Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post Reply
User avatar
Ajay
Regular Participant
Posts: 183
Joined: Wed May 14, 2008 8:27 am
OLAP Product: TM1
Version: 10.2.0, PA 2.0.9
Excel Version: 2016
Location: London

Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by Ajay »

Not sure if I am the only one blessed with this, but I've logged a ticket for this with IBM

During installation of PAL 2.0.9.1 we have found an issue with starting the "IBM Cognos TM1" service.

We have custom certificates for all the bits outside Architect (using the IBM one for this).

We have found that when starting the "IBM Cognos TM1" service from the Windows Service application, we can log into TM1Web using our ceritifcates and all is good.

However, if we try to use "IBM Cognos Configuration", the second we start the service, the CAMKeystore gets corrupted and we are not able to connect to TM1Web.

When this happened, I opened the CAMKeystore file using ikeyman.exe and it confirms that the CAMKeystore is the problem.

When investigating this, I noticed that the size of the file reduced when launching via IBM Cognos Configuration, suggesting that something is being overwritten at the time of the service starting.

Has anyone else noticed this ?

Ajay
User avatar
scrumthing
Posts: 81
Joined: Tue Jan 26, 2016 4:18 pm
OLAP Product: TM1
Version: 11.x
Excel Version: MS365

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by scrumthing »

I am not 100% sure if it the same thing. But we have issues with the CAM keystone in 2.0.9.1 as well. So far I know of no solution besides waiting (and hoping) for 2.0.9.2.
There is no OLAP database besides TM1!
User avatar
Ajay
Regular Participant
Posts: 183
Joined: Wed May 14, 2008 8:27 am
OLAP Product: TM1
Version: 10.2.0, PA 2.0.9
Excel Version: 2016
Location: London

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by Ajay »

Thanks scrumthing

As soon as I hear anything on the ticket raised I shall update this post.

Since IBM have now released the new TM1Web (PA Spreadsheet Services 2.0.55) as a separate install a few days ago, I'm hoping that 2.0.9.2 is imminent too.

We are already having to use a custom CA Cognos Configuration on 11.1.6 IF002 due to the TLS1.2 issue, and I was hoping that a normal PA Cognos Configuration could be used, but at the moment we're unable to use it for all components.

Ajay
User avatar
Ajay
Regular Participant
Posts: 183
Joined: Wed May 14, 2008 8:27 am
OLAP Product: TM1
Version: 10.2.0, PA 2.0.9
Excel Version: 2016
Location: London

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by Ajay »

So, 2.0.9.2 was released yesterday:
https://www.ibm.com/support/pages/node/6251359

We'll see if that clears up the issue.


In terms of IBM Support, after sending through some log files, they have confirmed that the CAMKeyStores are corrupted and that I will need to regenerate the cyrptographic keys.....they have provided me the steps and I will try this and if successful will post them here

Ajay
User avatar
Ajay
Regular Participant
Posts: 183
Joined: Wed May 14, 2008 8:27 am
OLAP Product: TM1
Version: 10.2.0, PA 2.0.9
Excel Version: 2016
Location: London

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by Ajay »

So as promised for anyone else seeking a similar solution.

IBM have confirmed that this is a defect and have raised "PH27976 CAMKEYSTORE GETS CORRUPT IN PA 2.0.9.1"

Advice is to continue using the Windows Service rather than IBM Cognos Configuration until the defect is resolved.

Ajay
User avatar
Ajay
Regular Participant
Posts: 183
Joined: Wed May 14, 2008 8:27 am
OLAP Product: TM1
Version: 10.2.0, PA 2.0.9
Excel Version: 2016
Location: London

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by Ajay »

So just an update.

IBM responded to me yesterday that this issue has now been resolved and is available in the latest PAL 2.0.9.3 which was deployed a few days ago.
https://www.ibm.com/support/pages/ibm-p ... -central-0


Apparently the problem came about due to the change in Java version from PAL 2.0.9 and 2.0.9.1
https://www.ibm.com/support/pages/sites ... s_2093.pdf

HTH
Ajay
Bakkone
Posts: 119
Joined: Mon Oct 27, 2014 10:50 am
OLAP Product: TM1
Version: 10.2.2
Excel Version: 2013

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by Bakkone »

These type of errors scare me quite a bit. I mean... it seems like a fairly basic thing to test before release. Especially when the version changes the java-version.
User avatar
macsir
MVP
Posts: 782
Joined: Wed May 30, 2012 6:50 am
OLAP Product: TM1
Version: PAL 2.0.9
Excel Version: Office 365
Contact:

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by macsir »

it seems like a fairly basic thing to test before release
I agree.
In TM1,the answer is always yes though sometimes with a but....
http://tm1sir.blogspot.com.au/
Post Reply