IBM Support

How do I configure IBM Infosphere Information Server Salesforce Data Connector to use TLS 1.1 or higher

Question & Answer


Question

How do I configure IBM Infosphere Information Server Salesforce Data Connector to use TLS 1.1 or higher

Cause

Salesforce has disabled TLS 1.0 encryption protocol. Therefore, Salesforce Data Connector needs to be configured to use TLS 1.1 or higher.

Please see the following article for more details about Salesforce disablement of TLS 1.0 protocol:
https://help.salesforce.com/apex/HTViewSolution?id=000221207

Answer

Note:
As per the following link from IBM Java,
http://www-01.ibm.com/support/docview.wss?uid=swg21575620
on IBM Java 1.6, the support for TLS 1.2 is enabled with IBM Java 1.6, Service Refresh 10

Please follow these instructions to enable Salesforce connector to use TLS 1.1 or higher:
1) Upgrade to install latest JVM for Information Server 8.7. This can be done by installing the ISF Patch which IBM has provided some time back for a PSIRT:
http://www-01.ibm.com/support/docview.wss?uid=swg21972578
The patch is for APAR JR54723 and this will upgrade the IBM Java to IBM Java 1.6, Service Refresh 16
Note: You will only be able to install this fix on top of IS 8.7.0.2 (8.7 with fixpack 2).

2) Edit the file
"<IS-Install-Location>/ASBNode/eclipse/plugins/com.ibm.isf.client/ssl.client.props to add the protocol SSL_TLSv2.
Basically you need to replace
com.ibm.ssl.protocol=SSL_TLS
with
com.ibm.ssl.protocol=SSL_TLSv2

3) Edit the file "<IS-Install-Location>/Server/DSEngine/dsenv" to add
"-Dcom.ibm.jsse2.overrideDefaultProtocol=TLSv12" to CC_JVM_OPTIONS
After the change the environment variable CC_JVM_OPTIONS will look like
CC_JVM_OPTIONS=-Dcom.ibm.SSL.ConfigURL=file:/opt/IBM/InformationServer/ASBNode/eclipse/plugins/com.ibm.isf.client/ssl.client.props -Dcom.ibm.jsse2.overrideDefaultProtocol=TLSv12; export CC_JVM_OPTIONS

4) Restart Datastage

5) Check for your browser compatibility for TLS 1.1 or higher by going through the section "How to test your browser compatibility" in the following link:


https://help.salesforce.com/apex/HTViewSolution?id=000221207
Follow the Instructions provided in "Action Required for Browser Compatibility" section to ensure your browser is compatible with TLS 1.1 or higher.

6) Run the job

Related Information

Salesforce disabling TLS 1.0

[{"Product":{"code":"SSVSEF","label":"IBM InfoSphere DataStage"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"8.7;8.7.0.1;8.7.0.2","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
16 June 2018

UID

swg21986339

Page Feedback