Hey Brenda!
When we were back on 10.2.2 we occasionally had the search index files get corrupted. So I had implemented a weekly process that called a batch file that stopped the cognos windows services, deleted the index search files and then restarted the windows services. However, even then, when manually bringing down and restarting Cognos I always used the configuration.
When we migrated to 11.0.12 often times Cognos would not come up correctly when just starting the windows services. Also I think it was in 11.0.13 or maybe 11.1.5 (which we are currently on) when IBM finally fixed the search files corruption so I no longer use that weekly process (though I still occasionally delete the search\collections folder before restarting to force it to rebuild the search index - keeps it more efficient).
As far as using windows services vs configuration, I haven't seen any major real difference except for, as discussed, having the opportunity to re-save the configuration, thus refresh the encryption keys. But for me, always using the configuration at least to start Cognos I get to see all the messages as it's coming up to ensure there aren't any problems. Something that's more difficult to see in the Windows Event Viewer and heaven forbid actually trying to parse the Cognos log files!
Regards,
Wayne
------------------------------
Wayne Westlake
------------------------------
Original Message:
Sent: Mon June 27, 2022 12:57 PM
From: brenda grossnickle
Subject: What happens when configurations\certs expire and how to know when they will expire
Many of our customers are in the habit of stopping and starting the cognos service from windows services, and not from cognos configuration. Is this a bad habit? besides resetting the certificate expiration date, what are the advantages of using cognos configuration and what are the disadvantages of using windows services to restart cognos?
------------------------------
brenda grossnickle
BI Programmer Analyst
FIS
Original Message:
Sent: Thu June 23, 2022 01:43 PM
From: brenda grossnickle
Subject: What happens when configurations\certs expire and how to know when they will expire
So when the certificates in your configuration\certs folder expire, what happens? Does cognos fail. Do you then have to manually regenerate the keys?
And if you just have the Cognos default certificates with the default expiry dates, what determines the expiry date?
When you regenerate your keys, supposedly the expiry date is set to 730 days out. But restarting the cognos service or saving from cognos configuration resets the dates? And there is something about a freshness indictor?
https://www.ibm.com/support/pages/how-verify-when-encryption-keys-crypto-keys-will-expire#:~:text=Summary,you%20can%20update%20them%20beforehand.
https://www.ibm.com/support/pages/how-find-out-when-cryptographic-keys-will-expire
------------------------------
brenda grossnickle
BI Programmer Analyst
FIS
------------------------------
#CognosAnalyticswithWatson