Forum Stats

  • 3,838,259 Users
  • 2,262,346 Discussions


TLS 1.2 with EPM

SomRanjan Member Posts: 40 Red Ribbon
edited Dec 1, 2021 8:26AM in EPM System Infrastructure

Dear All,

Please advise on the below.

There is a requirement to enable TLS 1.2 in our Hyperion instance( on prem).




OS: Windows Server 2012 R2

There is no load balancer. If TLS 1.2 is going to be implemented then the OHS setup needs to be done on only server-1 or in server2 also.

Does the certificate need to be imported in OWM and KEYTOOL?

What will be the compatible Java version?

I already went through 2179810.1 but confused with the implementation steps.

Hence need some suggestions to proceed.




  • User_47EDD
    User_47EDD Member Posts: 6 Green Ribbon

    First things first...

    TLS 1.2 is not compatible with PHS, you'll only be able to go to TLS 1.0

    The Doc ID 2179810.1 shares a workaround for that but gives little to no explanation, basically you will need to install another OHS in your setup (version which does support TLS 1.2) and then reverse proxy that OHS with SSL offload into your unencrypted OHS

    Is not a crazy amount of work, but it can be tricky if never done it.

    If your is running fine you will just need to install OHS into another directory (this is important) and then using the config files you can configure a reverse proxy for your OHS, similar to when you redirect other apps within the same EPM OHS, like OBIEE or DRM.

    Hopes this helps