Product:
Cognos Analytics 11.0.7
kit_version=11.0.7.17082211
kit_name=IBM Cognos Analytics
Microsoft Windows 2008 R2 server

Problem:
Error message when try to install to C drive. This happens in the beginning of the installation when you try to select where to install the Cognos software. The C drive is hidden by a Group Policy. You can in file explorer enter C:\ to view the drive and the files, but this is not good enough for the Install software.

Error message:
Install Location
The specified drive in c:\program files\ibm\cognos\analytics is invalid. Please specify a valid drive.

Possible solution:
Ask your IT department for Windows support to turn of the Group Policy that prevent the user from seeing the C drive.
The Install Anywhere program need to see the drive to allow that you select it in the installation dialog.

You can check the registry on the Windows server to see if there is a policy making this issue.
Start REGEDIT by type that on the START-RUN line.
Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
“nodrives”=Dword
If there is a NoDrives=4, then there is a policy for the logged in users to not see the C drive.
Right click on key Explorer and select “export” to get a backup of that registry part. Save to a file.
Change the value to 0 for NoDrives.
Exit Regedit.
Log out of Windows server.
Log in as the same user again.
Then you may be able to see the C drive direct, and the installation will work.

Otherwise you have to install it to a different drive (e.g. D:).

The value you can set at nodrives is a 26 Bit mask
A: 1
B: 2
C: 4
D: 8
E: 16
F: 32
G: 64
H: 128
add the numbers up to hide more than one drive.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
“nodrives”=Dword

Product:
Cognos Analytics 11.0.7
kit_version=11.0.7.17082211
kit_name=IBM Cognos Analytics
Microsoft Windows 2008 R2 server

Problem:
Silent installation of new Cognos Analytics does not work. No error message.

Possible solution:
Turn of the anti virus software on the server during installation.

The anti virus software on the Windows server have a rule that prevent EXE files to run from users TEMP folder.
When the Install Anywhere software start, after you click on the EXE, it will unpack a javaw.exe and a ANALYTICS_BI.EXE file, in the users temp folder. After unpack the Install Anywhere will try to start the JAVAW to continue with the installation of your cognos software, but here the antivirus will stop the action. Then the installation quits without error messages. There is also no log file from Install Anywhere.

If you click on your antivirus software (McAfee) and check the log file for it you will see message similar to this;
9/15/2017 3:00:31 PM Would be blocked by Access Protection rule (rule is currently not enforced) domain\username C:\WINDOWS\EXPLORER.EXE C:\USERS\username\APPDATA\LOCAL\TEMP\I1505480296\WINDOWS\RESOURCE\JRE\BIN\JAVA.EXE Common Standard Protection:Prevent common programs from running files from the Temp folder Action blocked : Read
or C:\WINDOWS\EXPLORER.EXE C:\TEMP\I1505483120\WINDOWS\ANALYTICS_BI.EXE Common Standard Protection:Prevent common programs from running files from the Temp folder Action blocked : Read

How to do a silent installation:
Copy your install file ca_server_win64_11.0.7.exe to a folder like c:\install\media on the Windows server.
Run the installation with below command to create the response file, do the installation as you normally should do.
c:\install\media\ca_server_win64_11.0.7.exe  -r  c:\install\media\response.properties
Now there is a response file created.
Uninstall Cognos Analytics.
Create a CMD file and enter below line to make it possible to start the silent installation;
c:\install\media\ca_server_win64_11.0.7.exe -i silent -f c:\install\media\response.properties
Start the above CMD file from a administrative prompt.
This will run the installation with your choices as before.

You can include in your CMD file, that you copy the database drivers (sqljdbc4.jar) you need to the drivers folder.
Create a folder c:\install\media\drivers and place the jar file in there. Then add below line to you CMD file.
copy /Y /V c:\install\media\drivers\*.* “C:\Program Files\ibm\cognos\analytics\drivers\”
Also you can include in your CMD file that you copy any pre-adjusted XML (cogstartup.xml) files to configuration folder.
copy /Y /V c:\install\media\configuration\*.* “C:\Program Files\ibm\cognos\analytics\configuration\”
When the installation is done, you start Cognos Configuration on server, adjust the values for your environment and click save.
Then start the Cognos service. (please note there is more steps to get CA11 up to run, this is only the silent installation).

Below example on a response.properties file.
# Tue Sep 05 09:27:57 CEST 2017
# Replay feature output
# ———————
# This file was built by the Replay feature of InstallAnywhere.
# It contains variables that were set by Panels, Consoles or Custom Code.

BISRVR_CA_INSTALL=1
BISRVR_CA_TOOLS_INSTALL=0
USER_INSTALL_DIR=C:\\Program Files\\ibm\\cognos\\analytics
BISRVR_SHORTCUT=IBM Cognos Analytics
BISRVR_ALLUSERS=1
BISRVR_INSTALLTYPE_CUSTOM=1
BISRVR_CUSTOM_FIRST=1
BISRVR_CUSTOM_EXPAND=0
BISRVR_FEATURE_DATATIER=1
BISRVR_FEATURE_APPTIER=1
BISRVR_FEATURE_GATEWAY=1
BISRVR_FEATURE_SAMPLES=1

#Install
#——-
-fileOverwrite_C\:\\Program\ Files\\ibm\\cognos\\analytics\\Uninstall_IBM_Cognos_Analytics.lax=Yes
-fileOverwrite_C\:\\Program\ Files\\ibm\\cognos\\analytics\\resource\\iawin64_x64.dll=Yes
-fileOverwrite_C\:\\Program\ Files\\ibm\\cognos\\analytics\\resource\\iawin32.dll=Yes
-fileOverwrite_C\:\\Program\ Files\\ibm\\cognos\\analytics\\resource\\win64_32_x64.exe=Yes
-fileOverwrite_C\:\\Program\ Files\\ibm\\cognos\\analytics\\resource\\remove.exe=Yes
-fileOverwrite_C\:\\Program\ Files\\ibm\\cognos\\analytics\\resource\\invoker.exe=Yes
-fileOverwrite_C\:\\Program\ Files\\ibm\\cognos\\analytics\\configuration\\preserve\\preserve.txt=Yes
-fileOverwrite_C\:\\Program\ Files\\ibm\\cognos\\analytics\\configuration\\preserve\\.ca_base_preserve.txt=Yes

More Information:
https://kc.mcafee.com/corporate/index?page=content&id=KB73080
https://www.ibm.com/support/knowledgecenter/en/SSEP7J_11.0.0/com.ibm.swg.ba.cognos.inst_cr_winux.doc/t_c8bi_setupunattendedinstallation.html

Product:
Cognos Analytics 11.0.6
Microsoft Windows 2012 R2 server

Problem:
In a new setup, we created a data source to a TM1 server, but when doing test in Cognos connection we get a error.
Test of SQL server data source is working.

This is in a SSO CAM security setup with Active Directory.

Error message:
XQE-CM-0008 Unable to retrieve credentials for namespace “CAMID(“AD”)”: java.lang.NullPointerException

Solution:
In some cases the test of data source does not work when using external authentication.
Set to NO AUTHENTICATION and test again.
If the test works, set it back to you AD External Namespace authentication.
Create a report and use that to test that you can get some data from the TM1 data source.

As per the IBM Cognos documentation, you are not able to test a data source which is configured to use an external namespace for authentication.
http://www-01.ibm.com/support/docview.wss?uid=swg21693543

Product:
Cognos Analytics 11.0.6
Microsoft Windows 2012 R2 server

Problem:
When start Cube Designer we get a log on dialog – even do Cognos BI is setup with Single Sign On (SSO) to the Active Directory (AD).

Solution:
This is by design.
This version of Cube Designer does not support SSO.

Only the BI developers should be using the tool, so there is a few persons who should need to enter the windows password.

More Information:
https://www.ibm.com/support/knowledgecenter/en/SSEP7J_10.2.1/com.ibm.swg.ba.cognos.ug_cog_rlp.10.2.1.doc/c_ug_cog_rlp_get_started.html

Product:
Cognos Analytic 11.0.6
Microsoft Windows 2012 R2 Server

Problem:
Error when publish a dynamic cube from cube designer.

Error message:
BMT-MD-6629 Unable to find a running Query Service at the configured dispatcher: servername

Possible solution:
Check the server name in Cognos Configuration.
They must be in lower case, so they match the server name you see in Cognos Connection – Administration – status tab – System view.

Change all server name references for dispatcher URI for external applications to be in lower case. Save the configuration and retry the publish in Cube Designer.

More information:
http://www-01.ibm.com/support/docview.wss?uid=swg21983789

Product:
Cognos Analytics 11.0.6
Microsoft Windows 2012 R2 server
Microsoft SQL 2014 database server

Problem:
How setup IIS for SSO with CA 11.0.6?

Solution:
This solution is using the tool provided by IBM for configuration of the IIS.
http://www-01.ibm.com/support/docview.wss?uid=swg22000097

In this example, everything is setup on the same Microsoft Windows 2012 R2 server. You may need to check that the web server you use, have Trusted Delegation on the Domain Controller. Enter GPEDIT or SETSPN -L  ServerName at CMD prompt to see some information. More instructions here for Windows Kerberos;

https://technet.microsoft.com/en-us/library/ff646925(v=ws.10).aspx

https://technet.microsoft.com/en-us/library/cc771131(v=ws.11).aspx

https://technet.microsoft.com/en-us/library/cc731241(v=ws.11).aspx

https://technet.microsoft.com/en-us/library/dd759186(v=ws.11).aspx

On the Microsoft Windows 2012 R2 server;

– turn off DEP
– turn off UAC
– turn off ‘On access scan’ of anti-virus software
– turn off IEESC (internet explorer enhanced security configuration)
– Set Power Option to ‘High Performance’
– in Folder Options – view – untick ‘Hide extensions for known file types’
– Internet Options, under General – Settings, mark ‘Every time I start Internet Explorer’
– Internet Options, under Security – Local Intranet – sites, Advanced, add the CA 11 servers to the zone.

Create a empty database named “contentstore” on the Microsoft SQL server. Create a SQL login name cognos with password cognos204. Set the SQL user cognos to be DBOWNER of the database “contentstore”.

Setup CA 11
Download the CA 11.0.6 files from here
http://www-01.ibm.com/support/docview.wss?uid=swg24043412

Run installation of all tools, including IBM Cognos Software Development Kit 11, on the server. Start with the IBM Cognos Analytics Server 11.0.6.0 Microsoft Windows Multilingual (CNIN2ML). The new license, allow the administrator to use all tools.

ca_installfrom

Right click on ca_srv_win64_11.0.6.17031315.exe file and select “run as administrator”.
Click next to run the installation in English.
Select IBM Cognos Analytics, and click Next.
Select to Accept the license agreement, and click Next.
Enter the installation directory to d:\program files\ibm\cognos\analytics and click Next.
Select the Custom installation type, and click Next.
Select the First Install option and click Next.
Select all components and click Next.
Click on Install.
If you get a warning from the Windows firewall, check all and click on “Allow access” to continue the program installation.
When finish, click on Done

In later versions of CA11 you must copy file sqljdbc42.jar into folder d:\program files\ibm\cognos\analytics\drivers before configuration.

Start up Cognos Configuration by right click and select “run as administrator”
Check that the CAservername is already filled in at all the fields, at Environment.

ca_services

The Content store need to be change from IBM DB2 to a SQL Server database. Under Data Access – Content manager, right click ‘Content Store’. Select ‘Delete’ and confirm deletion.
Right-click New Resources -Database. Name the database ‘Content Store’ and select the type ‘Microsoft SQL Server database’.
In the right-hand pane at ‘Resource Properties’, fill in;
Database server name with port number (the sql servernamn:1433)
User ID and password (in our example cognos and Cognos204)
Database name (in our example contentstore)
Click on save icon and wait.

ca_websphere

Above the default values for CA11 WebSphere Liberty Profile. Ensure the server have enough memory.

To enable login to Active Directory, you need under Security and Authentication,
Right-click New Resource – Namespace. Provide a name of the domain ‘AD’ and select ‘Active Directory’. Click OK.
Enter the Namespace ID to be the same as the namespace properties ‘AD’.
Enter the host and port to the domain: domain.com:389
Click the save icon.
Right click and test to see that the AD connection works, you must provide an existing AD users name and password for the test.

Click save and click on start (triangle) to start the CA 11 service.
Surf to http://BIservername:9300/bi/v1/disp to test the program.
You should get to the page without the need to login.

In Cognos Configuration – namespace “Change allow anonymous access” to ‘False’.
Save the change and restart the Cognos services from the restart icon.
Test to surf again to http://servername:9300/bi, this time you should get a login dialog.

When installing the developer tools, you must enter the server name in lower case in Cognos Configuration for Cognos Cube Designer, otherwise it will not work to publish a cube.

ca_icons

You can “pin to start”, your most used programs, to make them easy to find.

Install IIS
Ensure that IIS is installed on the Microsoft Windows 2012 R2 server.
Click on Server Manager icon, normally in lower left corner of screen.
Click on Local Server, on the left in the Server Manager.
Scroll down to Roles And Features, click on Tasks icon and select Add Role and Features.
Click Next 3 times to you get to “Select Server Roles”.

Select Web Server (iis) and click “Add features” to any question about installing additional features.
Click Next 3 times to you get to “Role Services”.
Scroll down and select

ca_iis_2
– Security – Request Filtering (already filled in) and Windows Authentication

ca_iis_1
– (expand) Application Development Features – CGI, ISAPI Extentions and Isapi Filters

Click Next and click Install.

Start a Administrative Power Shell

ca_iisbackup
Enter this to make a backup of IIS settings
backup-webconfiguration -name MyIISbackup

Download ARR from here
https://www.iis.net/downloads/microsoft/application-request-routing

Run ARRv3:0.exe

ca_arr1

Click Install

ca_arr2
Click I accept

ca_arr3
Wait

ca_arr4
Click Finish.

Run the script
Download the script from here
http://www-01.ibm.com/support/docview.wss?uid=swg22000097

Unpack the file CA_IIS_Config(6.22.17).zip
Open the file CA_IIS_Config.bat in Notepad++

ca_script1

set ca_path Set the location of the Cognos Analytics gateway folder d:\Program Files\ibm\cognos\analytics
set ca_disp This section is where all application dispatcher(s) in entered. (Do not enter servers that are only Content Managers)

• set disp[x]=server_name is where you would put the fully qualified dispatcher name
ex. set disp[0]= CAservername.domain.com

• set disp[x].port is where you would put the dispatcher port number.
ex. set disp[0].port= 9300

set enable_SSO To enable single sign-on capabilities in IIS, set this to True.

Save the BAT file.

ca_scriptA

In Windows Explorer, right click on CA_IIS_config.bat file and select Run as Administrator
A command windows will open with the variables that you have configured. If they are incorrect then press ‘n’ to exit and reopen the bat file to correct the issue. If everything is correct, then press ‘y’.

ca_scriptB

If all is well, there should not be any errors.

Surf to : Http://CAservername.domain.com:80/ibmcognos

If the SSO does not work after above script is run, check first that Windows Authentication is Enabled in IIS Manager. Open IIS Manager and go to the Default Web Site – ibmcognos. Click on Authentication. Mark Windows Authentication and click Enable. Ensure that Anonymous Authentication is Disabled on ibmcognos.

iis_windows

Then add singleSignOnOption=IdentityMapping in Cognos Configuration at Security – Authentication – AD – Namespace – Resource Properties. Click on Advanced properties above Account mappings (advanced) to enter the singleSignOnOption value. Save and restart the Cognos services.

ca_namespace

Restart the server, if it still does not work then you need to manually check out all the steps to ensure it works.

Note: that for pictures to be displayed in PDF reports, you often have to in IIS manager set Authentication to allow (enabled) Anonymous Authentication on the picture folder like /ibmcognos/bi/samples/images.

https://www.ibm.com/support/knowledgecenter/en/SSEP7J_11.0.0/com.ibm.swg.ba.cognos.inst_cr_winux.doc/t_gateway_iis.html

Change of GateWay
Inside Cognos Configuration for Framework manager or other tools, or for Internet Shortcut you need to update to use this link
Http://CAservername.domain.com:80/ibmcognos
to get SSO
http://CAservername.domain.com:9300/bi/v1/disp
will give you the login without SSO.

The URI Gateway for Transformer or Framework Manager clients should be:
http://CAservername.domain.com:80/ibmcognos/bi/v1/disp

The URI external dispatcher for Transformer should be:
http://CAservername:9300/p2pd/servlet/dispatch

The URI external dispatcher for Framework Manager should be:
http://CAservername:9300/bi/v1/disp

The URLs in Cognos Configuration for Cognos Analytics 11 can use the fully qualified domain name (FQDN).
The Gateway URL in Cognos Configuration for Cognos Analytics is configured as follows (gateway.domain.com is the FQDN for the Cognos Analytics gateway server and is the alias that was set in CA_IIS_config.bat before running the script.)

http://gateway.domain.com:80/ibmcognos/bi/v1/disp

ca_default

If you examine the .\\webcontent\default.htm and .\\webcontent\index.html file. They have no reference to cgi as before.

Database Issues

With CA11.0.6 only database driver sqljdbc42.jar is in folder d:\program files\ibm\cognos\analytics\drivers, that should be good enough to connect to a Microsoft SQL database server. You should install a Microsoft SQL Server Native client (msncli.msi) to allow CQM reports to work.

ca_installedprogram

Setup Audit database and import the sample_audit.zip deployment package.
Ensure Audit is configured in Cognos Configuration.
Create the data source connection to Audit database in Cognos Connection. Click on Test to test the data source link.

ca_datasource_check
Click on the Success text (if possible) in test connection to see more information.

ca_data_error
If you get a error XQE-DAT-0001, when you build a new report against the Audit database.
Then you may have forgotten to enter the database name, test will only check to the database server, not to the database you are going to query.

ca_jdbc
Ensure the JDBC connection have all fields filled out, for Microsoft SQL datasources.

When you test a data source to a TM1 server, you may get a error like below when you use AD authentication.
IBM Cognos TM1  / Dynamic  Failed   XQE-CM-0008
If you change to NO Authentication, then the data source test works. Set it back to AD external namespace authentication and build a report  and test that that works to get data from the TM1 cube.

 

More information:
http://www-01.ibm.com/support/docview.wss?uid=swg27047187
http://www.cognoise.com/index.php?topic=32835.0

https://msdn.microsoft.com/en-us/library/ee825145(v=cs.20).aspx