Product:
Cognos Tm1 10.2.2 Fix pack 7 (10.2.5270.108)
Microsoft Windows 2008 R2 server

Issue:
When click save in TM1 Cognos Configuration you get a error message that you can not save, but can save in plain text.
The Cognos TM1 Application Web is using the value Environment – group properties – Gateway uri as default values in http://localhost:9510/pmpsvc setup.
If localhost is used in Cognos Configuration, the BI services (if it exist) on the local server is used as key for the creation of the crypto files.

Error details:
[Cryptography]
[ ERROR ] CAM-CRP-1132 An error occurred while attempting to request a certificate from the Certificate Authority service. Unable to connect to the Certificate Authority service. Ensure that the Content Manager computer is configured and that the IBM Cognos services on it are currently running. The HTTP result code ‘500’ was returned from the server.

but first you may get
:java.lang.nullpointerexception
when you try to save Cognos Configuration.

Possible workaround:
In Cognos Configuration, select Local Configuration, click the and then click Add.

Type StandaloneCertificateAuthority in the Name box.
Type True in the Value box.
Click OK.

This will make the TM1 cognos configuration not use the BI values to create the crypto keys.

Check also that you have not installed a fix pack over a TM1 installation that uses custom key certs.
Check that you have access to the Cognos BI server by in IE surf to http://cognosbiservername:80/ibmcognos/cgi-bin/cognosisapi.dll
Check that the Cognos Controller FAP or Cognos TM1 admin services is stopped when you update Cognos Configuration.
Check that you do not have doublets of the Cognos TM1 admin services.

More information:
http://www-01.ibm.com/support/docview.wss?uid=swg21655725&myns=swgimgmt&mynp=OCSS9RXT&mync=R
http://www-01.ibm.com/support/docview.wss?uid=swg21902547
https://www.ibm.com/support/knowledgecenter/en/SS9RXT_10.2.2/com.ibm.swg.ba.cognos.tm1_inst.10.2.2.3.doc/t_config_tm1_cont.html