Product:
Planning Analytics TM1_version=TM1-AW64-ML-RTM-11.0.5.1008-0

Cognos Analytics Product_version=11.1 R7 (LTS)

Cognos Controller CONTRL_UPDATE_version=CCR-AW64-ML-RTM-10.4.2000.1098-0

Microsoft Windows 2019 server

Issue:

IBM Cognos Controller FAP service does not login to the TM1 server for a FAP IP.

In D:\Program Files\ibm\cognos\ccr_64\Server\FAP\lib you have the SQLJDBC42.JAR file.

In Control Panel you have installed Microsoft SQL server 2012 Native client version 11.4.7001.0 (as a older version gave other problems)

In REGEDIT only TLS 1.2 is activated with key;

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319]
“SchUseStrongCrypto”=dword:00000001

Error in D:\Program Files\ibm\cognos\ccr_64\Server\FAP\error.log file:

ERROR [fap.service.schedule.Scheduler] [schedulerThread], Could not logon to TM1
com.ibm.cognos.tm1.TM1Exception: SystemServerClientNotFound
at com.ibm.cognos.tm1.API.logonCAMNamespace(Native Method)
at com.ibm.cognos.fap.common.persistence.tm1.TM1Context.login(TM1Context.java:124)
at com.ibm.cognos.fap.service.schedule.Scheduler.updateDatamarts(Scheduler.java:591)
at com.ibm.cognos.fap.service.schedule.Scheduler.run(Scheduler.java:261)
at com.ibm.cognos.fap.service.schedule.Scheduler$1.run(Scheduler.java:166)
at java.lang.Thread.run(Thread.java:825)

Solution:

Check that you can login to CA11 with the account that you enter inside FAP client program.

Check the TM1S.CFG file for this url

ServerCAMURI=http://servername.domain.com:9300/p2pd/servlet/dispatch
ClientCAMURI=http://servername.domain.com:80/ibmcognos/bi/v1/disp

Copy http://servername.domain.com:9300/p2pd/servlet/dispatch to your web-browser and try to login with the same username and password as you have entered in FAP DATA MART TM1 Connection.

Can you not login?  Ensure that this user is part of the Cognos System administrator group inside Cognos Connection.

Go to Administration Console

Click on Security tab – click on cognos

Go to System Administrators – click on more

Click on Set Members

Add you user by click on Add… and type.

Enter the name domain/username and click on arrow, and click OK.

Now you should test if you can login with that user to CA11 from your web browser.

Create a jvm.options file in folder D:\Program Files\ibm\cognos\ccr_64\Server\FAP to make FAP use TLS1.2

-Dcom.ibm.jsse2.overrideDefaultTLS=true
-Dcom.ibm.jsse2.overrideDefaultProtocol=TLSv12

Also ensure that the Windows account running the Cognos Analytics service is part of the local administrator group.

More information:

https://www.ibm.com/support/pages/how-configure-force-controller-use-tls-12

https://www.ibm.com/support/pages/troubleshooting-could-not-login-tm1-systemserverclientnotfound-error-when-publishing-controller-data-tm1-fap

https://www.ibm.com/support/pages/troubleshooting-could-not-login-tm1-systemserverclientnotfound-error-when-attempting-run-initial-publish

https://www.ibm.com/support/pages/automatic-tm1-cam-user-creation-when-using-cam-bi-non-native-security

Product:

Microsoft Power BI local server

Microsoft Windows 2019 server

Issue:

When user browse to the home or browse button in the Power BI portal they get a error like:

Could not load folder contents

You are not allowed to view this folder. Contact your administrator to obtain the necessary permissions

This when they go to http://servername/Reports/browse

Solution:

In Power BI, all reports and folders, can be you set security on. The root or browse folder is the same, it is only that it is hard to find.  You need to click on “Manage Folder” to get there.

Login to PowerBI as administrator.
Go to the “root” folder by click on browse.

Then click on “manage folder ” on the right to get to the security dialog.

Inside security, click on “Add group or user” to add a group like “everyone”.

Enter the name of the group, mark “browse” and click OK.

Now this group can see this folder, and all sub-folders that do not have “customize security” set.

Recommendation, is that you on all folders and reports in the top (root) folder are having “customize security” active, so you need to manually add the users or AD groups to this folders for users to be able to view them.

Customize Security will make the folder to not inherit the security groups from the folder above.

To be able to see a sub-folder, the user need access to the top folder above as Browser.

More Information:

https://community.powerbi.com/t5/Report-Server/Access-to-the-home-folder/m-p/448374#M6249

https://docs.microsoft.com/en-us/power-bi/enterprise/service-admin-rls

https://guyinacube.com/2020/02/25/can-you-use-groups-with-power-bi-row-level-security-rls/

https://www.bconcepts.pt/power-bi-report-server-configuration-and-security-implementation/

https://iterationinsights.com/article/how-to-get-set-up-with-power-bi-desktop-and-power-bi-service/

https://www.bluegranite.com/blog/tips-for-a-successful-power-bi-report-server-implementation

Product:

Planning Analytics Workspace 73

Microsoft Windows 2016 server

Issue:

After upgrade of PAW, the admin tool stop with error like this:

Execution failed with exit code 1: Encountered errors while bringing up the project.

Error: for mongo Cannot start service mongo. Failed to create endpoint mongo on network nat.

When you try to start database mongo with command: docker start mongo, you get error

Error response from daemon: endpoint with name mongo already exist in network nat.

Error: failed to start containers: mongo

Suggested solution:

Start a powershell session as administrator on your PAW server.

Enter to get a list of networks: docker network ls

To see nodes in a network enter: docker network inspect nat

To remove old node in network enter: docker network disconnect nat mongo

To start mongo enter: docker start mongo

To list running containers enter: docker ps

Should look like above, if PAW73 is working fine.

More Information:

https://www.ibm.com/support/pages/failed-start-container-failed-create-endpoint-share-proxy-network-nat-file-local-kvdblock-being-used-another-process

https://www.ibm.com/docs/en/planning-analytics/2.0.0?topic=web-install-configure-tm1-microsoft-windows

https://www.ibm.com/support/pages/troubleshooting-planning-analytics-workspace-related-docker-issues

https://www.mirantis.com/product/basic-for-mirantis-container-runtime-formerly-docker-engine-enterprise-for-compatible-linux-and-windows-server/

https://docs.docker.com/config/pruning/

Product:
Planning Analytics Workspace 73

Microsoft Windows 2016 server

Issue:

After upgrade of PAW, the system does not start all containers.
In the c:\programdata\docker\panic.log file you may have this error:

bolt.Close(): funlock error: The handle is invalid

When try to start the PAW with the command ./paw.ps1 we get error similar to “No connection could be made because the target machine actively refused it” and “failed to update store for object type *windows.hnsEndpoint: open C:\ProgramData\docker/network/files/local-kv.db.lock: Access is denied.”

In powershell enter: ./paw.ps1 ps to get a better view of the running containers.

If PAW73 is working, it should look like above.

In powershell enter: docker logs mongo to see the log file for that container.

In powershell enter: docker version to see the version you have installed.

Possible solution:

Cause could be a to old version of Docker or too few resources in the Windows server.

If you have a old version of docker-compose, like 1.23, then you need to update it with this commands:

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

Invoke-WebRequest "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-Windows-x86_64.exe" -UseBasicParsing -OutFile $Env:ProgramFiles\Docker\docker-compose.exe

Ensure you have a backup of PAW before you run any scripts.

If the docker version is 17.06.2-ee-14 you need to upgrade it with this script, paste the code in a text file, and save it in the same folder as you have your Start.ps1 file (for example d:\ibm\paw73).

IF ((Get-Service -Name docker).status -ne 'Running') { Start-Service docker }
IF (Test-Path ./Start.ps1){
Powershell './scripts/paw.ps1 stop'
docker stop admintool
docker rm $(docker ps -a -q)
Copy-Item -Path 'C:\Program Files\docker\docker-compose.exe' -Destination "$env:TEMP"
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
Install-PackageProvider -Name NuGet
Install-Module DockerMsftProvider -Force
Install-Package -Name docker -ProviderName DockerMsftProvider -verbose -RequiredVersion 20.10 -Update -Force
Move-Item -Path "$env:TEMP/docker-compose.exe" -Destination 'C:\Program Files\docker\'
docker network rm $(docker network ls -q)
Stop-Service docker
Get-ContainerNetwork | Remove-ContainerNetwork -force
Get-VMSwitch | Remove-VMSwitch -force   
Get-NetNatStaticMapping | Remove-NetNatStaticMapping -Confirm:$false
Get-NetNat | Remove-NetNat -Confirm:$false
Restart-Service HNS
Start-Service docker
Restart-Service docker
Powershell '.\scripts\paw.ps1'
Powershell '.\scripts\paw.ps1 ps'
}

Above script will clean all containers and networks in docker, and upgrade to a later version of Docker.

Run the above .ps1 script in PowerShell as administrator.

If you get the blue screen with “Planning Analytics Workspace is unavailable. Try again in a few minutes.” message, then wait at least 10 minutes, before you try accessing again. PAW can be only starting up all it’s containers, and that take a long time. Check in TASK MANAGER, if all CPU are 100%, then docker is still loading.

(If you do not have a anti-virus program running, that can interfere with docker startup.)

Also, always test in a other web browser, when there are issues in PAW.

More information:

https://www.ibm.com/support/pages/failed-start-container-failed-create-endpoint-share-proxy-network-nat-file-local-kvdblock-being-used-another-process

https://www.ibm.com/docs/en/planning-analytics/2.0.0?topic=web-install-configure-tm1-microsoft-windows

https://www.ibm.com/support/pages/troubleshooting-planning-analytics-workspace-related-docker-issues

https://www.ibm.com/support/pages/container-marked-removal-and-cannot-be-started-driver-windowsfilter-failed-remove-root-filesystem-hcsshimgetcomputersystems

https://www.ibm.com/docs/en/planning-analytics/2.0.0?topic=local-prerequisites

https://www.ibm.com/docs/en/planning-analytics/2.0.0?topic=wnipaw-2073-whats-new-february-10-2022

Product:
Planning Analytics Workspace 73

Microsoft Server 2016

Issue:

During Start.ps1 checks at the start of the upgrade of PAW, you get message that docker-compose is to old.

Command: Docker version

will list your docker version, in our case it was 17.06.2-ee-14

Solution:

Ensure server have connection to internet.

Start powershell as administrator.

Run this commands:

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

Above to active TLS1.2

Invoke-WebRequest "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-Windows-x86_64.exe" -UseBasicParsing -OutFile $Env:ProgramFiles\Docker\docker-compose.exe

Above to install docker-compose version 1.29

Then try to install PAW again.

More information:

https://docs.docker.com/compose/compose-file/compose-versioning/

https://www.ibm.com/docs/en/SSD29G_2.0.0/com.ibm.swg.ba.cognos.tm1_prism_gs.2.0.0.doc/tm1_prism_gs.pdf

 

Product:

Cognos Controller 10.4.2
LICENSE_CONTROLLER_version=LICENSE_CONTROLLER-AW64-ML-RTM-10.4.2000.2-0
CONTRL_UPDATE_version=CCR-AW64-ML-RTM-10.4.2000.1098-0

Microsoft Windows 2016 Server

Microsoft  SQL server 2019

Issue:

After change in Windows Server for SQL database, to not allow TLS 1.0 and TLS 1.1 protocol the Cognos Controller and FAP program can not connect to the SQL database. You have not enabled HTTPS in Cognos Configuration, therefor Cognos is not using SSL to the clients.

Cognos Analytics who uses the SQLJDBC42.JAR driver, works fine.

Error message:

TM1.SQLAPI   08001[Microsoft][ODBC Driver 11 for SQL Server]SSL Provider: An existing connection was forcibly closed by the remote host.

TM1.SQLAPI   E16) Cannot connect to ODBC data source “ControllerDatabase”  08001[Microsoft][ODBC Driver 11 for SQL Server]SSL Provider: An existing connection was forcibly closed by the remote host.

Above error when you test the UDL connection to the SQL server.

Above error when you try to login to Cognos Controller.

Microsoft SQL server Native Client 11.0 Client unable to establish connection
TCP provider: An existing connection was forcibly closed by the remote host.
in Windows event log:

Could not connect to database. Database CTRL blacklisted. It will be considered again in 20 minutes.
Client unable to establish connection
TCP Provider: An existing connection was forcibly closed by the remote host.

Solution:

Upgrade the SQLNCLI.MSI program to a later version.

Download a new SQL 2012 driver from Microsoft and install that in your Controller Windows server.
https://www.microsoft.com/en-us/download/details.aspx?id=50402

Also install same SQLNCLI.MSI driver on your TM1 server where you have the FAP service running.

Above is the working driver, you should download from Microsoft. Driver version 11.4.7001.0 is correct.

Go to the Control Panel on your Cognos Controller computer and check installed version of SQL 2012.

Above is the working version of SQL 2012 driver, if you not have it – you must install it for Cognos Controller.

Above drivers does not work when you have turned off TLS 1.0 and TLS 1.1, to the SQL server.

When you install the new SQL client, you need to stop IBM Cognos Controller Batch Service and IBM Cognos FAP Service. Otherwise you will be reminded as below.

More Information:

https://www.ibm.com/support/pages/sqlncli111-provider-not-registered-local-machine-when-testing-database-connection

https://docs.microsoft.com/en-us/answers/questions/28268/sql-native-client-110-support.html

https://www.ibm.com/support/pages/ssl-provider-error-0-existing-connection-was-forcibly-closed-remote-host-error-when-launching-controller-client

https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/apps-forcibly-closed-tls-connection-errors

https://www.ibm.com/support/pages/how-configure-force-controller-use-tls-12

https://www.ibm.com/support/pages/how-enable-ssl-https-cognos-controller

https://www.ibm.com/support/pages/how-configure-controller-use-tls-formerly-ssl-connect-microsoft-sql-database-transit-database-encryption

 

Product:
Microsoft SQL server 2016

Issue:

SSIS job fail with error:

Could not find database ID 42, name ’42’. The database may be offline. Wait a few minutes and try again.

Solution:
Check if the database have change ID.

select * from sys.databases

Above will list the database name and id.

When you do a detach and attach on a database file, you can if you are unlucky, get a new ID on the database. Then old SSIS job that worked yesterday, will fail.

Repeat the detach and attach process to get the database back to correct number.

Move file locations with ALTER command instead; this script will list the commands for each database

SELECT DB_NAME(database_id) AS [Database] 
, name AS [LogicalName]
, type_desc AS [FileType]
, physical_name AS [FilePath]
, 'ALTER DATABASE ' + DB_NAME(database_id)
+ ' MODIFY FILE ( NAME = ' + name + ', FILENAME = ''' + physical_name + '''); 'AS Command
FROM SYS.master_files
WHERE database_id > 4
ORDER BY database_id ASC, type_desc DESC;

You have to change the path to new location before you run the command.

Also copy the database files to the new location before you run the script.

https://blog.coeo.com/moving-sql-databases

 

More Information:

https://docs.microsoft.com/en-us/sql/relational-databases/system-catalog-views/sys-databases-transact-sql?view=sql-server-ver15

Understanding different SQL Server database states

https://www.mssqltips.com/sqlservertip/1420/sql-server-system-databases/

 

Product:

SAS

Microsoft SQL server 2016

Issue:

Some tables are not visible in SAS client program, even do the same user can see the tables in Microsoft SQL Server Management Studio (SSMS) or Tableau.

As the same user can see the tables inside Microsoft SQL Studio, it is not a permission issue.

Solution:

Change the tables and views in SQL to have shorter names. SAS can not show SQL tables or views that have a name longer than 32 characters.

 

More Information:

http://support.sas.com/documentation/installcenter/en/ikforecastwofrsr/75572/HTML/default/index.html

https://www.tableau.com/sv-se/products/desktop

Product:

Planning Analytics 2.0.9.11
Microsoft Windows 2019 Server

Issue:

Newly installed TM1, when start the TM1 application, the first starts, but the second application does not start.

Following error in tm1server.log while starting the second Planning Analytics server : ” TM1.Server E15) Server unable to listen on port 5001. Please check the log file for further details ”

Possible solution:

The Tm1 instance can not read the tm1s.cfg file, and therefor defaults to the standard value of HTTPPortNumber; that is port 5001.

The first starts, the second tm1 instance try to use same port and crash.

Can be that you have missed to include HTTPPortNumber in the tm1s.cfg file.

Add HTTPPortNumber to every tm1s.cfg file with a unique number.

Can be that you inside the tm1s.cfg file you have “Configuration Directory” set to the data folder, but the tm1s.cfg file is in a different folder.

Remove “Configuration Directory” from the tm1s.cfg file.

Let only the path for the Tm1 instance in cognos configuration point out where the tm1s.cfg file is located.

 

More Information:

https://www.ibm.com/docs/en/planning-analytics/2.0.0?topic=tcf-parameters-in-tm1scfg-file

https://pmsquare.com/analytics-blog/2020/6/7/planning-analytics-configuration-file-breakdown

https://www.ibm.com/support/pages/tm1server-e15-server-unable-listen-port-5001

TM1/PA REST API Part 1: Introduction – Getting it Right

Product:
Planning Analytics 2.0.9.11
TM1_version=TM1-AW64-ML-RTM-11.0.911.20-0
Microsoft Windows 2019 server

Issue:
Can not start IBM Planning Analytics Spreadsheet Services service (tm1web).

Error in windows event log:

The IBM Planning Analytics Spreadsheet Services service terminated with the following service-specific error:

Incorrect function.

 

Suggested solution:

Change the user account that run the windows service to local system and try if that works.

Can be that a windows service account – do not have full access to files or memory.

Check the log files in folder D:\Program Files\ibm\cognos\tm1web\wlp\usr\servers\tm1web\logs

More information:

  1. Planning Analytics 2.0.9.11 – December 21, 2021
    IBM Planning Analytics Local version 2.0.9.11 and the cloud release of IBM Planning Analytics with Watson version 2.0.9.11 includes updates for IBM TM1 Server version 11.8.9.