Hello everyone, we recently upgraded our test environment of Cognos Analytics from 11.1.3 to 11.1.7 FP3. That went well with an over the top installation. I am now trying to regenerate the certificates and getting a PKI Entry not found.
IBM has produced new documentation for certificate managed in Cognos with this version at https://www.ibm.com/docs/en/cognos-analytics/11.1.0?topic=options-certificate-management-in-cognos-analytics.
One item of note is that instead of manually deleted files and folders related to certs, IBM has a shorter method that has you open Config and set the Use Third Party To CA to false and then save. Everything went well until I tried to import the new certificate into the keystore. Prior to that, importing the CA root went without issue. When I search IBM for the PKI entry not found I find a single article https://www.ibm.com/support/pages/node/1087017 that indicates that the signature algorithm for the certificate must be SHA256WithRSA. However, the new certificate is definitely the correct signature algorithm. I did note that in this version the jre location has changed from install_location/jre to install_location/ibm-jre/jre. I was sure to set my JAVA_HOME environment variable.
I have opened a case with IBM but they immediately sent me the 'old link' for the ssl, and when I responded with a question about the new documentation they responded that they need to compare articles!
Any advice is greatly appreciated.
Thanks
RESOLVED:
i missed the step that said to delete the contents of the certs folder before generating the new cert. I restored to snapshot and repeated with that step and it went very smoothly.