IBM Support

"IBM Cognos" service fails to start correctly (with "CFG-ERR-0106", "CAM-CRP-1095 Unable to find the encryption certificate with alias 'encryption'", "The certificate alias encryption..." errors) caused by expired cryptographic keys

Troubleshooting


Problem

Administrator logs onto Cognos Analytics server, and launches 'Cognos Configuration'. Administrator clicks on the 'Start' button (to start the IBM Cognos service).
Initially this appears to start working OK. However, soon afterwards the progress screen stops updating. The Windows service 'IBM Cognos' shows 'Starting' but the service does not actually successfully start.

Symptom

Screen:
The service stops updating at this screen:
image 3934
[Launching a JVM using 'Maximum memory in MB']
Successfully launched a test JVM with the memory setting of '2048'. Note that this does not guarantee that the IBM Cognos service will start and run successfully. 
To see which JVM options are based on this setting, view ibmcognos_location/bin64/bootstrap_wlp_<OS>.xml and see your JVM documentation for an explanation of those options.
[Start Service]
16:22:32, 'LogService', 'StartService', 'Success'.
[Start Service]
[ ERROR ] CFG-ERR-0106 IBM Cognos Configuration did not receive a response from the IBM Cognos service in the time allotted.
Check that IBM Cognos service is available and properly configured.
Logs:
There are entries in the CA logs similar to:
cognosserver.log
Error initializing CAMCrypto CAM-CRP-1095 Unable to find the encryption certificate with alias 'encryption' in the keystore 'C:/Program Files/ibm/cognos/analytics/configuration/certs\CAMKeystore'.
 
ffdc_<date>.log
------Start of DE processing------ = [5/29/20 16:22:29:223 BST]
Exception = java.lang.IllegalArgumentException
Source = com.ibm.ws.ssl.provider.IBMJSSEProvider
probeid = getKeyTrustManagers
Stack Dump = java.lang.IllegalArgumentException: CWPKI0024E: The certificate alias encryption specified by the property com.ibm.ssl.keyStoreServerAlias is not found in KeyStore C:/Program Files/ibm/cognos/analytics/configuration/certs/CAMKeystore.jks.

Cause

The Cognos Analytics cryptographic keys have expired.

Resolving The Problem

Regenerate the Cognos Analytics cryptographic keys.
Steps:
For full details on how to regenerate cryptographic keys, see separate IBM Technote #286475.
However, the following 'simplified' steps are suitable under the following circumstances:
  • Cognos Analytics (CA) has been installed into the default location
  • The procedure has never been done before (therefore the folders do not already exist, otherwise you will get errors)
1. Launch a Command Prompt (as an administrator)
image 3935
6. Copy and paste the following commands:
REM Script v3 (27/08/2020) RC
REM Export current configuration to an XML file
cd "C:\Program Files\ibm\cognos\analytics\bin64"
cogconfig.bat -e "C:\Program Files\ibm\cognos\analytics\configuration\backup.xml"
 
REM Remove current crypographic keys/information
md "C:\Program Files\ibm\cognos\analytics\configuration\backup_to_fix_problem"
move "C:\Program Files\ibm\cognos\analytics\configuration\cogstartup.xml" "C:\Program Files\ibm\cognos\analytics\configuration\backup_to_fix_problem"
move "C:\Program Files\ibm\cognos\analytics\configuration\caSerial" "C:\Program Files\ibm\cognos\analytics\configuration\backup_to_fix_problem"
move "C:\Program Files\ibm\cognos\analytics\configuration\certs\CAMCrypto.status" "C:\Program Files\ibm\cognos\analytics\configuration\backup_to_fix_problem"
move "C:\Program Files\ibm\cognos\analytics\configuration\certs\CAMKeystore" "C:\Program Files\ibm\cognos\analytics\configuration\backup_to_fix_problem"
move "C:\Program Files\ibm\cognos\analytics\configuration\certs\CAMKeystore.lock" "C:\Program Files\ibm\cognos\analytics\configuration\backup_to_fix_problem"
move "C:\Program Files\ibm\cognos\analytics\temp\cam\freshness" "C:\Program Files\ibm\cognos\analytics\configuration\backup_to_fix_problem"
ren "C:\Program Files\ibm\cognos\analytics\configuration\backup_to_fix_problem"
cd "C:\Program Files\ibm\cognos\analytics\configuration"
ren csk csk_backup_to_fix_problem
 
REM Copy new configuration
copy "C:\Program Files\ibm\cognos\analytics\configuration\backup.xml" "C:\Program Files\ibm\cognos\analytics\configuration\cogstartup.xml"
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
IMPORTANT: You MUST remember to press <ENTER> on your keyboard after pasting these commands, otherwise the final command does not get actioned (and so the fix will not work)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
7. Launch 'Cognos Configuration'
image 5722
8. Click the 'Save' button (near the top left corner)
  • This will cause the cryptographic keys to get regenerated (which normally takes a few minutes)
9. Afterwards, click the 'Start' (or 'Restart') button (near the top left corner) to start the service.

Document Location

Worldwide

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSTSF6","label":"Cognos Analytics"},"ARM Category":[{"code":"a8m50000000Cl6YAAS","label":"Installation and Configuration->Content Manager"}],"ARM Case Number":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"All Version(s)","Line of Business":{"code":"LOB10","label":"Data and AI"}},{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS9S6B","label":"Cognos 8 Controller"},"ARM Category":[{"code":"a8m0z000000GnwjAAC","label":"Report Server"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
27 August 2020

UID

ibm16218328