APAR status
Closed as documentation error.
Error description
Using the "Show Explain Details" function in the Query Monitoring section of IBM Db2 Analytics Accelerator Studio may fail with messages AQT20001W and AQT20125E. The detailed error text of AQT20125E will look like the following: AQT20125E - EXPLAIN information about this query could not be obtained. Diagnostic information: com.ibm.datatools.dsoe.tuningservice.base.TuningServiceException : com.ibm.datatools.common.services.util.BaseException: com.ibm.db2.jcc.am.DisconnectNonTransientConnectionException: Ýjcc¨Ýt4¨Ý2030¨Ý11211¨Ý4.24.92¨ A communication error occurred during operations on the connection's underlying socket, socket input stream, or socket output stream. Error location: Reply.fill() - socketInputStream.read (-1). Message: com.ibm.jsse2.util.h: PKIX path validation failed: java.security.cert.CertPathValidatorException: The certificate expired at Thu Aug 20 12:00:00 UTC 2020; internal cause is: java.security.cert.CertificateExpiredException: NotAfter: Thu Aug 20 12:00:00 UTC 2020. ERRORCODE=-4499, SQLSTATE=08001 Contact IBM support for a renewal of the internal certificate that expired.
Local fix
The following workaround is recommended until the certificate has been renewed: For maintenance level 7.5.2 or higher: to use the "Capture Query Environment Data" function instead of "Show Explain Details". For "Capture Query Environment Data" you must save and upload an IDAA trace, making sure that the "Manually collected diagnostic information (folder additional_support_info)" checkbox is checked. For maintenance level 7.5.1 and earlier: A manual explain doc collection can be done in a remote maintenance session using db2exfmt IBM Support: please see https://github.ibm.com/HDM-Migration-Center-of-Excellence/Migrat ion-Best-Practices/issues/2 for details.
Problem summary
The db2 ssl certificate expired on August 20, 2020. Since this day the "Show Explain Details" function in the Query Monitoring section of IBM Db2 Analytics Accelerator Studio failed with messages AQT20001W and AQT20125E. The resolution of the issue can be achieved in two ways: a) Contact IBM support for deployment of the new db2_ssl certificate to your current installation of the accelerator or b) Upgrade your accelerator to maintenance level to 7.5.3: during installation the new db2_ssl certificate will be applied automatically.
Problem conclusion
Contact IBM support or upgrade your accelerator maintenance level to 7.5.3 or higher for renewal of the db2 ssl certificate.
Temporary fix
Comments
APAR Information
APAR number
PH28727
Reported component name
ANYTCS ACCLTR Z
Reported component ID
5697DA700
Reported release
750
Status
CLOSED DOC
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2020-08-21
Closed date
2020-10-27
Last modified date
2020-10-27
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Applicable component levels
[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Platform":[{"code":"PF054","label":"z\/OS"}],"Version":"750"}]
Document Information
Modified date:
28 October 2020