Not able to generate cryptographic keys for second instance of framework manager

[Daljith]

Hi Cognoisers,

I have one cognos framework manager instance running for dev environment.
I created second instance with different ports. But when I try to open framework manager and change the ports for the new instance, it is not able to create cryptographic keys when I try to save it.

Below is the error I am getting. Any suggestion will be helpful.

[ ERROR ] CAM-CRP-1132 An error occurred while attempting to request a certificate from the Certificate Authority service. The Certificate Authority service returned the following error: CAM-CRP-1259 Unable to authorize a Certificate Authority Service certificate request.

[MFGF]

I created second instance with different ports. But when I try to open framework manager and change the ports for the new instance, it is not able to create cryptographic keys when I try to save it.

So you have one instance of Framework Manager and two instances of Cognos 10 BI running on different ports?

I suspect that because FM already had a valid set of cryptographic keys from the first BI instance it is reluctant to get a different set from a different BI instance. You might try manually copying the csk, signkeypair and encryptkeypair folders from your second BI instance to your FM instance. Take backup copies first, though

MF.

[Daljith]

Hi MF,

Sorry for late reply. I was stuck with some other issues.

Here are the details:

Two distributed cognos instances
1:  Cognos using Tomcat   (Gateway and Dispatcher on same server, Content Manager Database on separate server)
2.  Cognos using Websphere (Gateway and Dispatcher on same server, Content Manager Database on separate server)

Now, on my local system, I had one instance of framework manager that was pointing to BI Instance 1 that I mentioned above.
I used the cogstartup.xml of 1st instance and tried to configure 2nd instance of Framework Manager on my local system for 2nd BI Instance.

Though I see first instance of FM works perfectly fine on my system but the second I am not able to configure.

1. I tried to delete the old encryptkeypair, signkeypair, csk and .prefs file /temp/freshness files and tried to regenerate the keys. it did not work.  Same error that I mentioned above.
2. Tried to enter the details manually into cogstartup.xml removing the one that I took from instance 1. It did not work.
3. Tried using despatcher url in place of gateway in second instance of FM, it did not work.

In all the cases, the error I got was the same. PKCS# 7 : not able to generate the crypto keys. I opened PMR with IBM and they told me that it is not able to connect to Content Manager database.

But the thing is, if I open the URL in internet explorer, I am able to use the second instance of BI and able to run the reports successfully on my local system, in that case, I am not able to understand how it is not able to connect to Content Manager database to generate the keys specifically for csk folder.

I checked the ports that is used for content manager are not restricted to my system. Database is running otherwise I was not able to execute the reports. I am still stuck. IBM did not get back to me on this after this discussion on content manager.

In case, someone has any idea where else can I look into to fix the issue.

[SomeClown]

Might be the non-80 ports are blocked to the second server