IBM Support

Required step for upgrading GSKit when configuring CA 11.0.9 with IBM HTTP Server on Windows

Question & Answer


Question

When configuring Cognos Analytics 11.0.9 with IBM HTTP Server on Windows, Cognos Administrator need to be advised with following product updates · Cognos Analytics 11.0.9 includes upgraded version of IBM GSKit (Global Security Kit 8.0.50.84) · IBM HTTP Server could contain earlier version of GSKit such as 8.0.50.79 (IHS9) or 8.0.50.69 (IHS8.5.5) · Typical example of this implementation is configuring SSL/TLS as well as Single Sign On (SSO) · When trying to use mod2_4_cognos.dll (for IHS9) or mod2_2_cognos.dll (for IHS8.5.5), following behaviors can be observed - Some of DLL files such as CAM_Crypto_Interface.dll during startup of IBM HTTP Server (process httpd.exe) fails loading - Gateway log (gwmod2.log) displays following error message FATAL t:5652 isOpen() returned false after new CCLCrypto FATAL t:5652 SSLGatewaySocket::Open(): crypto failed to load, look for earlier

Cause

GSKit (Global Security Kit) version difference between IBM HTTP Server and Cognos Analytics 11.0.9

Answer

To resolve, you need to update GSKit version on IBM HTTP Server. Please follow the next steps.

1. Find GSKit version by going into {IBM HTTP Server Install Location}/bin. Type

gskver.bat

This will display version number of GSKit

For example:

@(#)CompanyName: IBM Corporation

@(#)LegalTrademarks: IBM

@(#)FileDescription: IBM Global Security Toolkit

@(#)FileVersion: 8.0.50.69

For details, please see http://www-01.ibm.com/support/docview.wss?uid=swg21576643

2. Download Location for GSKit version - for example, 8.0.50.82 (release date: September 18, 2017) or 8.0.50.84 (release date: December 13, 2017) can be downloaded from following Fix Central URL

https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=Security+Systems&product=ibm/Tivoli/IBM+Global+Security+Kit&release=All&platform=All&function=fixId&fixids=8.0.*&source=fc


i. Select the one you need. For example, select 8.0.50.82-ISS-GSKIT-WinX64-FP0082

for Windows 64 bit operating systems

ii. Stop any related processes such as Cognos and IBM HTTP Server


iii. Extract the zip file and find two executable files

For example:

iv. First, install gsk8crypt32.exe and select the {IBM HTTP Server Install Location}/gsk8. Click Next until installation is completed


For example:

v. Next, install gsk8ssl32.exe and follow the same step by browsing to {IBM HTTP Server Install Location}/gsk8

vi. Check GSKit version by going into {IBM HTTP Server Install Location}/bin. Type gskver.bat

For example:

@(#)CompanyName: IBM Corporation

@(#)LegalTrademarks: IBM

@(#)FileDescription: IBM Global Security Toolkit

@(#)FileVersion: 8.0.50.82

For details on upgrade instruction for GSKit, please see http://www-01.ibm.com/support/docview.wss?uid=swg21631462

vii. If necessary, share trust between Cognos and HTTP Server. Please see https://www.ibm.com/support/knowledgecenter/en/SSEP7J_11.0.0/com.ibm.swg.ba.cognos.inst_cr_winux.doc/t_inst_enablesslonthewebserver.html

viii. Restart IBM HTTP Server and launch Cognos Analytics gateway URL

[{"Product":{"code":"SSTSF6","label":"IBM Cognos Analytics"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Administration and Configuration v11x","Platform":[{"code":"PF033","label":"Windows"}],"Version":"11.0.9","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
15 June 2018

UID

swg22011564

Page Feedback