Question & Answer
Question
How do you add 256-bit cipher suites in Cognos configuration?
Cause
By default 256-bit cipher suites are not listed in Cognos Configuration within the list of supported cipher suites.
Answer
The following steps work if you are using an IBM Java version. If you are using a different vendor then you will need to reach out to that vendor and get the unlimited jurisdiction policy files (Step 3).
To add 256-bit supported cipher suites to Cognos configuration perform the following:
1) Go to the following link:
https://www.ibm.com/developerworks/java/jdk/security/
2) Select the IBM Java version you are using then click on IBM SDK Policy files.
Example of IBM Java 7 link:
3) Download the unlimited jurisdiction policy files. See the following section in the above link:
The unlimited jurisdiction policy files are in the SDK /demo/jce/policy-files/unrestricted/ directory. You can also download them from the ibm.com website
4) Copy the unlimited jurisdiction policy files to the jre/lib/security/ directory of the JRE (ex. <cognos_install>\bin64\jre\7.0\lib\security). Make a backup of the current files as a precaution.
See "Specifying a different directory for the policy files" in the above link for more information.
5) Open Cognos configuration -> Cryptography -> Cognos.
Select "supported cipher suites". The 256-bit cipher suites are now available to add to the supported list.
6) Restart Cognos
To add 256-bit supported cipher suites to Cognos configuration perform the following:
1) Go to the following link:
https://www.ibm.com/developerworks/java/jdk/security/
2) Select the IBM Java version you are using then click on IBM SDK Policy files.
Example of IBM Java 7 link:
3) Download the unlimited jurisdiction policy files. See the following section in the above link:
The unlimited jurisdiction policy files are in the SDK /demo/jce/policy-files/unrestricted/ directory. You can also download them from the ibm.com website
4) Copy the unlimited jurisdiction policy files to the jre/lib/security/ directory of the JRE (ex. <cognos_install>\bin64\jre\7.0\lib\security). Make a backup of the current files as a precaution.
See "Specifying a different directory for the policy files" in the above link for more information.
5) Open Cognos configuration -> Cryptography -> Cognos.
Select "supported cipher suites". The 256-bit cipher suites are now available to add to the supported list.
6) Restart Cognos
[{"Business Unit":{"code":"BU002","label":"Business Analytics"},"Product":{"code":"SSEP7J","label":"Cognos Business Intelligence"},"Component":"Install and Config","Platform":[{"code":"PF033","label":"Windows"}],"Version":"11.0.x, 10.2.x","Edition":""}]
Document Information
Modified date:
26 February 2019
UID
swg21963867