Skip to Content
author's profile photo Former Member
Former Member

Windows KB3172605 knocks out https connection to SAP BusinessObjects XI SP6

We started getting "Page not found" when trying to connect to BusinessObjects XI 3.1 SP6 via https, only for Internet Explorer. We could make the connection via Chrome (but Chrome doesn't fully work with BO for editing reports).

I've narrowed it down to Windows KB3172605 - when this installed, we started getting "Page Not Found". I removed it and we connected. The same scenario is reported in my third link below. This was part of this set of updates:

Note that CB3172605 is not a Security update.

The page not found error occurred on our development box (with a DOD cert, Sha-1) and on Prod (self-signed cert). So since it fails on both, my conclusion is that it's not the cert.

Here are a couple of links on KB3172605

- Microsoft yanks buggy speed-up patch KB 3161608, replaces it with KB 3172605 and 3172614 (it doesn't say all that much about KB3172605)

- Microsoft rollup announcement, July 2016 (it says it works with Sha-1)

- German blog with discussion on KB3172605, which basically says "don't install it"

- Also, the third comment is our exact issue

So my questions are

- These KB things, they (often) only affect IE, not Chrome, is that right ?

- BusinessObjects XI 3.1 SP7 officially works with IE-11, but SP6 (which we have) does not support IE-11, but it worked fine until KB3172605. So my gut reaction is that upgrading to SP7 wouldn't solve the issue, it seems to me that KB3172605 is the issue. What do you think ?

Add a comment
10|10000 characters needed characters exceeded

Related questions

4 Answers

  • Best Answer
    author's profile photo Former Member
    Former Member
    Posted on Aug 31, 2016 at 06:03 PM

    I'm being advised that the issue could be our cert which uses Sha-1 algorithm, which is deprecated. However, all evidence points to KB3172605 being the issue.

    Our application (SAP BusinessObjects XI SP6) has worked well with IE-11 for a good while. BUT - IE 11 is not a supported browser (IE 10 is supported in SP6)

    BUT - SAP BO XI SP-7 DOES support IE-11. So might this solve the problem, i.e., SP6 / IE-11 croaks with KB3172605, but magically SP7 / IE-11 resolves the issue with the KB ?

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member Ajay Gupta

      this is the correct answer. However, with BI Suite 4.2 project starting in two weeks, we have a working solution for our situation with this: here. However, another Windows update might cause issues. We're racing to get BI Suite 4.2 installed before that happens !

  • Posted on Aug 31, 2016 at 06:12 PM

    This also affected SAP NetWeaver and SQL Server JDBC driver. The SAP Note 2356977 contains a workaround which was valid and helped NetWeaver customers.

    Best regards,

    Luis Darui

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Aug 31, 2016 at 07:54 PM

    Are you connecting directly to Tomcat? If so, another option would be to set up a reverse proxy using Apache or similar web server. If Tomcat and Apache are on the same server then you don't have to reduce the security of the system to make it work.

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Sep 06, 2016 at 03:20 PM

    Ajay,

    for planning purposes, how long do you think it might / should take to upgrade to SP7 ? We are a small shop without anything complex going on. thx.

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.