IBM Download Jazz for Service Management Version 1.1.3.0 - United States  DOWNLOADABLE FILES

ABSTRACT
 You can download Jazz for Service Management from the Passport Advantage web site by using the electronic image part numbers that are provided in this document.

DOWNLOAD DESCRIPTION

Jazz™ for Service Management brings together the Open Services for Lifecycle Collaboration (OSLC) community's open specifications for linking data and other shared integration services; including dashboard and reporting services. Jazz for Service Management underpins client defined management scenarios such as cloud; performance monitoring; and IT service management.

Jazz for Service Management has a number of integration services: Dashboard Services provided by IBM® Dashboard Application Services Hub and Reporting Services.

For more information about Jazz for Service Management; see the Jazz for Service Management documentation [http://www.ibm.com/support/knowledgecenter/SSEKCU_1.1.3.0/com.ibm.psc.doc/psc_ic-homepage.html].

Version 1.1.3.0 is a full refresh of Jazz for Service Management Version 1.1 Base with Modification 3.

DOWNLOADING JAZZ FOR SERVICE MANAGEMENT ELECTRONIC IMAGES
You can download images by using the IBM Download Director applet or HTTP. If possible choose Download Director; because it automatically verifies the completeness of each image that it processes.

Tip: If you use Download Director to download the software; then you can also use it to extract the contents of all the compressed files that you downloaded in the session.

 1.  Before you start the installation; check the Jazz for Service Management Technotes [http://www.ibm.com/support/search.wss?q=jazzsm1130relnotes] for late breaking issues or updated installation instructions.
 2.  Determine the set of platform-specific images to download for the installation scenario or integration services to install; as summarized in the following table. Scenario Images Full installation; all integration services and middleware  * Jazz™ for Service Management 1.1.3.0
      * IBM® Tivoli® Common Reporting 3.1.3.0
      * IBM® WebSphere® Application Server 8.5.5.9
      * IBM® DB2® Enterprise Server Edition 10.5

     Custom installation; Dashboard Application Services Hub  * Jazz™ for Service Management 1.1.3.0
      * IBM® WebSphere® Application Server 8.5.5.9; optional if already installed
      * IBM® WebSphere® Application Server V8.5 Supplements; for high availability environment only
      * IBM® DB2® Enterprise Server Edition 10.5; for high availability environment only

     Custom installation; Reporting Services  * Jazz™ for Service Management 1.1.3.0
      * IBM® Tivoli® Common Reporting 3.1.3.0
      * IBM® WebSphere® Application Server 8.5.5.9; optional if already installed
      * IBM® DB2® Enterprise Server Edition 10.5; optional if already installed

 3.  Create one or more of the following temporary directories in the same file system:  * JazzSM_Image_Home directory; which refers to the directory that will contain the extracted contents of the Jazz for Service Management platform-specific image.
      * Image_Imgs_Home directory; which refers to the directory that will contain the extracted contents of platform-specific images for middleware. Tip: You only create this directory if you intend to install IBM DB2®; IBM WebSphere® Application Server.

 4.   Navigate to the IBM Passport Advantage web site [http://www.ibm.com/software/howtobuy/passportadvantage/pao_customers.htm].
     Note: You require an IBM Customer ID to sign in and continue.
 5.  Select the Find by part number search option under Download finder options.
 6.  Search for each downloadable image by part number; as outlined in the relevant Operating_System tab in this download document.
 7.  Select and download only the images for your platform that you need.
 8.  Extract the downloaded images into directories that you created in step 3.

     Important: If you have downloaded the middleware and you want to perform a full installation; ensure that your Install_Imgs_Home directory is set up as follows:
     |-ESE (Windows) [extracted DB2 installation image on Windows]
     |-ese (UNIX) [extracted DB2 installation image on AIX; Linux; or Linux for System z]
     |-WASRepository [extracted WebSphere Application Server installation image]
     |-TCRCognos [extracted Tivoli Common Reporting Cognos® installation image] This directory structure is not required for a custom installation; for example; installing a subset of integration services by using the launchpad custom workflow or IBM Installation Manager GUI.

 9.  To perform a full installation; download the Quick Start image with a part number of CNC1MML. It contains quick start guides for these installation scenarios.  * CNC1MML_JazzSM_lang_code.pdf - Quick start guide for the full installation scenario; to install all Jazz for Service Management integration services; IBM DB2®; and IBM WebSphere® Application Server on a single server for evaluation and development purposes.

 10. If you want to perform a custom installation; for example; install only a subset of Jazz for Service Management integration services or use existing supported installations of WebSphere Application Server or DB2; see Custom installation scenario [http://www.ibm.com/support/knowledgecenter/SSEKCU_1.1.3.0/com.ibm.psc.doc/install/psc_c_install_advanced_opt.html] in the Jazz for Service Management documentation.

TAB NAVIGATION
 * AIX®
 * Linux
 * Linux on System z®
 * Windows

See Jazz for Service Management Detailed System Requirements [http://www.ibm.com/support/docview.wss?uid=swg27038732] for the AIX operating systems on which Jazz for Service Management is supported.

Downloadable images with part numbers

You can download electronic images for Jazz for Service Management and its database and application server middleware. Refer to the following sections for details about the images that are required and optional.

 * Required software
 * Optional software

Required software Part number

Description

CNC1NML Jazz for Service Management 1.1.3.0 for AIX®; 64-bit; Multilingual

Contains the Jazz for Service Management launchpad; IBM Installation Manager Version 1.8.4.1; IBM Prerequisite Scanner Version 1.2.0.18; IBM Tivoli Directory Integrator Identity Edition Version 7.1.1.5; and the Installation Manager software packages for following integration service: IBM Dashboard Application Services Hub Version 3.1.3.0

CNC1SML IBM Tivoli Common Reporting 3.1.3.0 for AIX®; 64-bit; Multilingual

Contains the base installation image.

Optional software Download the following supplemental software under the following conditions:

 * If you want to install Jazz for Service Management and its database and application server middleware on a single server for evaluation and development purposes; also referred to as a full installation.
 * If you do not have an existing supported version of WebSphere Application Server.
 * If you do not have an existing supported version of DB2 Enterprise Server Edition and you want to install Reporting Services and Dashboard Application Services Hub in a high-availability environment.
 * If you want to set up Dashboard Application Services Hub in a high-availability environment.

Optional WebSphere Application Server software Part number

Description

CNC1YML IBM® WebSphere® Application Server 8.5.5.9 for Jazz for Service Management for AIX®; 64-bit; Multilingual

Contains WebSphere Application Server Version 8.5.5.9 and IBM WebSphere SDK for Java Technology Edition 7.0.8.0

CI6X0ML
CI6X1ML
CI6X2ML
IBM® WebSphere® Application Server V8.5 Supplements (1 of 3) for Multiplatform; Multilingual
IBM® WebSphere® Application Server V8.5 Supplements (2 of 3) for Multiplatform; Multilingual
IBM® WebSphere® Application Server V8.5 Supplements (3 of 3) for Multiplatform; Multilingual

Contains supplemental WebSphere Application Server software; including IBM HTTP Server and IBM HTTP Server plug-in for IBM WebSphere Application Server.

Important: Download only if you want to set up Dashboard Application Services Hub in a high-availability environment. You must download all 3 images and extract them to the same location.

Optional DB2 software Part number

Description

CIW3TML IBM® DB2® Enterprise Server Edition V10.5 for AIX® Multilingual CIPH4ML IBM® DB2® 10.5 Enterprise Server Edition - Restricted Use Quick Start and Activation Multiplatform Multilingual CIWM8ML IBM® DB2® 10.5 National Language Pack for AIX® Multilingual Back to top

See Jazz for Service Management Detailed System Requirements [http://www.ibm.com/support/docview.wss?uid=swg27038732] for the Linux operating systems on which Jazz for Service Management is supported.

Downloadable images with part numbers

You can download electronic images for Jazz for Service Management and its database and application server middleware. Refer to the following sections for details about the images that are required and optional.

 * Required software
 * Optional software

Required software Part number

Description

CNC1PML Jazz for Service Management 1.1.3.0 for Linux®; 64-bit; Multilingual

Contains the Jazz for Service Management launchpad; IBM Installation Manager Version 18.2; IBM Prerequisite Scanner Version 1.2.0.18; IBM Tivoli Directory Integrator Identity Edition Version 7.1.1.5; and the Installation Manager software packages for following integration service: IBM Dashboard Application Services Hub Version 3.1.3.0.

CNC1TML IBM® Tivoli® Common Reporting 3.1.3.0 for Linux®; 64-bit; Multilingual

Contains the base installation image.

Optional software Download the following supplemental software under the following conditions:

 * If you want to install Jazz for Service Management and its database and application server middleware on a single server for evaluation and development purposes; also referred to as a full installation.
 * If you do not have an existing supported version of WebSphere Application Server.
 * If you do not have an existing supported version of DB2 Enterprise Server Edition and you want to install Tivoli Common Reporting or Dashboard Application Services Hub in a high-availability environment.
 * If you want to set up Dashboard Application Services Hub in a high-availability environment.

Optional WebSphere Application Server software Part number

Description

CNC1ZML IBM® WebSphere® Application Server 8.5.5.9 for Jazz for Service Management for Linux®; 64-bit; Multilingual

Contains WebSphere Application Server Version 8.5.5.9 and IBM WebSphere SDK for Java Technology Edition 7.0.8.0

CI6X0ML
CI6X1ML
CI6X2ML
IBM® WebSphere® Application Server V8.5 Supplements (1 of 3) for Multiplatform; Multilingual
IBM® WebSphere® Application Server V8.5 Supplements (2 of 3) for Multiplatform; Multilingual
IBM® WebSphere® Application Server V8.5 Supplements (3 of 3) for Multiplatform; Multilingual

Contains supplemental WebSphere Application Server software; including IBM HTTP Server and IBM HTTP Server plug-in for IBM WebSphere Application Server.

Important: Download only if you want to set up Dashboard Application Services Hub in a high-availability environment. You must download all 3 images and extract them to the same location.

Optional DB2 software Part number

Description

CIXV0ML IBM® DB2® Enterprise Server Edition V10.5 for Linux® on AMD64 and Intel® EM64T systems (x64) Multilingual CIPH4ML IBM® DB2® 10.5 Enterprise Server Edition - Restricted Use Quick Start and Activation Multiplatform Multilingual CIWM5ML IBM® DB2® 10.5 National Language Pack for Linux® on AMD64 and Intel® EM64T systems (x64) Multilingual Back to top

See Jazz for Service Management Detailed System Requirements [http://www.ibm.com/support/docview.wss?uid=swg27038732] for the Linux on System z operating systems on which Jazz for Service Management is supported.

Downloadable images with part numbers

You can download electronic images for Jazz for Service Management and its database and application server middleware. Refer to the following sections for details about the images that are required and optional.

 * Required software
 * Optional software

Required software Part number

Description

CNC1QML Jazz for Service Management 1.1.3.0 for Linux® on System z®; 64-bit; Multilingual

Contains the Jazz for Service Management launchpad; IBM Installation Manager Version 1.8.4.1; IBM Prerequisite Scanner Version 1.2.0.18; IBM Tivoli Directory Integrator Identity Edition Version 7.1.1.5; and the Installation Manager software packages for following integration service: IBM Dashboard Application Services Hub Version 3.1.3.0.

CNC1UML IBM® Tivoli® Common Reporting 3.1.3.0 for Linux® on System z®; Multilingual

Contains the base installation image.

Optional software Download the following supplemental software under the following conditions:

 * If you want to install Jazz for Service Management and its database and application server middleware on a single server for evaluation and development purposes; also referred to as a full installation.
 * If you do not have an existing supported version of WebSphere Application Server.
 * If you do not have an existing supported version of DB2 Enterprise Server Edition and you want to install Tivoli Common Reporting or Dashboard Application Services Hub in a high-availability environment.
 * If you want to set up Dashboard Application Services Hub in a high-availability environment.

Optional WebSphere Application Server software Part number

Description

CNC20ML IBM® WebSphere® Application Server 8.5.5.9 for Jazz for Service Management for Linux® on System z®; 64-bit; Multilingual

Contains WebSphere Application Server Version 8.5.5.9 and IBM WebSphere SDK for Java Technology Edition 7.0.8.0

CI6X0ML
CI6X1ML
CI6X2ML
IBM® WebSphere® Application Server V8.5 Supplements (1 of 3) for Multiplatform; Multilingual
IBM® WebSphere® Application Server V8.5 Supplements (2 of 3) for Multiplatform; Multilingual
IBM® WebSphere® Application Server V8.5 Supplements (3 of 3) for Multiplatform; Multilingual

Contains supplemental WebSphere Application Server software; including IBM HTTP Server and IBM HTTP Server plug-in for IBM WebSphere Application Server.

Important: Download only if you want to set up Dashboard Application Services Hub in a high-availability environment. You must download all 3 images and extract them to the same location.

Optional DB2 software Part number

Description

CIW3SML IBM® DB2® Enterprise Server Edition V10.5 for Linux® on System z® Multilingual CIWM7ML IBM® DB2® 10.5; National Language Pack V10.5 for Linux® on System z® Multilingual Back to top

See Jazz for Service Management Detailed System Requirements [http://www.ibm.com/support/docview.wss?uid=swg27038732] for the Windows operating systems on which Jazz for Service Management is supported.

Downloadable images with part numbers

You can download electronic images for Jazz for Service Management and its database and application server middleware. Refer to the following sections for details about the images that are required and optional.

 * Required software
 * Optional software

Required software Part number

Description

CNC1RML Jazz for Service Management 1.1.3.0 for Windows; 64-bit; Multilingual

Contains the Jazz for Service Management launchpad; IBM Installation Manager Version 1.8.4.1; IBM Prerequisite Scanner Version 1.2.0.18; IBM Tivoli Directory Integrator Identity Edition Version 7.1.1.5; and the Installation Manager software packages for following integration services: IBM Dashboard Application Services Hub Version 3.1.3.0.

CNC1VML IBM® Tivoli® Common Reporting 3.1.3.0 for Windows; Multilingual

Contains the base installation image.

Optional software Download the following supplemental software under the following conditions:

 * If you want to install Jazz for Service Management and its database and application server middleware on a single server for evaluation and development purposes; also referred to as a full installation.
 * If you do not have an existing supported version of WebSphere Application Server.
 * If you do not have an existing supported version of DB2 Enterprise Server Edition and you want to install Tivoli Common Reporting or Dashboard Application Services Hub in a high-availability environment.
 * If you want to set up Dashboard Application Services Hub in a high-availability environment.
 * If you want to model business data views of your data by using Framework Manager.

Optional WebSphere Application Server software Part number

Description

CNC21ML IBM® WebSphere® Application Server 8.5.5.9 for Jazz for Service Management for Windows; 64-bit; Multilingual

Contains WebSphere Application Server Version 8.5.5.9 and IBM WebSphere SDK for Java Technology Edition 7.0.8.0

CI6X0ML
CI6X1ML
CI6X2ML
IBM® WebSphere® Application Server V8.5 Supplements (1 of 3) for Multiplatform; Multilingual
IBM® WebSphere® Application Server V8.5 Supplements (2 of 3) for Multiplatform; Multilingual
IBM® WebSphere® Application Server V8.5 Supplements (3 of 3) for Multiplatform; Multilingual

Contains supplemental WebSphere Application Server software; including IBM HTTP Server and IBM HTTP Server plug-in for IBM WebSphere Application Server.

Important: Download only if you want to set up Dashboard Application Services Hub in a high-availability environment. You must download all 3 images and extract them to the same location.

Optional DB2 software Part number

Description

CIW3YML IBM® DB2® Enterprise Server Edition V10.5 for Windows on AMD64 and EM64T systems (x64) Multilingual CIPH4ML IBM® DB2® 10.5 Enterprise Server Edition Restricted Use Quick Start Guide and Activation Optional Tivoli Common Reporting 3.1.2.0 software Part number

Description

CNC1WML IBM® Tivoli® Common Reporting 3.1.3.0 IBM® Cognos® Framework Manager for Windows; Multilingual

CNC1XML IBM® Tivoli® Common Reporting 3.1.3.0 IBM® Cognos® Cube Designer for Windows; Multilingual

Back to top

Connect; learn; and share with the Jazz for Service Management Community Jazz for Service Management has an active community that can provide you with additional resources. Browse and contribute to the forums and the blog. Review the wiki on topics such as best practices. You can also learn more about upcoming releases; provide feedback; or suggest enhancements.
See the Jazz for Service Management community [https://www.ibm.com/developerworks/servicemanagement/jazzsm/index.html] on Service Management Connect.

Question:
Web GUI 8.1 FP7 requires DASH 3.1.2.1 or later

You wanted to install Web GUI 8.1 FP7, but your DASH version does not meet the required version.

IM 1.8 displayed the following:

     ERROR: The installed IBM Dashboard Application Services Hub version is 3.1.0.3, but requires version 3.1.2.1 or later.

Answer: Version 1.1.3.0 is a full refresh of Jazz for Service Management Version 1.1 Base with Modification 3.


IBM Unable to open a profile in FileNet Content Engine Configuration Manager User Interface (CMUI) on Redhat Linux 7.x - United States  TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Unable to open a profile in FileNet Content Engine Configuration Manager User Interface (CMUI) on Redhat Linux 7.x.

SYMPTOM
CMUI will javacore with the following in the javacore.txt

1XHEXCPCODE J9Generic_Signal_Number: 00000004
1XHEXCPCODE Signal_Number: 0000000B
1XHEXCPCODE Error_Value: 00000000
1XHEXCPCODE Signal_Code: 00000080
1XHEXCPCODE Handler1: F7169E6A
1XHEXCPCODE Handler2: F711400A
1XHEXCPCODE InaccessibleAddress: 00000000
NULL
1XHEXCPMODULE Module: /lib/libcairo.so.2
1XHEXCPMODULE Module_base_address: D5436000

CAUSE
"adwaita-gtk2-theme" (32 and 64 bit) and "adwaita-gtk3-theme" 64 bit libraries were missing.

RESOLVING THE PROBLEM
Install the missing libraries "adwaita-gtk2-theme" (32 and 64 bit) and "adwaita-gtk3-theme" 64 bit. Please contact RedHat to obtain the missing libraries.

Question:
Unable to open profile from P8 Content Engine Configuration manager (CMUI) on Redhat Linux 7.2, getting GPF and javacore dump.

Launch configmgr then try to open an existing profile. Once I click ok on the dialog box to
"Verify your application server setting before proceeding..." Configuration manager would crash and GPF. I can see the javacore.txt and dmp file created.
The javacore.txt contains the following:

0SECTION TITLE subcomponent dump routine NULL =============================== 1TICHARSET UTF-8 1TISIGINFO Dump Event "gpf" (00002000) received 1TIDATETIME Date: 2016/05/05 at 04:53:30 1TIFILENAME Javacore filename: /opt/IBM/FileNet/ContentEngine/tools/configure/javacore.20160505.045330.25035.0002.txt 1TIREQFLAGS Request Flags: 0x81 (exclusive+preempt) 1TIPREPSTATE Prep State: 0x100 (trace_disabled) 1TIPREPINFO Exclusive VM access not taken: data may not be consistent across javacore sections NULL ------------------------------------------------------------------------ 0SECTION GPINFO subcomponent dump routine NULL ================================ 2XHOSLEVEL OS Level : Linux 3.10.0-327.13.1.el7.x86_64 2XHCPUS Processors - 3XHCPUARCH Architecture : x86 3XHNUMCPUS How Many : 1 3XHNUMASUP NUMA is either not supported or has been disabled by user NULL
1XHEXCPCODE J9Generic_Signal_Number: 00000004 1XHEXCPCODE Signal_Number: 0000000B 1XHEXCPCODE Error_Value: 00000000 1XHEXCPCODE Signal_Code: 00000080 1XHEXCPCODE Handler1: F72A2E6A 1XHEXCPCODE Handler2: F724D00A 1XHEXCPCODE InaccessibleAddress: 00000000 NULL
1XHEXCPMODULE Module: /lib/libcairo.so.2 1XHEXCPMODULE Module_base_address: D55FC000

This is a Redhat Linux 7.2 environment with Content Platform Engine CPE 5.2.1.4.

Answer: Install the missing libraries "adwaita-gtk2-theme" (32 and 64 bit) and "adwaita-gtk3-theme" 64 bit. Please contact RedHat to obtain the missing libraries.


IBM Netcool/OMNIbus Integrations Release Notice - Socket Gateway (nco-g-socket-java-2_0) - United States release note; downloads; nco-g-socket-java; Java Gateway for Socket NEWS

ABSTRACT
 A new version of the Netcool/OMNIbus Socket Gateway will be available to download from August 6, 2015.

CONTENT

You can access the latest version of the guide written for this gateway on the IBM Knowledge Center:

www.ibm.com/support/knowledgecenter/SSSHTQ/omnibus/gateways/socketjavagw/wip/concept/socketjavagw_instl_cnfgr_gateway.html [http://www.ibm.com/support/knowledgecenter/SSSHTQ/omnibus/gateways/socketjavagw/wip/concept/socketjavagw_instl_cnfgr_gateway.html]

You can download the installation package from the IBM Passport Advantage website:
www.ibm.com/software/howtobuy/passportadvantage/pao_customers.htm [http://www.ibm.com/software/howtobuy/passportadvantage/pao_customers.htm]

Netcool/OMNIbus V8.1

The Netcool/OMNIbus V8.1 version of this gateway supports the following Operating Systems:

AIX, Linux, Solaris, Windows and zLinux.

If you are running Netcool/OMNIbus V8.1, a single package contains versions of the gateway for all supported Operating Systems. To obtain this package, use the Find by part number field to search for part number: CN6I1EN

Netcool/OMNIbus V7.4.0

If you are running Netcool/OMNIbus V7.4.0, a separate package is supplied for each Operating System. To obtain this new package, use the Find by part number field to search for the part number that corresponds to your Operating System as shown in the table below.

Part number Operating System CN6GZEN AIX CN6H1EN HPUX on Itanium CN6H2EN Linux CN6H3EN Linux for zSeries CN6H4EN Solaris CN6H5EN Windows Note: Some versions of some web browsers can introduce random characters into text copied from web pages to the clipboard. In such cases, if you copy and paste part numbers from this release notice into Passport Advantage search fields, the search engine might not return the correct result. If you are encountering problems locating packages in Passport Advantage, remove any characters generated by the copy-paste operation before searching, or manually enter the part numbers into the search field.

If, for any other reason, you cannot find installation packages in Passport Advantage, contact eCustomer care using the contact information on the following website:

https://www-112.ibm.com/software/howtobuy/passportadvantage/paocustomer/docs/en_US/ecare_emea.html [https://www-112.ibm.com/software/howtobuy/passportadvantage/paocustomer/docs/en_US/ecare_emea.html]

Question:
Which Socket Gateway should I be using with Netcool Omnibus (NOI) ? Which Socket Gateway should I be using with Netcool Omnibus (NOI) ?

There are 2 versions of the gateway; nco-g-socket-java-2_0 and nco-g-socket-10_0 Users may be confused what version they should download or use

Answer: A new version of the Netcool/OMNIbus Socket Gateway will be available to download from August 6, 2015.


IBM How to export and import keys from an HSM-enabled IBM WebSphere DataPower SOA Appliance - United States  TECHNOTE (FAQ)

QUESTION
 How do I export and import private keys between the same or different Hardware Security Module (HSM) enabled IBM WebSphere DataPower SOA Appliance?

ANSWER
HSM-enabled DataPower appliances support the export of private keys using the crypto-export command. For key export to work, various conditions must be met:

 * HSMs must be initialized and in the same key sharing domain on exporting and importing machines
 * The private key in question must be marked exportable at keygen time (see keygen's exportable option)
 * HSMs on exporting and importing machines must share internal key-wrapping keys (see hsm-clone-kwk command). A key-wrapping key is a key that encrypts another key.

Each HSM has a special key inside of it, the key-wrapping key, that is used to encrypt exported private keys (and to decrypt imported private keys). If the goal is to restore exported keys to the same appliance, then you don't need to worry about hsm-clone-kwk, red keys, or the hsm-domain parameter. That is because the key-wrapping key at import time will already match the key-wrapping key at export time (since the HSM device is the same). If the goal is to move exported keys from one appliance to another one, then all of the steps in this section must be followed :-

First, the two HSMs in question must be both be initialized and in the same key sharing domain. This means that they must both be initialized in the same mode (both in Security Level 2 or both in Security Level 3). In Security Level 2 mode, they must have used the same hsm-domain parameter during hsm-reinit (this parameter has a default value that is the same on all appliances). In Security Level 3 mode, they must have used the same red PED key during hsm-reinit (and the second initialization must not have overwritten the key value from the first initialization).

Second, the key to be exported must be exportable. The exportability of keys is immutable. It is determined at keygen time, and it is controlled by that command's exportable parameter. If a key was created outside of the appliance (not using keygen), then it is always considered exportable.

Finally, before the crypto-export crypto-import sequence, the key-wrapping keys must be synchronized using the hsm-clone-kwk command. This command must be run four times: once on the source HSM appliance (with the key-wrapping key you are copying), once on the destination HSM appliance, once again on the source HSM appliance, and once again on the destination HSM appliance. Each time the command is run, it will need the output file from the previous step (as the input to the current step) which must be moved manually (usually with the copy command).

Once all of this has been done, then private keys may move from system to system with crypto-export and crypto-import.

Note that the non-HSM appliance can export keys immediately at keygen time, but never at a later time.

For additional information refer to the online Info Center [http://publib.boulder.ibm.com/infocenter/wsdatap/v3r8m2/index.jsp?topic=%2Fxi50%2Fwelcome.htm] and search for "PIN entry device".

Note: You will need to sign into the documentation portal with your IBM Registration ID and password.

Question:
How can I export a private key from DataPower Gateway Appliance?

How can I export a private key from DataPower Gateway appliance?

Answer: HSM-enabled DataPower appliances support the export of private keys using the crypto-export command.


IBM 'EJPDB0160E: The sanity checks of the database layer failed' error occurs during startup after successful database transfer - United States EJPDB0160E: The sanity checks of the database layer failed. EJPDB0160E TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 After receiving a 'Build Successful' message during a database transfer for IBM® WebSphere® Portal, you attempt to start WebSphere_Portal and receives this error message, "EJPDB0160E: The sanity checks of the database layer failed".

SYMPTOM
The entire error message and stack trace will appear like this in the SystemOut.log:

=======================================================================================

[8/19/08 15:51:50:788 EDT] 0000001e DataStoreServ W com.ibm.wps.services.datastore.DataStoreServiceImpl checkCorrectSetup EJPDB0085W: The character encoding of the database is not UTF-8.
[8/19/08 15:51:50:822 EDT] 0000001e Servlet E com.ibm.wps.engine.Servlet init EJPFD0016E: Initialization of service failed.
com.ibm.wps.util.DataBackendException: EJPDB0160E: The sanity checks of the database layer failed.
at com.ibm.wps.services.datastore.DataStoreServiceImpl.checkCorrectSetup(DataStoreServiceImpl.java:669)
at com.ibm.wps.services.datastore.DataStoreServiceImpl.init(DataStoreServiceImpl.java:288)
at com.ibm.wps.services.Service.init(Service.java:107)
at com.ibm.wps.services.Service.init(Service.java:83)
at com.ibm.wps.services.ServiceManager.createService(ServiceManager.java:391)
at com.ibm.wps.services.ServiceManager.initInternal(ServiceManager.java:285)
at com.ibm.wps.services.ServiceManager.init(ServiceManager.java:179)
at com.ibm.wps.services.ServiceManager.init(ServiceManager.java:114)
at com.ibm.wps.engine.Servlet.init(Servlet.java:239)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.init(ServletWrapper.java:199)
at com.ibm.ws.wswebcontainer.servlet.ServletWrapper.init(ServletWrapper.java:319)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.initialize(ServletWrapper.java:1230)
at com.ibm.ws.wswebcontainer.servlet.ServletWrapper.initialize(ServletWrapper.java:152)
at com.ibm.wsspi.webcontainer.extension.WebExtensionProcessor.createServletWrapper(WebExtensionProcessor.java:99)
at com.ibm.ws.webcontainer.webapp.WebApp.getServletWrapper(WebApp.java:849)
at com.ibm.ws.webcontainer.webapp.WebApp.getServletWrapper(WebApp.java:771)
at com.ibm.ws.webcontainer.webapp.WebApp.initializeTargetMappings(WebApp.java:491)
at com.ibm.ws.webcontainer.webapp.WebApp.commonInitializationFinish(WebApp.java:328)
at com.ibm.ws.wswebcontainer.webapp.WebApp.initialize(WebApp.java:290)
at com.ibm.ws.wswebcontainer.webapp.WebGroup.addWebApplication(WebGroup.java:90)
at com.ibm.ws.wswebcontainer.VirtualHost.addWebApplication(VirtualHost.java:157)
at com.ibm.ws.wswebcontainer.WebContainer.addWebApp(WebContainer.java:665)
at com.ibm.ws.wswebcontainer.WebContainer.addWebApplication(WebContainer.java:618)
at com.ibm.ws.webcontainer.component.WebContainerImpl.install(WebContainerImpl.java:335)
at com.ibm.ws.webcontainer.component.WebContainerImpl.start(WebContainerImpl.java:551)
at com.ibm.ws.runtime.component.ApplicationMgrImpl.start(ApplicationMgrImpl.java:1303)
at com.ibm.ws.runtime.component.DeployedApplicationImpl.fireDeployedObjectStart(DeployedApplicationImpl.java:1138)
at com.ibm.ws.runtime.component.DeployedModuleImpl.start(DeployedModuleImpl.java:569)
at com.ibm.ws.runtime.component.DeployedApplicationImpl.start(DeployedApplicationImpl.java:817)
at com.ibm.ws.runtime.component.ApplicationMgrImpl.startApplication(ApplicationMgrImpl.java:949)
at com.ibm.ws.runtime.component.ApplicationMgrImpl$AppInitializer.run(ApplicationMgrImpl.java:2122)
at com.ibm.wsspi.runtime.component.WsComponentImpl$_AsynchInitializer.run(WsComponentImpl.java:342)
at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1473)

======================================================================================

CAUSE
The database was not created using UTF-8 character encoding.

DIAGNOSING THE PROBLEM
On an Oracle® environment you can run these SQL statements to determine the character sets:

SELECT VALUE FROM NLS_DATABASE_PARAMETERS WHERE PARAMETER IN ('NLS_CHARACTERSET', 'NLS_NCHAR_CHARACTERSET');
SELECT PROPERTY_VALUE FROM DATABASE_PROPERTIES WHERE PROPERTY_NAME IN
('NLS_CHARACTERSET', 'NLS_NCHAR_CHARACTERSET');

In this case the customer had these results for both SQL statements:

=============================
PROPERTY_VALUE
-------------
WE8ISO8859P1
AL16UTF16
=============================

If the database character sets had been setup correctly then both lines would have read "AL16UTF16". In this case NLS_CHARACTERSET returns "WE8ISO8859P1" which is not a supported format. If the database had been setup correctly both lines would have produced "AL16UTF16".

RESOLVING THE PROBLEM
At this point there is no way to salvage the database in its current state. The entire Portal database must be dropped and recreated using the specifications provided in the InfoCenter at this link:

http://publib.boulder.ibm.com/infocenter/wpdoc/v6r1m0/topic/com.ibm.wp.e [http://publib.boulder.ibm.com/infocenter/wpdoc/v6r1m0/index.jsp?topic=/com.ibm.wp.ent.doc/config/aix_oracle_create_db.html]
nt.doc/config/aix_oracle_create_db.html [http://publib.boulder.ibm.com/infocenter/wpdoc/v6r1m0/index.jsp?topic=/com.ibm.wp.ent.doc/config/aix_oracle_create_db.html]

This is the specific information in the Information Center pertaining to character encoding:

=============================

All databases must be created using UNICODE Database and National character sets such as UTF8, AL32UTF8, or AL16UTF16.

=============================

Question:
We transferred the database to an external database on our Portal 8.5 environment and now seeing errors, EJPDB0085W and EJPFD0016E in the logs

After transferring the Portal database we seeing the following....

     [3/1/16 6:22:19:481 CST] 00000071 DataStoreServ W com.ibm.wps.services.
     datastore.DataStoreServiceImpl checkCorrectSetup EJPDB0085W: The
     character encoding of the database is not UTF-8.
     [3/1/16 6:22:19:528 CST] 00000071 Servlet       E com.ibm.wps.engine.
     Servlet init EJPFD0016E: Initialization of service failed.
                                      com.ibm.wps.util.DataBackendException:
     EJPDB0160E: The sanity checks of the database layer failed.
                     at com.ibm.wps.services.datastore.DataStoreServiceImpl.
     checkCorrectSetup(DataStoreServiceImpl.java:712)
                     at com.ibm.wps.services.datastore.DataStoreServiceImpl.
     init(DataStoreServiceImpl.java:288)

...

     [3/1/16 6:22:19:824 CST] 00000071 DatabaseInsig W com.ibm.wps.datastore.
     dbinsight.DatabaseInsight checkCharacterEncodingForOracle EJPDB0166W:
     The character encoding of database domain [[Domain: jcr]] is not
     correct. The value [WE8MSWIN1252] is set for key [NLS_CHARACTERSET] in
     parameter section [NLS_DATABASE_PARAMETERS] where expected values only
     can contain one of [[UTF8, AL16UTF16, AL32UTF8, UTFE]].
\

Answer:
At this point there is no way to salvage the database in its current state. The entire Portal database must be dropped and recreated using the specifications provided in the InfoCenter at this link:

http://publib.boulder.ibm.com/infocenter/wpdoc/v6r1m0/topic/com.ibm.wp.e [http://publib.boulder.ibm.com/infocenter/wpdoc/v6r1m0/index.jsp?topic=/com.ibm.wp.ent.doc/config/aix_oracle_create_db.html]


IBM How to process an IBM SDK core dump with Jextract (AIX, Linux, Windows) - United States crash; coredump; dumps; dump; dmp; dmps; jextracted; jextract; userdump; dtfj TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 How do you process a raw core dump using Jextract?

Jextract is a tool provided with the IBM SDK to process and compress a core dump for later processing with tools such as DTFJ, which can be downloaded with IBM Support Assistant.

RESOLVING THE PROBLEM
You can process a core dump with Jextract, as long as the dump itself was produced by the IBM WebSphere Application Server JVM and is processed on the same system as the dump.

A processed dump can be used in both the Eclipse Memory Analyzer Tool [http://www.ibm.com/developerworks/java/jdk/tools/mat.html] and the DTFJ Dump Analyzer [http://www.ibm.com/developerworks/java/jdk/tools/dumpanalyzer/]. Both are included as downloadable tools from within IBM Support Assistant Workbench [http://www.ibm.com/software/support/isa/].

Locating the Core Dump

For WebSphere Application Server installations, the default location for the core dumps is in the profile's root directory: <WAS_HOME>/profiles/<PROFILE_NAME>/

The file extension will usually be *.dmp, but on some versions of AIX and Linux, the file may simply be named core. The process id and the date stamp are normally appended to the name of the file.

Processing the Dump

Execute the jextract command on the same system and installation of WebSphere Application Server that the core dump was produced on. If you don't use the full path on AIX or Linux, make sure to use ./jextract (including the dot-slash) so the correct executable is picked up.

Replace [COREDUMP_PATH] with the full path plus filename of the core dump produced.

If you do not know if compressed references is enabled, scroll to the FAQ section for a brief explanation.

Determining the Java Directory

Because different profiles on WebSphere Application Server 8.5.5.X and later can use different SDKs, the java directory inside the installation folder can differ. To determine the path, check the process list for the application server process and see which folder the java executable is being launched from.

NOTE: If you are on WebSphere Liberty and are using an IBM SDK, the entire path to that SDK will differ.

32-bit JVM and
64-bit JVM with Compressed References disabled
AIX/Linux:
<WAS_HOME>/<JAVA_DIR>/jre/bin/jextract [COREDUMP_PATH]

Windows:
<WAS_HOME>\<JAVA_DIR>\jre\bin\jextract.exe [COREDUMP_PATH]

64-bit JVM with Compressed References enabled
Does not apply to WebSphere Application Server 6.1
AIX/Linux:
<WAS_HOME>/<JAVA_DIR>/jre/bin/jextract -J-Xcompressedrefs [COREDUMP_PATH]

Windows:
<WAS_HOME>\<JAVA_DIR>\jre\bin\jextract.exe -J-Xcompressedrefs [COREDUMP_PATH]

Max Heap Size

To adjust the max heap size, you can add -J-Xmx to adjust the size. For example, -J-Xmx1024m allows for a max heap size of 1024 MB when jextract is run.

Files Generated

The output will determine where the compressed data is stored (usually a .zip extension, .sdff is seen on older environments). Check the location of the core dump as that will be the most common location.

Core files are usually compressible since a lot of data is zero; 10x compression can be expected in the resulting zip file

If you find XML files in the output directory, this may mean jextract failed, as these files are supposed to be placed automatically within the SDFF or ZIP file.

Error Messages

EyeCatcher Error
Unable to find J9VMRAS eyecatcher
Error. Internal failure detected during jextract

This error message indicates that jextract failed to identify the dump. This could be due to a number of things, including

* The dump was not produced by WebSphere Application Server
* The dump was produced from a native library or component such as a JNI component or database driver.
* (AIX only) The dump generated is in an incompatible dump format due to an AIX OS issue (see APAR IZ88097 [http://www.ibm.com/support/docview.wss?uid=swg1IZ88097] for more details).

Out of Memory Error

Sometimes the core dump is much larger than the default heap size can manage, and the recommendation is to increase the heap size using the -J-Xmx option.

FAQ

How do I determine if compressed references is enabled?

Compressed references were first introduced in 64-bit builds of IBM SDK 6.0. If WebSphere Application Server is at version 7.0.0.3 or higher, it will be enabled by default; see APAR PK75174 [http://www.ibm.com/support/docview.wss?uid=swg1PK75174].

Checking the JVM arguments in the admin console can verify if compressed references was enabled manually. However, it's best to check the ps output or the javacore for the argument -Xcompressedrefs

If you find the argument -Xnocompressedrefs has been added, this means it's disabled (see page 7 of this document [ftp://public.dhe.ibm.com/software/webserver/appserv/was/WAS_V7_64-bit_performance.pdf] for more info))

What happens to jextract if I cannot determine if compressed references was enabled?

If you run jextract and did not realize compressed references was enabled, the output will ask you to rerun jextract and add the following argument: -J-Xcompressedrefs

RELATED INFORMATION
 MustGather: Crash on AIX [http://www.ibm.com/support/docview.wss?uid=swg21055387]
MustGather: Crash on Linux [http://www.ibm.com/support/docview.wss?uid=swg21104706]
MustGather: Crash on Windows [http://www.ibm.com/support/docview.wss?uid=swg21053924]
Generating Userdumps on Windows [http://www.ibm.com/support/docview.wss?uid=swg21138203]
Crash on AIX produces no core or a truncated core [http://www.ibm.com/support/docview.wss?uid=swg21052642]
Crash on Linux produces no core or a truncated core [http://www.ibm.com/support/docview.wss?uid=swg21115658]

Question:
How to proceed when jextract utility is throwing an OutOfMemory error ?

I was getting a crash and was told to provide a "jextracted core dump". I ran the jextract command as instructed:

/java/jre/bin/jextract [CORE_PATH]

but I am getting now an OutOfMemory error when jextract itself is running so I cannot proceed with the original crash investigation.

Answer: Sometimes the core dump is much larger than the default heap size can manage, and the recommendation is to increase the heap size using the -J-Xmx option.


IBM UDX compilation error - United States  TECHNOTE (TROUBLESHOOTING)

THIS DOCUMENT APPLIES ONLY TO THE FOLLOWING LANGUAGE VERSION(S):
 English

PROBLEM(ABSTRACT)
 Following error can be met during UDX compilation.
Can't exec "/nz/kit/bin/adm/nzudxcompile": Argument list too long

SYMPTOM
nzudxcompile command returns an "Argument list too long" error and aborts.

CAUSE
ARG_MAX configuration parameter limits the number of argument list in command line. In this case the client used more than 131072 argument with many program *.c files.

DIAGNOSING THE PROBLEM
Check ARG_MAX value in the command line:

$ getconf ARG_MAX
131072

RESOLVING THE PROBLEM
This ARG_MAX kernel parameter adjusted to much larger from kernel release version 2.6.23, that is 2621440 (http://www.in-ulm.de/~mascheck/various/argmax [http://www.in-ulm.de/~mascheck/various/argmax]).

But we support upto Redhat 5.11 in Twinfin which is less than kernel release 2.6.23. So we have no way to allow ARG_MAX larger than 131072 at this time.

Question: I receive the following during UDX compilation Can't exec "/nz/kit/bin/adm/nzudxcompile": Argument list too long

Answer:
This ARG_MAX kernel parameter adjusted to much larger from kernel release version 2.6.23, that is 2621440 (http://www.in-ulm.de/~mascheck/various/argmax [http://www.in-ulm.de/~mascheck/various/argmax]).

But we support upto Redhat 5.11 in Twinfin which is less than kernel release 2.6.23. So we have no way to allow ARG_MAX larger than 131072 at this time.


IBM When and how to apply a modification or fix pack - United States fix pack update bug correction APAR TECHNOTE (FAQ)

QUESTION
 When and how should I apply a modification or fix pack to my JRules or Operational Decision Management (WODM/ODM) installation?

CAUSE
The Operational Decision Manager version numbers use the standard IBM formatV.R.M.Fwhich stands for Version.Release.Modification.Fixpack. See the V.R.M.F Maintenance Stream Delivery Vehicle terminology explanation [http://www.ibm.com/support/docview.wss?uid=swg27008656] for more details.

Modification and fix pack numbers are the third and fourth digits in the IBM product version number, for example: 8.5.M.F.

Modification and fix packs include only bug fixes, so they do not affect the product functionality or your data.

See the following technotes to find out which update your installation need:

 * Finding the version of ODM product and fixes [http://www.ibm.com/support/docview.wss?uid=swg21627850] to determine the exact product versions that are installed on your machine.

 * Find the version of ODM components [http://www.ibm.com/support/docview.wss?uid=swg21400738] to determine the exact module or library versions that are deployed on your servers.

 * Operational Decision Manager Download document [http://www.ibm.com/support/docview.wss?uid=swg24031636] to learn about the latest modification or fix pack that is available for your product version.

 * IBM Operational Decision Manager detailed system requirements [http://www.ibm.com/support/docview.wss?uid=swg27023067] to verify that your configuration is supported with your current product version.

 * IBM Support Lifecycle [http://www.ibm.com/software/websphere/support/lifecycle/] to verify that your current version does not reach end of support in the near future.

Referring to the last two documents above, you may find out that you need to migrate to the latest product version to ensure continued support of your applications. In that case, refer to technote Migrating to the latest version of Operational Decision Management [http://www.ibm.com/support/docview.wss?uid=swg21589725].

That being said, make sure to consider migrating to the latest version or release ( V.R.M.F) of the product as soon as possible to benefit from the latest added features and improvements.
ANSWER
As with any software product, even if you do not have any issues with running your current configuration, you should apply the latest modification or fix pack to take advantage of these benefits:

 * Anticipate and avoid the risk of encountering defects already fixed.
 * Apply the latest product improvements that are available (performance, for example).
 * Maintain a serviceable system and be able to install an interim fix when required.

WHEN TO UPDATE
The latest modification or fix pack should be installed as soon as it is available.

You can subscribe to the IBM Support My Notifications [https://www.ibm.com/support/mynotifications] to be notified of any fix pack releases, and you can also bookmark the Operational Decision Manager Download document [http://www.ibm.com/support/docview.wss?uid=swg24031636] page, which lists the latest modifications or fix packs.

See the technote Fix pack release notification for Operational Decision Manager [http://www.ibm.com/support/docview.wss?uid=swg21665593] to find out when a modification or fix pack will be available.

BEFORE UPDATING

The databases used in the sample server are deleted and recreated during the update. If you are using those databases and want to save the existing content, perform the following steps before updating:
 *  Stop the sample server. In the folder <ODM_HOME>/shared/data/derby, create an archive file containing the resdb and rtsdb folders. Save the archive file, such as zip file, in the data folder. After installation, unzip the archive file in the folder <ODM_HOME>/shared/data/derby to restore your databases before restarting the sample server.

A new profile is also created for the sample server, at the first server start following the installation of a modification or fix pack.

If you want to continue using the same ports, you must delete the existing profile prior. In the <ODM_HOME>/shared/bin folder, from the command line, run the command ../tools/ant/bin/ant forcedestroyprofile.

Note: The sample server is not designed to be used in a production system. For a production system, you must create a dedicated profile and database that you update using the following steps.

UPDATING

Each modification or fix pack page provides instructions on how to download and run the installer, in addition to providing a list of corrections that are included in the update.

The fix pack installation updates the following files and folders:  * JAR libraries in the installation directories, including <ODMInstallDir>\<Module>\lib.
 * EAR and WAR applications in the <ODMInstallDir>\<Module>\applicationservers\<App Server> folders.

Once this is done, you perform these tasks:  * Repackage your client applications with the up-to-date libraries.
 * Reapply product customizations to the up-to-date Java EE modules (EARs and WARs).

Note that all customizations you developed before the update, for example modifications of the descriptors, must be reapplied to the new, up-to-date EARs and WARs. It is a good idea to document and automate those customizations using scripts to make the process easier and error-proof.

Finally, you must update the client applications and ODM modules on your server or servers with the same settings as you deployed previously. If you redeploy the application, follow again the documentation instructions to deploy all ODM modules to your servers [http://pic.dhe.ibm.com/infocenter/dmanager/v8r5m1/topic/com.ibm.odm.distrib.config/topics/odm_distrib_config.html].

Keep in mind that applying a modification or a fix pack does not require any data migration, so your projects and database remain the same.

UPDATING RULE EXECUTION SERVER

Update the following applications in the application server:  *  jrules-res-xu-<server>.rar jrules-res-management-<server>.ear jrules-ssp-<server>.ear jrules-res-htds-<server>ear

Make sure you do not change the class loading policies for applications and modules ( parent last for all ODM modules).

Note: Updating the eXecution Unit RAR file requires a restart of the server.

UPDATE DECISION CENTER

Update the following application in your application server:
 * jrules-teamserver-<server>.ear

Make sure you do not change the class loading policies for applications and modules ( parent last for all ODM modules).

UPDATE THE EVENTS RUNTIME

 1. Stop the event runtime application, wberuntimeear.
 2. Uninstall the following applications, if they exist:  * wbefileconnector
     * wbehttpconnector
     * wbejdbcconnector
     * wbejmsconnector
     * wbesoapconnector

 3. Update the application wberuntimeear.
 4. Start the application wberuntimeear.

Make sure you do not change the class loading policies for applications and modules ( parent last for all ODM modules).

ADDITIONAL CONSIDERATIONS
 * Again, in addition to applying the latest modification or fix pack, consider migrating to the latest version or release (V.R.M.F) of the product as soon as possible to benefit from recently added features and improvements. See our technote Migrating to the latest version of Operational Decision Management [http://www.ibm.com/support/docview.wss?uid=swg21589725] for more information.
 * For JRules 7.1, you can refer to the JRules 7.1 list of fix packs [http://www.ibm.com/support/docview.wss?uid=swg27019787] and also Upgrading JRules to the latest V7.1 fix pack [http://www.ibm.com/support/docview.wss?uid=swg21474292] to learn how to apply the fix packs. But note that JRules 7.1 reaches end of support in September 2015 (see the IBM Support Lifecycle [http://www.ibm.com/software/websphere/support/lifecycle/] page). To ensure continued product support, plan an upgrade to the latest product version before that date.

RELATED INFORMATION
 Fix pack release notification for ODM [http://www.ibm.com/support/docview.wss?uid=swg21665593 ]

Cross reference information Segment Product Component Platform Version Edition Business Integration WebSphere ILOG JRules Maintenance Platform Independent 7.1, 7.0

Question:
Additional steps to apply fix pack to Decision Center

We are upgrading ODM 8.8.1 Decision Center to the latest 8.8.1.3.

Are there any additional steps to apply the fixpack to Decision Center after we install the fixpack with Installation Manager?

Answer:
As with any software product, even if you do not have any issues with running your current configuration, you should apply the latest modification or fix pack to take advantage of these benefits:

 * Anticipate and avoid the risk of encountering defects already fixed.
 * Apply the latest product improvements that are available (performance, for example).
 * Maintain a serviceable system and be able to install an interim fix when required.


IBM Java SDK Upgrade Policy for the IBM WebSphere Application Server - United States upgrade policy TECHNOTE (FAQ)

QUESTION
 What is the Java™ SDK upgrade policy for the IBM® WebSphere® Application Server?

CAUSE
Updating to the latest compatible Java SDK could help you resolve problems more quickly.

ANSWER
The IBM WebSphere Application Server Java SDK can be upgraded to the latest service release for the same Java SDK version.

List of WebSphere Application Server fix packs and the corresponding Java SDK versions [http://www.ibm.com/support/docview.wss?rs=180&uid=swg27005002]

Policy Summary by WebSphere Application Server release:

WebSphere Application Server V8.0, V8.5, V8.5.5
Starting with V8.0 and applicable to all subsequent releases and fixpacks, there is one install package that contains updates for both WebSphere Application Server and Java SDK. Applying fixpacks of WebSphere Application Server also upgrades the SDK that is packaged and bundled within the fixpack. Additionally, separate Java SDK fixpacks are also available that contain just the SDK updates which can be applied to upgrade the SDK.

WebSphere Application Server V7.0
Any V7.0 fix pack can upgrade to the latest Java SDK 1.6.0 service release packaged for WebSphere Application Server.

WebSphere Application Server V6.1
Any V6.1 fix pack can upgrade to the latest Java SDK 1.5.0 service release packaged for WebSphere Application Server.

WebSphere Application Server V6.0
Any V6.0 fix pack can upgrade to the latest Java SDK 1.4.2 service release packaged for WebSphere Application Server.

WebSphere Application Server V5.1
Any V5.1 fix pack can upgrade to the latest Java SDK 1.4.1 and any V5.1.1 can be upgraded to the latest Java SDK 1.4.2 service release packaged for WebSphere Application Server.

WebSphere Application Server V5.0
Any V5.0 fix pack can upgrade to the latest Java SDK 1.3.1 service release packaged for WebSphere Application Server.

Details of Java SDK Upgrade Policy

WebSphere Application Server leverages the Java SDK as a base component. This results in unique support issues, including:

 * Matching Java SDK service releases to Application Server releases and fix packs

 * Delivering updates and fixes associated with the Java SDK on any given Application Server release.

In an effort to resolve customer Java SDK situations as quickly as possible, WebSphere Application Server Support has done a quickest-path-to-resolution analysis, determining the most direct way to collect problem information.

In some cases, problem resolution might include finding shortcuts to resolve symptoms. One shortcut is an immediate upgrade to a newer compatible Java SDK service release, before gathering detailed problem determination data.

There are multiple advantages to performing an immediate Java SDK upgrade as a quicker path to resolution over a full Problem Determination (PD) process:
 1. There is a continuous stream of fixes going into the Java SDK. Many problems encountered by customers are resolved by these fixes.

 2. When a new problem is encountered, applying the latest Java SDK is a quick way to determine if related fixes change the symptoms or correct the problem.

 3. Many documented Java SDK fixes have common symptoms. Frequently, limited PD data does not isolate the problem to a single root cause.

These factors highlight the advantage of applying a newer Java SDK before working through a full PD cycle.

Java SDK and WebSphere Application Server software are updated frequently. To avoid compatibility issues for customers, WebSphere Application Server Support maintains this Java SDK Upgrade Policy.

WebSphere Application Server Support details:
http://www.ibm.com/software/webservers/appserv/support.html [http://www.ibm.com/software/webservers/appserv/support.html]

Identifying compatibility limitations between WebSphere Application Server releases and Java SDK service releases that have not been tested together reduces risk.

Important: Using a Java SDK not specifically packaged with WebSphere Application Server and supplied by IBM, or in violation of the Java SDK Upgrade Policy, is not supported by IBM WebSphere Application Server Support for Java SDK problems. RELATED INFORMATION
 Verify Java SDK version shipped with WebSphere fix pack [http://www.ibm.com/support/docview.wss?rs=180&uid=swg27005002]

Cross reference information Segment Product Component Platform Version Edition Application Servers Runtimes for Java Technology Java SDK

Question: Installing fixpacks with Installation Manager - when did it change from using updateInstaller,  starting in which version of WebSphere I was using updateInstaller to install fixpacks, and there was a separate fixpack for WebSphere and separate for the JDK, independent of each other. Now I understand that with Installation Manager there is a single package containing both the WebSphere App server fixpack as well as the JDK. When did this occur, starting with which version of WebSphere ?


IBM Distribute Decision Validation Service tests on different Rule Execution Server instances - United States SSPResolver; SSP TECHNOTE (FAQ)

QUESTION
 Can I configure Rules Team Server to distribute the Decision Validation Service tests to multiple application servers?

CAUSE
With a Rule Execution Server environment defined on a domain with multiple servers it is possible to define which Rule Execution Server instances will be used to execute the Rule Team Server Decision Services

ANSWER
First remember to pack all your XOMs (eXecutable Object Model) into the ssp.war following the documentation [http://publib.boulder.ibm.com/infocenter/brjrules/v7r1/topic/com.ibm.websphere.ilog.jrules.doc/Content/Business_Rules/Documentation/_pubskel/JRules/ps_JRules_Global720.html].

Then make sure the SSP (ssp.war) is deployed on each server along with a XU connection factory and the appropriate datasource definition.

Then create your own SSP resolver, add it to the teamserver.war and set the teamserver.defaultSSPResolver.class property to this class following this specification [http://publib.boulder.ibm.com/infocenter/brjrules/v7r1/index.jsp?topic=/com.ibm.websphere.ilog.jrules.doc/html/api/html/ilog/rules/teamserver/model/testing/IlrSSPResolver.html].

By implementing your own method IlrSSPResolver.getSSPURL(String serverName,URL url), you will be able to point to something else than the default provider.

The default provider uses the url of the Rule Execution Server passed in parameter and replaces the application name with testing.

A simple implementation can use the server name to return a specific server URL.

for example you can have 2 servers defined in RTS:

 * testingServer1 http://host1:9080/res
 * testingServer2 http://host1:9080/res

And your SSP provider can evaluate the SSP URL as follow :
if ( serverName.equals("testingServer1") )
{
return ( new URL( "http://server1:9080/testing" ) );
}
else if ( serverName.equals("testingServer2") )
{
return ( new URL( "http://server2:9080/testing" );
}
else
return( new URL( "http://host1:9080/testing" ));

Then when running a DVS test the execution will be dispatched according to the server you choose.

For a more elaborate implementation you can have a dependency with the project being tested so that you can distribute the DVS execution based on a project:

ManagerBean bean = ManagerBean.getInstance() ;
IlrSession session = bean.getSession();
IlrRuleProject project = session.getWorkingBaseline().getProject();
String pname = project.getName();

.

RELATED INFORMATION
#Repackaging the XOM for remote testing [http://publib.boulder.ibm.com/infocenter/brjrules/v7r1/topic/com.ibm.websphere.ilog.jrules.doc/Content/Business_Rules/Documentation/_pubskel/JRules/ps_JRules_Global720.html]
IlrSSPResolver [http://publib.boulder.ibm.com/infocenter/brjrules/v7r1/index.jsp?topic=/com.ibm.websphere.ilog.jrules.doc/html/api/html/ilog/rules/teamserver/model/testing/IlrSSPResolver.html]

Question:
How to configure DC to look on a different App server for the SSP?

I have a single Application server with the RES console installed, and then a separate application server with the XU, the ssp ear, etc. on that one. Each app server is configured separately with respective ports. for example, mgmt server (with the RES console only) has port 8000, and the runtime server (with all of the runtime components) has port 9000.

The problem I am running into is the following:

When I am trying to run a DVS test suite from Decision Center against RES, (my server endpoint in Decision Center is configured as http://hostname:port/res)

I am getting a "the host and port are responsive but the "/testing/sspService" cannot be found. This is expected if it is looking on the same server as the RES console since the application (ssp) is not deployed there.

However, I cannot seem to configure the RES console to not assume that the ssp is running on the same port.

Answer:
First remember to pack all your XOMs (eXecutable Object Model) into the ssp.war following the documentation [http://publib.boulder.ibm.com/infocenter/brjrules/v7r1/topic/com.ibm.websphere.ilog.jrules.doc/Content/Business_Rules/Documentation/_pubskel/JRules/ps_JRules_Global720.html].

Then make sure the SSP (ssp.war) is deployed on each server along with a XU connection factory and the appropriate datasource definition.

Then create your own SSP resolver, add it to the teamserver.war and set the teamserver.defaultSSPResolver.class property to this class following this specification [http://publib.boulder.ibm.com/infocenter/brjrules/v7r1/index.jsp?topic=/com.ibm.websphere.ilog.jrules.doc/html/api/html/ilog/rules/teamserver/model/testing/IlrSSPResolver.html].

By implementing your own method IlrSSPResolver.getSSPURL(String serverName,URL url), you will be able to point to something else than the default provider.

The default provider uses the url of the Rule Execution Server passed in parameter and replaces the application name with testing.

A simple implementation can use the server name to return a specific server URL.


IBM Security Bulletin : Multiple vulnerabilities in IBM Java Runtime affect IBM Integration Bus and WebSphere Message Broker (CVE-2015-0138) - United States  SECURITY BULLETIN

SUMMARY
 The “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability affects IBM® Runtime Environment Java™ Technology Edition 6SR16 (and earlier) used by WebSphere Message Broker and the IBM® Runtime Environment Java™ Technology Edition 7SR8 (and earlier) or 7R1 (and earlier) used by IBM Integration Bus.

VULNERABILITY DETAILS
CVEID: CVE-2015-0138 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0138]
DESCRIPTION: A vulnerability in various IBM SSL/TLS implementations could allow a remote attacker to downgrade the security of certain SSL/TLS connections. An IBM SSL/TLS client implementation could accept the use of an RSA temporary key in a non-export RSA key exchange ciphersuite. This could allow a remote attacker using man-in-the-middle techniques to facilitate brute-force decryption of TLS/SSL traffic between vulnerable clients and servers.

This vulnerability is also known as the FREAK attack.

CVSS Base Score: 4.3
CVSS Temporal Score: See http://exchange.xforce.ibmcloud.com/#/vulnerabilities/100691 [http://exchange.xforce.ibmcloud.com/#/vulnerabilities/100691] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:P/A:N)

AFFECTED PRODUCTS AND VERSIONS
IBM Integration Bus V9, V10
IBM Integration Bus Toolkit V9,
WebSphere Message Broker V7 and V8
WebSphere Message Broker Toolkit V7 and V8

REMEDIATION/FIXES

Product VRMF APAR Remediation/Fix IBM Integration Bus V10 IT07823
IT07802 The APARs are available in fixpack 10.0.0.1
http://www.ibm.com/support/docview.wss?uid=swg24040056 [http://www.ibm.com/support/docview.wss?uid=swg24040056] IBM Integration Bus V9 IT07823 An interim fix is available from IBM Fix Central.
http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/Integration+Bus&release=All&platform=All&function=aparId&apars=IT07823 [http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/Integration+Bus&release=All&platform=All&function=aparId&apars=IT07823]

The APAR is targeted to be available in fix pack 9.0.0.4. IBM Integration Toolkit V9 IT07802 An interim fix is available at [http://public.dhe.ibm.com/software/websphere/studiotools/wmbt/v90/MB900301/]
http://public.dhe.ibm.com/software/websphere/studiotools/wmbt/v90/MB900301/ [http://public.dhe.ibm.com/software/websphere/studiotools/wmbt/v90/MB900301/] WebSphere Message Broker
V8
IT07736 An interim fix is available from IBM Fix Central.
http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Message+Broker&release=All&platform=All&function=aparId&apars=IT07736 [http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Message+Broker&release=All&platform=All&function=aparId&apars=IT07736]

The APAR is targeted to be available in fix pack 8.0.0.6. WebSphere Message Broker Toolkit V8 IT07802 An interim fix is available at [http://public.dhe.ibm.com/software/websphere/studiotools/wmbt/v80/MB800501/]
http://public.dhe.ibm.com/software/websphere/studiotools/wmbt/v80/MB800501/ [http://public.dhe.ibm.com/software/websphere/studiotools/wmbt/v80/MB800501/] WebSphere Message Broker
V7
IT07736 An interim fix is available from IBM Fix Central.
http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Message+Broker&release=All&platform=All&function=aparId&apars=IT07736 [http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+Message+Broker&release=All&platform=All&function=aparId&apars=IT07736]

The APAR is targeted to be available in fix pack 7.0.0.8. WebSphere Message Broker Toolkit V7 IT07802 An interim fix is available at
http://public.dhe.ibm.com/software/websphere/studiotools/wmbt/v70/MB700702/ [http://public.dhe.ibm.com/software/websphere/studiotools/wmbt/v70/MB700702/]
You should verify applying this fix does not cause any compatibility issues.

The planned maintenance release dates for WebSphere Message Broker and IBM Integration Bus are available at :
http://www.ibm.com/support/docview.wss?uid=swg27006308 [http://www.ibm.com/support/docview.wss?uid=swg27006308] WORKAROUNDS AND MITIGATIONS
None known

GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

IMPORTANT NOTE
 IBM strongly suggests that all System z customers be subscribed to the System z Security Portal to receive the latest critical System z security and integrity service. If you are not subscribed, see the instructions on the System z Security web site [http://www.ibm.com/systems/z/solutions/security_subintegrity.html]. Security and integrity APARs and associated fixes will be posted to this portal. IBM suggests reviewing the CVSS scores and applying all security or integrity fixes as soon as possible to minimize any potential risk.

REFERENCES
Complete CVSS v2 Guide [http://www.first.org/cvss/v2/guide]
On-line Calculator v2 [http://nvd.nist.gov/CVSS-v2-Calculator]
RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/psirt] ACKNOWLEDGEMENT
The vulnerability was reported to IBM by Karthikeyan Bhargavan of the PROSECCO team at INRIA

CHANGE HISTORY
 01-Apr-2015: Original Copy Published
01-Jun-2015: Added V10 & Toolkit fix links

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

Cross reference information Segment Product Component Platform Version Edition Business Integration IBM Integration Bus Security AIX, HP-UX, Linux, Solaris, Windows 10.0, 9.0
PRODUCT ALIAS/SYNONYM
 WMB IIB

Question: Help with Security Bulletin : Multiple vulnerabilities in IBM Java Runtime affect IIB and WMB (CVE-2015-0138) I need to understand details regarding Security Bulletin : Multiple vulnerabilities in IBM Java Runtime affect IBM Integration Bus and WebSphere Message Broker (CVE-2015-0138). This is also commonly referenced as “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. Where can I find this information?

Answer: The “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability affects IBM® Runtime Environment Java™ Technology Edition 6SR16 (and earlier) used by WebSphere Message Broker and the IBM® Runtime Environment Java™ Technology Edition 7SR8 (and earlier) or 7R1 (and earlier) used by IBM Integration Bus.


IBM WSDL Cache Policy not refreshing from WSDL in local:/// directory - United States datapower; wsdl cache refresh; wsdl; cache; refresh TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 You created a Web Service Proxy (WS Proxy) based on a .wsdl file and want to refresh when there are changes in the .wsdl file. The file is located on the DataPower appliance under the "local" directory. You created a WSDL Cache Policy to specify the local .wsdl file for the URL Match expression, but the web service proxy state is not being refreshed when there are changes in the file.

SYMPTOM
The WSDL Cache Policy is not refreshing from a WSDL in the local:/// directory.

RESOLVING THE PROBLEM
In a WS Proxy, you can refresh WSDL from an URL using WSDL Cache policy. However, if the WSDL is hosted on the DataPower appliance, such as in local:///, rather than on an external URL, the WSDL Cache Policy does not apply.

For instance, changes made to local:///test.wsdl are not picked up by WS Proxy although there is a WSDL Cache policy setting the URL Match expression to local:///test.wsdl.

This issue was reported to Quality Engineering but it was determined that the DataPower device is working as designed. The device will not poll WSDL files on the local store.

The WSDL Cache policy works with WSDL files hosted on an external URL.

To refresh a WSDL in the local:/// directory, disable and re-enable the service.

Question:
How to refresh a DataPower WebService Proxy which WSDL got changed? I have made changes to a WSDL stored in DP local filesystem.

How can I make the WSP reflect this change since DataPower Gateway 7.1.0 WebService Proxy WebGUI doesn't offer the "Refresh" button anymore?

Is there a best practice to refresh the WSP if I modified my WSDL?

Answer:
In a WS Proxy, you can refresh WSDL from an URL using WSDL Cache policy. However, if the WSDL is hosted on the DataPower appliance, such as in local:///, rather than on an external URL, the WSDL Cache Policy does not apply.

For instance, changes made to local:///test.wsdl are not picked up by WS Proxy although there is a WSDL Cache policy setting the URL Match expression to local:///test.wsdl.

This issue was reported to Quality Engineering but it was determined that the DataPower device is working as designed. The device will not poll WSDL files on the local store.

The WSDL Cache policy works with WSDL files hosted on an external URL.

To refresh a WSDL in the local:/// directory, disable and re-enable the service.


IBM Upgrade Rational Application Developer 9.6 to use Websphere Application Server ILAN - United States  TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Customers see different content in the Rational Application Developer (RAD) Websphere Application Server (WAS) download compared to prior RAD releases.

During install of this new WAS ILAN version, customers now see explicit wording saying this a no cost, non-supported and non-warranted version of WebSphere Application Server traditional. While this has always been the case for this developer version, refer to evaluation software page & FAQ below, seeing these words during install may be a new information for some users.

CAUSE
New WAS packaged in RAD:

Rational Application Developer for WebSphere packages WebSphere Application Server for development and test purposes. WAS recently renamed WAS for Developers (WAS4D) to WAS ILAN (see here [https://developer.ibm.com/wasdev/downloads/#asset/WAS_traditional_for_Developers]). In response to this change, RAD 9.6 now packages WAS ILAN available in the RAD_WS_9.6_WASTE_9.0.zip file. It has the same capabilities and updates that RAD users expect.

Support for this new WAS packaged in RAD:
New message during installation has worried users, however, users with an active support contract for their production WebSphere Application Server are entitled for support on the developer machine as long as an active support contract is in place for the production server.

 * Evaluation software page: https://www.ibm.com/developerworks/downloads/ws/wasdevelopers/index.html [https://www.ibm.com/developerworks/downloads/ws/wasdevelopers/index.html]
 * FAQ: https://www.ibm.com/developerworks/downloads/ws/wasdevelopers/faq-wasdevelopers.html [https://www.ibm.com/developerworks/downloads/ws/wasdevelopers/faq-wasdevelopers.html]

RESOLVING THE PROBLEM
To change/upgrade RAD 9.6 WAS4D to WAS ILAN.

Add the following repository to Installation Manager: https://www.ibm.com/software/repositorymanager/com.ibm.websphere.ILAN.v90/ [https://www.ibm.com/software/repositorymanager/com.ibm.websphere.ILAN.v90/]

Question: where is the websphere application server 9.0.0.4 fix for developers I am using the was 9.0.0.0 in rad/rsa 9.6.1 for Windows. I cannot upgrade to the 9.0.0.4 fixpack, because there is no developer edition. On the downloadpage there are Base, Network Deployment, DMZ Secure Proxy Server and IBM Web Enablement for IBM i, but no Developers! See link text For was 8.5.5.10 there exists a developers edition. Where can I download the Websphere Application Server fix pack 9.0.0.4 Developers?

Answer: WAS recently renamed WAS for Developers (WAS4D) to WAS ILAN (see here [https://developer.ibm.com/wasdev/downloads/#asset/WAS_traditional_for_Developers]). In response to this change, RAD 9.6 now packages WAS ILAN available in the RAD_WS_9.6_WASTE_9.0.zip file. It has the same capabilities and updates that RAD users expect.


IBM Obtaining debug information during Decision Warehouse trace capture - United States  TECHNOTE (FAQ)

QUESTION
 How can I obtain debug information when the trace is saved to the Decision Warehouse ?

CAUSE
To minimize the impact of Decision Warehouse (DW) monitoring on the processing of ruleset executions, possible failures to save the trace to the database may remain silent (no stack trace in the logs of the application server).

ANSWER
If an issue arises during DW trace persistence at runtime, the related messages and stack traces are only available programmatically through the following API: ilog.rules.res.session.IlrSessionResponse.getWarnings()

So it is possible for an error to remain silent if the warnings above are not explicitly logged by the application.

It is however possible to customize the DW trace and log additional debug information even when the application does not explicitly log the above mentioned warnings. The attached sample uses the java.util.logging API to append to the ilog.rules.support.debugtrace.DebugTraceDAO logger the following:

 * at SEVERE level any exception that occurred while attempting to persist the trace to the database
 * at INFO level a summary of the trace with ruleset path information and a list of execution events
 * at FINEST level the list of session response warnings and the full execution trace XML (beware this can be a very large amount of information going to the log, possibly several megabytes)

By default only INFO level and above messages (including SEVERE) are typically visible in the application server logs. So the first two set of information above should be visible, while the FINEST level should require specific configuration of the Java logging to be visible.

Instructions

Bundle the attached jrules-debugtrace.jar sample in the Rule Execution Server (RES) application that is performing ruleset executions:  * If you are using JRules Hosted Transparent Decision Service (HTDS), in jrules-res-htds-<appserver>.ear/jrules-res-htds-<appserver>.war/WEB-INF/lib
 * If you are using JRules Scenario Service Provider (SSP) in jrules-ssp-<appserver>.ear/jrules-ssp-server.war/WEB-INF/lib
 * If you are executing rules from your application, the sample should be packaged alongside the RES session library that your application already bundles

jrules-debugtrace.jar [/support/docview.wss?uid=swg21433278&aid=2]jrules-debugtrace.jar [/support/docview.wss?uid=swg21433278&aid=1]
If you are interested in learning about the implementation of this DW trace you can use the following eclipse project :

jrules-debugtrace-src.zip [/support/docview.wss?uid=swg21433278&aid=4]jrules-debugtrace-src.zip [/support/docview.wss?uid=swg21433278&aid=3]
RELATED INFORMATION
#A simplified Chinese translation is available [http://www.ibm.com/support/docview.wss?uid=swg21665639]

Cross reference information Segment Product Component Platform Version Edition Business Integration IBM Operational Decision Manager Platform Independent 8.5, 8.0.1, 8.0, 7.5 Enterprise

Question:
No trace is logged in Decision Warehouse, and no records in EXECUTION_TRACES table for a certain ruleset

For a certain ruleset, no trace is logged in DW, and no records can be found in EXEUTION_TRACES table of DW database.

Server logs do not contain any messages about the execution traces for this ruleset.

The issue reproduces only for this project. For other projects deployed in RES, traces are being logged in DW. Also, the same project generates execution traces in other environments.

The following properties have been set:

     monitoring.enabled = true
     monitoring.filters = INFO_EXECUTION_DATE=true,INFO_EXECUTION_DURATION=true,INFO_TOTAL_TASKS_EXECUTED=true,INFO_TOTAL_RULES_NOT_FIRED=true,INFO_EXECUTION_EVENTS=true,INFO_TOTAL_TASKS_NOT_EXECUTED=true,INFO_TOTAL_RULES_FIRED=true,INFO_RULESET_PROPERTIES=true
     ruleset.bom.enabled = false (for true value, the problem still occurs)
     ruleset.sequential.trace.enabled = true
     ruleset.trace.enabled = true

How can I diagnose this issue?

Answer:
If an issue arises during DW trace persistence at runtime, the related messages and stack traces are only available programmatically through the following API: ilog.rules.res.session.IlrSessionResponse.getWarnings()

So it is possible for an error to remain silent if the warnings above are not explicitly logged by the application.


IBM Importing a Certificate for the ITCAM Agent for Data Power (BN Agent) - United States CAMDPALL CAMDPSEC Certification Import Importing TECHNOTE (FAQ)

THIS DOCUMENT APPLIES ONLY TO THE FOLLOWING LANGUAGE VERSION(S):
 US English

QUESTION
 How to import a Certificate for the TCAM Agent for Data Power (BN Agent) ?

CAUSE
Certification is missing.
Trouble shooting Hint - The trace log will show an error that looks like this:
[2015-05-28T05:58:45.248-0430] - ERROR - BODAPPS57 - pool-1-thread-2 -
com.ibm.management.soa.dp.monitor.agent.server.KBNSomaCPUUsage.getCPUUsa
ge - [subnode=DPPROD02; hostname=10.0.49.25;] occured exception
javax.net.ssl.SSLHandshakeException: Received fatal alert:
handshake_failure

ANSWER

Import the certification file into the agent by doing the following command:

Note : You can use either .cer or .pem.
Make sure the file is in ASCII not binary.
Where the /usr/ITM/JRE is your Java location and <fileName> is your file name.

ex:
/usr/ITM/JRE/aix526/jre/bin/keytool -import -trustcacerts -alias
ligitalsso -keystore /usr/ITM/JRE/aix526/jre/bin/lib/security/cacerts
-storepass <fileName> -file /NEWSSL-sscert.cer

PRODUCT ALIAS/SYNONYM
 ITCAM Agent for Data Power

Question: How to import a certificate in ITCAM for Data Power ? How can I import a certificate in ITCAM for Data Power?

Answer:
Import the certification file into the agent by doing the following command:

Note : You can use either .cer or .pem.
Make sure the file is in ASCII not binary.
Where the /usr/ITM/JRE is your Java location and <fileName> is your file name.


IBM Batches left in running state by Rulerunner with IBM Datacap Taskmaster Capture - United States rule runner; batches; multiple; running TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 When running batch creation tasks, such as VScan, with Rulerunner, multiple batches may be created and/or left in the running state.

CAUSE
Rulerunner is a very efficient service and will overdrive the Rulerunner Server if too many tasks or threads are assigned.

RESOLVING THE PROBLEM
Turn off Mixed Queuing

 1. Run Rulerunner Manager.
 2. On the Rulerunner tab, stop the service.
 3. On the Rulerunner Login tab, click Connect.
 4. Select the Workflow tab.
 5. On the Rulerunner Settings subtab, uncheck Mixed Queuing.
 6. Click Save, then go back to the Rulerunner tab and start the service.

Set skipsamebatch for VScan tasks  1. Run Rulerunner Manager.
 2. On the Rulerunner tab, stop the service.
 3. On the Rulerunner Login tab, click Connect.
 4. On the Workflow tab, expand the hierarchy on the right and highlight VScan.
 5. In the Settings section in the lower right, set skipsamebatch to 1.
 6. Highlight the line labeled <dbs> above VScan in the thread hierarchy.
 7. Set skipsamebatch to 1 there also.
 8. Click Save, then go back to the Rulerunner tab and start the service.

For Datacap Taskmaster 8.0.1, the procedures are the same but some tabs will have different names.

If you are still experiencing this issue the problem may be with your DataCap Object (DCO). Correcting DCO issues will resolve batches left in running state. RELATED INFORMATION
 VScan Intermittently Aborts [http://www.ibm.com/support/docview.wss?uid=swg21573034 ]

Question:
How to create batches for bulk upload

I am new in datacap 9.0 .I just started developing with datacap studio and currently I have learned  to recognize, capture and export the data into filenet.

Now I want to Create batches of image or pdf files so that I can process images and pdf .

As per requirement client is sharing document at one shared location.I need to pickup all the documnets from shared location. For creating batches which tool I should use? how it works?

Can anyone help how I proceed with this.

Regards,

Chhaya Sahu

Answer:
Set skipsamebatch for VScan tasks  1. Run Rulerunner Manager.
 2. On the Rulerunner tab, stop the service.
 3. On the Rulerunner Login tab, click Connect.
 4. On the Workflow tab, expand the hierarchy on the right and highlight VScan.
 5. In the Settings section in the lower right, set skipsamebatch to 1.
 6. Highlight the line labeled <dbs> above VScan in the thread hierarchy.
 7. Set skipsamebatch to 1 there also.
 8. Click Save, then go back to the Rulerunner tab and start the service.


IBM Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2015-4872 CVE-2015-4911 CVE-2015-4893 CVE-2015-4803) - United States  SECURITY BULLETIN

SUMMARY
 WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about security vulnerabilities affecting WebSphere Application Server have been published in a security bulletin.

VULNERABILITY DETAILS
Please consult the security bulletin WebSphere Application Server [http://www.ibm.com/support/docview.wss?uid=swg21969620] for vulnerability details and information about fixes.
In addition to to CVE-2015-4872 WebSphere Service Registry and Repository is vulnerable to the following issues.

CVEID: CVE-2015-4911 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911]

DESCRIPTION: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service.
CVSS Base Score: 5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/107360 [https://exchange.xforce.ibmcloud.com/vulnerabilities/107360] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVEID: CVE-2015-4893 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4893]

DESCRIPTION: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service.
CVSS Base Score: 5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/107359 [https://exchange.xforce.ibmcloud.com/vulnerabilities/107359] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVEID: CVE-2015-4803 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4803]

DESCRIPTION: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service.
CVSS Base Score: 5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/107358 [https://exchange.xforce.ibmcloud.com/vulnerabilities/107358] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)

AFFECTED PRODUCTS AND VERSIONS

Principle Product and Version(s) Affected Supporting Product and Version WebSphere Service Registry and Repository V8.5 WebSphere Application Server Network Deployment V8.5.5 WebSphere Service Registry and Repository V8.0 WebSphere Application Server Network Deployment V8.0 WebSphere Service Registry and Repository V7.5 WebSphere Application Server Network Deployment V7.0 WebSphere Service Registry and Repository V7.0 WebSphere Application Server Network Deployment V7.0 GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

IMPORTANT NOTE
 IBM strongly suggests that all System z customers be subscribed to the System z Security Portal to receive the latest critical System z security and integrity service. If you are not subscribed, see the instructions on the System z Security web site [http://www.ibm.com/systems/z/solutions/security_subintegrity.html]. Security and integrity APARs and associated fixes will be posted to this portal. IBM suggests reviewing the CVSS scores and applying all security or integrity fixes as soon as possible to minimize any potential risk.

REFERENCES
Complete CVSS v2 Guide [http://www.first.org/cvss/v2/guide]
On-line Calculator v2 [http://nvd.nist.gov/CVSS-v2-Calculator]
Complete CVSS v3 Guide [http://www.first.org/cvss/user-guide]
On-line Calculator v3 [http://www.first.org/cvss/calculator/3.0] RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/PSIRT] CHANGE HISTORY
 02 February 2016: Original version published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

Question: Help with Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WSRR (CVE-2015-4911) I need to understand details regarding Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2015-4911). Where can I find this information?

Answer:
CVEID: CVE-2015-4911 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911]

DESCRIPTION: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service.
CVSS Base Score: 5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/107360 [https://exchange.xforce.ibmcloud.com/vulnerabilities/107360] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)


IBM JRules or ODM module fails to access database with StaleConnectionException - United States  TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 JRules and ODM modules such as Rule Execution Server (RES) and Rule Team Server (RTS) / Decision Center (DC) may fail to access their data source with the following type of exception present in the log:

com.ibm.websphere.ce.cm.StaleConnectionException: Io exception: Connection timed out

SYMPTOM
The problem may occur when a JRules or ODM module accesses its data source after a period of database access inactivity. For example:

 * The first user accessing a RTS / DC server that remained idle overnight experiences a failure upon logging and the server log shows an com.ibm.websphere.ce.cm.StaleConnectionException occurred at that time.
 * After a RES server has been processing execution requests normally for some time, an attempt to deploy a ruleset update fails and the server log shows an com.ibm.websphere.ce.cm.StaleConnectionException occurred upon an attempt to invalidate a ruleset or to retrieve its definition.

CAUSE
The underlying network connection for a data source is no longer valid although the data source itself remains considered active from the WebSphere Application Server data source connection pool management perspective. An attempt by a JRules module to try and access its data base through one such data source connection provided by the Application Server may then fail.
The network connection of a data source may become invalid for a number of reasons, one typical example is that a firewall between the Application Server and the Database has a policy to discard network connections that remain idle for some time.

ENVIRONMENT
The exception com.ibm.websphere.ce.cm.StaleConnectionException is specific to WebSphere Application Server environments. But a similar issue can be experienced with Weblogic, see: Rule Execution Server on WebLogic unable to load ruleset after period of inactivity [http://www-01.ibm.com/support/docview.wss?uid=swg21615801]

RESOLVING THE PROBLEM
Configure the WebSphere Application Server data source connection pool [http://publib.boulder.ibm.com/infocenter/wasinfo/v7r0/index.jsp?topic=/com.ibm.websphere.nd.multiplatform.doc/info/ae/ae/udat_conpoolset.html] so as to eliminate occurrences of StaleConnectionException :

 * Set the Minimum connections to 0 to avoid situations where a connection is kept in the pool to meet the minimum requirement, even though it may have been idle for longer than Unused timeout
 * Set the values for Unused timeout and Reap timeout so that the sum does not exceed any network level idle connection timeout

The document Troubleshooting stale connection problems [http://www-01.ibm.com/support/docview.wss?uid=swg21247168#SCETroubleshooting] provides further information. RELATED INFORMATION
#RES unable to load ruleset after period of inactivity [http://www-01.ibm.com/support/docview.wss?uid=swg21615801]
Troubleshooting stale connection problems [http://www-01.ibm.com/support/docview.wss?uid=swg21247168#SCETroubleshooting]

Cross reference information Segment Product Component Platform Version Edition Business Integration IBM Operational Decision Manager Platform Independent 8.5, 8.0.1, 8.0, 7.5 Enterprise

Question: Recurrent RES StaleConnectionException How to prevent rule execution failing because of recurrent StaleConnectionException on ODM 8.8 Rule Execution Server?

Answer:
Configure the WebSphere Application Server data source connection pool so as to eliminate occurrences of StaleConnectionException :

    Set the Minimum connections to 0 to avoid situations where a connection is kept in the pool to meet the minimum requirement, even though it may have been idle for longer than Unused timeout
    Set the values for Unused timeout and Reap timeout so that the sum does not exceed any network level idle connection timeout


IBM Writing Verbose GC To A Specified Log In Solaris and HP-UX - United States verbosegc log rotation HP Solaris JVM rotate file TECHNOTE (FAQ)

QUESTION
 How can I write verbose gc output to a log file other than the native_stdout?

CAUSE
By default, Solaris and HP-UX do not write verbose GC to a log file. This must be configured.

ANSWER

WAS 8.5.0.2 (and higher), WAS 8.0.0.6 (and higher), WAS 7.0.0.27 (and higher):

Solaris:
Add the following parameters to the generic JVM arguments:

-XX:+PrintGCDetails
-XX:+PrintGCDateStamps
-XX:+PrintHeapAtGC
-Xloggc:/tmp/gc.log

To enable log file rotation:
-XX:+UseGCLogFileRotation
-XX:NumberOfGCLogFiles=10
-XX:GCLogFileSize=10M

notes:
-Xloggc:<fileName>

 * ex: -Xloggc:/tmp/gc.log

-XX:+UseGCLogFileRotati o n  * Enabled GC log rotation, requires -Xloggc

-XX:NumberOfGClogFiles= <num_of_files>  * Set the number of files to use when rotating logs, must be >= 1. The rotated log files will use the following naming scheme, <filename>.0, <filename>.1, ..., <filename>.n-1.

-XX:GCLogFileSize=<number>K (or M)  * The size of the log file at which point the log will be rotated, must be >= 8K.

HP:
Add the following parameters to the generic JVM arguments:
-XX:+PrintGCDetails
-XX:+PrintGCDateStamps
-XX:+PrintHeapAtGC
-Xverbosegc:file= /tmp/gc_pid$$.vgc

To enable log file rotation:
-XX:+UseGCLogFileRotation
-XX:NumberOfGCLogFiles=10
-XX:GCLogFileSize=10M

note : $$ maps to the PID of the java process RELATED INFORMATION
 6941923 : RFE: Handling large log files produced by lon [http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6941923]
Enabling verbose garbage collection (verbosegc) in WebS [http://www.ibm.com/support/docview.wss?rs=180&uid=swg21114927]
Where to set generic JVM arguments in WebSphere Applica [http://www.ibm.com/support/docview.wss?rs=180&uid=swg21417365]
Verify Java SDK version shipped with IBM WebSphere Appl [http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg27005002]
HP-UX Java 6.0.18 - Handling large GC log files [http://h20000.www2.hp.com/bc/docs/support/SupportManual/c03119431/c03119431.pdf]
HP-UX Java 7.0.05 - Handling large GC log files [http://h20000.www2.hp.com/bc/docs/support/SupportManual/c03123467/c03123467.pdf]
Oracle - Java HotSpot VM Options [http://www.oracle.com/technetwork/java/javase/tech/vmoptions-jsp-140102.html]

Question: For HP-UX how to write verbose gc output to a log file other than the native_stdout? A customer asked why no gc logs generated even if they use the -Xverbosegc option. So How can I write verbose gc output to a log file other than the native_stdout for HP-UX?

Answer:
Add the following parameters to the generic JVM arguments:
-XX:+PrintGCDetails
-XX:+PrintGCDateStamps
-XX:+PrintHeapAtGC
-Xverbosegc:file= /tmp/gc_pid$$.vgc


IBM Content Navigator v2.0.3 is adding a .dat extension to a CSV file during Download action on a document. - United States icn; csv; download; mimetype; mime type TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 IBM Content Navigator v2.0.3 is adding a .dat extension to a CSV document during Download action on the document.

SYMPTOM
A .dat extension is added to the CSV document upon download.

CAUSE
A CSV document is basically a plain text file. If the mime type of the document as shown in system properties in ICN is not text/csv, then Navigator cannot recognize the document and a .dat extension will be added upon download. The correct mime type for a CSV file is text/csv.

RESOLVING THE PROBLEM
If there are CSV document already in the content repository with a mime type that is not text/csv, then in order to view them in a text editor (ex. Notepad), you may use the following workaround:
- save the document to the local machine with .dat extension
- right click on the .dat file and click Open With...
- click 'Choose your default program...'
- then select Notepad or another text editor of your choice
- select the checkbox 'Always use the selected program to open this type of file'

The other alternative is to change the mimetype of the document in the content repository using a custom solution written using the repository's client APIs.

Question: IBM Content Navigator v2.0.3 is adding a .dat extension to a CSV file during Download action on a document. IBM Content Navigator v2.0.3 is adding a .dat extension to a CSV file during Download action on a document. Why is this the case?

Answer: If the mime type of the document as shown in system properties in ICN is not text/csv, then Navigator cannot recognize the document and a .dat extension will be added upon download.