Page 1 of 1

Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Posted: Sun Jul 26, 2020 4:41 pm
by Ajay
Not sure if I am the only one blessed with this, but I've logged a ticket for this with IBM

During installation of PAL 2.0.9.1 we have found an issue with starting the "IBM Cognos TM1" service.

We have custom certificates for all the bits outside Architect (using the IBM one for this).

We have found that when starting the "IBM Cognos TM1" service from the Windows Service application, we can log into TM1Web using our ceritifcates and all is good.

However, if we try to use "IBM Cognos Configuration", the second we start the service, the CAMKeystore gets corrupted and we are not able to connect to TM1Web.

When this happened, I opened the CAMKeystore file using ikeyman.exe and it confirms that the CAMKeystore is the problem.

When investigating this, I noticed that the size of the file reduced when launching via IBM Cognos Configuration, suggesting that something is being overwritten at the time of the service starting.

Has anyone else noticed this ?

Ajay

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Posted: Sun Jul 26, 2020 9:46 pm
by scrumthing
I am not 100% sure if it the same thing. But we have issues with the CAM keystone in 2.0.9.1 as well. So far I know of no solution besides waiting (and hoping) for 2.0.9.2.

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Posted: Mon Jul 27, 2020 7:04 am
by Ajay
Thanks scrumthing

As soon as I hear anything on the ticket raised I shall update this post.

Since IBM have now released the new TM1Web (PA Spreadsheet Services 2.0.55) as a separate install a few days ago, I'm hoping that 2.0.9.2 is imminent too.

We are already having to use a custom CA Cognos Configuration on 11.1.6 IF002 due to the TLS1.2 issue, and I was hoping that a normal PA Cognos Configuration could be used, but at the moment we're unable to use it for all components.

Ajay

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Posted: Tue Jul 28, 2020 7:21 am
by Ajay
So, 2.0.9.2 was released yesterday:
https://www.ibm.com/support/pages/node/6251359

We'll see if that clears up the issue.


In terms of IBM Support, after sending through some log files, they have confirmed that the CAMKeyStores are corrupted and that I will need to regenerate the cyrptographic keys.....they have provided me the steps and I will try this and if successful will post them here

Ajay

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Posted: Mon Aug 03, 2020 4:30 pm
by Ajay
So as promised for anyone else seeking a similar solution.

IBM have confirmed that this is a defect and have raised "PH27976 CAMKEYSTORE GETS CORRUPT IN PA 2.0.9.1"

Advice is to continue using the Windows Service rather than IBM Cognos Configuration until the defect is resolved.

Ajay

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Posted: Fri Oct 16, 2020 7:49 am
by Ajay
So just an update.

IBM responded to me yesterday that this issue has now been resolved and is available in the latest PAL 2.0.9.3 which was deployed a few days ago.
https://www.ibm.com/support/pages/ibm-p ... -central-0


Apparently the problem came about due to the change in Java version from PAL 2.0.9 and 2.0.9.1
https://www.ibm.com/support/pages/sites ... s_2093.pdf

HTH
Ajay

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Posted: Sun Oct 18, 2020 11:37 am
by Bakkone
These type of errors scare me quite a bit. I mean... it seems like a fairly basic thing to test before release. Especially when the version changes the java-version.

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Posted: Sun Oct 18, 2020 8:18 pm
by macsir
it seems like a fairly basic thing to test before release
I agree.