by ·Comments Off on How restart the FAP service from TM1 Architect

Product:
Planning Analytics 2.0.9
Cognos Controller FAP service 10.4.2
Microsoft Windows 2019 server

Problem:
I want my tm1 developer be able to restart the Cognos Controller FAP service without login to the Windows server.

Suggested Solution:
Create two batch files (cmd) to run to start and stop of the FAP service.
Place the batch files in folder c:\scripts on the server where you have both Tm1 instance and FAP service installed.
Then create TI process to call the batch (cmd) files.

Enter below in notepad and save as STARTFAP.CMD

ECHO OFF
REM program to start fap service
REM https://ss64.com/nt/sc.html
REM print — to file
echo ———— >> “c:\Program Files\ibm\cognos\ccr_64\Server\FAP\fapstart.txt”
REM start the service
SC start “IBM Cognos FAP Service”
REM SC start “sdata”
REM print time to file
echo FAP STARTED >> “c:\Program Files\ibm\cognos\ccr_64\Server\FAP\fapstart.txt”
echo %date% %time% >> “c:\Program Files\ibm\cognos\ccr_64\Server\FAP\fapstart.txt”

Enter below in notepad and save as STOPFAP.CMD

ECHO OFF
REM program to stop fap service
REM https://ss64.com/nt/sc.html
REM print —- to file
echo ——— >> “c:\Program Files\ibm\cognos\ccr_64\Server\FAP\fapstart.txt”
REM stop the service
SC STOP “IBM Cognos FAP Service”
REM SC STOP “sdata”
REM print time to file
echo FAP STOPPED >> “c:\Program Files\ibm\cognos\ccr_64\Server\FAP\fapstart.txt”
echo %date% %time% >> “c:\Program Files\ibm\cognos\ccr_64\Server\FAP\fapstart.txt”

Test the files by run them from a administrator command prompt. Check that the log file fapstart.txt is created.


Set the “IBM Cognos FAP service” to Manual.
Start TM1 architect and create a new TI process, enter below text, and save as FAPSTOP

Then create other TI process, enter below text, and save as FAPSTART

Ensure you use correct ‘ or ” at the difference places.

If you share your FAP folder as FAP$ , on the windows server, to the TM1 developer group, then they can check both the error.log file and your fapstart.txt log file.

More information:
https://www.tm1forum.com/viewtopic.php?t=12599

https://www.toolbox.com/tech/big-data/question/run-an-external-command-from-tm1-052112/  

https://www.ibm.com/support/pages/how-perform-fap-reset-sequence-re-synchronise-controller-data-publishing-tm1

https://www.ibm.com/support/pages/safe-method-restart-tm1-servers-ensure-it-does-not-break-controller-fap-publish

by ·Comments Off on Cannot create more than one clustered index on table ‘xdbtrickle’

Product:
Cognos Controller 10.3.x
Microsoft Windows 2012 server

Problem:
After restore of a backup of a database, when you run the upgrade script in DBCONV you get a error message:

Running DB step: 882 ….
com.microsoft.sqlserver.jdbc.SQLServerException: Cannot create more than one clustered index on table ‘xdbtrickle’. Drop the existing clustered index ‘idx_xdbtrickle_vat1’ before creating another

Solution:

Ask the DBA to drop the two index. And then run the upgrade again.

After the DBA have restored a backup of the Cognos Controller database, you need to go to the controller server, and inside Cognos Controller Configuration add the new database (if it not already exist). Fill in the fields as appropriate. Data source is the SQL host (server).

Click on the green arrow to go to the database conversion.

Click on CONNECT and then on UPGRADE.

When done, and no errors, click on CLOSE.

Then you should in Controller Configuration go to Report Server tab and click on the CHECK icon, to update the data sources in Cognos BI.

The sql commands that give issues are:

IF NOT EXISTS (SELECT * FROM sysindexes WHERE id = object_id(‘XDBTRICKLE’) AND name = ‘NC_XDBTRICKLE_SEQUENCNO’)
CREATE CLUSTERED INDEX NC_XDBTRICKLE_SEQUENCNO ON xdbtrickle (sequenceno ASC);

IF NOT EXISTS (SELECT * FROM sysindexes WHERE id = object_id(‘XDBTEXTTRICKLE’) AND name = ‘NC_XDBTEXTTRICKLE_SEQUENCNO’)
CREATE CLUSTERED INDEX NC_XDBTEXTTRICKLE_SEQUENCNO ON xdbtexttrickle (sequenceno ASC);

 

More information:

https://www.ibm.com/support/pages/how-backup-and-restore-db2-databases-use-cognos-controller

https://www.ibm.com/support/pages/how-move-controller-databases-new-database-server-basic-instructions

https://www.ibm.com/support/pages/ibm-cognos-controller-104x-fix-list

https://www.ibm.com/support/pages/cognos-controller-builds-ccr-name-and-database-version

Currently Supported Versions of Controller (incl. Interim Fixes):

Updater Kit Build CCR Version DB Version Comment
10.4.2000.1063 10.4.2000.292 10.4.2 IF7 1010 Generally available (FixCentral)
10.4.2000.1018 10.4.2000.270 10.4.2 IF3 1010
10.4.2000.1013 10.4.2000.267 10.4.2 IF2 1010
10.4.2000.1002 10.4.2000.259 10.4.2 IF1GA 1010 Generally available (FixCentral)
10.4.2000.185 10.4.2000.252 10.4.2 RTM 1010 Available via Passport Adv. (full install)

See more at IBM web site.

by ·Comments Off on ERROR [fap.service.schedule.Scheduler] [schedulerThread], Something severe has happened

Product:
Cognos Controller FAP service 10.4.2
Microsoft Windows 2019 server

Problem:
How do i know if the FAP service stopped working, even do the windows “IBM Cognos FAP Service” is running?

Suggested solution:
Ask the IT department monitor team (splunk) to collect the log file from the FAP service on the TM1 server.
You find the file error.log in folder D:\Program Files\ibm\cognos\ccr_64\Server\FAP

Let there tool scan the file for the keyword ERROR, and if that is found send a e-mail alert to the TM1 people. Next step would be to check the TM1server.log file for more clues. Then they can stop the FAP service and restart it. Also recommended to do a FAP Initial publish at this time.

If the stop have been long, they may need to also do this;

https://www.ibm.com/support/pages/how-perform-fap-reset-sequence-re-synchronise-controller-data-publishing-tm1

There are 3 main components for FAP:

  1. Microsoft SQL Server for the Controller machine
  2. FAP TM1 Server on the TM1 machine
  3. FAP Service Software on the TM1 machine

If any of these machines needs to be rebooted or taken offline for any reason – the order in which the FAP related services is important.  If either TM1 server or database server is shutdown or rebooted – the FAP service on the TM1 server must be restarted.  The order is important – the FAP Service for the Controller server must be started last.

If the ram memory on the TM1 server is to low – you can see this in the error.log file

| ERROR [common.persistence.retry.RetryInterceptor] [pool-2-thread-1], Trial 1 failed for method refreshMdxHierarchy
java.lang.reflect.InvocationTargetException….
Caused by:
com.ibm.cognos.fap.common.exception.LoggedException: Could not create stub TI process: refreshMdxHierarchyProcess….

If the network make FAP service loose contact with the SQL server – you can see this in the error.log file

| ERROR [fap.service.schedule.Scheduler] [schedulerThread], Something severe has happened…..

More information:
https://www.ibm.com/support/pages/frequently-asked-questions-about-ibm-cognos-controller-extended-fap

https://www.ibm.com/support/pages/working-cognos-controller-financial-information-financial-analytical-publisher-fap

https://www.ibm.com/support/pages/how-configure-financial-analytics-publish-fap-allow-publishing-controller-data-planning-analytics

by ·Comments Off on Server is not reachable or still initializing

Product:
Cognos Controller Web 10.4.2
Microsoft Windows 2019 server

Problem:
User browse to Controller web and get a message

Server is not reachable or still initializing, please refresh the page in a few seconds

Possible Solution:

Depending on the URL you enter in your Internet Explorer you will succeed or not.

This give above error

http://servername:9080/#!/Login

If you enter the FQDN like this it will work

http://servername.domain.com:9080/#!/Login

The error can also be that you are to fast, the controller web will need some time to start up.

More information:

https://www.ibm.com/support/knowledgecenter/SS9S6B_10.4.2/com.ibm.swg.ba.cognos.ctrl_web_ug.doc/c_web_workflow.html

https://www.ibm.com/support/pages/link-planning-analytics-not-configured-when-configure-controller-web-connect-tm1-pa-web-caused-apar-ph19087

by ·Comments Off on Controller Web blank screen

Product:

Cognos Controller Web 10.4.2

Microsoft Windows 2019 Server

Problem:
When user browse to Controller Web on URL http://servername.domain.com:9080/ they see a blank page.

Solution:
Inside Internet Options for IE change the value for Compatibility View Settings.

Uncheck both, so this is not used.

Close and then test again.
Controller Web may need in Internet Explorer to Deselect the “Display intranet sites in Compatibility View”.

In some cases the controller web windows server need to be removed from the Internet Options security local intranet zone;

Go in there and remove the servers listed under sites.

More information:

https://support.microsoft.com/en-us/topic/fix-site-display-issues-with-compatibility-view-in-internet-explorer-11-9a0a3a6e-89be-518f-ff56-c491b528b302

https://hawaiianair.custhelp.com/app/answers/detail/a_id/2613/~/internet-explorer-compatibility-view-%28ie9%2C-10%2C-%26-11%29

 

by ·Comments Off on PRS-NOP-1056 The contents of the node operation “append” could not be parsed.

Product:

Cognos Controller Web 10.4.2
Microsoft Windows 2019 server

Problem:
After login to database in Controller Web you get a error.

PRS-NOP-1056

The contents of the node operation “append” could not be parsed.

DetailsExpand

org.dom4j.DocumentException : Error on line 3 of document : Open quote is expected for attribute “name” associated with an element type “param”.

Possible Solution:
The ” is in the wrong format in the file variables_CCRWeb.xml

Start Notepad++ as administrator

Open D:\Program Files\ibm\cognos\analytics\templates\ps\portal\variables_CCRWeb.xml

Change to

<CRNenv c_cmd=”://controllerservername.domain.com:9080/#!/CamLogin”>
<cookies>
<param name=”_passport”/>
</cookies>
</CRNenv>

Save and restart the controller web services.

More information:

https://www.ibm.com/support/pages/how-configure-controller-web-use-cognos-cam-authentication

by ·Comments Off on A potentially dangerous Request.Path value was detected from the client (&).

Product:
Cognos Controller Web 10.4.2
Microsoft Windows 2019 server

Problem:
At a new installation when browse to the controller web, you get a error after you have logged in.

Error Message:

Server Error in ‘/ibmcognos’ Application.

A potentially dangerous Request.Path value was detected from the client (&).
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Web.HttpException: A potentially dangerous Request.Path value was detected from the client (&).

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

[HttpException (0x80004005): A potentially dangerous Request.Path value was detected from the client (&).]
System.Web.HttpRequest.ValidateInputIfRequiredByConfig() +11986128
System.Web.PipelineStepManager.ValidateHelper(HttpContext context) +52

Version Information: Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.7.3770.0

Possible solution:
Some of the configuration files contain wrong characters. The web server does not like to get the & sign in the URL that is sent in the request between CA11 and CONTROLLER WEB. You get same error in IE or Chrome web browser.
In this case the com.ibm.cognos.fcm.web.properties file had some / replaced with & characters

Ensure that the lines point correct

biUrl=http://servername.domain.com/ibmcognos/bi&v1&disp

should be

biUrl=http://servername.domain.com/ibmcognos/bi/v1/disp

Open D:\Program Files\ibm\cognos\ccr_64\fcmweb\wlp\usr\servers\fcm.web\com.ibm.cognos.fcm.web.properties in notepad++ to edit.

Check also files like D:\Program Files\ibm\cognos\analytics\templates\ps\portal\variables_CCRWeb.xml

More information:

https://www.ibm.com/support/pages/how-install-controller-web

https://www.ibm.com/support/knowledgecenter/en/SS9S6B_10.4.2/com.ibm.swg.ba.cognos.ctrl_inst.doc/t_contrweb_configure.html

by ·Comments Off on How change port for Cognos LCM

Product:
Cognos Analytics 11.1.7
Product_version=11.1 R7 (LTS)
install_type=Custom
selected_features=FTR_LCM
IBM-JRE_version=8.0.6.15
LCM_BUILD_version=11.1.7-2009181443
LICENSE_version=11.1.7-2009291107
Microsoft Windows 2019 server

Problem:
When starting the Cognos® LifeCycle Manager (LCM) on the same server as CA11 is installed, they use the same port 9300.

Suggested Solution:

Start notepad++ as administrator
Change port on LCM by open D:\Program Files\ibm\cognos\lcm\wlp\usr\servers\lcm\server.xml in notepad++

Change the row <httpEndpoint host=”*” httpPort=”9305″ httpsPort=”-1″ id=”defaultHttpEndpoint”/> to use 9305 instead of 9300
Save the file.
Start a CMD as administrator.
Go to folder D:\Program Files\ibm\cognos\lcm
Run lcm_start.bat to start the service

You need to update the C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IBM Cognos LCM\LCM URI internet shortcut to reflect the change of port

Then after that it should work to start and use it

More information:

https://www.ibm.com/support/knowledgecenter/SSEP7J_11.0.0/com.ibm.swg.ba.cognos.ug_upgr_mngr.doc/upgr_mngr.pdf

https://www.ibm.com/support/knowledgecenter/en/SSEP7J_11.0.0/com.ibm.swg.ba.cognos.ug_upgr_mngr.doc/t_upgr_mngr_create_project.html#upgr_mngr_create_project

by ·Comments Off on Install FAP client on Citrix server

Product:
Cognos Controller 10.4.2
Microsoft Windows 2016 server

Problem:
How install FAP client on Citrix server for several different environments?

Solution:
First you must have SQL client installed on the server, as the FAP client talks direct with the SQL database that have the Cognos Controller database and the specific FAP database.
Download sqlncli64.msi and install it.
https://www.microsoft.com/en-us/download/details.aspx?id=50402
Then go to your Cognos Controller server where you have installed FAP,
Copy following files from folder C:\Program Files\ibm\cognos\ccr_64\webcontent\ccr
C1.Win.C1FlexGrid.4.dll
ctrl_ug_fapug_contextlinks.csv
FAPClient.exe
FAPClient.exe.config

Place this files in a separate folder on the citrix server like c:\ibm\fap.

Right-click on FAPClient.exe and create a shortcut to the public desktop for the users.
To be able to pre-populate the login, so the user do not need to write server name every time.

You update the FAPClient.exe.config file with the default values all user should get.

Best is if you copy the FAPClient.exe to a duplicate file called FAPClientQ.exe and then do the same with file FAPclient.exe.config file so you also have a FAPClientQ.exe.config file.
Repeate so you have a set for TEST called FAPClientT.exe and FAPClientT.exe.config, like this:

Open the FAPClientQ.exe.config file in NOTEPAD++ and add the lines for your QAS system database server like:

<setting name=”Server” serializeAs=”String”>
<value>roger2</value>
</setting>
<setting name=”Database” serializeAs=”String”>
<value>FAP</value>
</setting>
<setting name=”User” serializeAs=”String”>
<value>Fastnet</value>

Save the file, and then edit the FAPClientT.exe.config file with the values to your TEST system.

Edit the FAPClient.exe.config with the values for your PRODUCTION system.

When a user start FAPClientQ.exe program, the values in the corresponding config file is used, and the user only have to enter the password to get access to the FAP program.

Create 3 different shortcuts to the .exe files, and present to the user in the Citrix portal.

More information:

https://www.ibm.com/support/pages/how-install-fap-client-end-users-desktop-pc

https://www.ibm.com/support/pages/how-installupgrade-controller-serverclient

The values is then saved in the users windows profile in a folder similar to this C:\Users\%user%\AppData\Local\IBM_Corp\FAPClient.exe_Url_kyxu0h5bacedq1foqhff0niw3305yy1o\10.4.2000.145\user.config

by ·Comments Off on TM1WEB, an error has occurred when using TLS

Product:
Planning Analytics 2.0.9.3
Microsoft Windows 2019 server

Problem:
After SSL setup in TM1WEB, then TM1WEB does not list any TM1 servers to connect to.
In TM1 APP WEB (pmpsvc) when you click on a contributor link you get a “an error has occurred”.

TM1 applications should use the internal Cognos certificate, ibmtm1.arm.

Please follow the official documentation, as it changes with every new version of PA.

Possible Solution:

As TM1Web is using a new keystore, you must include the TM1 Server certificates in the keystore file or you will be unable to see your TM1 Servers, point to that the SSL CERT import failed.

Redo the setup from; but first take a backup of all keystores files you use.

https://www.ibm.com/support/pages/how-configure-ssl-ibm-planning-analytics-spreadsheet-services-using-existing-keystore

If you got a PFX file with the certificate chain and key as you need you can use it to setup SSL.

For PMPSVC do this;
Start IKEYMAN.EXE as administrator from C:\Program Files\ibm\cognos\tm1_64\jre\bin folder
Open CAMkeystore file from C:\Program Files\ibm\cognos\tm1_64\configuration\certs folder
It is a PKCS12 file with password  NoPassWordSet

In Personal Certificates remove the encryption certificate
As you already have a correct PFX file, you click on IMPORT button.
Select you PFX file and enter the password you got with the PFX file from the Certified Authority who created the PFX for you.

You will be asked to rename the personal certificate, enter encryption and press OK.
Go then to Signer Certificates and check that you have also got the root and  intermediate certificates for your server. Double click on the certificates to check they have correct date and DNS alias.

You may need to import the \bin64\ssl\ibmtm1.arm file again as Signer Certificates.
Close IKEYMAN.

Go into Cognos Configuration for Planning Analytics (TM1).
Edit the TM1 Applications Properties.  Update all URI references to contain your fully qualified address, as well as change the http to https.
Edit the Local Configuration properties.  Add the property StandaloneCertificateAuthority and set it to True.

Edit the Cryptography > Cognos properties.  Change the Use third party CA? to True.
Save the Cognos configuration for Planning Analytics (TM1).
Start the TM1 service.

For new TM1WEB:

Export the Root and Intermediate certificates from your web browser, by go to the cognos site, and then select each certificate and save them as Base-64 encoded X.509 cer files.
Stop IBM Cognos TM1 service.
Copy the PFX file you got to C:\Program Files\ibm\cognos\tm1web\bin64\ssl folder

Open C:\Program Files\ibm\cognos\tm1web\wlp\usr\servers\tm1web\server.xml in notepad++
Update the ports you want to use, here 9510 for SSL and enter -1 to disabled HTTP.
<httpEndpoint id=”defaultHttpEndpoint” httpPort=”-1″ httpsPort=”9510″ host=”*” removeServerHeader=”true”>

Add as last line:
<keyStore id=”defaultKeyStore” location=”${wlp.user.dir}/../../bin64/ssl/customKeystore.pfx” password=”xxxxthepasswordxxxx” />

Replace with your PFX file name and the password for that file.
Go to C:\Program Files\ibm\cognos\tm1web\jre\bin\ in a DOS prompt.

Import the TM1 cert with command:
keytool -importcert -keystore ..\..\bin64\ssl\customKeystore.pfx -storepass xxxxthepasswordxxxx -storetype pkcs12 -noprompt -alias ibmtm1 -file ..\..\bin64\ssl\ibmtm1.arm

Copy your Root and Intermediate certificate files to your \tm1web\bin64\ssl\ directory

Import the Root and Intermediate certificates with this command:
keytool.exe -import -trustcacerts -file “..\..\bin64\ssl\ca.cer” -keystore “..\..\bin64\ssl\tm1store” -alias ca -storepass applix
keytool.exe -import -trustcacerts -file “..\..\bin64\ssl\intermediate.cer” -keystore “..\..\bin64\ssl\tm1store” -alias intca -storepass applix

CER or PEM files should work both. Now the new tm1store is updated with your root certs.

Start your IBM Planning Analytics Spreadsheet Service

Test to browse to https://paservername.domain.com:9510/tm1web

Check for errors in file C:\Program Files\ibm\cognos\tm1web\wlp\usr\servers\tm1web\logs\console.log

More information:

https://www.ibm.com/support/pages/use-ikeyman-configure-custom-ssl-certificates-tm1web

https://www.ibm.com/support/pages/how-configure-ssl-ibm-planning-analytics-spreadsheet-services-using-existing-keystore

https://www.ibm.com/support/knowledgecenter/SSVJJU_6.3.0/com.ibm.IBMDS.doc/admin_gd175.htm

https://www.sslshopper.com/ssl-converter.html

To check a PFX file;

One your laptop install openssl from here https://github.com/git-for-windows/git/releases/tag/v2.23.0.windows.1 – get the file Git-2.23.0-64-bit.exe. Run the installation with all default values.

Start a command prompt as administrator. Go to folder C:\Program Files\Git\mingw64\bin

openssl  pkcs12  -in  c:\temp\customKeystore.pfx -out  c:\temp\good.pem  -nodes

Open good.pem  in notepad++ to check it contains 4 certificates.

The PEM format is the most common format that Certificate Authorities issue certificates in. PEM certificates usually have extensions such as .pem, .crt, .cer, and .key. They are Base64 encoded ASCII files and contain “—–BEGIN CERTIFICATE—–” and “—–END CERTIFICATE—–” statements. Server certificates, intermediate certificates, and private keys can all be put into the PEM format.