IBM Support

IBM API Connect V2018.4.1.11 is available

News


Abstract

IBM API Connect V2018.4.1.11 is now available. This update includes important internal development and field reported fixes.

Content

IBM API Connect 2018.x delivers enhanced capabilities for the market-leading IBM API Management solution. In addition to the ability to deploy in complex, multi-cloud topologies, this version provides enhanced experiences for developers and cloud administrators at organizations.

The API Connect 2018.4.1.11 update includes important internal development and field reported fixes. 

A special note on upgrades from prior versions of API Connect v2018.4.1.x:  API Connect v2018.4.1.5 is now a prerequisite for API Connect v2018.4.1.11 for VMWare (.OVA) deployments.  You cannot upgrade your API Connect topology to 2018.4.1.11 without first being at least at the v2018.4.1.5 level.  Again, this restriction applies only to VMWare (.OVA) deployments only of IBM API Connect v2018.4.1.9.  This is due to the level of Kubernetes deployed with the VMWare (.OVA) installation of IBM API Connect v2018.4.1.11 and restrictions around skipping levels of Kubernetes when upgrading.  Additionally, a Control Plane file is required if you are upgrading from v2018.4.1.5 or v2018.4.1.6 to v2018.4.1.11 (VMWARE .OVA only).  Reference the Upgrade Instructions page in the API Connect IBM Knowledge Center.

An additional note on upgrade procedures for DataPower Gateway high-availability clusters.

The upgrade procedure for DataPower Gateway has new steps for upgrading high-availability clusters, to ensure that a single gateway is running as primary for all gateway-peering definitions, and that the primary gateway is upgraded last.   See the "What's New" topic in the API Connect IBM Knowledge Center for more information on this and new features included in API Connect v2018.4.1.11.

API Connect v2018.4.1.11 contains the following field reported APARs:

APAR Summary
LI80644 DEVELOPER PORTAL FORCES LOGOUT ON SHORT OIDC TOKEN EXPIRY
LI80733 INSTALLATION OF THE GOOGLE_ANALYTICS MODULE INTERFERES WITH THE API CONNECT DEVELOPER PORTAL USER REGISTRATION FORM
LI81339 IN PORTAL UI, CATEGORIES (TAGS) FROM OLD PRODUCT/API VERSIONS ARE COPIED OVER
LI81349 INCONSISTENT ORG URL VALUES IN APPLICATION HOOKS
LI81351 DEVELOPER PORTAL TRY IT API TEST TOOL DOESN'T SUPPORT + CHARACTER IN THE OAUTH PASSWORD FIELD
LI81353 CLICKJACKING VULNERABILITY
LI81357 MAP POLICY FAILS TO MAP SOME XML INPUT ELEMENTS.
LI81362 WSDL IMPORT ERROR WHEN USING RELATIVE IMPORT PATH FOR WSDL AND XSD FILES
LI81367 RESTORE PODS TERMINATE WITH STATUS "ERROR"
LI81371 UNABLE TO DOWNLOAD WSDL FILE
LI81375 INVOKE POLICY MAY FAIL IN SOME CASES WHEN THE OUTPUT VARIABLE   SPECIFIED IS MESSAGE
LI81385 OIDC USER REGISTRY'S USERINFO ENDPOINT URL CANNOT BE CHANGED    BACK TO EMPTY STRING OR NULL.
LI81388 MANAGER UI NOT RENDERING API PROPERTIES ON EDIT
LI81391 MAP POLICY WITH XML INPUT AND A SET ACTION WITH A FOREACH WHERE THE FOREACH ELEMENT IS NOT REPEATING WILL FAIL TO MAP
LI81397 SYNC TO GATEWAY FAILS DUE TO LARGE SUMMARY FIELD 65535 CHARS ERROR
LI81400 PLAN NAME STILL SHOWS IN ENGLISH AFTER ADDING MULTILINGUAL SUPPORT FOR FRENCH
LI81403 PORTAL SITE UPGRADE FAILURE TO V2018.4.1.10
LI81406 NODE.JS UPDATE
LI81407 DRUPAL UPDATES
LI81408 PHP UPDATES
LI81414 NGINX UPDATE
LI81422 UNABLE TO INSTALL A MODULE OR THEME ON THE DEVELOPER PORTAL WHEN THE MODULE IS IN A COMPRESSED .ZIP FILE
LI81426 API CONNECT CVE-2020-4346
LI81430 UNABLE TO INVITE MEMBERS TO A CATALOG AS THE SCREEN DOES NOT LOAD IF THERE CUSTOM ROLE EXISTS IN THE PROVIDER ORGANIZATION
LI81436 PROVIDE FOR A MORE GRACEFUL SHUTDOWN OF PODS
LI81437 ANALYTICS 4.1.10 CLEAN INSTALL, ENABLING MESSAGE QUEUING FAILS
LI81448 AFTER SET PRODUCT VISIBILITY TO AUTHENTICATED ANONYMOUS USERS STILL ABLE TO ACCESS THE PRODUCT AND API PAGES ON DEVELOPER PORTAL
LI81455 ACCESS TO BLUEMIX-ANALYTICS.MIN.JS FAILED WHILE LOGGING TO CMC OR APIM CONSOLE IN RESTRICTED NETWORK ENVIRONMENT
LI81456 IBM API CONNECT INSTALLATION ASSIST V2018.4.1.10 FOR WINDOWS  GENERATED ISOS DO NOT STARTUP
LI81474 ENABLE OPTION TO MAINTAIN SUBSCRIPTIONS ON PRODUCT REPUBLISH
LI81480 UI ISSUE FOR API LISTING IN PRODUCT
LI81493 ANALYTICS OPERATOR POD RESTARTS MULTIPLE TIMES IN APIC DEPLOYMENT ON CLOUD PAK FOR INTEGRATION
LI81494 ONE PRODUCT ON PORTAL SITE AFTER UPGRADE TO FP10
LI81500 PHP UPDATE
LI81501 PHP UPDATE
LI81503 KUBERNETES UPDATE
LI81535 PHP CVE-2020-7064 CVE-2020-7065 CVE-2020-7066
LI81564 KUBERNETES (CVE-2020-8551 CVE-2020-8552)
*** Please note that links to some security related APARs may not be available in the table above.  This is intentional for security purposes. ***

Database technology used in this release:

IBM API Connect relies on SQL and no-SQL database technology to provide persistent storage of objects required for the function of the product.  Database technology requires fast and reliable storage and in the case of a highly available configuration, the database must perform adequately in a clustered configuration.  

GlusterFS: Testing of IBM API Connect when using GlusterFS has shown that GlusterFS does not provide the speed or reliability for any of the database technologies used in IBM API Connect and thus should not be considered for use as the clustered storage facility with this product.

AWS EBS: IBM API Connect deployed on Kubernetes in EC2 instances on AWS should make use of the AWS EBS storage solution with GP2 or IO1 type.

We advise all users of prior version of API Connect v2018.x to install this update to take advantage of the fixes.

For more information about this release, see API Connect Knowledge Center: What's new in this release.

Important notes on upgrading to 2018.4.1.11:

When upgrading to Version 2018.4.1.11, you must complete a manual backup just before starting the upgrade. The manual backup is required because the upgrade can take an extended period of time. See Requirements for upgrading on VMware and Requirements for upgrading on Kubernetes.

Starting with IBM API Connect Version 2018.4.1.11, writable LDAP user registries can be used only for onboarding and authenticating Developer Portal users. A writable LDAP user registry cannot be used to authenticate Cloud Manager and API Manager users.  If you already have a writable LDAP user registry for use with the Cloud Manager or the API Manager, you must update the registry to be read-only by changing the User Managed property to be false.

Starting with IBM API Connect Version 2018.4.1.9iFix1, after completion of the upgrade, some tasks may have stopped running. See Requirements for upgrading on VMware and Requirements for upgrading on Kubernetes describing action to take.

Finally,  a Control Plane file is required if you are upgrading from v2018.4.1.5 or v2018.4.1.6 to v2018.4.1.11 (VMWARE .OVA only).  Reference the Upgrade Instructions page in the API Connect IBM Knowledge Center.

Support lifecycle policy for IBM API Connect Version 2018.4.1.11:

IBM API Connect 2018.4.1.11 is fix pack to a Long-Term Supported (LTS) release.  API Connect 2018.4.1.11 is a recommended product level for which support, including defect and security updates, will be provided through cumulative, in-place fix packs until the effective end of service (EOS) date for IBM API Connect 2018.4.1.x.  An LTS release is intended for customers that may need a longer-term deployment for their environment. For more information, see IBM API Connect v2018.x Support Lifecycle.

Downloads:

Full installation files for IBM API Connect 2018.4.1.11 and the IBM API Connect 2018.4.1.11 Toolkit files can be downloaded from Fix Central :

Description – Filename Date Published
IBM API Connect Management V2018.4.1.11 Containers
11 May 2020
IBM API Connect Developer Portal V2018.4.1.11 Containers
11 May 2020
IBM API Connect Analytics V2018.4.1.11 Containers
11 May 2020
IBM API Connect Management V2018.4.1.11 for VMWare
11 May 2020
IBM API Connect Developer Portal V2018.4.1.11 for VMWare
11 May 2020
IBM API Connect Analytics V2018.4.1.11 VMWare
11 May 2020
IBM API Connect Installation Assist V2018.4.1.11 for Linux®
11 May 2020
IBM API Connect Installation Assist V2018.4.1.11 for Mac
11 May 2020
IBM API Connect Installation Assist V2018.4.1.11 for Windows
11 May 2020
IBM API Connect Toolkit V2018.4.1.11 for Linux®
11 May 2020
IBM API Connect Toolkit V2018.4.1.11 for Mac
11 May 2020
IBM API Connect Toolkit V2018.4.1.11 for Windows
11 May 2020
IBM API Connect Toolkit Designer with Loopback V2018.4.1.11 for Linux®
11 May 2020
IBM API Connect Toolkit Designer with Loopback V2018.4.1.11 for Mac
11 May 2020
IBM API Connect Toolkit Designer with Loopback V2018.4.1.11 for Windows
11 May 2020
IBM API Connect V2018.4.1.11 Analytics.OVA Upgrade File
11 May 2020
IBM API Connect V2018.4.1.11 Management Server.OVA Upgrade File
11 May 2020
IBM API Connect V2018.4.1.11 Developer Portal.OVA Upgrade File
11 May 2020
IBM DataPower Gateway for Docker Production Edition v2018.4.1.11
idg_dk20184111.lts.prod.tar.gz
11 May 2020
IBM DataPower Gateway for Docker Non-Production Edition v2018.4.1.11
idg_dk20184111.lts.nonprod.tar.gz
11 May 2020
Kubernetes DataPower Monitor v2018.4.1.11
11 May 2020

Ensure that you have read and understood the installation instructions for OVAs and Containers before downloading and by using the installation files. You can find detailed installation instructions in IBM API Connect Knowledge Center -- Installing API Connect

IBM API Connect Control Plane for OVA upgrades

When upgrading from v2018.4.1.5 through v2018.4.1.8, on VMWare only, one or more Control Plane files must be downloaded and installed to bring Kubernetes to a supported release level.  For more details, see Step 5 of the Upgrade Instructions in the API Connect IBM Knowledge Center.

Description – Filename Date Published
IBM API Connect 1.14.0 Control Plane File for OVA (optional)
2 March 2020
IBM API Connect 1.15.0 Control Plane File for OVA (optional)
2 March 2020

ICP Installation Files for API Connect v2018.4.1.11

Description – Filename Date Published
IBM API Connect ICP Enterprise V2018.4.1.11
IBM_API_Connect_ICP_Enterprise_2018.4.1.11.zip
14 May 2020
IBM API Connect ICP Professional V2018.4.1.11
IBM_API_Connect_ICP_Professional_2018.4.1.11.zip
14 May 2020

IBM API Connect Local Test Environment is now available

The IBM API Connect Local Test Environment allows you to test APIs on your local machine, without the need to connect to an API Connect management server.  For more details, see the IBM Knowledge Center

Description – Filename Date Published
IBM API Connect Local Test Environment
apic-lte-2018.4.11-53.zip
11 May 2020

What is Fix Central (FC)?

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSMNED","label":"IBM API Connect"},"ARM Category":[{"code":"a8m50000000L0rvAAC","label":"API Connect"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
27 July 2020

UID

ibm16205736