IBM Support

Support for 256-bit cipher suites in Cognos Configuration

Question & Answer


How do you add 256-bit cipher suites in Cognos configuration?


By default 256-bit cipher suites are not listed in Cognos Configuration within the list of supported cipher suites.


The following steps work if you are using an IBM Java version. If you are using a different vendor then you will need to reach out to that vendor and get the unlimited jurisdiction policy files (Step 3).

To add 256-bit supported cipher suites to Cognos configuration perform the following:

1. Go to the following link:

2. Download the unlimited jurisdiction policy files. See the following section in the above link:
The unlimited jurisdiction policy files are in the SDK /demo/jce/policy-files/unrestricted/ directory. You can also download them from the website

3. Copy the unlimited jurisdiction policy files to the jre/lib/security/ directory of the JRE (exanmple <cognos_install>\bin64\jre\7.0\lib\security). Make a backup of the current files as a precaution.

4. Open Cognos configuration -> Cryptography -> Cognos.
Select "supported cipher suites". The 256-bit cipher suites are now available to add to the supported list.

5. Restart Cognos

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEP7J","label":"Cognos Business Intelligence"},"Component":"Install and Config","Platform":[{"code":"PF033","label":"Windows"}],"Version":"11.0.x, 10.2.x","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
02 December 2022