IT41760: IBM SPECTRUM CONTROL INSTALLER FAILS INSTALLATION AS ERRORS OCCUR DURING INSTALL: NO SSL CERTIFICATES WERE GENERATED.

IBM Spectrum Control 5.4.10.1 - Windows Server
IBM Spectrum Control 5.4.10.1 - Linux Server
IBM Spectrum Control 5.4.10.1 - AIX Server
IBM Spectrum Control 5.4.10.1 - Agents

APAR status

• Closed as program error.

Error description

• The IBM Spectrum Control Install program completes and indicates
  a successful completion in the Installers UI.
  However, embedded errors point to SSL certificates unable to be
  generated successfully.
  
  Resulting in, i.e. WEB UI not able to be launched successfully,
  etc.
  
  i.e.: trace errors:
  2022-06-27 15:47:27.710+0200 INFO TPCUtility makeBackup origina
  lFullPathFilename=D:<IBM_Spectrum_Control_Install_Dir>\wlp\usr\
  servers\webServer\resources\security\key.p12,backupFullPathFilen
  \usr\servers\webServer\resources\security\key.p12.bak
  2022-06-27 15:47:27.710+0200 INFO Exit TPCUtility makeBackup
  originalFullPathFilename File not found: <IBM_Spectrum_Control_
  Install_Dir>\wlp\usr\servers\webServer\resources\security\key.p
  12
  2022-06-27 15:47:28.788+0200 INFO ManageSSLCertificates
  hardenCertificate Error deleting default self-signed
  certificate: error code = 25
  2022-06-27 15:47:28.788+0200 INFO Exit ManageSSLCertificates
  execute
  2022-06-27 15:47:28.788+0200 INFO  createSSLCertificate.err =
  2022-06-27 15:47:28.788+0200 INFO  Error:
  java.security.cert.CertificateException: keytool error (likely
  untranslated): java.lang.RuntimeException: java.io.IOException:
  DNSName components must begin with a letter
  2022-06-27 15:47:28.788+0200 INFO
  Similar messages to they above may be present in other IBM
  Spectrum Control Components during the install routine.
  ____________________________________________________
  DB2 Version used for Server: N/A
  The defect is against component: Configuration
  Server/Manager build/release (TPC): 5.4.7
  Agent build/release (TPC): N/A
  Server/Manager (OS): N/A
  Agent(OS): N/A
  ____________________________________________________
  Problem as described by customer: Install completes and WEB UI
  does not launch
  Initial customer impact (low/med/high): low
  

Local fix

• TBD
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Control Users who install IBM Spectrum Control  *
  * on servers that have parts of their DNS name starting with   *
  * digits.                                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * The IBM Spectrum Control Install program completes and       *
  * indicates a successful completion in the Installer's GUI.    *
  * However, embedded errors point to SSL certificates unable    *
  * to be generated successfully.                                *
  *                                                              *
  * This results in the web GUI not able to be launched          *
  * successfully, etc.                                           *
  *                                                              *
  * The keytool, which is used for generating the self-signed    *
  * certificate during installation or upgrade, fails with the   *
  * following error:                                             *
  *                                                              *
  * Error: java.security.cert.CertificateException: keytool      *
  * error                                                        *
  * (likely untranslated): java.lang.RuntimeException:           *
  * java.io.IOException: DNSName components must begin           *
  * with a letter                                                *
  *                                                              *
  * This is a known bug in java:                                 *
  * https://support.oracle.com/knowledge/Middleware/2474036_1.ht *
  * ml                                                           *
  *                                                              *
  * To overcome this bug, when keytool fails, the installer will *
  *                                                              *
  * call IBM Key Certificate Management APIs to create the       *
  * certificate.                                                 *
  *                                                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is targeted for the following release:
  
  IBM Spectrum Control 5.4.10.1   [ 5.4.10.1-IBM-SC ]
  ( release target 2Q 2023 / June  )
  https://www.ibm.com/support/pages/node/359939
  
  The target dates for future releases do not represent a formal
  commitment by IBM. The dates are subject to change without
  notice.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TPC ADVANCED

• Fixed component ID

  5608TPCA0

Applicable component levels