IT33626: TLS V1.1 NOT DISABLED ON ALL PORTS

APAR status

• Closed as program error.

Error description

• Spectrum Protect Plus still allows TLS v1.1 protocol on the
  following ports:
  - SPP server ports: 5671 + 8900
  - vSnap port: 8900
  - VADP proxy port: 8098
  
  IBM Spectrum Protect Plus Versions Affected:
  IBM Spectrum Protect Plus 10.1.x
  
  Initial Impact: Medium
  
  Additional Keywords: SPP, SPPlus, TS003625756
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Plus level 10.1.x                       *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  * For more information, refer to the security bulletin         *
  * published at https://www.ibm.com/support/pages/node/6368601  *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply the fixing level when available. This problem is       *
  * currently projected to be fixed in IBM Spectrum Protect Plus *
  * level 10.1.7. Note that this is subject to change at the     *
  * discretion of IBM.                                           *
  ****************************************************************
  

Problem conclusion

• This problem has been fixed so that TLS V1.1 is disabled on all
  ports.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SP PLUS

• Fixed component ID

  5737SPLUS

Applicable component levels