IBM Support

After upgrade Java for Information Server on AIX platform, java programs fail with error "java.security.ProviderException: Failed to initialize IBMJCEPlus provider"

Troubleshooting


Problem

After the instance of Java bundled with InfoSphere Information Server on AIX platform is upgraded, some Java programs including the ASB Agent fail with class not found errors that have the following root cause:

  Caused by: java.security.ProviderException: Failed to initialize IBMJCEPlus provider
  Caused by: java.security.ProviderException: jgskit (Not found in java.library.path)

Other services (such as the Operations Console) which are dependent upon the ASB Agent also encounter problems until this issue is corrected.

Cause

This error occurs on AIX platform after Java is upgraded to 8.0.6.25 or later.   

The problem is seen in 8.0.6.25 but not in earlier SR levels, it happens because IBMJCEPlus is required for TLS 1.3 support, which was added in 8.0.6.25. Before 8.0.6.25, the JVM would not try to load libjgskit.so (and libjgsk8iccs_64.so), unless IBMJCEPlus was explicitly enabled.

Now that Java tries to load libjgskit.so and libjgsk8iccs_64.so, the LIBPATH must contain the following 2 directories:
   <ISHOME>/jdk/jre/lib/ppc64
   <ISHOME>/jdk/jre/lib/icc

The first directory might already be in LIBPATH, but the second directory (icc) is not part of default LIBPATH for the Engine tier and must be added.

Resolving The Problem

 
To resolve this issue, add <ISHOME>/jdk/jre/lib/icc to the shared library path used by the Information Server Engine and Agent:

1. Shutdown DataStage Engine and ASB Agent services:
         Shutting down services (Linux, UNIX)

2. Back up the dsenv and Agent.sh scripts.
     a. Back up the dsenv script in <ISHOME>/Server/DSEngine/. For example,
              cd /opt/IBM/InformationServer/Server/DSEngine
              cp dsenv dsenv.bak
    b. Back up the Agent.sh script in <ISHOME>/ASBNode/bin/. For example,
             cd /opt/IBM/InformationServer/ASBNode/bin/Agent.sh
             cp Agent.sh Agent.sh.bak
 
3. Update LIBPATH in the dsenv and Agent.sh scripts.
     a. Open the dsenv script in a text editor, and add the following lines at the end of the file:
              LIBPATH=$LIBPATH:$ISHOME/jdk/jre/lib/icc
              export LIBPATH
    b. Open the Agent.sh script in a text editor, and add the following lines at the end of the file:
              LIBPATH="$NODE_DIR/lib/cpp:$JAVA_HOME/lib/ppc64/j9vm:$JAVA_HOME/lib/ppc64:$JAVA_HOME/lib/icc:$LIBPATH"
              export LIBPATH
    c. Save the changes.
4. Start the DataStage Engine and ASB Agent services:
    Starting services (Linux, UNIX)


Note: You don't need to restart WebSphere Application Server.

Document Location

Worldwide

[{"Type":"SW","Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSZJPZ","label":"IBM InfoSphere Information Server"},"ARM Category":[{"code":"a8m500000008XHXAA2","label":"ASB Agent and Logging Agent"}],"ARM Case Number":"TS005512037","Platform":[{"code":"PF002","label":"AIX"}],"Version":"11.5.0;11.7.0;11.7.1"}]

Document Information

Modified date:
26 October 2022

UID

ibm16448522