PH27823: DOCUMENTATION FOR CONFIGURING CA 11 WITH IHS V9 IS MISSING STEPSFOR SCENARIO WHEN SSL IS ENABLED ON IHS V9 SIDE

APAR status

• Closed as Permanent restriction.

Error description

• additional steps A or B required depending on environment
  configuration:
  
  A. SSL enable GW only (Network between Plugin and CA 11 is NOT
  SSL)
  
  Edit plugin-cfg.xml. Add UseInsecure="true" in Config section
  and comment out SSL connector.
  
  <Config ASDisableNagle="false" AcceptAllContent="false"
  AppServerPortPreference="HostHeader" ChunkedResponse="false"
  FIPSEnable="false" IISDisableNagle="false"
  IISPluginPriority="High" IgnoreDNSFailures="false"
  RefreshInterval="60" ResponseChunkSize="64"
  SSLConsolidate="false" TrustedProxyEnable="false"
  VHostMatchingCompat="false" UseInsecure="true">
           <Transport Hostname="x.x.x.x" Port="9300"
  Protocol="http"/>
           <!--Transport Hostname="x.x.x.x" Port="9443"
  Protocol="https"/-->
              <!--Property Name="keyring"
  Value="/opt/IBM/WebSphere/Plugins/config/webserver1/plugin-key.k
  db"/-->
              <!--Property Name="stashfile"
  Value="/opt/IBM/WebSphere/Plugins/config/webserver1/plugin-key.s
  th"/-->
           <!--/Transport-->
  
  B. SSL enable both of GW and dispatcher (Network between Plugin
  and Cognos is SSL)
  
  Change following URI to https and port to 9443 on Cognos
  Configuration.
  
  Dispatcher URIs for gateway? https://<fqdn>:9443/bi/v1/disp
  External dispatcher
  URI?https://<fqdn>:9443/p2pd/servlet/dispatch
  Internal dispatcher
  URI?https://<fqdn>:9443/p2pd/servlet/dispatch
  Dispatcher URI for external
  application?https://<fqdn>:9443/bi/v1/disp
  Content Manager URIs?https://<fqdn>:9443/p2pd/servlet
  
  - Additional steps A or B required due to the requirements
  related to IHS side, referencing:
  
  https://www.ibm.com/support/knowledgecenter/en/SSAW57_8.5.5/com.
  ibm.websphere.nd.doc/ae/rwsv_plugin_customprop.html
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * n/a                                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * see formal description                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• A fix will not be provided for this issue.  If you find it
  exists in a current release of our software and would like
  re-evaluation, please contact Technical Support
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels