IBM Support

IBM Tivoli Composite Application Manager for Transactions Response Time 7.4.0.1 Interim Fix 50 Readme

Fix Readme


Abstract

Readme file for: 7.4.0.1-TIV-CAMRT-IF0050
Product/Component Release: 7.4.0.1
Update Name: 7.4.0.1-TIV-CAMRT-IF0050
Fix ID: 7.4.0.1-TIV-CAMRT-AIX-IF0050, 7.4.0.1-TIV-CAMRT-LINUX-IF0050, 7.4.0.1-TIV-CAMRT-WINDOWS-IF0050
Publication Date: 1 Sep 2020
Last modified date: 1 Sep 2020
Description: This IFIX contains java update for IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020.

Content

Download location
Prerequisites and co-requisites
Installing
Additional information
List of fixes  

Download location

Below is a list of components, platforms, and file names that apply to this Readme file.

Fix Download for AIX

Product/Component Name: Platform: Fix:
Tivoli Composite Application Manager for Transactions AIX 7.4.0.1-TIV-CAMRT-AIX-IF0050

Fix Download for Linux

Product/Component Name: Platform: Fix:
Tivoli Composite Application Manager for Transactions Linux 7.4.0.1-TIV-CAMRT-LINUX-IF0050

Fix Download for Windows

Product/Component Name: Platform: Fix:
Tivoli Composite Application Manager for Transactions Windows
 

Prerequisites and co-requisites

This upgrade for the Robotic Response Time agents , which is part of ITCAM for Transactions: Response Time, may be applied to the following base versions. It must be applied to a machine on which Robotic Response Time agent has been installed.

  • 7.4.0.1 - AIX, Linux, Windows
  • 7.4.0.2 - AIX, Linux, Windows
Notes:
  1. Supported base versions include interim fixes applied to any of the above release levels.
  2. This interim fix is a quarterly SDK update. The update replaces the Java SDK without changing the product version. This interim fix may be applied to versions 7.4.0.1 and 7.4.0.2.
 

This patch replaces the two JREs shipped with the Robotic Response Time (T6) agent, bringing them to the latest level. This remediates multiple security issues.

 

This patch is applicable for T6 agents:

  • version 7.4.0.1
  • version 7.4.0.2
  • Windows, AIX and Linux platforms.

The T6's JREs are only used when playing back Rational Performance Tester (RPT) scripts, thus not available on Solaris and HPUX (RPT playback is not supported on Solaris and HPUX). 7.4 agent needs to update java 80 and java 70 JREs. These variations are noted in the installation steps below. Any customisations done to the existing JREs needs to be preserved. Since these JREs are product specific (ie only used by the T6 agent), there should only be at most one customisation as instructed by IBM support, which is to enable strong encryption by updating the JRE's encryption policy (see technote in Installing ).



After the patch, the Java versions will be(This patch only includes java70 and java80 updates):
  • Java 7.0 SR10 FP70
  • Java 8.0 SR06 FP15

Related material:
This interim fix is a cumulative JAVA upgrade for JAVA PSIRT.Updates in these releases are included in this upgrade.
  • 7.4.0.1 - IF0005
  • 7.4.0.1 - IF0007
  • 7.4.0.1 - IF0009
  • 7.4.0.1 - IF0012
  • 7.4.0.1 - IF0015
  • 7.4.0.1 - IF0018
  • 7.4.0.1 - IF0021
  • 7.4.0.1 - IF0024
  • 7.4.0.1 - IF0027
  • 7.4.0.1 - IF0030
  • 7.4.0.1 - IF0032
  • 7.4.0.1 - IF0033
  • 7.4.0.1 - IF0034
  • 7.4.0.1 - IF0039
  • 7.4.0.1 - IF0041
  • 7.4.0.1 - IF0047
  • 7.4.0.1 - IF0049
Oracle Critical Patch Update Advisory - July 2020

Installation information

Before Installing

Validate pre-existing java70 and java80 are older than ones delivered in this IFix.
The RRT Agent's javas are located in

  • Windows:
    • java70: $ITMHOME\tmaitm6\java70
    • java80: $ITMHOME\tmaitm6\java80 - only in 7.4.0.1-IF8 and later
  • Unix:
    • java70: $ITMHOME/tmaitm6/java70
    • java80: $ITMHOME/tmaitm6/java80 - only in 7.4.0.1-IF8 and later

Check their versions, for example
C:\ibm\itm\TMAITM6> .\java80\jre\bin\java.exe -version

java version "1.8.0_151"
Java(TM) SE Runtime Environment (build 8.0.5.7 - pwi3280sr5fp7-20171216_01(SR5 FP7)) IBM J9 VM (build 2.9, JRE 1.8.0 Windows Server 2008 R2 x86-32 20171215_373586 (JIT enabled, AOT enabled)
OpenJ9 - 5aa401f
OMR - 101e793
IBM - b4a79bf)
JCL - 20171214_01 based on Oracle jdk8u151-b12

 

Installing

Notes

  1. If you have updated the T6 JRE to use strong encryption, you must manually backup the policy files and copy them to the new JREs. The two files are:
    • \lib\security\local_policy.jar
    • \lib\security\US_export_policy.jar
See Technote - How to enable strong encryption > 128 bit
https://www.ibm.com/support/pages/node/85585
See Technote - Does the RRT agent support TLS 1.1/1.2 and 256-bit ciphers?
https://www.ibm.com/support/pages/node/529695
 
  • Back up existing java70 and java80
    1. Stop the T6 agent
    2. Backup existing java jres, for example
      > On Windows - cd c:\IBM\ITM\tmaitm6\
      > On Linux or Unix - cd /opt/IBM/ITM/tmaitm6
      > move java70 java70.old
      > move java80 java80.old - only in 7.4.0.1-IF8 and later.
  • Replace the JREs
    1. Unzip/Untar the archive to the same directory, for example, after unarchiving your directory structure should be like:

      Windows - c:\IBM\ITM\TMAITM6>dir java*
      Volume in drive C has no label.
      Volume Serial Number is 44AB-01FC

      Directory of c:\IBM\ITM\TMAITM6

      ........
      29/05/2013 02:04 PM <DIR> java70
      13/02/2013 02:14 PM <DIR> java70.old
      28/08/2016 07:08 PM <DIR> java80
      28/08/2016 07:17 PM <DIR> java80.old
      0 File(s) 0 bytes
      4 Dir(s) 40,808,731,648 bytes free


      Linux or Unix - /opt/IBM/ITM/tmaitm6>ls -dl java*
      ........
      drwxr-xr-x 4 root root 4096 Feb 2 01:10 java70
      drwxr-xr-x 4 root root 4096 Sep 19 14:20 java70.bak
      drwxr-xr-x 4 root root 4096 Feb 2 01:10 java80
      drwxr-xr-x 4 root root 4096 Sep 19 14:20 java80.bak
    2. If applicable, copy the following unrestricted policy files from the "java70.old" and "java80.old" directories to the new "java70" and "java80" directories:

      Windows :
      java70.old\lib\security\local_policy.jar to java70\lib\security
      java70.old\lib\security\US_export_policy.jar to java70\lib\security

      java80.old\lib\security\local_policy.jar to java80\lib\security
      java80.old\lib\security\US_export_policy.jar to java80\lib\security


      Linux or Unix :
      java70.bak/lib/security/local_policy.jar to java70/lib/security
      java70.bak/lib/security/US_export_policy.jar to java70/lib/security

      java80.bak/lib/security/local_policy.jar to java80/lib/security
      java80.bak/lib/security/US_export_policy.jar to java80/lib/security
  • Validate the updated JRE version/function
    1. Check version number of JRE 7.0, for example
      > java70\jre\bin\java.exe -version
      java version "1.7.0"
      Java(TM) SE Runtime Environment (build pwi3270sr10fp70-20200714_01(SR10 FP70))
      IBM J9 VM (build 2.6, JRE 1.7.0 Windows Server 2016 x86-32 20200625_450086 (JIT enabled, AOT enabled)
      J9VM - R26_Java726_SR10_20200625_1734_B450086
      JIT  - r11_20200625_450086
      GC   - R26_Java726_SR10_20200625_1734_B450086
      J9CL - 20200625_450086)
      JCL - 20200706_01 based on Oracle jdk7u271-b10

      > java80\jre\bin\java.exe -version
      java version "1.8.0_261"
      Java(TM) SE Runtime Environment (build 8.0.6.15 - pwi3280sr6fp15-20200724_01(SR6 FP15))
      IBM J9 VM (build 2.9, JRE 1.8.0 Windows 10 x86-32-Bit 20200724_452227 (JIT enabled, AOT enabled)
      OpenJ9   - 4ce4b9d
      OMR      - 08b0594
      IBM      - 70917a2)
      JCL - 20200720_01 based on Oracle jdk8u261-b13
  • Restart Agent and ensure RPT Script playback works.
  • (Optional) Delete the backup java runtimes.

Additional information

The Secure Hash Algorithm 256(SHA256) checksum of the images are as follows:

7.4.0.1-TIV-CAMRT-AIX-IF0050.tar - CC68E3ADAE2CFAF0FE522F87F2BB60153224D7C2E55831EE20BB7B16CDEF5580
7.4.0.1-TIV-CAMRT-Linux-IF0050.tar - 725C925ED8A8D934913B68EB843AED3DEFB1F81B0A6A101ADC9C80DC241F8C22
7.4.0.1-TIV-CAMRT-Windows-IF0050.zip - 93D6F203CFC42C10DD59AD73D938861948AF44124A9B323E360B6AFD44E6C54A

List of fixes

A) APAR Content:
IJ27404: PSIRT 0233120 IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020 - Includes Oracle Jul 2020 CPU plus one additional vulnerability
B) Additional Non APAR Defects:
Defect 31791: IJ27404: PSIRT 0233120 IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020 - Includes Oracle Jul 2020 CPU plus one additional vulnerability

C) Enhancements
N/A

Document change history

 
Version Date Description of change
1.0 1 Sep 2020 Initial Version

[{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS5MD2","label":"Tivoli Composite Application Manager for Transactions"},"ARM Category":[{"code":"a8m500000008i3OAAQ","label":"ITCAM-for-Transactions->Robotic Response Time RRT"}],"ARM Case Number":"","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"7.4.0"}]

Document Information

Modified date:
22 September 2020

UID

ibm16325211

Page Feedback