IT44480: MONITORING SWITCHES IN STORAGE INSIGHTS FAILS WHEN TLS 1.3 PROTOCOL IS USED

APAR status

• Closed as program error.

Error description

• Storage Insights is losing the connectivity to the Brocade or
  CISCO switches when the security policy of the switches is
  updated to use only TLS version 1.3.
  
  In the log file below error was found:-
  
  
  2023-08-22 13:20:49.271+0200 [PDC-xxxxx]
  [TestConnectionHandler.handle] [INFO] Starting test connection
  for device.
  2023-08-22 13:20:49.276+0200 [PDC-xxxxx]
  [BrocadeSwitchTestConnection.checkConnection] [INFO] Attempting
  to establish connection for Device Id: xxx ( Name=xxx,
  Nick=xxxxx, System UUID =xxxx, Device Type =26) Ip: xxxxx User:
  admin Auth Mechanism: password Protocol: HTTPS
  2023-08-22 13:20:49.281+0200 [PDC-xxxxx]
  [ConnectionUtil.initContextConnection] [INFO] Initializing
  connection for device with cached value. Default value is used
  if not yet saved in cache <Device_Name> TLSv1.2
  2023-08-22 13:20:50.430+0200 [PDC-xxxxx]
  [ConnectionUtil.initContextConnection] [INFO] Setting TLS for
  device based on handshake selection <Device_Name> NONE
  2023-08-22 13:20:50.431+0200 [PDC-xxxxx]
  [ConnectionUtil.initContextConnection] [WARNING] Connection
  failed with selecting the TLS dynamically, retry with saved TLS
  TLSv1.2 <Device_Name>
  2023-08-22 13:20:50.780+0200 [PDC-xxxxx]
  [BrocadeRestClient.login] [INFO] /rest/login
  2023-08-22 13:20:50.827+0200 [PDC-xxxxx]
  [BrocadeRestClient.login] [ERROR] IOException
  javax.net.ssl.SSLHandshakeException: Received fatal alert:
  protocol_version
  

Local fix

• NA
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Storage Insights users monitoring switches with TLSv1.3  *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Storage Insights does not connect to Brocade or              *
  * CISCO switches when the security policy of the               *
  * switches is updated to use only TLS version 1.3.             *
  *                                                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is targeted for the following release:
  
  IBM Storage Insights 4Q23   [ 54X-IBM-SI ]
  ( release target 4Q 2023 / December )
  
  The target dates for future releases do not represent a formal
  commitment by IBM. The dates are subject to change without
  notice.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STORAGE INSIGHT

• Fixed component ID

  5608TPCSI

Applicable component levels