IBM Support

Cannot connect to SQL Server CM database in Cognos Analytics 11.0.x when TLS 1.0 disabled

Troubleshooting


Problem

In Cognos Analytics 11.0.x, if TLS 1.0 is disabled, you may encounter these problems:
  • In Cognos Configuration, you test the Content Manager connection without SSL, but the Microsoft JDBC Driver returns the following error message:
    Unexpected Error occurred attempting to open an SQL connection.
    class java.io.IOException: SQL Server did not return a response. The connection has been closed.
  • You cannot start Cognos Analytics.

Cause

This issue occurs after TLS 1.0 was disabled and Windows is instead using TLS 1.2. This version discrepancy results in the error message because, by default, Cognos Analytics configuration requires TLS 1.0.

Resolving The Problem

To resolve the issue in Cognos Analytics 11.0.x, override the default TLS version:
Steps in Windows
  1. Go to installation_location\bin64\
  2. Edit the file bootstrap_wlp_winx64.xml, and add the following line:
    <param>"-Dcom.ibm.jsse2.overrideDefaultTLS=true"</param>
  3. Edit the file cogconfig.bat, and in the :gotJava section, add this line:
    set J_OPTS="-Dcom.ibm.jsse2.overrideDefaultTLS=true" %J_OPTS%
  4. If you are running Cognos Analytics 11.1.4 and lower, edit the file Startwlp.bat, and in the :launch section, add this line:
    set JVM_ARGS=-Dcom.ibm.cognos.disp.useDaemonThreads=true -Dcom.ibm.jsse2.overrideDefaultTLS=true %JVM_ARGS%
  5. Go to installation_location\configuration\
  6. Edit the file xqe.config.xml, and in the <jvm> section, add this text:
    -Dcom.ibm.jsse2.overrideDefaultTLS=true
    located in the code as shown below:

            <vendor name="IBM Corporation"
                options="-Xscmx100m -Xshareclasses:cachedir=../javasharedresources^name=cognos10%u^nonfatal -Xmso512K -XX:+HeapManagementMXBeanCompatibility -Xjit:dontInline={gnu/trove/*}^{gnu/trove/*}(disableLoopVersioner) -Dcom.ibm.jsse2.overrideDefaultTLS=true"
                compressedrefs="-Xcompressedrefs" max="27000"
            />
  7. Right-click cogconfig.bat and select Run as administrator to start Cognos Configuration, then save the configuration.
Steps in UNIX
  1. Go to installation_location/bin64/
  2. Edit the file bootstrap_wlp_<unix>.xml, and add the following line:
    <param>-Dcom.ibm.jsse2.overrideDefaultTLS=true</param>
  3. Edit the file cogconfig.sh, and add these lines:
    JAVA_OPTS="$JAVA_OPTS -Dcom.ibm.jsse2.overrideDefaultTLS=true"
    export JAVA_OPTS
    located in the code as shown below:

    esac
    JAVA_OPTS="$JAVA_OPTS -Dcom.ibm.jsse2.overrideDefaultTLS=true"
    export JAVA_OPTS
    $JAVA_CMD $JAVA_OPTS CRConfig $*
    exit $?
    else
  4. Go to installation_location/configuration/
  5. Edit the file xqe.config.xml, and in the <jvm> section, add this text:
    -Dcom.ibm.jsse2.overrideDefaultTLS=true
    located in the code as shown below:

            <vendor name="IBM Corporation"
                options="-Xscmx100m -Xshareclasses:cachedir=../javasharedresources^name=cognos10%u^nonfatal -Xmso512K -XX:+HeapManagementMXBeanCompatibility -Xjit:dontInline={gnu/trove/*}^{gnu/trove/*}(disableLoopVersioner) -Dcom.ibm.jsse2.overrideDefaultTLS=true"
                compressedrefs="-Xcompressedrefs" max="27000"
            />
  6. Run cogconfig.sh to start Cognos Configuration, then save the configuration.

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTSF6","label":"IBM Cognos Analytics"},"ARM Category":[{"code":"a8m50000000Cl6YAAS","label":"Installation and Configuration->Content Manager"}],"ARM Case Number":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"11.0.1;11.0.10;11.0.11;11.0.12;11.0.13;11.0.2;11.0.3;11.0.4;11.0.5;11.0.6;11.0.7;11.0.8;11.0.9","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
08 October 2020

UID

ibm16198865

Page Feedback