We are experiencing an issue while configuring IBM Cognos Framework Manager 11.2.4. During the configuration process, we encountered the following error:

[Cryptography]

[ ERROR ] CAM-CRP-1132 An error occurred while attempting to request a certificate from the Certificate Authority service. Unable to connect to the Certificate Authority service. Ensure that the Content Manager computer is configured and that the IBM Cognos services on it are currently running. The HTTP result code '401' was returned from the server.

 

 Could you please advise on resolving this issue?

------------------------------
Mustafa Demirel
------------------------------

Hi Mustafa...well...first, be sure to double-check all of the values in your IBM Configuration page for Framework Manager, you should be able to test each section as you go:  Gateway and Dispatcher on the Environment page (ours is pointing to our cloud servers), make sure that your 'Standards conformance' is correct on the Cryptography page (We use NIST SP 800-131A) as well as the TLS value (We use TLS1.2) and Digest algorithm (We use SHA-256) with a Signing key pair algorithm of RSA.  It is important to be using the correct confidentiality algorithms as well (We use Advanced Encryption Standard with Cipher Block Chaining (CBC) Mode (256-bit key).

If you are sure that everything is accurate, you may want to delete the 'certs' and 'csk' folders and subsequent keys from your FM instance (make sure that your IBM Cognos Configuration is closed in order to avoid a locking issue). Then allow the keys to be regenerated (you may need to re-populate your config pages though).

Failing that, I would recommend opening a ticket with IBM support to have them walk you through things.

------------------------------
Dion Paul
Cognos Administrator
Ascend SC
Houston TX
dpaul@scgts.com
------------------------------

This might be worth checking out as well: Framework Manager unable to connect to server after configuring https

------------------------------
Tomáš Polakovič
------------------------------

Hi Mustafa, This may be assumed, but if Framework Manager is on a separate server than your Content Manager, crytpo keys won't generate if the service isn't running on the Content Manager.

------------------------------
Audrey Howard
------------------------------

Hi Mustafa, 

this isssue is caused by a defect when gateway uses single signon which was fixed with FM 12.0.4. IF2

It also affects transformer in the same way. 

You can upgrade to the version mentioned above or try to enable anonymous access in authentication settings on sso virtual directory in IIS on your gateway before saving Cognos Configuration of FM or Transformer. 

You can revert the anonymous setting back to disabled after saving was successful. 

best regards, 

------------------------------
Christian Misslinger
BI plus GmbH
Bahnhofstraße 53, A-6300
Wörgl
c.misslinger[at]biplus.at
------------------------------

Original Message:
Sent: Wed February 19, 2025 10:14 AM
From: Audrey Howard
Subject: Issue Configuring Framework Manager 11.2.4 – Error Cryptography

Hi Mustafa, This may be assumed, but if Framework Manager is on a separate server than your Content Manager, crytpo keys won't generate if the service isn't running on the Content Manager.

------------------------------
Audrey Howard
------------------------------