Fix Readme
Abstract
xxx
Content
Readme file for: 7.4.0.1-TIV-CAMRT-IF0030
Product/Component Release: 7.4.0.1
Update Name: 7.4.0.1-TIV-CAMRT-IF0030
Fix ID: 7.4.0.1-TIV-CAMRT-AIX-IF0030, 7.4.0.1-TIV-CAMRT-LINUX-IF0030, 7.4.0.1-TIV-CAMRT-WINDOWS-IF0030
Publication Date: 04 Aug 2018
Last modified date: 04 Aug 2018
Installation information
Download location
The information included in this document is published at product release time. For the latest updates on this release please refer to the on-line document: To download this update you must first login to IBM FixCentral. Once logged in, you may select from the individual download packages. HPUX and Solaris downloads are no longer provided.
http://www.ibm.com/eserver/support/fixes/
Below is a list of components, platforms, and file names that apply to this Readme file.
Product/Component Name: | Platform: | Fix: |
---|---|---|
Tivoli Composite Application Manager for Transactions | AIX | 7.4.0.1-TIV-CAMRT-AIX-IF0030 |
Product/Component Name: | Platform: | Fix: |
---|---|---|
Tivoli Composite Application Manager for Transactions | Linux | 7.4.0.1-TIV-CAMRT-LINUX-IF0030 |
Product/Component Name: | Platform: | Fix: |
---|---|---|
Tivoli Composite Application Manager for Transactions | Windows | 7.4.0.1-TIV-CAMRT-WINDOWS-IF0030 |
Prerequisites and co-requisites
This upgrade for the Robotic Response Time agents , which is part of ITCAM for Transactions: Response Time, may be applied to the following base versions.
- 7.4.0.x - AIX, Windows, Linux
- Supported base versions include interim fixes applied to any of the above release levels.
This patch replaces the two JREs shipped with the Robotics Response Time (T6) agent, bringing them to the latest level. This remediates multiple security issues.
This patch is applicable for T6 agents:
- versions 7.4.0.x
- Windows, AIX and Linux platforms.
7.4 agent needs to update java 80, java 70, and java60 JREs.
7.3 agent needs to update java 70 and java 60 JREs.
These variations are noted in the installation steps below.
Any customisations done to the existing JREs needs to be preserved. Since these JREs are product specific (ie only used by the T6 agent), there should only be at most one customisation as instructed by IBM support, which is to enable strong encryption by updating the JRE's encryption policy (see technote in Installing ).
After the patch, the Java versions will be:
- Java 6.0 SR16 FP65
- Java 7.0 SR10 FP25
- Java 8.0 SR05 FP17
Related material:
Its a cumulative JAVA upgrade for JAVA PSIRT, any updates in the following releases will be included in this upgrade.
- 7.4.0.0 - IF0007
- 7.4.0.0 - IF0012
- 7.4.0.0 - IF0016
- 7.4.0.0 - IF0022
- 7.4.0.0 - IF0025
- 7.4.0.0 - IF0030
- 7.4.0.0 - IF0029
- 7.4.0.0 - IF0030
- 7.4.0.0 - IF0032
- 7.4.0.0 - IF0033
- 7.4.0.1 - IF0005
- 7.4.0.1 - IF0007
- 7.4.0.1 - IF0009
- 7.4.0.1 - IF0012
- 7.4.0.1 - IF0015
- 7.4.0.1 - IF0018
- 7.4.0.1 - IF0021
- 7.4.0.1 - IF0024
- 7.4.0.1 - IF0027
https://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
IBM Java SDK Security Bulletin
https://www.ibm.com/blogs/psirt/ibm-security-bulletin-multiple-vulnerabilities-may-affect-ibm-sdk-java-technology-edition-7/
Installation information
Before Installing
Validate pre-existing java is older than ones delivered in this IFix.
The RRT Agent's javas are located in
- Windows:
- java60: $ITMHOME\tmaitm6\java60
- java70: $ITMHOME\tmaitm6\java70
- java80: $ITMHOME\tmaitm6\java80 - only in 7.4.0.1-IF8 and later
- Unix:
- java60: $ITMHOME/tmaitm6/java60
- java70: $ITMHOME/tmaitm6/java70
- java80: $ITMHOME/tmaitm6/java80 - only in 7.4.0.1-IF8 and later
Check their versions, for example
C:\ibm\itm\TMAITM6> .\java80\jre\bin\java.exe -version
java version "1.8.0_151"
Java(TM) SE Runtime Environment (build 8.0.5.7 - pwi3280sr5fp7-20171216_01(SR5 FP7)) IBM J9 VM (build 2.9, JRE 1.8.0 Windows Server 2008 R2 x86-32 20171215_373586 (JIT enabled, AOT enabled)
OpenJ9 - 5aa401f
OMR - 101e793
IBM - b4a79bf)
JCL - 20171214_01 based on Oracle jdk8u151-b12
Installing
Notes
- If you have updated the T6 jre to use strong encryption, you must migrate the policy files to the new JREs. The two files are:
\lib\security\local_policy.jar \lib\security\US_export_policy.jar
http://www-01.ibm.com/support/docview.wss?uid=swg21245273
See Technote - Does the RRT agent support TLS 1.1/1.2 and 256-bit ciphers?
http://www-01.ibm.com/support/docview.wss?uid=swg21960133
- Back up existing java
- Stop the T6 agent
- Backup existing java jres, for example
> On Windows - cd c:\IBM\ITM\tmaitm6\
> On Linux or Unix - cd /opt/IBM/ITM/tmaitm6
> move java60 java60.old
> move java70 java70.old
> move java80 java80.old - only in 7.4.0.1-IF8 and later.
- Replace the JREs
- Unzip/Untar the archive to the same directory, for example, after unarchiving your directory structure should be like:
On Windows - c:\IBM\ITM\TMAITM6>dir java*
Volume in drive C has no label.
Volume Serial Number is 44AB-01FC
Directory of c:\IBM\ITM\TMAITM6
29/05/2013 02:02 PM <DIR> java60
12/03/2012 04:08 PM <DIR> java60.old
29/05/2013 02:04 PM <DIR> java70
13/02/2013 02:14 PM <DIR> java70.old
28/08/2016 07:08 PM <DIR> java80
28/08/2016 07:17 PM <DIR> java80.old
0 File(s) 0 bytes
4 Dir(s) 40,808,731,648 bytes free
On Linux or Unix - /opt/IBM/ITM/tmaitm6>ls -dl java*
drwxr-xr-x 4 root root 4096 Feb 2 01:10 java60
drwxr-xr-x 4 root root 4096 Sep 19 14:20 java60.bak
drwxr-xr-x 4 root root 4096 Feb 2 01:10 java70
drwxr-xr-x 4 root root 4096 Sep 19 14:20 java70.bak
drwxr-xr-x 4 root root 4096 Feb 2 01:10 java80
drwxr-xr-x 4 root root 4096 Sep 19 14:20 java80.bak
- Unzip/Untar the archive to the same directory, for example, after unarchiving your directory structure should be like:
- Validate the update JRE version/function
- Check version number of JRE 6.0, for example
> On Windows - cd c:\ibm\itm\tmaitm6
> java60\jre\bin\java.exe -version
> On Linux or Unix - cd /opt/IBM/ITM/tmaitm6
> java60\jre\bin\java -version
java version "1.6.0"
Java(TM) SE Runtime Environment (build pwi3260sr16fp65-20180505_01(SR16 FP65))
IBM J9 VM (build 2.4, JRE 1.6.0 IBM J9 2.4 Windows 8 x86-32 jvmwi3260sr16fp65-20180411_383947 (JIT enabled, AOT enabled)
J9VM - 20180411_383947
JIT - r9_20180411_383947
GC - GA24_Java6_SR16_20180411_1747_B383947)
JCL - 20180504_01
> java70\jre\bin\java.exe -version
java version "1.7.0"
Java(TM) SE Runtime Environment (build pwi3270sr10fp25-20180430_01(SR10 FP25))
IBM J9 VM (build 2.6, JRE 1.7.0 Windows 10 x86-32 20180420_384915 (JIT enabled, AOT enabled)
J9VM - R26_Java726_SR10_20180420_1715_B384915
JIT - r11_20180420_384915
GC - R26_Java726_SR10_20180420_1715_B384915
J9CL - 20010803_384915)
JCL - 20180427_01 based on Oracle jdk7u181-b09
> java80\jre\bin\java.exe -version
java version "1.8.0_171"
Java(TM) SE Runtime Environment (build 8.0.5.17 - pwi3280sr5fp17-20180627_01(SR5 FP17))
IBM J9 VM (build 2.9, JRE 1.8.0 Windows 10 x86-32-Bit 20180626_390413 (JIT enabled, AOT enabled)
OpenJ9 - 5cdc604
OMR - a24bc01
IBM - 21870d6)
JCL - 20180619_01 based on Oracle jdk8u171-b11
- Check version number of JRE 6.0, for example
- Restart Agent and ensure RPT Script playback works.
- (Optional) Delete the backup java runtimes.
Additional information
The Secure Hash Algorithm 1 (SHA1) checksum of the images are as follows:
7.4.0.1-TIV-CAMRT-AIX-IF0030.tar - 7bd4af6e00e89c8cc05f4064443212aba955bc12
7.4.0.1-TIV-CAMRT-Linux-IF0030.tar - 1316e8b53358b085e7ffa87a98c9afb11275054f
7.4.0.1-TIV-CAMRT-Windows-IF0030.zip - 3aa79ee8ddaefd332e89c386ef8ef7967fe560c4
List of fixes
A) APAR Content:
IJ08045 PSIRT 11819 IBM SDK, Java Technology Edition Quarterly CPU - Apr 2018 - Includes Oracle Apr 2018 CPU
B) Additional Non APAR Defects:
N/A
C) Enhancements
N/A
Document change history
Version | Date | Description of change |
1.0 | 04 Aug 2018 | Initial Version |
Was this topic helpful?
Document Information
Modified date:
15 November 2018
UID
isg400004018