Problem(Abstract)
How to recover from the "CAM-CRP-1064 Unable to process the PKCS #7 data because of an internal error. Unable to find an appropriate common symmetric key to decrypt the data." error after pointing CRN install (located on a SAN) to another AIX server.
Symptom
CAM-CRP-1064 Unable to process the PKCS #7 data because of an internal error. Unable to find an appropriate common symmetric key to decrypt the data.
Cause
Moving the CRN install to another server will cause this error to occur as we encrypt the cognos configuration based on the server it is initially installed on.
Environment
AIX
CRN installed on a SAN
Resolving the problem
The cognos configuration needs to be redone from scratch.
Steps:1) Open the Cognos Configuration Tool and make a note of all the settings that you have modified (take screen shots etc.)
2) Close cognos configuration and then rename the crnstartup.xml to crnstartup.xml_old in the <crninstall>/configuration folder.
3) In the <crninstall>/configuration folder, rename the csk, encryptkeypair, signkeypair folders.
4) Restart cognos configuration and re-enter all the configuration changes you had noted in step 1. Save the configuration and start services.
----------------------------------------------------------------------------------------------------------------------------------------------------------------
简单说明下:
官方的解决方案其实就是把IBM Cognos Configuration的所有配置信息给去掉,再次打开的时候让Cognos Configuration找不到任何配置信息,然后生成默认配置信息。故解决方案里的第一步就是要你保存配置信息,并推荐说可以用截屏的方式。
由此我们也可以明确了 Cognos Configuration配置信息所存的文件及其路径:<crninstall>/configuration/crnstartup.xml,(本人在Cognos 10.1版本未能找到crnstartup.xml该文件,crnstartup.xml该是早起版本的命名形式,10.1版本的是cogstartup.xml) 另三个密钥相关文件路径:<crninstall>/configuration/csk,<crninstall>/configuration/encryptkeypair,<crninstall>/configuration/signkeypair,
IBM官方的troubleshooting还是比较靠谱的,这里不得不佩服下老外的技术文档的规整。
添加新评论0 条评论