Fix Readme
Abstract
xxx
Content
Readme file for: 7.4.0.0-TIV-CAMRT-IF0007
Product/Component Release: 7.4.0.0
Update Name: 7.4.0.0-TIV-CAMRT-IF0007
Fix ID: 7.4.0.0-TIV-CAMRT-AIX-IF0007, 7.4.0.0-TIV-CAMRT-LINUX-IF0007, 7.4.0.0-TIV-CAMRT-WINDOWS-IF0007
Publication Date: 6 Feb 2014
Last modified date: 6 Feb 2014
Installation information
Download location
The information included in this document is published at product release time. For the latest updates on this release please refer to the on-line document: To download this update you must first login to IBM FixCentral. Once logged in, you may select from the individual download packages. HPUX and Solaris downloads are no longer provided.
http://www.ibm.com/eserver/support/fixes/
Below is a list of components, platforms, and file names that apply to this Readme file.
Product/Component Name: | Platform: | Fix: |
---|---|---|
Tivoli Composite Application Manager for Transactions | AIX | 7.4.0.0-TIV-CAMRT-AIX-IF0007 |
Product/Component Name: | Platform: | Fix: |
---|---|---|
Tivoli Composite Application Manager for Transactions | Linux | 7.4.0.0-TIV-CAMRT-LINUX-IF0007 |
Product/Component Name: | Platform: | Fix: |
---|---|---|
Tivoli Composite Application Manager for Transactions | Windows | 7.4.0.0-TIV-CAMRT-WINDOWS-IF0007 |
Prerequisites and co-requisites
This upgrade for ITCAM for Transactions Response Time may be applied to the following base versions.
- 7.1.0.x - AIX, Windows, Linux
- 7.2.0.x - AIX, Windows, Linux
- 7.3.0.x - AIX, Windows, Linux
- 7.4.0.x - AIX, Windows, Linux
- Supported base versions include interim fixes applied to any of the above release levels.
- The contents of this patch are included in 7.3.0.1-TIV-CAMRT-IF0026. 7.3.0.x users are recommended to install IF0026 instead of this patch
This patch replaces the two JREs shipped with the Robotics Response Time (T6) agent, bringing them to the latest level. This remediates multiple security issues.
This patch is applicable for T6 agents:
- versions 7.4.0.x, 7.3.0.x, 7.2.0.x and 7.1.0.x
- Windows, AIX and Linux platforms.
7.4 and 7.3 agents need to update both java60 and java 70 JREs. 7.2 and 7.1 agents only needs to update java60. These variations are noted in the installation steps below.
Any customisations done to the existing JREs needs to be preseved. Since these JREs are product specific (ie only used by the T6 agent), there should only be at most one customisation as instructed by IBM support; which is to enable strong encryption by updating the JRE's encryption policy (see technote in Related Material).
After the patch, the Java versions will be:
- Java 6.0 SR15
- Java 7.0 SR6
Related material:
Oracle's Java October 2013 CPU Advisory - details vulnerabilities addressed
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Details on Strong Encryption keys
http://www-01.ibm.com/support/docview.wss?uid=swg21245273
Installation information
Before Installing
Validate pre-existing java is older than ones delivered in this IFix.
The RRT Agent's javas are located in
- Windows:
- java60: $ITMHOME\tmaitm6\java60
- java70: $ITMHOME\tmaitm6\java70 - only in 7.3.0.1-LA2 and later
- Unix:
- java60: $ITMHOME/tmaitm6/java60
- java70: $ITMHOME/tmaitm6/java70 - only in 7.3.0.1-LA2 and later
Check their versions, for example
C:\ibm\itm\TMAITM6> .\java70\jre\bin\java.exe -version
java version "1.7.0"
Java(TM) SE Runtime Environment (build pwi3270sr2-20120901_01(SR2))
IBM J9 VM (build 2.6, JRE 1.7.0 Windows Server 2008 R2 x86-32 20120809_118929 (JIT enabled, AOT enabled)
J9VM - R26_Java726_SR2_20120809_0948_B118929
JIT - r11.b01_20120808_24925
GC - R26_Java726_SR2_20120809_0948_B118929
J9CL - 20120809_118929)
JCL - 20120831_02 based on Oracle 7u3-b05
Notice that J9VM indicates it is SR2 (no Fixpack) and hence it is older than SR5 and needs update.
Installing
Notes
- If you are using 7.2 and 7.1 T6 agents, you do not need to unarchive the \java70 directory. For 7.3 onwards, please unarchive both JREs.
- If you have updated the T6 jre to use strong encryption, you must migrate the policy files to the new JREs. The two files are:
\lib\security\local_policy.jar \lib\security\US_export_policy.jar
http://www-01.ibm.com/support/docview.wss?uid=swg21245273
- Back up existing java
- Stop the T6 agent
- Backup existing java jres, for example
> c:
> cd c:\ibm\itm\tmaitm6\
> move java60 java60.old
> move java70 java70.old - only in 7.3.0.1-LA and later.
- Replace the JREs
- Unzip/Untar the archive to the same directory, for example, after unarchiving your directory structure should be like:
c:\IBM\ITM\TMAITM6>dir java*
Volume in drive C has no label.
Volume Serial Number is 44AB-01FC
Directory of c:\IBM\ITM\TMAITM6
29/05/2013 02:02 PM <DIR> java60
12/03/2012 04:08 PM <DIR> java60.old
29/05/2013 02:04 PM <DIR> java70
13/02/2013 02:14 PM <DIR> java70.old
0 File(s) 0 bytes
4 Dir(s) 30,808,731,648 bytes free
- Unzip/Untar the archive to the same directory, for example, after unarchiving your directory structure should be like:
- Validate the update JRE version/function
- Check version number of JRE 6.0, for example
> c:
> cd c:\ibm\itm\tmaitm6
> java60\jre\bin\java.exe -version
java version "1.6.0"
Java(TM) SE Runtime Environment (build pwi3260sr15-20131017_01(SR15))
IBM J9 VM (build 2.4, JRE 1.6.0 IBM J9 2.4 Windows 7 x86-32 jvmwi3260sr15-201310
16_170922 (JIT enabled, AOT enabled)
J9VM - 20131016_170922
JIT - r9_20130920_46510ifx2
GC - GA24_Java6_SR15_20131016_1337_B170922)
JCL - 20131015_01
> java70\jre\bin\java.exe -version
java version "1.7.0"
Java(TM) SE Runtime Environment (build pwi3270sr6-20131015_01(SR6))
IBM J9 VM (build 2.6, JRE 1.7.0 Windows 7 x86-32 20131013_170512 (JIT enabled, A OT enabled)
J9VM - R26_Java726_SR6_20131013_1510_B170512
JIT - r11.b05_20131003_47443
GC - R26_Java726_SR6_20131013_1510_B170512
J9CL - 20131013_170512)
JCL - 20131011_01 based on Oracle 7u45-b18
- Check version number of JRE 6.0, for example
- Restart Agent and ensure RPT Script playback works.
- (Optional) Delete the backup java runtimes.
Additional information
The Secure Hash Algorithm 1 (SHA1) checksum of the images are as follows:
7.4.0.0-TIV-CAMRT-AIX-IF0007.tar f3710565b38526a75aa073813db6d33d6fe5c6ec
7.4.0.0-TIV-CAMRT-Linux-IF0007.tar edff044449c53c0934f21027020c3d684a512ba5
7.4.0.0-TIV-CAMRT-Windows-IF0007.zip 99f07c357ed6c5affcdc2db138cdb6579f5d5bb6
List of fixes
A) APAR Content:
IV54890 RRT: SECURITY UPDATES FOR JRE(S) - OCT 2013
From superseded fixes:
7.4.0.0 IF0007 supersedes APAR IV48461 7.3.0.1-TIV-CAMRT-IF0022 fix.
B) Additional Non APAR Defects:
N/A
C) Enhancements
N/A
Document change history
Version | Date | Description of change |
1.0 | 5 Feb 2014 | Initial Version |
1.1 | 6 Feb 2014 | Add superseded fixes and 7.3.0.1-TIV-CAMRT-IF0026 recommendation for 7.3.0.x users |
Was this topic helpful?
Document Information
Modified date:
06 February 2014
UID
isg400001745