CCC jobs that use a Cloud Agent to execute processes are failing with 'Task Disappeared'. The process itself completes its work but the result of the task is not sent back from the agent to the server successfully through the message queue
Process run in CCC has a Status of Failed with Result text of 'Task disappeared'. The Output of task shows the process finished executing normally.
The agent queue log, log_server_activemq.log, found by default in "C:\Program Files\ibm\Cognos Command Center\Common\apache-activemq-5.15.4\data\" will have the following message:
Could not start network bridge between: vm://Server_xxxxxxxxxx and: https://xxxxxx.planning-analytics.ibmcloud.com:443/ccagentqueue/ due to: Failed to perform GET on: https://xxxxxx.planning-analytics.ibmcloud.com:443/ccagentqueue/ as response was: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath
The public SSL Certificates were update on the IBM Planning Analytics for Watson cloud environments. The certificate provided by Digicert has a different chain of trust and includes an immediate certificate. This change will cause all processes that use a Cloud Agent to fail.
IBM Cognos Command Center 10.2.4 IF1
Planning Analytics with Watson 2.0.9.5
1. Unzip certs.zip and copy files to C:\Program Files\ibm\Cognos Command Center
2. Close IBM Cognos Command Center and stop all 3 IBM Cognos Command Center services
3. Open a Command Prompt as Administrator and navigate to "C:\Program Files\ibm\Cognos Command Center\Common\java.8.0.0\jre\bin"
4. Run the following command to import the certificate to cacerts:
keytool -import -alias DigitCertCA -keystore "C:\Program Files\ibm\Cognos Command Center\Common\java.8.0.0\jre\lib\security\cacerts" -file "C:\Program Files\ibm\Cognos Command Center\DigiCertCA.crt"
Keystore password = changeit
5. Run the following command to import the root certificate to the broker truststore:
keytool -import -alias newroot -keystore "C:\Program Files\ibm\Cognos Command Center\Common\apache-activemq-5.15.4\conf\broker.ts" -file "C:\Program Files\ibm\Cognos Command Center\digi_root.cer"
Keystore password = password
Trust this certificate = Y
6. Run the following command to import the intermediate certificate to the broker truststore:
keytool -import -alias newint -keystore "C:\Program Files\ibm\Cognos Command Center\Common\apache-activemq-5.15.4\conf\broker.ts" -file "C:\Program Files\ibm\Cognos Command Center\digi_int.cer"
Keystore password = password
7. Restart all 3 IBM Cognos Command Center Services
8. Launch IBM Cognos Command Center. The Cloud Agent tests successfully and all processes that use the Cloud Agent are successful.
[{"Type":"MASTER","Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSPLNP","label":"Cognos Command Center"},"ARM Category":[{"code":"a8m0z000000GockAAC","label":"1 - Migrated Categories->BA - Planning Analytics Cloud->Troubleshooting->Cognos Command Center"}],"ARM Case Number":"TS006222505","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]