Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post Reply
User avatar
Ajay
Regular Participant
Posts: 154
Joined: Wed May 14, 2008 8:27 am
OLAP Product: TM1
Version: 10.2.0, PA 2.0.9
Excel Version: 2016
Location: London

Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by Ajay » Sun Jul 26, 2020 4:41 pm

Not sure if I am the only one blessed with this, but I've logged a ticket for this with IBM

During installation of PAL 2.0.9.1 we have found an issue with starting the "IBM Cognos TM1" service.

We have custom certificates for all the bits outside Architect (using the IBM one for this).

We have found that when starting the "IBM Cognos TM1" service from the Windows Service application, we can log into TM1Web using our ceritifcates and all is good.

However, if we try to use "IBM Cognos Configuration", the second we start the service, the CAMKeystore gets corrupted and we are not able to connect to TM1Web.

When this happened, I opened the CAMKeystore file using ikeyman.exe and it confirms that the CAMKeystore is the problem.

When investigating this, I noticed that the size of the file reduced when launching via IBM Cognos Configuration, suggesting that something is being overwritten at the time of the service starting.

Has anyone else noticed this ?

Ajay

scrumthing
Posts: 43
Joined: Tue Jan 26, 2016 4:18 pm
OLAP Product: TM1
Version: 2.0.9
Excel Version: too many

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by scrumthing » Sun Jul 26, 2020 9:46 pm

I am not 100% sure if it the same thing. But we have issues with the CAM keystone in 2.0.9.1 as well. So far I know of no solution besides waiting (and hoping) for 2.0.9.2.
There is no OLAP database besides TM1!

User avatar
Ajay
Regular Participant
Posts: 154
Joined: Wed May 14, 2008 8:27 am
OLAP Product: TM1
Version: 10.2.0, PA 2.0.9
Excel Version: 2016
Location: London

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by Ajay » Mon Jul 27, 2020 7:04 am

Thanks scrumthing

As soon as I hear anything on the ticket raised I shall update this post.

Since IBM have now released the new TM1Web (PA Spreadsheet Services 2.0.55) as a separate install a few days ago, I'm hoping that 2.0.9.2 is imminent too.

We are already having to use a custom CA Cognos Configuration on 11.1.6 IF002 due to the TLS1.2 issue, and I was hoping that a normal PA Cognos Configuration could be used, but at the moment we're unable to use it for all components.

Ajay

User avatar
Ajay
Regular Participant
Posts: 154
Joined: Wed May 14, 2008 8:27 am
OLAP Product: TM1
Version: 10.2.0, PA 2.0.9
Excel Version: 2016
Location: London

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by Ajay » Tue Jul 28, 2020 7:21 am

So, 2.0.9.2 was released yesterday:
https://www.ibm.com/support/pages/node/6251359

We'll see if that clears up the issue.


In terms of IBM Support, after sending through some log files, they have confirmed that the CAMKeyStores are corrupted and that I will need to regenerate the cyrptographic keys.....they have provided me the steps and I will try this and if successful will post them here

Ajay

User avatar
Ajay
Regular Participant
Posts: 154
Joined: Wed May 14, 2008 8:27 am
OLAP Product: TM1
Version: 10.2.0, PA 2.0.9
Excel Version: 2016
Location: London

Re: Corrupt CAMKeystore when using IBM Cognos Configuration in 2.0.9.1

Post by Ajay » Mon Aug 03, 2020 4:30 pm

So as promised for anyone else seeking a similar solution.

IBM have confirmed that this is a defect and have raised "PH27976 CAMKEYSTORE GETS CORRUPT IN PA 2.0.9.1"

Advice is to continue using the Windows Service rather than IBM Cognos Configuration until the defect is resolved.

Ajay

Post Reply