Question

How can the Cryptographic Keys be regenerated?

Cause
There are several instances when the Cryptographic Keys may need to be regenerated.

Answer
According to the Administration and Security Guide:

Steps to Regenerate Cryptographic Keys

1. Stop the Cognos services.
2. On the Content Manager computer, back up the existing cryptographic keys by saving the
following directories to an alternate location that is secure:

● c10_location/configuration/csk
● c10_location/configuration/encryptkeypair
● c10_location/configuration/signkeypair
Save the following files to an alternative location that is secure
● c10_location/configuration/caSerial
● c10_location/configuration/cogconfig.prefs
3. Open Cognos Configuration, go to the File menu and select "Export As",click yes at the
prompt and save the file as backup.xml in the c10_location/configuration folder.
4. Delete the directories and files from point 2.
Clear all the contents of the c10_location/temp/ directory
5. In the c10_location/configuration folder, rename the existing cogstartup.xml to cogstartup.old
6. In the c10_location/configuration folder, rename backup.xml to cogstartup.xml.
7. Open Cognos Configuration, save the configuration and restart the services.
8. Repeat steps 1 - 7 on all computers that have Cognos components installed.

Note: The Dispatchers and Gateways do not have a caSerial file.

Refer to the Administration and Security Guide > Installation and Configuration Problems ->
CAM-CRP-1315 Error when saving Configuration for your specific product version .

http://www-01.ibm.com/support/docview.wss?uid=swg21383421

Technote (FAQ)
Question
How can the Cognos Analytics 11 cryptographic keys be regenerated?

Answer
Steps to regenerate the cryptographic keys are as follows:
1. Stop the running of your service in Cognos Configuration.

2. On the Content Manager computer, click ‘File > Export As’.

3. Choose ‘Yes’ at the prompt and save the file. For example, name it ‘backup.xml’ which will
be stored in the c11\configuration folder.

4. Close Cognos Configuration.

5. On the Content Manager computer, create a backup of the following files and directories
before moving them to a different, secure location (as during the cryptographic keys regeneration
process they will be re-created):

The files are:

· c11/configuration/cogstartup.xml

· c11/configuration/caSerial

· c11/configuration/certs/CAMCrypto.status

· c11/configuration/certs/CAMKeystore

· c11/configuration/certs/CAMKeystore.lock

· c11/temp/cam/freshness

The directory is

· c11/configuration/csk

6. In the c11\configuration folder, rename ‘backup.xml’ to ‘cogstartup.xml’.

7. Open Cognos Configuration, save the configuration and start the services.
8. Repeat steps 1-7 on all computers that have Cognos Analytics Server components installed.