IBM Tivoli Composite Application Manager for Transactions Internet Service Monitoring 7.4 Fix Pack 3 Interim Fix 1 - 7.4.0.3-TIV-CAMIS-IF0001 Readme.

Content

Readme file for: IBM Tivoli Composite Application Manager for Transactions Internet Service Monitoring 7.4 Fix Pack 3 Interim Fix 1
Product - Component Release: 7.4.0.3 Fix Pack
Update Name: 7.4 Fix Pack 3 Interim Fix 1
Fix ID : 7.4.0.3-TIV-CAMIS-AIX-IF0001, 7.4.0.3-TIV-CAMIS-LINUX-IF0001, 7.4.0.3-TIV-CAMIS-SOLARIS-IF0001, 7.4.0.3-TIV-CAMIS-WIN32-IF0001, 7.4.0.3-TIV-CAMIS-WIN64-IF0001
Publication Date: 30 March 2022

Contents

What is new in 7.4.0.3 fix pack Interim Fix 1?
Download location
Prerequisites and co-requisites
Known issues
Known limitations

Installation information
Before installation
Installing
Performing the necessary tasks after installation
Uninstalling if necessary
Additional information
List of fixes
Copyright and trademark information
Document change history

What is new in 7.4.0.3 fix pack Interim Fix 1?

1. Support for SHA 256, SHA 512, AES 256, AES 192 and other authentication and privacy protocols in snmp monitor.
2. WatchDog functionality for ISM agent.
3. TLSv1.2 support in ismconfig.

Download location
To download this update, first log in to IBM Passport Advantage. After you logged in, you can search part numbers for individual download packages.
Here is a list of components, platforms, and parts numbers that apply to individual installers, AIX, Linux, Solaris, Windows 32 bit, and Windows 64-bit:

Prerequisites and co-requisites

This upgrade for ITCAM for Transactions Internet Service Monitoring supersedes 7.4.0.3 and can be applied to the following versions directly. It is a cumulative upgrade. Any updates in the following release are included in this upgrade.

• 7.4.0.0
• 7.4.0.0-IF03
• 7.4.0.0-IF11
• 7.4.0.0-IF13
• 7.4.0.0-IF18
• 7.4.0.0-IF23
• 7.4.0.0-IF26
• 7.4.0.0-IF28
• 7.4.0.1
• 7.4.0.1-IF02
• 7.4.0.1-IF03
• 7.4.0.1-IF10
• 7.4.0.1-IF13
• 7.4.0.1-IF20
• 7.4.0.2
• 7.4.0.2-IF01
• 7.4.0.2-IF02
• 7.4.0.2-IF03
• 7.4.0.2-IF04
• 7.4.0.3

ITM prerequisite note: The TEMS/TEPS environment used by the agent needs to run a minimum version of ITM 630 Fix Pack 7 SP6, as ISM agent is built with 630 FP7 SP6 ITM sdk framework.

Note: After the upgrade is applied, the new revision level for ISM is 7.4 Fix Pack 3 IF01.

For Windows 2008 SP2, you must first install the following Microsoft Patch:
You cannot run an application that is signed with a SHA-256 certificate on a computer that is running Windows Vista SP2 or Windows Server 2008 SP2

For System Requirements & Prerequisites visit: ITCAM for Transactions v7.4 software prerequisites

For more download packages or IBM Tivoli Monitoring v6 support information, visit the IBM Tivoli Monitoring support portal at:
https://www.ibm.com/mysupport/s/topic/0TO500000002JCgGAM/tivoli-monitoring?language=en_US&productId=01t50000004XS6x

Known issues

NCO processes are not getting stopped properly using ism_startup script.

Problem Description
NCO processes start automatically after some time when they are stopped using ism_startup script.
Workaround
Use 'itmcmd agent stop is' command to stop the NCO processes along with the agent.

Bad data is shown for SNMP monitor when ISM Agent is running on Aix platform and SNMP monitor is configured with AES, AES256, AES192, AES192C and AES256C privacy protocols.

Problem Description

Bad data is shown for SNMP monitor when ISM Agent is running on Aix platform and SNMP monitor is configured with AES, AES256, AES192, AES192C and AES256C privacy protocols.
Workaround

ISM agent can be installed on RHEL, Solaris or Windows platform for monitoring SNMP with AES, AES256, AES192, AES192C and AES256C configuration.

The link to the troubleshooting guide for known issues for previous ISM releases is as follows:
https://www.ibm.com/docs/en/SS8G7U_ref/pdf/itcamft_kis_ts.pdf

Known limitations
The link to the troubleshooting guide for known limitations for previous ISM releases is as follows:
https://www.ibm.com/docs/en/SS8G7U_ref/pdf/itcamft_kis_ts.pdf

Installation information

For Windows installation, if you encounter the message "Another version of this product is already installed", follow the instructions in the following support document to diagnose and resolve the problem. Although this technote refers to IBM Tivoli Monitoring, the diagnosing and resolving steps are applicable to ITCAM for Transactions Internet Service Monitoring.
https://www-01.ibm.com/support/docview.wss?uid=swg21587068

Before the installation
The update installer performs the following steps automatically. You can also perform them manually.

1. Stop IBM Tivoli Monitoring [ITM] v6 agents and infrastructure (including the Tivoli Enterprise Management Servers TEMSs and Tivoli Enterprise Portal Server [TEPS].
2. Ensure that the ISM Databridge and Monitors are stopped.

1. Stop IBM Tivoli Monitoring agents and infrastructure [including TEMSs and TEPS]:
The IBM Tivoli Monitoring agents and infrastructure need to be stopped only when either the application support packages are being installed, or ISM is being installed on the IBM Tivoli Monitoring machine. If ISM is being installed on a machine that does not contain any IBM Tivoli Monitoring infrastructure, the IBM Tivoli Monitoring infrastructure does not need to be stopped.

Use the Manage Tivoli Enterprise Monitoring Services (MTEMS) GUI dialog or the command-line tools (ITM\bin\tacmd or ITM/bin/itmcmd) to stop the running IBM Tivoli Monitoring agents or infrastructure [including TEMSs and TEPS].

On Windows systems, you can start the MTEMS application from your Start menu or by running ITM\InstallITM\kinconfg.exe. Alternatively, if you installed IBM Tivoli Monitoring, use the command `ITM\bin\tacmd stopAgent <type>`.

On UNIX systems, you can run MTEMS with the ITM/bin/itmcmd manage command. Alternatively, use the commands 'ITM/bin/itmcmd agent stop <type>' and  'ITM/bin/itmcmd server stop <TEMS name>'.

Note :  The update installer will automatically restart TEMS and TEPS when Interim Fix will be applied on ISM agent residing on the same IBM Tivoli Monitoring machine. Hence, in such scenarios, users can schedule their iFix installations accordingly to avoid unwanted disruptions.

2. Ensure the Databridge and Monitors are stopped:
When the 'kisagent' process is stopped, it automatically signals for the monitors and Databridge to shut down. If it does not occur or was disabled by configuration changes, you need to perform this step manually.

On Windows systems, use the Windows Services dialog to look for any NCO* Internet Service Monitor services. To stop the Databridge and monitors ensure that each of these NCO* services is stopped.

On UNIX systems, run ps -ef |grep nco_m_ and issue a kill <pid> command for each entry shown. If the Databridge or monitors were heavily loaded, they can take some time to shutdown. You can also use kill -9 <pid> to immediately stop the Databridge or monitors, but it can result in loss or corruption of data being processed.

Installing
The maintenance package is applied directly to the Tivoli Enterprise Management Agent (TEMA). In addition, apply application support from the interim fix package to the following ITM components:

• Tivoli Enterprise Management Servers [TEMS], including any remote or failover TEMS configurations
• Tivoli Enterprise Portal Server [TEPS]
• Tivoli Enterprise Portal [TEP], including any locally installed desktop TEP clients

On Windows systems, extract the files from the archive and double-click WINDOWS\setup.exe. Follow the prompts to install the update.

On UNIX systems, extract the installer from the archive with tar -xvf <filename.tar> command. Then, execute the installer by using the ./install.sh command. Follow the prompts to install the update.

It is also possible to deploy this interim fix remotely on IBM Tivoli Monitoring TEMS depot, with tacmd AddBundles command.  Refer to the ITCAM for Transactions v7.4.0.1 Installation and Configuration Guide, available here:
https://www-01.ibm.com/support/knowledgecenter/SS5MD2_7.4.0.1/com.ibm.itcamt.doc/rt/Install_Guide/remotedeploy.html

Installing application support for TEPS - TEMS
For each monitoring agent installed, you must install agent-specific application support on IBM Tivoli Monitoring components. You can choose to install application support on all components at one time, or you can install the application support on components separately. If you are installing components separately, the following order is recommended:

1. Tivoli Enterprise Monitoring Server
2. Tivoli Enterprise Portal Server
3. Tivoli Enterprise Portal Desktop Client
4. Tivoli Enterprise Portal Server Browser client (for Linux and UNIX Only)

The procedure for installing agent-specific application support on the components is similar to installing the monitoring agent. The main difference is to select the required application support components.

It is recommended that all ISM components, agents, and support, be brought up to the same revision level.
Note: While application support is installed, any ITM components on the current machine are automatically stopped, including any TEMS or TEPS. Follow the Starting and stopping servers and agents guide to manually stop ITM agents and infrastructure. Inform other users before you begin the installation.

For step by step application support installation information refer to the documentation:
Installing Internet Service Monitoring on Windows systems
Installing on Linux or UNIX systems

Performing the tasks after installation

A successful installation modifies the ISM version to 07.40.03.01. Ensure that the version of Internet Service Monitoring in the MTEMS is 07.40.03.01.  

On Windows, the installation logs are written to the following directory:
ITM\InstallITM\

On Unix, the installation logs are written at the following directory:
ITM/logs/

Need to clear Java cache on TEP client systems after you installed 7403 fix pack, as TEP client JAR files are newly signed.

Troubleshooting installation problems from the Support site
Refer to the Installation and Configuration Guide:
http://www.ibm.com/support/knowledgecenter/SS5MD2_7.4.0.1/com.ibm.itcamt.doc/ism/dita/ag/topic/ISM_install_chapter.html

Uninstalling if necessary
This maintenance package cannot be rolled back.

The product can be removed by using the Microsoft Control Panel's Add - Remove Programs.

On UNIX, the product can be removed by using the script:
ITM/bin/uninstall.sh

For detailed instructions, refer to the ITCAM for Transactions v7.4.0.1 Installation and Configuration Guide, available here:
http://www.ibm.com/support/knowledgecenter/SS5MD2_7.4.0.1/com.ibm.itcamt.doc/ism/dita/ag/topic/ISM_uninstall_chapter.html

Additional information
The Secure Hash Algorithm 1 (SHA1) checksums of the images are as follows:

The ITM 'kisagent' logs on Solaris Platform show that the Release ID of this Fix Pack is: ITCAM_ISM_7.4.0.3_02586

New Features

The following new features are included in ITCAM for Transactions Internet Service Monitoring 7.4 Fix Pack 3 Interim Fix 1:

• Idea ITMAPM-I-32 – SUPPORT FOR SHA 256 AND SHA 512 AUTHENTICATION PROTOCOLS – (ISM SNMPWALK).

1.  Upgrade ISM agent and its application support to its latest version 7.4.0.3 IF01.
2.  Select any of the below authentication and privacy protocols in the snmp monitor configuration window from the ISM configuration panel.

The following new features are included in ITCAM for Transactions Internet Service Monitoring 7.4 Fix Pack 3:

• RFE 130507 - ITCAM ISM 7.4 -  SSL HANDSHAKE FAILED - HTTPS - TLS 1.3 NOT SUPPORTED.

1. In upgrade scenario from previous version to 7403 FP version, you need to add SSLDisableTLS13 property in http,imap4,smtp,pop3, and tcpport monitors <monitor>.props files. With direct installation, these properties are already present in.props files.
2. TLS 1.3 is enabled by default in 7403 FP version.
3. To disable TLS1.3, you need to uncomment and set SSLDisableTLS13 property to 1.

• RFE 148149  ISM TCPPORT monitor support for TLS.
• Usage Steps for TLS support in TCPPORT monitor:

1. Set securitytype field of TCPPORT monitor configuration from ISM configuration panel to SSL to enable TLS functionality for TCPPORT monitor.
2. The following properties are normally present in $ISMHOME/etc/props/tcpport.props file. With an upgrade scenario, these properties are not present in tcpport.props file. You then need to add them manually. With direct installation, these properties are present by default in tcpport.props file.

# SSLCertificateFile            :       ""

#  SSLCipherSuite                :       "AES:3DES:DES:!EXP:!DHE:!EDH"

# SSLDisableSSLv2               :       1

# SSLDisableSSLv3               :       1

# SSLDisableTLS                 :       0

# SSLDisableTLS11               :       0

# SSLDisableTLS12               :       0

# SSLKeyFile                    :       ""

# SSLKeyPassword                :       ""

# VerifyCertificatePreference   :       "Disabled"

• Add TLS enabled server and port details in tcpport monitor configuration.

The following new features are included in ITCAM for Transactions Internet Service Monitoring 7.4.0.2 interim fix 04:

• RFE 142342 - Increase HTTP/S URL length up to 2048 Chars for ISM Agent from
• RFE 104769 - ism_startup.sh stops other non ISM processes                                                                                                      

• RFE 118387  ISM HTTPS monitor does not support SNI 

1) Upgrade ISM agent and its application support to latest version 7.4.0.2 IF03.

2) Verify that sniservername column is available when you configure the HTTPS monitor, by using TEP ISM Configuration Editor.

3) For the SNI enabled web server, specify the hostname of the server, where a certificate from the web server is needed in the sniservername column.

Note: For non-SNI web servers, sniservername is ignored.

For SNI enabled web servers, user has to provide proper sniservername, else bad data are shown on ITM Portal.

The following new features are included in ITCAM for Transactions Internet Service Monitoring 7.4.0.2 interim fix 01:

• Security Fixes - Security Bulletin: Vulnerabilities in OpenSSL affects IBM Tivoli Composite Application Manager for Transactions (CVE-2017-3735.CVE-2017-3736)

The following new features are included in ITCAM for Transactions Internet Service Monitoring 7.4.0.1 interim fix 20 (Included in this 7.4.0.2 interim fix 01):

• Security Fixes - Security Bulletin: A vulnerability in OpenSSL affects IBM Tivoli Composite Application Manager for Transactions (CVE-2017-3730)
• Security Fixes - Security Bulletin: Multiple vulnerabilities in zlib affect IBM Tivoli Composite Application Manager for Transactions (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843)

The following new features are included in ITCAM for Transactions Internet Service Monitoring 7.4.0.1 interim fix 13 (Included in this 7.4.0.2 interim fix 01):

• Security Fixes - Security Bulletin: A vulnerability in Net-SNMP affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-5621)
• Security Fixes - Security Bulletin: Vulnerabilities in OpenSSL affects IBM Tivoli Composite Application Manager for Transactions
• Security Fixes - Security Bulletin: A vulnerability in Apache Xerces-C XML Parser library affects IBM Tivoli Composite Application Manager for Transactions (CVE-2016-4463)

The following new features are included in ITCAM for Transactions Internet Service Monitoring 7.4.0.1 interim fix 10 (Included in this 7.4.0.2 interim fix 01):

• Security Fixes - Security Bulletin: Vulnerabilities in OpenSSL affect IBM Tivoli Composite Application Manager for Transactions (CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2109, CVE-2016-2176)
• Security Fixes - Security Bulletin: The vulnerability in Apache Xerces-C XML Parser library affects IBM Transactions (CVE-2016-0729)

The following new features were included in ITCAM for Transactions Internet Service Monitoring 7.4.0.1 interim fix 3 (Included in this 7.4.0.2 interim fix 01):

• Security Fixes - Security Bulletin: A vulnerability in OpenLDAP affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-6908)
• Security Fixes - Security Bulletin: Vulnerabilities in OpenSSL affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-3194, CVE-2015-3195, CVE-2015-3196)
• Security Fixes - Security Bulletin: Vulnerabilities in OpenSSL affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-3197, CVE-2015-4000)
• Security Fixes - Security Bulletin: A vulnerability in libcURL affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-3237)
• Security Fixes - Security Bulletin: A vulnerability in OpenSSL affects IBM Tivoli Composite Application Manager for Transactions (CVE-2016-0800) also known as DRAWN
• Security Fixes - Security Bulletin: Vulnerabilities in OpenSSL affects IBM Tivoli Composite Application Manager for Transactions (CVE-2016-0705, CVE-2016-0798, CVE-2016-0797, CVE-2016-0799, CVE-2016-0702)

The following new features were included in ITCAM for Transactions Internet Service Monitoring 7.4.0.1 interim fix 2 (Included in this 7.4.0.2 interim fix 01):

• RFE 77983 - Increase URL Character length to 512

The following new features were included in ITCAM for Transactions Internet Service Monitoring 7.4.0.0 fix pack 1 (Included in this 7.4.0.2 interim fix 01):

• Security Fixes - Security Bulletin: Multiple vulnerabilities in cURL libcURL affect IBM Tivoli Composite Application Manager for Transactions (CVE-2015-3143, CVE-2015-3144 and CVE-2015-3145)
• Security Fixes - Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-4000)
• Security Fixes - Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect IBM Tivoli Composite Application Manager for Transactions (CVE-2015-1788, CVE-2015-1789, CVE-2015-1791, CVE-2015-4000)
• Security Fixes - Security Bulletin: A vulnerability in cURL libcURL affects IBM Tivoli Composite Application Manager for Transactions (CVE-2014-8150)
• RFE 39726 - HTTP/s monitors provides a User-Agent Header
• RFE 54527 - Configure FTP monitor with different ports
• RFE 62501 - Update 'ResultMessage' to the show the error message versus Bad Server Status

ISM 7.4.0.0 Fix Pack 1 modified the default behavior to disable the DHE/EDH ciphers in all monitors. To enable the DHE/EDH ciphers, update the monitor properties: SSLCipherSuite and BridgeSSLCipherSet. For example, to enable DHE/EDH ciphers in the HTTPS monitor, update the https.props file to include:

SSLCipherSuite : "AES:3DES:DES:!EXP:DHE:EDH"
BridgeSSLCipherSet : "AES:3DES:DES:!EXP:DHE:EDH"

The following new features were included in ITCAM for Transactions Internet Service Monitoring 7.4.0.0 interim fix 28 (Included in this 7.4.0.2 interim fix 01):

• Security Fixes - Security Bulletin: Vulnerabilities in OpenSSL affect IBM Tivoli Composite Application Manager for Transactions (CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293)
• Security Fixes - Security Bulletin: A vulnerability in RC4 affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-2808)

ISM 7.4.0.0 interim fix 28 modified the default behavior to disable the RC4 ciphers in all monitors. To enable the RC4 ciphers, update the monitor properties: SSLCipherSuite and BridgeSSLCipherSet. For example, to enable RC4 ciphers in the HTTPS monitor, update the https.props file to include:
SSLCipherSuite : "AES:RC4:3DES:DES:!EXP"
BridgeSSLCipherSet : "AES:RC4:3DES:DES:!EXP"

The following new features were included in ITCAM for Transactions Internet Service Monitoring 7.4.0.0 interim fix 26 (Included in this 7.4.0.2 interim fix 01):

• Security Fixes - Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Composite Application Manager for Transactions (CVE-2014-3570, CVE-2014-3571, CVE-2014-3572, CVE-2014-8275, CVE-2015-0204, CVE-2015-0205, CVE-2015-0206)

ISM 7.4.0.0 interim fix 26 modified the default behavior to disable the EXPORT (EXP) ciphers in all monitors. To enable the EXP ciphers, update the monitor properties: SSLCipherSuite and BridgeSSLCipherSet. For example, to enable EXP ciphers in the HTTPS monitor, update the https.props file to include:
SSLCipherSuite : "AES:3DES:DES:EXP"
BridgeSSLCipherSet : "AES:3DES:DES:EXP"

The following new features were included in ITCAM for Transactions Internet Service Monitoring 7.4.0.0 interim fix 23 (Included in this 7.4.0.2 interim fix 01):

• Security Fixes - Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Composite Application Manager for Transactions (CVE-2014-3513, CVE-2014-3567)
• Security Fixes - Security Bulletin: Vulnerability in SSLv3 affects IBM Tivoli Composite Application Manager for Transactions (CVE-2014-3566)

ISM 7.4.0.0 interim fix 23 modified the default behavior to disable the SSLv2 and SSLv3 protocols in all monitors. To enable SSLv2 and SSLv3, update the monitor properties: SSLDisableSSLv2 and SSLDisableSSLv3. For example, to enable SSLv2 and SSLv3 in the HTTPS monitor, update the https.props file to include:
SSLDisableSSLv2 : 0
SSLDisableSSLv3 : 0

The following new features were included in ITCAM for Transactions Internet Service Monitoring 7.4.0.0 interim fix 18 (Included in this 7.4.0.2 interim fix 01):

• Security Fixes - Security Bulletin: No validation on SSL certificates in IBM Tivoli Composite Application Manager for Transactions (CVE-2014-3051)
• Security Fixes - Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Composite Application Manager for Transactions (CVE-2014-3508, CVE-2014-5139, CVE-2014-3509, CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3511, CVE-2014-3512)

ISM 7.4.0.0 interim fix 18 added the ability to verify SSL certificates in the HTTP, HTTPS, IMAP4, LDAP, POP3, SIP, SMTP, and SOAP monitors. It is disabled by default. To enable it, modify the verifycertificate flag in the profile element. SSL certificate truststores are defined by the monitor properties: SSLTrustStoreFile and SSLTrustStorePath. The default values are:

SSLTrustStoreFile : "$ISMHOME/certificates/trust.pem"
SSLTrustStorePath : "$ISMHOME/certificates/"

The following new features were included in ITCAM for Transactions Internet Service Monitoring 7.4.0.0 interim fix 13 (Included in this 7.4.0.2 interim fix 01):

• Security Fixes - Security Bulletin: IBM Tivoli Composite Application Manager for Transactions is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195 and CVE-2014-3470)
• Security Fixes - Security Bulletin: IBM Tivoli Composite Application Manager for Transactions is affected by Elevated privileges vulnerability (CVE-2014-0907)

The following new features were included in ITCAM for Transactions Internet Service Monitoring 7.4.0.0 interim fix 11 (Included in this 7.4.0.2 interim fix 01):

• Security Fixes - Security Bulletin: IBM Tivoli Composite Application Manager for Transactions is affected by vulnerabilities in OpenSSL (CVE-2014-0160 and CVE-2014-0076)
• Security Fixes - Security Bulletin: IBM Tivoli Composite Application Manager for Transactions is affected by vulnerabilities in OpenSSL (CVE-2013-4353, CVE-2013-6450 and CVE-2013-6449)

The following new features were included in ITCAM for Transactions Internet Service Monitoring 7.4.0.0 interim fix 3 (Included in this 7.4.0.2 interim fix 01):

• Multiuser ISM configuration - RFE 13434 - Multiuser ISM configuration.

List of fixes

A) APAR Content:

IJ34807 31881 31954 ISM v7.4 ismconfig.sh is not supporting TLSv 1.2

Usage Steps for tlsv1.2 support in ismconfig:

• Uncomment the below 3 properties in ismconfig.props file

#TepsPort              :       "15201"

#TepsProtocol          :       "https"

#https.protocols       :       "TLSv1.2"

Note : After upgrading the agent to 7.4.0.3 IF01, if the ismconfig.props file is already present, then the above properties will not be present in ismconfig.props file. User needs to add them manually. However , if ismconfig.props file does not exist already, then the manual step of adding the properties is not required.

IJ36232 31914 ISM TCPPORT monitor core on AIX 7.1

IJ36925 31964 RHEL 8.5 ISM Agent 07.40.03.00 (7.4 fp3) fails to monitor HTTPS  URLs - OpenSSL status: error:0D0E10DF:asn1

From superseded fixes:

IJ27824 31781 httpS URL monitoring with redirection - content check fails - return code 302 -  SSL handshake failed error
IJ26672 31780 https monitor - Receiving response [HTTP/1.1 400 Bad Request] when urls in configuration have # character
IJ26330 31763 support url redirection from http to https that is currently not present
IJ26216 31762 HTTP/HTTPS monitor with content check (regexp) and 303 http return code fails
IJ02950: ISM 7401: RUSSIAN and CYRILLIC SYMBOLS IN TEP ARE GARBLED IN "DESCRIPTION" FIELD
IV97816: ITCAM for Transactions 7.4.0.1 - nco_bridge not starting
IJ05857 ISM needs to use specific cipher for BridgeSSLCipherSet

IJ06747 SM SAA jitter monitor is failing with the cisco router IOS version 15.5(3)M1
IV99793 ISM7401 TEP config GUI not working (loops or freeze?), and ismconfig.sh crash with core
IV99696 ISM 7400 IF28 HTTP monitor crashes with core after 25mn of run - HTTPS monitor crashes too
IV93927 RHEL LINUX ISM KISagent with ITM V6.3.0.7 does not start(invalid pointer)
IV94812 "tacmd addbundles -i ITCAM_TRAN7.4.0.1ISM_LNX_AMD64_EN/unix" fails
IV91786 ISM LDAP MONITOR RETURNS SRCHBASE AS "0" INSTEAD OF ACTUAL VALUE SETUP IN MONITOR SETTING
IV93700 ISM 7.4.0.1 INSTALLER PREREQ CHECKER INCORRECTLY FAILS Red Hat LINUX 7 PLATFORM
IV95328 LDAP MONITOR NOT WORKING IN ISM V7.4.0.1 IF0013
IV84128 Regression - ELEMENT VALUES IN THE ISM LDAP MONITOR CAN BE OVERRIDDEN BY RETRIEVED LDAP OBJECTS ATTRIBUTES
IV44842 ISM monitors such as HTTPS and SOAP crash on AIX
IV46127 HTTP and HTTPS Core dumps.
IV46773 Invalid data passed into the KISAgent can cause a core dump
IV46786 SOAP monitor can create duplicate namespaces in SOAP messages
IV47366 ISMCONFIG is unable to connect to ITM when you are using secure ports
IV49848 NTP monitor returns incorrect offset values
IV49869 Large cookies can cause TRANSX ISM monitor to crash with core
IV50219 ISM NCO__M_<monitor> can produce core file when ISM agent is stopped, if monitor is too slow to stop
IV52160 Failure retests do not get executed on the SIP monitor
IV52162 ISM SIP monitor can crash at the end of a test
IV53691 NTLM doesn't work with Long DomainName host combos
IV54496 KIS SDA FAILING ON ZOS RETURN_CODE 129 REASON=62 QUALIFIER=562
IV54952 AN ISM ELEMENT WITH NO SLC GROUP WILL CAUSE THE MONITOR TO REFUSE TO LOAD THE CONFIGURATION
IV55317 Parenthesis ( and ) are not supported in ISM 7.4 for OID group names.
IV55517 SOAP monitor input validation does not accept attribute names with '-' character.
IV55578 ISM Config CLI does not create OIDs in oidgroup correctly when you are making an SNMP profile with the CLI.
IV55810 ISM Config GUI is slow when there are MANY Profiles
IV56117 ISM MONITORS NEED TO BE ABLE TO DISABLE TLS 1.2 AND TLS 1.1 FOR COMPATIBILITY WITH OLDER CRYPTOGRAPHY IMPLEMENTATIONS
IV56290 ISM SOAP monitor sometimes reuses xmlns:ns1 identifier for different namespaces in generated SOAP Request.
IV56387 ICMP Monitor Monitoring periods do not work.
IV56684 ISM DNS MONITOR TRANSACTION ID IS ALWAYS SET TO zero.
IV57345 WHEN HTTP/S MONITOR HAS THE OUTPUTRESULT PROPERTY ENABLED LONG URLS CAN CAUSE THE MONITOR TO CRASH
IV57413 ISM OBJECT SERVER MODULE ON WINDOWS DOES NOT CONNECT TO SECURE OBJECT SERVER MODULE.
IV59957 MULTIPLE CONTENT TYPE HEADERS IN A HTTP RESPONSE CAN CAUSE THE ISM HTTP(S) MONITOR TO CRASH.
IV60157 UNDER TRANSX HTTP(S) COOKIES CAN'T BE TRANSFERRED BETWEEN STEPS.
IV60658 DNS QUERY ID NOT DIFFERENT BETWEEN RETEST
IV60769 IF0011 KIS_RESOURCES.JAR HAS INCORRECT VERSION INFO RESULTING IN APPLICATION SUPPORT MISMATCH ERROR.
IV60778 DISABLE ISM CONFIGURATION GUI "RESYNC AGENT" WITH A CUSTOM PROPERTY IN TEP
IV61935 Invalid data passed into the KISAgent can cause a core dump in ServiceLevelCollector.
IV63262 TACMD LISTSYSTEMS COMMAND SHOWS INCORRECT VERSION FOR ISM
IV65580 ELEMENT VALUES IN THE ISM LDAP MONITOR CAN BE OVERRIDDEN BY RETRIEVED LDAP OBJECTS ATTRIBUTES
IV65736 ISM DOES NOT SUPPORT THE ITM \"CHANGE\" FUNCTION
IV65798 THE ISM SOAP MONITOR DOES NOT ENABLE HTTPS BY DEFAULT
IV67332 SOAP monitor input parameters may not save correctly when larger than 254 characters long
IV68183 LDAP monitor process crashes after reconfig to use SIMPLE-SSL (internal)
IV68183 LDAP monitor process crashes after reconfig to use SIMPLE-SSL
IV72576 Race condition in LDAP monitor causing double free in OpenSSL
IV73214 RPING monitor not reusing control table rows in Juniper router.
IV73738 BPS calculations in SNMP monitor incorrect for very low BPS
IV76652 HTTP Monitor sends only 3 bytes in the body of a post
IV76913 Bridge accepts SSLv2 and SSL v3 connections
IV76923 RPING timeout value is set incorrectly
IV79154 Uplift from SHA1 to SHA-512 for certificate hash
IV79885 ismbatch should not generate an error when it is removing non-existent OID group or adding existing OID group
IV81603 Incomplete ITCAM for ISM prerequisites stating omnibus 8.1 support

B) Additional Non-APAR Defects:

31844 Bad data is shown for Radius monitor on non-windows platforms.

From superseded fixes:

31859 ISM Removed 32-bit ITM architecture li6263 and lx8263 related paths from LD_LIBRARY_PATH of kisagent as one of the customers was facing issues due to these paths.

31765 Getting error message when we run "./ism_startup.sh stop" command on non-windows
31519 ISM L3: CTIRA_SYSTEM_NAME missing from is.ini
30450 No need for SSL security attributes in the HTTP.props file
18533 ISM Configuration failed to Resync Agents when one of the deployed systems is offline
10767 ismconfig.props need saved manually before upgrade
18874 ismconfig CLI failed to copy profile
19176 improper message for Resync Agent - Resyncing the agent is causing locally stored profiles to be removed
19744 the later ismconfig GUI overwrites the previous GUI same named profile under specific steps
19745 the later ismconfig GUI cannot display the previous GUI created element for the same profile under specific steps
19769 The profile still exists after user is cancelling copy profile.
19771 The profile still exists after user is cancelling creating profile
19901 Failure to delete and copy ISM profiles on ISM Configuration GUI
20061 The parameters and REGEXP data are lost in the TRANSX http step after user is reopening the ISM GUI.
24582 ismbatch accepts non-IP format as dns server but fails to be parsed
24694 Fix all Valgrind Leaks + Errors in HTTPS Monitor
24840 Add AES to the default cipher suite
25217 Remove KIS Table Columns that aren't in use anymore
25397 Fix TRANSX timeout Debug Messages on Windows
26189 ism7401 failed to install on new platform - Red Hat 7.0 64bit
26583 NTLM doesn't seem to work against servers that don't want Unicode
27582 Bridge and Monitors failed to connect to KISagent

C) Enhancements

31913 U-ISM: ITCAM for Transactions ISM agent v7.4.0.3.01 : WatchDog functionality for ISM agent
31795 U-ISM: ITCAM for Transactions ISM agent v7.4.0.2: CLI configuration command 'ismconfig -config -listelts' reveals passwords in clear text.
31775 U:ISM: As an ISM agent developer, I want to upgrade visual studio to 2013 version instead of 2003 version during Big B compilation for Agent code and also want to compile agent in 64 bit so that windows ISM agent will have both 64-bit and 32-bit installers.
31826 U-ISM: As an ISM agent developer, I want to compile ISM agent's third-party and agent code in 64 bit for Linux Platform so that we have 64-bit installer for ISM agent in v6 and can drop out 32-bit installer.
31856 U-ISM: As an ISM agent developer, I want to compile ISM agent's third-party and agent code in 64 bit for zlinux Platform; so that we have 64-bit installer for ISM agent in v6 and can drop out 32-bit installer.
31827 U-ISM: As an ISM agent developer, I want to compile ISM agent's third-party and agent code in 64 bit for AIX Platform; so that we have 64-bit installer for ISM agent in v6 and can drop out 32-bit installer.
31828 U-ISM: As an ISM agent developer, I want to compile ISM agent's third-party and agent code in 64 bit for Solaris Platform; so that we have 64-bit installer for ISM agent in v6 and can drop out 32-bit installer.
31815 U-ISM: As an ISM agent developer, I want to update install_driver and ref_driver for non-windows platforms with latest ITM SDK 630 FP7 SP6; so that ISM agent is built with latest ITM SDK framework.
31866: U-ISM: As an ISM agent Administrator, I want to support SLES 15 platform for ISM agent so that ISM agent can be installed on SLES 15 OS.
31867: U-ISM: As an ISM agent Administrator, I want to support RHEL 8 platform for ISM agent so that ISM agent can be installed on RHEL 8 OS.
31874: U-ISM: As an ISM agent Administrator, I want to re-sign the ITM TEP client JAR file certificate as this certificate is going to be expired by Jun 5, 2021.

From superseded fixes:

19790 Add new CLIConfig command to bulk unlock profiles

Copyright and trademark information
http://www.ibm.com/legal/copytrade.shtml

Notices

INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice.

Microsoft, Windows, and Windows Server are trademarks of Microsoft Corporation in the United States, other countries, or both.

Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.

Other company, product, or service names may be trademarks or service marks of others.

THIRD-PARTY LICENSE TERMS AND CONDITIONS, NOTICES AND INFORMATION

The license agreement for this product refers you to this file for details concerning terms and conditions applicable to third-party software code included in this product, and for certain notices and other information IBM must provide to you under its license to certain software code. The relevant terms and conditions, notices and other information are provided or referenced below. Please note that any non-English version of the licenses below is unofficial and is provided to you for your convenience only. The English version of the licenses below, provided as part of the English version of this file, is the official version.

Not withstanding the terms and conditions of any other agreement you may have with IBM or any of its related or affiliated entities (collectively "IBM"), the third-party software code identified below are "Excluded Components" and are subject to the following terms and conditions:

• The Excluded Components are provided on an "AS IS" basis
• IBM DISCLAIMS ANY AND ALL EXPRESS AND IMPLIED WARRANTIES AND CONDITIONS WITH RESPECT TO THE EXCLUDED COMPONENTS, INCLUDING, BUT NOT LIMITED TO, THE WARRANTY OF NON-INFRINGEMENT OR INTERFERENCE AND THE IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
• IBM will not be liable to you or indemnify you for any claims related to the Excluded Components
• IBM will not be liable for any direct, indirect, incidental, special, exemplary, punitive or consequential damages with respect to the Excluded Components.

Document change history