IBM Support

Cognos Analytics Db2 CLI connection fails using Db2 Client 11.5.8 and SSL

Troubleshooting


Problem

When attempting to create a connection to Db2 using the CLI connection type in Cognos Analytics, users may receive errors related to the SSL version being used.
This error is a result of the latest Db2 clients using a GSKit version which forces TLS 1.3 communication. TLS 1.3 is not supported by Cognos Analytics at this time. Therefore, when testing the CLI connection, users will see SSL related errors. 
Note that JDBC connections to Db2 will succeed. 

Symptom

When testing the data source connection, users see the following error:
QE-DEF-0285 The Logon Failed
Upon expanding the details of the error message, users will see evidence of a communication error related to SSL coming from the Db2 CLI driver: 
[IBM][CLI Driver] SQL30081N A communication error has been detected. Communication Protocol being used: "SSL". Communication API being used: "Sockets". Location where the error was detected: "". Communication Function detecting the error: "SQLccSetClientSSLVersions". Protocol specific error code(s): "701", "*", "*". SQLSTATE=08001. 

Cause

Cognos uses an older version of GSKit, which does not support TLS 1.3. With the 11.5.8 Db2 client, the client will attempt to use TLS 1.3 unless otherwise specified, which causes the SSL version error.

Resolving The Problem

In order to resolve this problem, the DB2 database must be configured to accept TLS 1.2 connections. This can be done by modifying the DB2 client configuration file. 
Customers are advised to consult their DB2 database administrator and/or refer to the DB2 documentation

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTSF6","label":"IBM Cognos Analytics"},"ARM Category":[{"code":"a8m50000000Cl6nAAC","label":"Data Source"},{"code":"a8m50000000Cl5lAAC","label":"Security-\u003ESSL\/Cryptography"}],"ARM Case Number":"TS011589486","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"11.1.7;11.2.4"}]

Product Synonym

CA; DB2

Document Information

Modified date:
11 January 2023

UID

ibm16854401