Abhi2271/tech-qa huggingface dataset:
IBM DataPower firmware version 6.0 will enable TLS v1.2 or v1.1 by default - United States ssl tsl client hello handshake fail failed version 6.0 TECHNOTE (FAQ)

THIS DOCUMENT APPLIES ONLY TO THE FOLLOWING LANGUAGE VERSION(S):
 English 

QUESTION
 Why would some outgoing SSL handshakes fail with firmware version 6.0 but not prior firmware versions? 

CAUSE
Beginning in firmware version 6.0 and above, the default SSL settings have changed. The Crypto profiles now have TLSv1.2 and 1.1 which will be enabled by default. This affects the protocol version included in the Client Hello when DataPower is acting as the SSL client. If TLSv1.2 is not supported, the server still negotiates to the most secure supported protocol (e.g. TLSv1.1, TLSv1.0, SSLv3) if enabled. 

Some legacy servers with non-compliant implementations of SSL may reject connection attempts when TLSv1.2 or TLSv1.1 are used. In these cases, the handshake fails without properly negotiating to a mutually agreeable protocol.

The TLS versions 1.1 and 1.2 are part of the requirements for being compliant with NIST SP800-131a.



ANSWER
Upgrade the SSL server to a version compliant with the SSL/TLS specifications. If required you may disable TLSv1.2 and TLSv1.1 within the Crypto Profile to allow compatibility. 


Within the domain simply navigate to the Objects> Crypto Configuration> Crypto Profile>
Then simply click on your specific profile to view the Options selection and see what SSL protocol versions are supported.

Any further questions or issues please feel free to contact DataPower support. A packet trace and error report would be the most helpful information in viewing the problem.

Question: Why SSL handshake is failing after upgrading to 6.0 or above? After upgrading my datapower firmware to v6.0 or above, ssl handshake is failing, is there a reason for it? 

Answer: Some legacy servers with non-compliant implementations of SSL may reject connection attempts when TLSv1.2 or TLSv1.1 are used. In these cases, the handshake fails without properly negotiating to a mutually agreeable protocol.
IBM Search option for a reserved word or character in documents in Atlas - United States  TECHNOTE (FAQ)

QUESTION
 How do I search for a string which has reserved words or characters when searching in documents in Atlas? 

CAUSE
There are specific options to use in oracle when you search for certain strings

ANSWER
When there is a "-" in a string you are searching for, you need to use "\" in front of the "-" 

For example - "String1-String2" should be searched as "String1\-String2" 

Please refer to the oracle documentation for Special Characters in Oracle Text Queries

Question: How do I search for a string which has reserved words or characters when searching in documents in Atlas? How do I search for a string which has reserved words or characters when searching in documents in Atlas? 

Answer: When there is a "-" in a string you are searching for, you need to use "\" in front of the "-" 

For example - "String1-String2" should be searched as "String1\-String2"
IBM Verify an IEM server upgrade is still in progress - United States  TECHNOTE (FAQ)

QUESTION
 How can I tell if the IBM Endpoint Manager (BigFix) server database upgrade is progressing? 

CAUSE
When upgrading a BigFix server, most of the time is usually spent upgrading the database. The installer launches the BESAdmin utility to complete this part of the upgrade, but does not provide detailed progress during this phase. For some long running upgrades, it may appear that the upgrade is hung or not progressing: 

On Windows, the BESAdmin UI will indicate "Not Responding" if clicked on at this point. 

On Linux, the message "Info: Configuring the database for the server component, please wait ... " is reported.


ANSWER
It is important to allow the upgrade to complete when in this state, and not attempt to cancel or kill the upgrade process. To verify the upgrade is still active, check that the following process is still running: 

Windows: BESAdmin.exe 

Linux: BESAdmin 

CPU usage of BESAdmin may be minimal during times when the database is doing most of the work, so just the existence of the process is good confirmation. For additional confirmation, the BFEnterprise or BFENT database can be monitored for activity using SQL Server Profiler or the DB2 'CREATE EVENT MONITOR' statement to track SQL statement events.

Question: Why does my upgrade to BigFix version 9.2.5 take a very long time? My upgrade to BigFix version 9.2.5 takes a very long time. What do I need to do?

Answer: It is important to allow the upgrade to complete when in this state, and not attempt to cancel or kill the upgrade process. To verify the upgrade is still active, check that the following process is still running: 

Windows: BESAdmin.exe 

Linux: BESAdmin
IBM Action required for IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 for security vulnerabilities in Red Hat Linux - United States  FLASH (ALERT)

ABSTRACT
 IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 require customer action for security vulnerabilities in Red Hat Linux 

CONTENT
IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 ship with versions of Red Hat Enterprise Linux (RHEL) Server that are vulnerable to CVE-2011-5320 CVE-2017-15670 CVE-2017-15671 CVE-2017-15804
Remediation: 

IBM strongly recommends that you contact Red Hat to obtain and install fixes for Red Hat Enterprise Linux (RHEL) Server 6.2, as applicable





Cross reference information Segment Product Component Platform Version Edition Business Integration WebSphere Message Broker Hypervisor Edition Linux 8.0 
PRODUCT ALIAS/SYNONYM
 WMB HVE IIB HVE

Question: Help with Action required for IIB H.E. V9 and WMB H.E. V8 for security vulnerabilities in Red Hat Linux (CVE-2011-5320, CVE-2017-15670, CVE-2017-15671, CVE-2017-15804) I need to understand details regarding Action required for IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 for security vulnerabilities in Red Hat Linux. Where can I find this information? 

Answer: IBM strongly recommends that you contact Red Hat to obtain and install fixes for Red Hat Enterprise Linux (RHEL) Server 6.2, as applicable
IBM Unable to decrypt the FIPS key error when exporting keys from IBM Datacap Taskmaster Capture - United States dcskey gnk; dc_KTF.xml TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 When attempting to generate and/or export keys using the dcskey command, you receive the error, "Keys couldn't be exported. Unable to decrypt the FIPS key" 

CAUSE
Enabling the Use FIPS compliant algorithms for encryption, hashing and signing security policy can cause this error

RESOLVING THE PROBLEM
To allow the keys to be exported properly: 

 1. Select Local Security Policy under Administrative tools 
 2. Navigate to Local Policies - Security Options 
 3. Select System Cryptography: Use FIPS compliant algorithms for encryption, hashing and signing and be sure it is Disabled 
 4. Run dcskey e again to export the key

Question: Keys couldn't be imported. Unable to encrypt the FIPS key On windows10 machine when I attempt to import the encryption key I am getting the error: "Keys couldn't be imported. Unable to encrypt the FIPS key". Because I cannot import the keys, I am unable to validate parameters. 

Answer: To allow the keys to be exported properly: 

 1. Select Local Security Policy under Administrative tools 
 2. Navigate to Local Policies - Security Options 
 3. Select System Cryptography: Use FIPS compliant algorithms for encryption, hashing and signing and be sure it is Disabled 
 4. Run dcskey e again to export the key
IBM Getting java.io.NotSerializableException when SessionObjectSize counter is enabled - United States java.io.NotSerializableException SessionObjectSize counter PMI enabled disable serializable TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 When PMI (Performance Monitoring Infrastructure) is enabled with SessionObjectSize counter enabled, getting NotSerializableException. The SystemOut.log shows something similar to:

[4/10/07 5:25:42:618 EDT] 00000091 SessionContex E Exception is: java.io.NotSerializableException: com.com1.dept.nls.model.someModel 
at java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java(Compiled Code)) 
... 
at java.io.ObjectOutputStream.writeObject(ObjectOutputStream.java(CompiledCode)) 
at com.ibm.ws.webcontainer.httpsession.SessionContextMBeanAdapter.getSessionsInfo(SessionContextMBeanAdapter.java(Compiled Code)) 
at com.ibm.ws.webcontainer.httpsession.SessionTrackingPMIApplicationData$1.getRuntimeInfo(SessionTrackingPMIApplicationData.java(Inlined Compiled Code)) ... 
at com.ibm.ws.pmi.server.modules.ServletSessionsModule$SessionObjSize.updateStatistic(ServletSessionsModule.java(Compiled Code)) 
at com.ibm.ws.pmi.server.data.SpdStatExternal.updateExternal(SpdStatExternal.java(Compiled Code)) 
at com.ibm.websphere.pmi.server.PmiAbstractModule.update(PmiAbstractModule.java(Compiled Code)) 
...

The error does not affect application functionality. Disabling SessionObjectSize counter makes the error stop occurring. 

CAUSE
WebSphere® Application Server Session Manager throws NotSerializableException when it tries to serialize non-serializable SessionData from the application before sending it to PMI.

RESOLVING THE PROBLEM
The application needs to ensure there is no session object that is not serializable. The object needs to implement java™.io.Serializable interface.

 

HISTORICAL NUMBER
 53925
L6Q
000

Question: ClassCastException IlrStorePolicy$SerializedENamedElement incompatible with EStructuralFeature 

We keep getting the following error when navigating in Decision Center on Websphere Application Server.

java.lang.ClassCastException: ilog.rules.teamserver.web.IlrStorePolicy$SerializedENamedElement incompatible with org.eclipse.emf.ecore.EStructuralFeature

Does anyone know how we can avoid this error?


Answer: WebSphere® Application Server Session Manager throws NotSerializableException when it tries to serialize non-serializable SessionData from the application before sending it to PMI.

RESOLVING THE PROBLEM
The application needs to ensure there is no session object that is not serializable. The object needs to implement java™.io.Serializable interface.
IBM Restoring missing xml files from backup in DASH - United States DASHL2; DASHL2FAQ; restore; backup; xml; WEB-INF TECHNOTE (FAQ)

QUESTION
 How can I restore missing or corrupted xml files in the WEB-INF directory, (such as the navigation.xml, portletEntities.xml, etc.) from backup in Dashboard Application Service Hub (DASH) ? 

CAUSE
Some of these files could have gotten corrupted. 

ANSWER
DASH makes a backup copy of the WEB-INF configuration/custom xml files in the backups directory. These files are very useful if any of these files get corrupted. 

Please follow below steps to restore files from the backups directory: 

1. Stop the DASH server 

2. Make a backup copy of the current xml files in the following directory: 

<JazzSM_Home>/profile/config/cells/JazzSMNode01Cell/applications/isc.ear/deployments/isc/isclite.war/WEB-INF 

3. Go to <JazzSM_Home>/profile/backups and find a backup file from a previous day/time that contains the missing xml files 

Example: isc_stores_backup_1427324004938.zip 

4. Unpack the zip file to a temporary location. 

5. Restore these files in the WEB-INF directory from the backup. 

6. Start DASH 

7. Test if you can access the DASH Portal.

Question: Restore JazzSM DASH login page to default images We've changed the JazzSM DASH login page images and want to restore them. What values do we use to revert those changes? 

Answer: 1. Stop the DASH server 

2. Make a backup copy of the current xml files in the following directory: 

<JazzSM_Home>/profile/config/cells/JazzSMNode01Cell/applications/isc.ear/deployments/isc/isclite.war/WEB-INF 

3. Go to <JazzSM_Home>/profile/backups and find a backup file from a previous day/time that contains the missing xml files 

Example: isc_stores_backup_1427324004938.zip 

4. Unpack the zip file to a temporary location. 

5. Restore these files in the WEB-INF directory from the backup. 

6. Start DASH 

7. Test if you can access the DASH Portal.
IBM Guardium STAP does not connect properly and does not show in the S-TAP Control - I see some specific errors in some log files. - United States  TECHNOTE (FAQ)

QUESTION
 What can cause an STAP to fail to connect properly - I get the following messages in the logs:-

/tmp/guard_stap.stderr.txt on the DB Server :-
"Server <ip_addr> wasn't heard from for nn sec during this attempt (nnn sec total), closing and re-opening"

and from the Guardium Appliance - via fileserver in the /log/opt-ibm-guardium-log/snif/snif.log
"Unauthorized client connecting from <ip_addr> ,rejecting"


CAUSE
One reason for these errors could be that the S-TAP Approval Needed is checked in the S-TAP Certification screen on the Appliance like this :- 
[/support/docview.wss?uid=swg22009818&aid=1] [/support/docview.wss?uid=swg22009818&aid=1]





ANSWER
Uncheck the Approval box and the S-TAPs should start connecting . 


[/support/docview.wss?uid=swg22009818&aid=2] [/support/docview.wss?uid=swg22009818&aid=2]

Question: Installed an STAP on a DB Server but it does not show up on my Appliance in S-TAP Control etc 

Installed an STAP on a DB Server but it does not show up on my Appliance in S-TAP Control etc

I get the following messages in the logs:-

/tmp/guard_stap.stderr.txt on the DB Server :- "Server wasn't heard from for nn sec during this attempt nnn sec total), closing and re-opening"

and from the Guardium Appliance - via fileserver in the /log/opt-ibm-guardium-log/snif/snif.log "Unauthorized client connecting from ,rejecting"

Answer: Uncheck the Approval box and the S-TAPs should start connecting .
IBM SCA destinations for IBM Business Process Manager (BPM), WebSphere Process Server (WPS) and WebSphere Enterprise Service Bus (WESB) are not preserved when uninstalling and reinstalling a service module - United States SCA.RecycleDestinations; custom properties; SCA destinations; event sequencing; SCA modules; message queue TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 When a Service Component Architecture (SCA) module is uninstalled, by default, its associated destinations are removed, even if there are still messages in the destination queue. In some situations, such as when Event Sequencing is used, messages on the destinations must be preserved.



RESOLVING THE PROBLEM
To resolve this issue, use the SCA.recycleDestinations custom Java™ virtual machine (JVM) property for the module. Set the property to false to preserve SCA destinations.

 

Cross reference information Segment Product Component Platform Version Edition Business Integration WebSphere Process Server AIX, HP-UX, Linux, Linux zSeries, Solaris, Windows, z/OS 7.0.0.5 Business Integration WebSphere Enterprise Service Bus SCA AIX, HP-UX, Linux, Linux zSeries, Solaris, Windows, z/OS 7.5, 7.0.0.5 
PRODUCT ALIAS/SYNONYM
 BPM
WPS
WESB

Question: Updating SCA applications & internal SCA module queues 

When updating an existing SCA module using the ISC, I noticed that internal SCA queues (sca/<module>/...) on the SCA.SYSTEM bus) are deleted and recreated.

Does this mean that any messages that may still reside on these internal queues would be deleted on a module update? If so, when updating SCA modules in a production environment, should these internal queues be monitored to be empty before updating a SCA module (to prevent loosing messages)?

Answer: To resolve this issue, use the SCA.recycleDestinations custom Java™ virtual machine (JVM) property for the module. Set the property to false to preserve SCA destinations.
IBM Action required for IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 for security vulnerabilities in Red Hat Linux - United States IIB WMB FLASH (ALERT)

ABSTRACT
 IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 require customer action for security vulnerabilities in Red Hat Linux 

CONTENT
IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 ship with versions of Red Hat Enterprise Linux (RHEL) Server that are vulnerable to
CVE-2017-14746 CVE-2017-15085 CVE-2017-15086 CVE-2017-15087 CVE-2017-15275

IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 ship with Red Hat Enterprise Linux (RHEL) Server 6.2

Remediation: 

IBM strongly recommends that you contact Red Hat to obtain and install fixes for Red Hat Enterprise Linux (RHEL) Server 6.2, as applicable. 




Cross reference information Segment Product Component Platform Version Edition Business Integration WebSphere Message Broker Hypervisor Edition Linux 8.0

Question: Help with Action required for IIB H.E. V9 & WMB H.E. V8 for security vulnerabilities in Red Hat Linux 

I need to understand details regarding Action required for IBM Integration Bus Hypervisor Edition V9.0 and WebSphere Message Broker Hypervisor Edition V8.0 for security vulnerabilities in Red Hat Linux.
This is related to CVE-ID:
CVE-2017-14746
CVE-2017-15085
CVE-2017-15086
CVE-2017-15087
CVE-2017-15275

Where can I find this information?

Answer: IBM strongly recommends that you contact Red Hat to obtain and install fixes for Red Hat Enterprise Linux (RHEL) Server 6.2, as applicable.
IBM Installing the Installation Manager on an NFS mounted disk - United States NFS; remote drive; mount drive ; 1308281 TECHNOTE (FAQ)

QUESTION
 Can IBM® Installation Manager be installed on a UNIX® or Linux® NFS mounted disk? 

ANSWER
Do not install the IBM Installation Manager on an NFS mounted disk. 

On AIX® for example, some of the JRE folders are not being deleted when the IBM Installation Manager uninstalls but is deleted after waiting for 10 minutes. This causes the JRE folder to not be uninstalled during an uninstall operation. Other UNIX and Linux operating systems have similar issues. 

Only install the Installation Manager on a local disk.

Question: Why does my install of the latest Installation Manager on a Linux Ingram Server not function? 

I've installed the latest Installation Manager on an Ingram Server that I mount to different Linux machines where I have installed WebSphere Application Server. I received the following error when trying to use the Installation Manager:

     00:02.25 ERROR [main] org.eclipse.equinox.log.internal.
     ExtendedLogReaderServiceFactory safeLogged
       Application error
       java.lang.NoClassDefFoundError: org.eclipse.jface.dialogs.
     ProgressMonitorDialog
         at java.lang.ClassLoader.defineClassImpl(Native Method)
         at java.lang.ClassLoader.defineClass(ClassLoader.java:324)
         at org.eclipse.osgi.internal.baseadaptor.DefaultClassLoader.
     defineClass(DefaultClassLoader.java:188)
         at org.eclipse.osgi.baseadaptor.loader.ClasspathManager.
     defineClassHoldingLock(ClasspathManager.java:632)

I have unmounted and remounted the drive but does not appear to resolve the issue.

Answer: Only install the Installation Manager on a local disk.
IBM How to find details of Corrupted Object from the entries in db2diag.log? - United States  TECHNOTE (FAQ)

QUESTION
 How to find details of Corrupted Object from the entries in db2diag.log? 

ANSWER
When we have corruption in the database we may received following kind of entries in db2diag.log 
These also notify object where we t where we have detected corruption in the Database.

Sample db2diag.log entry for Corruption.

2016-05-04-03.13.05.261082-360 I3442A358 LEVEL: Error 
PID : 393470 TID : 1 PROC : db2pfchr 0 
INSTANCE: db2inst1 NODE : 000 
FUNCTION: DB2 UDB, buffer pool services, sqlbReadAndReleaseBuffers,probe:13 
RETCODE : ZRC=0x86020001=-2046689279=SQLB_BADP "page is bad" 
DIA8400C A bad page was encountered. 

2016-05-04-03.13.05.264301-360 I3801A437 LEVEL: Error 
PID : 393470 TID : 1 PROC : db2pfchr 0 
INSTANCE: db2inst1 NODE : 000 
FUNCTION: DB2 UDB, buffer pool services, sqlbReadAndReleaseBuffers, 
probe:13 
DATA #1 : String, 158 bytes 
Obj={pool:3;obj:21;type:0} State=x27 Parent={3;21}, EM=1120, PP0=1152 
Page=51235 Cont=17 Offset=2848 BlkSize=15 
sqlbReadAndReleaseBuffers error: num-pages=16


Based on this information dumped in db2diag.log entry we can Identify {pool:3;obj:21;type:0} is the Object is corrupted.

e.g. Obj={pool:3;obj:21;type:0}

Pool = Tablespace ID
Obj = Object ID
Type = Type of the Object

If Type is 0 its Table Object ,If its 1 then its Index. 

We can find the Name of the Object using following query, to further backup the Definition for future reference.

db2 "select char(tabname,20), char(tabschema,20) from syscat.tables where tableid=<ObjectID> and tbspaceid=<Tablepace id>"

Obj={pool:3;obj:21;type:0}
db2 "select char(tabname,20), char(tabschema,20) from syscat.tables where tableid=21 and tbspaceid=3"

RELATED INFORMATION
 SYSCAT.TABLES catalog view [http://www.ibm.com/support/knowledgecenter/SSEPGG_10.1.0/com.ibm.db2.luw.sql.ref.doc/doc/r0001063.html?lang=en]

Question: How to find details of Corrupted Object from the entries in db2diag.log? We have corruption in DB2 Database and got entries for corrupted Object in db2diag.log ,Need to find details of the Object using information dumped in db2diag.log 

Answer: When we have corruption in the database we may received following kind of entries in db2diag.log 
These also notify object where we t where we have detected corruption in the Database.
IBM Configuring logging for Atlas Extensions in Atlas 6.0.3.3 - United States  TECHNOTE (FAQ)

QUESTION
 How do I configure logging for Atlas Extensions in Atlas 6.0.3.3? 

CAUSE
Atlas Extensions log files are not being generated

ANSWER
In Atlas 6.0.3.3, the Atlas Extensions logging configuration has moved to log4j.properties file. 

 1. Navigate to <Atlas_Install_folder>/Atlas/Properties folder 
 2. Edit log4.properties file 
 3. Update the path Information for the following three properties  1. log4j.appender.MATTER_APPENDER.File=matter_adapter.log 
     2. log4j.appender.PERSON_APPENDER.File=person_adapter.log 
     3. log4j.appender.ORG_UNIT_APPENDER.File=org_unit_adapter.log
    
    
 4. Save the file 
 5. Restart Atlas application server

Question: How do I configure logging for Atlas Extensions in Atlas 6.0.3.3? How do I configure logging for Atlas Extensions in Atlas 6.0.3.3? 

Answer: In Atlas 6.0.3.3, the Atlas Extensions logging configuration has moved to log4j.properties file. 

 1. Navigate to <Atlas_Install_folder>/Atlas/Properties folder 
 2. Edit log4.properties file 
 3. Update the path Information for the following three properties  1. log4j.appender.MATTER_APPENDER.File=matter_adapter.log 
     2. log4j.appender.PERSON_APPENDER.File=person_adapter.log 
     3. log4j.appender.ORG_UNIT_APPENDER.File=org_unit_adapter.log
    
    
 4. Save the file 
 5. Restart Atlas application server
IBM WebSphere DataPower M/T 9235 appliance might incorrectly report failure of both power supplies - United States  TECHNOTE (FAQ)

QUESTION
 The IBM WebSphere DataPower M/T 9235 appliance might incorrectly report the failure of both power supplies. This message is not reported on all appliances and can occur rarely in the field. 

ANSWER
The following message would be present in the DataPower logs: 

System power supply #2 has failed.

or logging event code: 

0x80400022 System power supply #2 


The problem can be confirmed by issuing the following commands on the appliance CLI:

co 
test hardware 
exit 

The following output from the test hardware command confirms this problem: 

[failure] Power supply '1' has no AC input power, or is not present.
[failure] Power supply '2' has no AC input power, or is not present.

Other results in the test hardware command might also show incorrect values.

This problem does not affect the operation of the appliance other than the continuous reporting power supply failure message. 

To confirm the power supplies are working normally you may check the LED status on the power supplies. If the LED's are green the power supplies are working normally.


To recover from the false errors perform a reboot of the appliance: 

From the WebGUI: 

Control Panel → System Control → In the “Shutdown” section choose “Reboot System” then click “Shutdown” 

 

From the CLI: 

top 

shutdown reboot 

y 


This problem is caused by a highly intermittent error that may allow the sensor reading mechanism to get into a bad state. This bad state then generates the false error messages. In most cases, a reboot of the appliance will reset the sensors and no additional errors are logged. The highly intermittent error rarely occurs again on the same appliance 

If the issue reoccurs on the same appliance contact IBM DataPower support [http://www.ibm.com/support/docview.wss?uid=swg21236322] with the following information: 

1) How many times have you seen the issue on the same appliance? 

2) Gather the outputs for the following CLI commands:
show clock
show version
show ipmi
show sensors-other
config
service show
test hardware

Question: I am receiving AC power supply failures on my DataPower 9235 appliance. How can I resolve this? 

I am observing the following errors on my DataPower 9235 device:

[failure] Power supply '1' has no AC input power, or is not present. [failure] Power supply '2' has no AC input power, or is not present.

How can this be resolved? 

Answer: In most cases, a reboot of the appliance will reset the sensors and no additional errors are logged.
IBM Default number of threads for ncp_poller - United States Available threads for ncp_poller TECHNOTE (FAQ)

QUESTION
 What are the number of threads assigned by default for ncp_poller? Is the same number of threads applicable for additional Pollers too? 

ANSWER
There are 100 threads assigned for default Pollers in all three releases (v3.7, v3.8 & v3.9). 
The additional poller is a new feature in v3.8 and higher versions, so additional Poller threads is not applicable for v3.7. But when you create additional pollers in v3.8/v3.9 same # of thread (i.e. 100) pool is assigned.

In v3.8, v3.9 - you can also increase the default 100 to a higher value by modifying and uncommenting the following line in $NCHOME/etc/precision/NcPollerSchema.cfg
//update config.properties set BatchExtraThreads = 150;

Question: ncp_poller failed with Out-of-memory in ITNM 3.9 FP4+IF1. What went wrong?. 

ncp_poller is failed with out-fo-memory even if we have ITNM 3.9 FP4+IF1 latest FP

2016-04-11T03:02:09: Fatal: F-RIV-002-014: [31869t] CRivError.cc(386) Out-of-memory - This process has run out of memory or exceeded the operating system memory limit for a 32 bit application - You must take action to reduce the amount of data this application is having to process new handler called

How to resolve this issue?.


Answer: There are 100 threads assigned for default Pollers in all three releases (v3.7, v3.8 & v3.9). 
The additional poller is a new feature in v3.8 and higher versions, so additional Poller threads is not applicable for v3.7. But when you create additional pollers in v3.8/v3.9 same # of thread (i.e. 100) pool is assigned.

In v3.8, v3.9 - you can also increase the default 100 to a higher value by modifying and uncommenting the following line in $NCHOME/etc/precision/NcPollerSchema.cfg
//update config.properties set BatchExtraThreads = 150;
IBM Some portal resources have been updated, however a long cache was set so the updates are not being served. - United States  TECHNOTE (FAQ)

QUESTION
The resolver uses the digest to cache some URLs like resource aggregator collections, and the digest remains the same between restarts. Resources like theme files are served from the browser or proxy cache (HTTP 304) and not loaded from the server.


ANSWER
The resolver uses the digest to cache some URLs like resource aggregator collections, and the digest remains the same between restarts. 
In order to force a digest change (should some resources have changed and a long cache was set), you can set the "digest.seed" key in the WP ConfigService to any string value, which will be used in generating a new digest on server boot. This will force a digest change when you want a new one during a restart. 

Changing the digest setting generates different URLs, so the updated theme resources can be loaded from the server.

Question: Why Theme Updates are not updated in the browser cache ? 

If you change graphics in page header. Then packed the war file and update it via the Integrated Solutions Console. But the old graphic is still displayed until the user press Ctrl + F5 in Internet Explorer.

Answer: Changing the digest setting generates different URLs, so the updated theme resources can be loaded from the server.
IBM SCA destinations for IBM Business Process Manager (BPM), WebSphere Process Server (WPS) and WebSphere Enterprise Service Bus (WESB) are not preserved when uninstalling and reinstalling a service module - United States SCA.RecycleDestinations; custom properties; SCA destinations; event sequencing; SCA modules; message queue TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 When a Service Component Architecture (SCA) module is uninstalled, by default, its associated destinations are removed, even if there are still messages in the destination queue. In some situations, such as when Event Sequencing is used, messages on the destinations must be preserved.



RESOLVING THE PROBLEM
To resolve this issue, use the SCA.recycleDestinations custom Java™ virtual machine (JVM) property for the module. Set the property to false to preserve SCA destinations.

 

Cross reference information Segment Product Component Platform Version Edition Business Integration WebSphere Process Server AIX, HP-UX, Linux, Linux zSeries, Solaris, Windows, z/OS 7.0.0.5 Business Integration WebSphere Enterprise Service Bus SCA AIX, HP-UX, Linux, Linux zSeries, Solaris, Windows, z/OS 7.5, 7.0.0.5 
PRODUCT ALIAS/SYNONYM
 BPM
WPS
WESB

Question: Updating SCA applications & internal SCA module queues When updating an existing SCA module using the ISC, I noticed that internal SCA queues (sca/<module>/...) on the SCA.SYSTEM bus) are deleted and recreated.  One can potentially loose messages on these queues. Is there a fix to the problem?

Answer: To resolve this issue, use the SCA.recycleDestinations custom Java™ virtual machine (JVM) property for the module. Set the property to false to preserve SCA destinations.
IBM Content Collector Configuration Store is corrupted - United States  TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 IBM Content Collector Configuration Store Service cannot be started successfully due to database corruption. 

SYMPTOM
Cannot start the IBM Content Collector Configuration Store Service


CAUSE
Transaction log gets corrupted when IBM Content Collector server runs out of disk space. 

RESOLVING THE PROBLEM



 1. Shutdown the IBM Content Collector Configuration Store Service if it is running. 
 2. Make a backup copy of all files under the following directory:
    C:\ProgramData\IBM\ContentCollector\ConfigurationStore
    
    C:\ProgramData may be hidden by default. Show hidden folders by changing the configuration in Folder and Search options > View tab > Hidden files and folders > Show hidden files, folders, and drives. 
 3. Free up disk space on the drive 
 4. Delete the following files:
    C:\ProgramData\IBM\ContentCollector\ConfigurationStore\logs\*
    C:\ProgramData\IBM\ContentCollector\ConfigurationStore\solmsg.out
    C:\ProgramData\IBM\ContentCollector\ConfigurationStore\solerror.out
    
    Important: 
    Delete only the files under C:\ProgramData\IBM\ContentCollector\ConfigurationStore\logs\. 
    Do not delete the folder itself.
    
 5. If restoring the configuration store to a previously backed up copy is required, run afuConfigStoreTool -backup to restore the backup copy. See production documentation for more information on running this tool. Otherwise, proceed to the next step. 
 6. Restart IBM Content Collector services.
    

RELATED INFORMATION
 IBM Content Collector Information Center [http://pic.dhe.ibm.com/infocenter/email/v4r0m0/index.jsp]

Question: ICC Configuration Store Service is hung? ICC Configuration Store Service is hung and is not responding to start or stop commands. This was observed due to a potential issue with server running out of disk space.  What is causing this? 

Answer: Transaction log gets corrupted when IBM Content Collector server runs out of disk space.
IBM Identifying Indexing errors in Atlas database - United States  TECHNOTE (FAQ)

QUESTION
 How do I identify Indexing errors in Atlas database? 

CAUSE
Sometimes encrypted and password protected documents cause document indexing errors

ANSWER
 

 1. Login to Atlas database as PSSAPL user 
 2. Run select * from ctx_user_index_errors; 
 3. Copy the value in the ERR_TEXTKEY Field 
 4. Run select * from documentlibrary where rowid='<value from Step 3> '; 
 5. This will list the document which has the indexing error

Question: How do I identify Indexing errors in Atlas database? How do I identify Indexing errors in Atlas database? 

Answer: Login to Atlas database as PSSAPL user 
 2. Run select * from ctx_user_index_errors; 
 3. Copy the value in the ERR_TEXTKEY Field 
 4. Run select * from documentlibrary where rowid='<value from Step 3> '; 
 5. This will list the document which has the indexing error
IBM How to override the directory location for IBM P8 Content Platform Engine (CPE) logs. - United States  TECHNOTE (FAQ)

QUESTION
 How to override the directory location for CPE logs. 

CPE logs include perflog_config.properties, p8_server_error.log, p8_server_trace.log, GCD folder, pesvr_system.log, pesvr_trace.log and pedata folders. In some instances, it will also include the INSO folder, CSSTemp folders and perf.log.


ANSWER
Add the system property 'user.dir' in the JVM argument to the application server.
For example, if you want to change the log location to 'c:\logs'
A. JBoss Application Server: 

 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 


B. Oracle WebLogic Server:  * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 


C. WebSphere Application Server:  * 
 * 
 * 
 * 
 * 
 * 
 * 
 * 
 *

Question: Is it possible to move all the P8 logs out of the default location? We are looking to move all the P8 logs out of the default FileNet folder in Websphere. The trace log can be moved easily; however, the error log and PE logs also need to be moved. 

Answer: Add the system property 'user.dir' in the JVM argument to the application server.
IBM How to format server trace using ARSTFMT on Content Manager OnDemand 8.5.x.x and 9.0.x.x  on Windows platform - United States server trace; ARSTFMT; Content Manager OnDemand TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Formatting CMOD V8.5.x.x and 9.0.x.x Server traces on Windows platform 

SYMPTOM
CMOD Server trace output is unreadable


CAUSE
In CMOD V8.5.0.0 and later, the trace file is written in binary. To convert the trace file from its binary format, use the ARSTFMT command found in the bin directory of your OnDemand server V8.5 and later installation.

ENVIRONMENT
Windows

RESOLVING THE PROBLEM
Open command prompt - navigate to the CMOD\9.0\bin directory and issue ARSTFMT as follows:

arstfmt -i C:\Users\IBM_ADMIN\path\to\file -o C:\Users\IBM_ADMIN\path\to\file\name.txt




where the C:\Users\IBM_ADMIN\path\to\file is the unreadable trace file and C:\Users\IBM_ADMIN\path\to\file\name.txt is the name of the formatted trace file. 

 



RELATED INFORMATION
 Enable ODWEK tracing [http://www-01.ibm.com/support/docview.wss?uid=swg21240220]
How to enable trace in Content Manager OnDemand server [http://www-01.ibm.com/support/docview.wss?uid=swg21330810]

Question: How can I format a trace for CMOD v9.0 on Windows? How can I format a CMOD trace on Windows?

Answer: Open command prompt - navigate to the CMOD\9.0\bin directory and issue ARSTFMT as follows:

arstfmt -i C:\Users\IBM_ADMIN\path\to\file -o C:\Users\IBM_ADMIN\path\to\file\name.txt




where the C:\Users\IBM_ADMIN\path\to\file is the unreadable trace file and C:\Users\IBM_ADMIN\path\to\file\name.txt is the name of the formatted trace file.
IBM NoClassDefFoundError running Java class selected from server plugin jar - United States wid; noclassdeffounderror; java; jar TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 The visual snippet editor allows you to search and find methods in classes available only on a restricted basis at runtime. A runtime exception occurs when the Java™ snippet calls a method in a class found in one of the plugin JARs in the server's plugins directory. 

CAUSE
Some of the Java methods found in the JARs in the server's plugin directory are available to be called, but some of them are considered internal use only and an exception is thrown if you try to call them from user code.

DIAGNOSING THE PROBLEM
A runtime exception is detected in the server log naming a class and method called from a visual snippet in the application.

RESOLVING THE PROBLEM
The reason the method you selected in the snippet editor cannot be called in the JAR in the plugins directory is because of the architecture of the server. JARs in the plugins directory have a list that specifies what classes in the JAR can be called. This is called the exports list, and it is honored by the class loader the server uses. Classes not on the list are considered internal use only. Thus, not all classes in the server plugin JARs are available to be called by user code. 

You can call any method when the JAR is in the server's library directorym because it is not being treated as a plugin and a different class loader is used, one which does not implement the exports list.

The snippet editor is not aware of this mechanism so it treats a plugin JAR the same as a regular Java JAR file. That is it allows you to select the (unavailable) class and method to call in your program. The resolution is to make sure that classes you call in plugin JARs appear on the exports list. 

For example you may search for StringUtils and find the class org.apache.commons.lang.StringUtils in the WebSphere JAR plugin/com.ibm.ws.jpa.jar. This class is used internally by the plugin and it is not exported. In this case you must download the class you need directly from Apache and place the JAR in the server's classpath.

Question: WAS runtime classpath does not match WAS Server Runtime library in RAD  I've run into a classpath problem in WAS 8.0 for my web application. The problem is that it compiles fine i RAD but I get a NoClassDefFoundError in Runtime.  

Answer: Some of the Java methods found in the JARs in the server's plugin directory are available to be called, but some of them are considered internal use only and an exception is thrown if you try to call them from user code.
IBM ERRORCODE=-4499, The application server rejected establishment of the connection. - United States -4499; JCC; SQL State = 08004; Error Code = -4; 499 TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 
Attempt to connect to a database using Type 4 JCC driver fails with the following exception:

java.sql.SQLException: 
[jcc][t4][2057][11264][3.53.95] The application server rejected establishment of the connection. An attempt was made to access a database, <database name>, which was either not found or does 
not support transactions. ERRORCODE=-4499, 
SQLSTATE=08004 DSRA0010E: SQL State = 08004, Error Code = -4,499 



CAUSE
Using DCS DB alias or local alias name of the database in the connection string will cause this error.

RESOLVING THE PROBLEM
 

The URL format for IBM Data Server Driver for JDBC and SQLJ type 4 connectivity is:


 *  "jdbc:db2://<server name>: <portnumber>/<database name>"; 


In the Type 4 JDBC JCC driver connection string used, 
 *  If the connection is to a DB2 for Linux,Unix,Windows server, the database name should be the Target database name in the database server, it should not be the local alias name cataloged in the client. 
 *  If the connection is to a DB2 for z/OS server, database name is the DB2 location name that is defined during installation. All characters in the DB2 location name must be upper-case characters. The IBM Data Server Driver for JDBC and SQLJ does not convert lower-case characters in the database value to upper-case for IBM Data Server Driver for JDBC and SQLJ type 4 connectivity. 
 * The location name can be found by executing the following SQL statement on the server:  * SELECT CURRENT SERVER FROM SYSIBM.SYSDUMMY1;
   
   
   The target database name can also be found from the DCS directory on the client using the command:  * db2 list dcs directory.
   
   



[/support/docview.wss?uid=swg21443723&aid=1] [/support/docview.wss?uid=swg21443723&aid=1] 
For further discussion on this topic, visit this developerWorks forum thread: 
https://www.ibm.com/developerworks/community/forums/html/topic?id=1cd04237-a9dd-4061-9c38-f9043786691a [https://www.ibm.com/developerworks/community/forums/html/topic?id=1cd04237-a9dd-4061-9c38-f9043786691a] 
RELATED INFORMATION
 Type 4 JCC connection String: [http://publib.boulder.ibm.com/infocenter/db2luw/v9r7/topic/com.ibm.db2.luw.apdv.java.doc/src/tpc/imjcc_r0052342.html]

Question: What could cause a "Connection refused" to SQLDB/DB2 after some time? I have deployed an WAS Liberty/ JPA application. Everything is fine, and after a while (a day or 2), I get the connection refused exception: java.sql.SQLNonTransientException: [jcc][t4][2043][11550][4.14.103] Exception java.net.ConnectException: Error opening socket to server /XX.XXX.XXX.XXXon port 50,000 with message: Connection refused. ERRORCODE=-4499, SQLSTATE=08001 DSRA0010E: SQL State = 08001, Error Code = -4,499 
Any idea what could cause this issue?

Answer: Using DCS DB alias or local alias name of the database in the connection string will cause this error.
IBM .NET API error when installing IBM Content Collector (ICC) 4.0.1 - United States ICC; .NET API; CPE 5.2.1.2 TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 A .NET API error is thrown when attempting to install ICC 4.0.1. The error claims that either an incorrect version of the IBM FileNet P8 Content Processing Engine (CPE) .NET API 5.2.1.2 is installed or that it is missing some components. 

CAUSE
A corrupt installation of the CPE 5.2.1.2.

DIAGNOSING THE PROBLEM
1. Check in "Programs and features"
2. .NET API will not be listed there

RESOLVING THE PROBLEM
Re-installing the CPE 5.2.1.2 .NET API will solve this issue:




1. Copy the software on a local disk.
2. Start the re-installation of the .NET API.
3. Select all sub-components of .NET framework 45 that were not listed before (select them all if unsure). 

During the next installation of ICC there are no further errors regarding missing components.

Question: A .NET API error is thrown when attempting to install ICC 4.0.1 A .NET API error is thrown when attempting to install ICC 4.0.1. The error claims that either an incorrect version of the IBM FileNet P8 Content Processing Engine (CPE) .NET API 5.2.1.2 is installed or that it is missing some components.  How do I fix this?

Answer: Re-installing the CPE 5.2.1.2 .NET API will solve this issue:




1. Copy the software on a local disk.
2. Start the re-installation of the .NET API.
3. Select all sub-components of .NET framework 45 that were not listed before (select them all if unsure). 

During the next installation of ICC there are no further errors regarding missing components.
IBM How to Proxy SSL request from DataPower to Remote Proxy Server? - United States Forward Proxy XMLFW MPGW CONNECT TUNNEL TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 How to configure an IBM WebSphere DataPower SOA Appliance Service to proxy an SSL request to a remote proxy server using the CONNECT method for SSL tunneling? 

CAUSE
Many common forward proxy servers expect requests in different formats depending on if they are proxying non-SSL or SSL requests.

For example, a non-SSL request to be proxied may come in the form of GET hostname:port/URI.

For SSL requests to be proxied, remote proxy servers are commonly configured to tunnel the request from the client to the backend server.

In the SSL request scenario, remote proxy servers will typically expect a CONNECT request and then tunnel the SSL request from the client to the backend server.

Users configuring DataPower may need a way to implement this CONNECT method for SSL tunneling to a remote Proxy Server.




RESOLVING THE PROBLEM
Non-SSL Proxy requests will work using either:

a) an XML Firewall when configuring in the HTTP Options tab, where the user can configure the Proxy Host and Port

b) a Multi-Protocol Gateway when configuring an HTTP Proxy Policy in the User Agent

SSL Proxy requests will work using the CONNECT method for SSL Tunneling when using a Multi-Protocol Gateway when configuring in a User Agent's HTTP Proxy Policy.

The XML Firewall service is not designed to use the CONNECT method for SSL Tunneling.

Question: Does IBM DataPower Gateway Appliance support the HTTP CONNECT method? Does IBM DataPower Gateway Appliance support the HTTP CONNECT method for non-SSL proxy requests? 

Answer: Non-SSL Proxy requests will work using either:

a) an XML Firewall when configuring in the HTTP Options tab, where the user can configure the Proxy Host and Port

b) a Multi-Protocol Gateway when configuring an HTTP Proxy Policy in the User Agent
IBM EIF probe not receiving itm events - United States om_tec.conf eif probe itm event clearing omnibus TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 ITM is sending events to EIF probe which is then forwarded to the OMNIbus Server. Client is observing that the clearing event is sent per the ITM trace/log but the event does not seem to be received into EIF or OMNIbus as the triggered event is still seen in OMNIbus.



SYMPTOM
Situation in ITM is no longer true but event is not cleared in OMNIbus.


DIAGNOSING THE PROBLEM
The iptrace shows that the EIF probe on the OMNIbus side is resetting/closing(<RST>) the TCP/IP connection after it receives the event and it never shows up in the EIF logs, so the event is just dropped.

RESOLVING THE PROBLEM
The solution is to set the connection_mode in your om_tec.config on the ITM Server (TEMS) to use 


connection_less 

instead of 

connection oriented.

That is, change this line in your om_tec.config

ConnectionMode=co
to
ConnectionMode=connection_less

You will need to restart the EIF on your ITM. (tacmd refreshTECinfo -t eif)

Question: EIF probe not receiving itm events Why is the event in the netcool isn't cleaned ? 

Answer: The solution is to set the connection_mode in your om_tec.config on the ITM Server (TEMS) to use 


connection_less 

instead of 

connection oriented.
IBM Case insensitive searches in IBM Content Navigator - United States ICN case sensitive TECHNOTE (FAQ)

QUESTION
 How can a search field be enabled as case insensitive in IBM Content Navigator (ICN)? 

ANSWER
ICN does not provide a feature to turn on or off case sensitive searches. All metadata searches in ICN are case sensitive by default. However, depending on the repository, case insensitive searches can be performed by doing the following:
- For FileNet P8 repositories; set the Force Case Insensitive Search flag on the object store. 
- For Content Manager repositories; the administrator will firstly need to enable text search on metadata, then a text search will need to be done in ICN against the metadata by enclosing the metadata value in double quotes.

Alternatively, a request filter can be written to change the case of a query to all upper or all lower case.

Question: Is it possible to make where filter to case insensitive in My Inbox? Workplace OOTB feature - 'Tasks-->My Inbox--> Filter inbox based on field where' the filter is case sensitive. but our expected result is case insensitive. We have already checked 'Force case-insensitive search'. Our expectation it should return the same work items what ever we use 'TEST' or 'test'. 

Answer: ICN does not provide a feature to turn on or off case sensitive searches. All metadata searches in ICN are case sensitive by default. However, depending on the repository, case insensitive searches can be performed by doing the following:
- For FileNet P8 repositories; set the Force Case Insensitive Search flag on the object store. 
- For Content Manager repositories; the administrator will firstly need to enable text search on metadata, then a text search will need to be done in ICN against the metadata by enclosing the metadata value in double quotes.

Alternatively, a request filter can be written to change the case of a query to all upper or all lower case.