by ·Comments Off on Unable to initialize SSL connection. Unauthorized access was denied or security settings have expired.

Product:
Cognos Analytics 11.1.5 framework manager
Product_version=11.1 R5
Microsoft Windows 2016 server
Problem:
When inside Framework Manager you select language, to create a new FM project, you get a error.
This after a install of FM to a new server, and try to connect to a BI server that was upgraded from CA 11.0.12 to CA 11.1.5 by an in-place upgrade.

Error message:
BMT-MD-0003 CCL-BIT-0005 A socket reported a communication error.
CAM_Connect=0xfffffff4 -12CAM-CRP-0026 The underlying socket: ‘xx.xx.xx.xx:9300’ returned an error.10056Could not connect the socket, errno: 0x2748(10056)

error in file cognosserver.log
[ ERROR ] CAM-CRP-1193 An error occurred while attempting to contact the active Content Manager to update the local CA information. Check your configuration to ensure that the configured URIs are valid and that there are services running at those locations. Reason: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
or in C:\Program Files\ibm\cognos\analytics\logs\p2pd_messages.log
[5/7/20 12:44:52:435 CEST] 0000029d com.ibm.ws.channel.ssl.internal.SSLHandshakeErrorTracker E CWWKO0801E: Unable to initialize SSL connection. Unauthorized access was denied or security settings have expired. Exception is javax.net.ssl.SSLHandshakeException: no cipher suites in common

Solution:
Go into the Cognos Configuration on the CA11 server and in the Framework Manager Configuration on the client computer.
Compare the listed of supported ciphersuites.

If the FM configuration is missing the setup on the CA11 server, add the missing chiper sets.
Save and try again.
In most cases you must have the same list on both FM configuration and the CA11 server cognos configuration.
Change the FM configuration to be exact as the CA11 server.
Save and try again.

Above the default setting for FM 11.1.5 version.

Above the default setting for CA 11.0.13 FP1.

More information:

https://www.ibm.com/support/pages/support-256-bit-cipher-suites-cognos-configuration

by ·Comments Off on BMT-IMP-0002 Failed to execute metadata request. DPR-ERR-2079 Firewall Security Rejection.

Product:
Cognos Analytics 11.1.5 framework manager
Product_version=11.1 R5
Microsoft Windows 2016 server

Problem:
When using the Framework Manager you get a error, when you try to use a oracle database connection. A planning analytics data source is working fine.
When testing the oracle data source in cognos connection it is working fine for both CQM and DQM.

Error message:
BMT-IMP-0002 Failed to execute metadata request. DPR-ERR-2079 Firewall Security Rejection. Your request was rejected by the security firewall.

Solution:

Update Framework Manager configuration
Under Environment locate setting Dispatcher URI for External Applications
and update it to be in format:
http://dispatcher.server.sample:9300/p2pd/servlet/dispatch
change it from the old value of
http://dispatcher.server.sample:9300/bi/v1/disp

More information:
https://www.ibm.com/support/pages/framework-manager-bmt-imp-0002-failed-execute-metadata-request-dpr-err-2079-firewall-security-rejection-your-request-was-rejected-security-firewall

https://www.ibm.com/support/knowledgecenter/SSEP7J_11.0.0/com.ibm.swg.ba.cognos.inst_cr_winux.doc/c_reviewthedefaultsettings.html

Default port settings for Cognos Analytics components

The following table lists the default ports and URI settings for IBM Cognos Analytics.

Table 1. Default port settings for Cognos Analytics components
Setting Default Value Description
Content Manager URI http://localhost:9300/p2pd/servlet The URI to Content Manager.
Gateway URI http://computer_name:port/bi/v1/disp The URI to the gateway.
Dispatcher URI

(Internal, External)

 http://localhost:9300/p2pd/servlet/dispatch The URI to the dispatcher.
Dispatcher URI for external applications http://localhost:9300/bi/v1/disp The URI to the dispatcher.