.

4. Set the JAVA_HOME environment variable to the Java Runtime Environment location used by the application server running IBM Cognos 8.

   The following examples assume that the default Tomcat application server is being used:

   • For Microsoft Windows, type

     set JAVA_HOME=c8_location\bin\jre\version

   • For UNIX Cshell, type

     setenv JAVA_HOME c8_location/bin/jre/version

5. From the same command line, run the certificate tool:

   • For Microsoft Windows, type

     ThirdPartyCertificateTool.bat -T -i -r ca.cer -k ..\configuration\signkeypair\jCAKeystore -p keystore password

   • For UNIX, type

     ThirdPartyCertificateTool.sh -T -i -r ca.cer -k ../configuration/signkeypair/jCAKeystore-p

You can now install the CA certificate on all client computers, or make the CA certificate available for users to install with the IBM Cognos 8 Go! Office client.

Steps to Install the CA Certificate on the Client Workstation

1. Retrieve the CA certificate from the issuing authority.

   The file has a .cer extension. This is not the same certificate as the one used by the Web server. It is the certificate for the issuing authority itself.

2. Double-click the .cer file, click Install Certificate, and then click Next.

3. Click Place all certificates in the following store.

4. Click Browse, click Trusted Root Certification Authorities, and then click Next.

5. Click Finish.

Step to Make the CA Certificate Accessible to Users

• Copy the CA certificate to a central location on the LAN.

Enable Anonymous Access for PowerPlay

When using single signon with Microsoft Internet Information Services (IIS), anonymous access must be enabled for portal users to access IBM Cognos 8 Go! Office documents that are based on PowerPlay reports.

If necessary, a second PowerPlay gateway can be used to provide anonymous access for IBM Cognos 8 Go! Office. For more information, see the topic about specifying gateway mappings in the Administration and Security Guide.

Steps

1. On each computer where Content Manager is installed, start IBM Cognos Configuration.

2. In the Explorer window, under Security, Authentication, click Cognos.

3. In the Properties window, click the box next to the Allow anonymous access property and then click True.

4. From the File menu, click Save.

Deploying IBM Cognos 8 Go! Office Client

IBM Cognos 8 Go! Office is available for installation with IBM Cognos 8 components. After IBM Cognos 8 is installed and configured, you can install IBM Cognos 8 Go! Office on client workstations.

Deploying IBM Cognos 8 Go! Office to Client Computers

IBM Cognos 8 Go! Office uses Microsoft .NET Framework to allow users to interact with server-based components. Microsoft .NET Framework and the required updates are downloaded and installed by the setup file when you install IBM Cognos 8 Go! Office. The setup file must be run on all user computers.

For a list of supported versions of Microsoft .NET Framework, see the IBM Cognos Resource Center (http://www.ibm.com/software/data/support/cognos_crc.html).

Use the following checklist to guide you through the deployment process:

	Install .NET Framework and IBM Cognos 8 Go! Office. For more information about installing IBM Cognos 8 Go! Office, see the IBM Cognos 8 Go! Office Installation Guide.
	Set the macro security level for Microsoft Office XP, if required.
	Install the CA certificate for secure sockets layer support, if required.

Set Macro Security Level for Microsoft Office XP

For Microsoft Office XP applications to run IBM Cognos 8 Go! Office, you must set your macro security level to an appropriate level. You must set this for Microsoft Office Excel, Microsoft Office Word, and Microsoft Office PowerPoint.

Steps

1. Open your Microsoft Office XP application.

2. From the Tools menu, click Macros, and then click Security.

3. Choose whether to change the security level or the trusted publishers.

   • On the Security Level tab, click Medium or Low, and then click OK

   • On the Trusted Publishers tab, select Trust all installed add-ins or templates, and then click OK.

Install the CA Certificate for the HTTPS Interface to Series 7 PowerPlay

If your environment includes IBM Cognos Series 7 PowerPlay Enterprise Server and you are using the HTTPS (https://) interface to access Series 7 PowerPlay, you must install a certificate issued by a certificate authority (CA). The CA certificate is required for secure sockets layer (SSL) support.

Steps

1. Retrieve the CA certificate from your administrator.

   The file has a .cer extension.

2. Double-click the .cer file, click Install Certificate, and then click Next.

3. Click Place all certificates in the following store.

4. Click Browse, click Trusted Root Certification Authorities, and then click Next.

5. Click Finish.