Steps to regenerate cryptographic keys

Question

What are the steps to regenerate cryptographic keys ?
Answer

1. Open Cognos Configuration. From the File menu, click Export As and save the configuration information in a decrypted format. When naming the file, use a name such as "decrypted.xml". You are prompted to acknowledge that the export is an unsecure operation depending on the version of Cognos being used. Move decrypted.xml to c8_location/configuration directory.

2. Stop the IBM Cognos 8 service:
- If you use Tomcat, stop the IBM Cognos 8 service and close IBM Cognos Configuration.
- If you use an application server other than Tomcat, shut down IBM Cognos 8 in your environment.

3. Back up any existing cryptographic keys by saving the appropriate files and directories to an
alternate location.
The files are
- c8_location/configuration/cogstartup.xml
- c8_location/configuration/caSerial
- c8_location/configuration/cogconfig.prefs
- c8_location/configuration/coglocale.xml
The directories are
- c8_location/configuration/csk
- c8_location/configuration/encryptkeypair
- c8_location/configuration/signkeypair

4. Delete the cogstartup.xml, caSerial, cogconfig.prefs and coglocale.xml files and the three directories: csk, encryptkeypair, and signkeypair whose path are mentioned above.

5. Rename the file "decrypted.xml" to cogstartup.xml.
Important: In the c8_location/configuration directory, the file must use the name "cogstartup.xml".

6. Open Cognos Configuration and Click on save icon. This would re-generate the cryptographic keys. Sometime you may get a popup window while opening Cognos Configuration saying that the default configuration would be loaded, simply click on OK button and save the configuration settings by click on save icon.

7. Now you can start the cognos service without any issue.

The information in this cogstartup.xml file will be automatically re-encrypted using new cryptographic keys when you save the configuration in IBM Cognos Configuration.

Please make a note of the following if you are trying to regenerate cryptographic keys on distributed setup:-
a) You would need to perform the above steps first on the server on which Content manager is installed and running followed by the Stand by Content Manager(if applicable), application tier and then the gateway.
b) Once you have regenerated the keys on the server on which Content manager is installed, make sure that the Cognos Service on that system(Content Manager) is running before you proceed to perform the above steps on application tier and gateway.
c) While you try to regenerate cryptographic keys on gateway system make sure that you have Cognos service running on Application Tier as well. In other words Dispatcher and Content Manager service should be in running state while you try to regenerate cryptographic keys on gateway system or else you would end up getting error on gateway system.

Comments

Post a Comment

Popular posts from this blog

RSV-VAL-0032 expression is not valid. If the item exists in a query but is not referenced in the layout, add it to a property list. CRX-API-0005 An error ocurred at or near the position '0'.

Image
Problem: RSV-VAL-0032 The following expression is not valid: [AdjRowsReturned] = 0. If the item exists in a query but is not referenced in the layout, add it to a property list. CRX-API-0005 An error ocurred at or near the position '0'. The variable named '[AdjRowsReturned]' is invalid Resolution: You might have used the calculated data item in the variable, which needs to be added in the page properties. - Click on the page and go to properties. Make sure you see 'page' on the top of the properties. - Click on properties icon under data section, you'll get pop up icon - Check mark the data item which is used for variable calc. You are good to go.Find the snapshot. .
Read more

How can you extract all user information from Cognos Access Manager Namespace Report Utility and create Cognos Report out of it?

The AM_NamespaceReport Utility allows you to extract the namespace to an XML file. 1. Use the AM_NamespaceReport Utility to extract all users from the namespace to an XML file. am_namespacereport -h << host >> -p << port >> -r << basedn >> -n << namespace >> -D << username >> -w << password >> -f all -o << path to filename.xml >> e.g am_namespacereport -h cognoscamsevr -p 4004 -r o=cognos.com –n devcam -D admin -w admin -f all -o c:\temp\usrlst.xml 2. This will extract all user information to an XML file 3. Import the xml file into XLS spread sheet 4. Create ODBC connection using the ms-excel spread sheet driver 5. Create Data Source Connection and proceed creating FM Model & Publish 6. Create Report using Report Studio. 7. Save & Share the report The Access Manager Administration Guide (Appendix A) contains further information on this functionality.
Read more

BME-EX-0047 Unable to read preferences for the requested interface..

Issue When opening or creating a Framework Manager project the following error message is shown. Additionally, when attempting to create or open a report based on a package is made in Report Studio or Query Studio, the same error message is shown. Error BME-EX-0047 Unable to read preferences for the requested interface. Please use another repository and/or ProjectAccess Interface. Resolving the problem This happens due to a corrupt bmt.ini file in <Install Location>/c8/configuration directory. This issue can be resolved by extracting bmt.ini from last known good backup or even from installation files.
Read more