IBM Tivoli Composite Application Manager for Transactions Response Time 7.4.0.1 interim fix 62 readme file

Prerequisites and co-requisites

This upgrade must NOT be installed on T3, T5, or T6 agents where the version of IBM Tivoli Monitoring framework ('AX') installed is equal to or higher than v6.3 FP7. For T3, T5, T6 agents with 'AX' version equal to or higher than v6.3 FP7, then use 7.4.0.2-TIV-CAMRT-IF0020.

This upgrade is a cumulative fix for the IBM Tivoli Composite Application Manager (ITCAM) for Transactions Response Time agents (T3, T5, T6). In addition, this interim fix provides the fix for PSIRT PVR0399252 (IBM Java - OpenJ9 CVE-2021-28167) for T5 agent.

The upgrade can be applied to the following base versions.

• 7.4.0.1
   

• 7.4.0.1
• 7.4.0.1 - IF0001
• 7.4.0.1 - IF0008
• 7.4.0.1 - IF0011
• 7.4.0.1 - IF0014
• 7.4.0.1 - IF0016
• 7.4.0.1 - IF0022
• 7.4.0.1 - IF0023
• 7.4.0.1 - IF0029
• 7.4.0.1 - IF0031
• 7.4.0.1 - IF0036
• 7.4.0.1 - IF0037
• 7.4.0.1 - IF0038
• 7.4.0.1 - IF0042
• 7.4.0.1 - IF0043
• 7.4.0.1 - IF0045
• 7.4.0.1 - IF0046
• 7.4.0.1 - IF0048
• 7.4.0.1 - IF0053
• 7.4.0.1 - IF0059

Installing

Download the corresponding executable file bundle for your operating system or package:

• AIX: 7.4.0.1-TIV-CAMRT-AIX-IF0062.tar
• Linux: 7.4.0.1-TIV-CAMRT-Linux-IF0062.tar
• Windows: 7.4.0.1-TIV-CAMRT-Windows-IF0062.zip
• Solaris: 7.4.0.1-TIV-CAMRT-Solaris-IF0062.tar

1. Extract the 7.4.0.1-TIV-CAMRT-Windows-IF0062.zip file to a temporary directory (for example C:\temp\7.4.0.1-IF0062).
    
2. Using the wizard installation GUI:
   a. Execute the setup.exe command and to start the Installation Wizard. The setup.exe is located under the WINDOWS directory in the chosen temporary directory.
   For example:
   # C:\TEMP\7.4.0.1-IF0062\WINDOWS\setup.exe
   
   b. Follow the Installation Wizard panels by responding to each option that corresponds to the TEMA agent being upgraded.
   
   Default values are provided. It is possible to select or specify different options that must match the appropriate settings for your environment. Also, you can be required to complete the values when a blank option is not permitted.
   
   NOTE: During the interactive installation, you can choose to add the TEMA to the TEMS depot so you can do remote installs for the platform you are adding into the depot.
    
3. USING THE SILENT INSTALL CLI.
   a. Prepare the silent installation file to configure appropriate values for the installation program to use while running the installation process.
   The silent installation configuration file is located under the Windows directory of the directory image. (That is C:\TEMP\7.4.0.1-IF0062\Windows\silent.txt)
   
   b. Edit the silent installation file to provide appropriate values for the wanted configuration. By default, all options are commented out, and the installer uses the values from the previous TEMA configuration.
   For more information on the options for the silent installation of the TEMA agents, consult the ITCAM for Transactions V7.4.0.1 Installation and Configuration Guide.
   Refer to the following chapter in the product documentation for further instructions on the use of the silent installation features for this maintenance package:
   Perform a silent install of a monitoring agent (Windows)
    
4. Restart THE COMPUTER.
   After the installation of the upgrade of a TEMA in Windows, it is necessary to restart the computer to allow the system to properly register the latest settings in the ITCAM, ITM, and Operating System registries.
   In environments where the TEPS and RT TEMA agents coexist in the same ITM instance, the update for the TEMAs offers the option to restart the computer. Install the support packages for the TEPS first. Allow the TEPS to restart before restarting the computer as part of the TEMA update.

1. Download the Unix/Linux upgrade package and extract it to a temporary directory (for example /tmp/7.4.0.1-IF0062).
    
2. USING THE SCRIPT BASED INSTALLATION PROCEDURE.
   
   a. Execute the install.sh to start the Installation Wizard. The install.sh command is located directly under the root directory of the upgrade image.
   For example:
   # /tmp/7.4.0.1-IF0062/install.sh
   
   b. Follow the text wizard panels by responding to each option that corresponds to the TEMA agent to be upgraded.
   
   Default values are provided. You can select different options, or you can be required to complete the values when a blank option is not permitted.
   
   NOTE: During the interactive installation, respond "2" to the following option.
   Do you want to check prerequisites for the above components? [ 1=Yes, 2=No ; default is "1" ]
   
   c. After the Installation Wizard completes, you must configure your agents.
   
   It is done by issuing the itmcmd ITM command as follows:
   
   $ITM_HOME/bin/itmcmd config -A <AGENT_TYPE>
   Where <AGENT_TYPE> is t3, t5 or t6
   To configure the Robotic Response Time agent (t6), issue for example the command:
   # $ITM_HOME/bin/itmcmd config -A t6
    
3. USING THE SILENT INSTALL CLI.
   Prepare the silent installation file to configure appropriate values for the installation program to use while running the installation process.
   Refer to the following section of the product documentation for more information in using the silent installation in Unix/Linux environments:
   Perform a silent install and configuration for a monitoring agent (UNIX or Linux)
    

1. Tivoli Enterprise Monitoring Server
2. Tivoli Enterprise Portal Server
3. Tivoli Enterprise Portal Desktop Client
4. Tivoli Enterprise Portal Server Browser client (for Linux and UNIX Only)

The procedure for installing agent-specific application support on the components is similar to installing the monitoring agent. The main difference is to select the application support components required.

Note: When installing application support, any ITM components on the current machine is automatically stopped, including any TEMS or TEPS. Follow the Starting and stopping servers and agents guide to manually stop ITM agents and infrastructure. You should warn other users before beginning the installation.

For step by step application support installation information refer to the documentation:
Install application support for Linux and UNIX
Install application support for Windows system

Specific Installation Instructions for Agents

• T3 AMC APPLICATION MANAGEMENT CONSOLE (end user dashboard) AGENT
  After installing this maintenance package, the agent must be reconfigured using the MTEMS console or the CLI interface, so that necessary configuration changes are done and the agent processes can be initialized with the new settings.
  For example:
  <ITM_HOME>/bin/itmcmd config -A t3
• T5 WRT WEB RESPONSE TIME AGENT
  When upgrading T5 agents that are monitoring local instances of the IBM HTTP Server, it is necessary to stop the IHS process before the upgrade. For all other web server instances, it is also recommended to stop the server before running the upgrade and reconfiguration of the T5 agent. It is not required to stop web servers when monitoring remote transactions.
  After installing this maintenance package, the agent must be reconfigured using the MTEMS console or the CLI interface. For example:
  <ITM_HOME>/bin/itmcmd config -A t5
• T6 RRT ROBOTIC RESPONSE TIME AGENT
  After installing this maintenance package, the agent must be reconfigured using the MTEMS console or the CLI interface, so that necessary configuration changes are done and the agent processes can be initialized with the new settings.
  For example:
  <ITM_HOME>/bin/itmcmd config -A t6

Uninstalling the TEMA on Unix/Linux

1. Issue the following command from the /IBM/ITM/bin directory:
   ./uninstall.sh
2. Follow the instructions to uninstall the TEMA that you want to remove.

Additional information

The following problems are addressed by this interim fix.

• None

• None

• RIS: support RFT 9.2/9.5 version script exporting
• RIS: support RPT 9.2/9.5 version script exporting
• RIS: support RFT 10.0 version script exporting
• RIS: support RPT 10.0 version script exporting

• APARs
  • IJ26104 PSIRT ADV0023757 Open Source SQLite Vulnerabilities CVE-2020-11656 CVE-2020-11655
  • IJ22072 ClientTime memory leak issue in TS002765697
  • IJ16169 ITCAM4TX 7.4: Cannot EXPORT RPT 9.1 HTTP TEST SCRIPT TO AMC WHEN USING **ENCRYPTED** DATAPOOLS
  • IV94339 T3, T5, T6 APP SUPPORT INCORRECT VERSION, RESULTING IN "APPLICATION SUPPORT MISMATCH" REPORTED IN TEP
  • IV93568 URL and Status_Code attributes in WRT Transaction Instance Table can occasionally miss match on HTTP pipelining
  • IV88234 WRT network timing calculations not processed correctly for HTTP transactions containing a 100-continue expectation
  • IV87235 WRT terminates when processing persistent HTTP connection containing multiple requests and missing packets
  • IV86304 AMCE 7401 SLOW WITH LARGE ZIP FILES IN THE RFT AND RPT RUNTIME FOLDERS IN THE KT1DEPOT
  • IV85027 T3 applications are offline when failed to connect to TEMS
  • IV84400 PSIRT 5154 CODE BLUE [SE-2012-01] Broken security fix in IBM Java
  • IV79637 KT6 Agent set wrong KT6_JAVA_HOME in Runtime Environment on Linux platform
  • IV79325 WRT TCP Sequencer uses wrong payload length when packets are truncated
  • IV78697 TEMS RECYCLE STOPS AMC STH FILE GENERATION
  • IV78532 kfcm120 on AIX can occasionally consume excessive kernel CPU resource without BPF optimization
  • IV78180 Some information is missing in VP Failure Event on TEP
  • IV77635 T3 NEEDS TO RETURN ALL DATA FOR HISTORY REQUEST
  • IV77457 RIS7401 install - wrong message of unsupported version for RFT 8.6 and RPT 8.6
  • IV76849 WRT does not support IP frames tagged by more than one 802.1Q VLAN tag
  • IV76483 CHUNKS THAT START WITH CRLF ARE NOT PROCESSED CORRECTLY BY WRT
  • IV76481 CHUNKED POSTS WITH 100 CONTINUE ARE NOT PARSED CORRECTLY BY WRT
  • IV76185 When Citrix Connection Failure Event or Citrix Create Window Failure Event happens, no Citrix Server Address shows in TEP Event record
  • IV76162 RPT script playback failed with error message Test virtual user setup failed. startStatus=-14
  • IV74161 When enable Content capture In Windows Platform, Content Capture .zip files continue to generate without VP failure Event
  • IV73894 RIS: The VP added by ITCAM Test Editor has some problems, it will make the VP failure message be incorrect
  • IV72305 wfcrun32.exe must be restarted periodically, if not some unexpected VP failure will happen
• Agent defects:
  • 31865: D - PSIRT PVR0265747 Open Source SQLite Vulnerabilities CVE-2021-20227 for 7.4.0.1
  • 31748 D - PSIRT ADV0025370 Open Source SQLite Vulnerabilities CVE-2020-15358 for 7.4.0.1
  • 31733 D - PSIRT ADV0023757 Open Source SQLite Vulnerabilities CVE-2020-11656 CVE-2020-11655 for 7.4.0.1
  • 31683 D - 7.4.0.1 - PSIRT ADV0021246 SQLite Vulnerabilities CVE-2019-19603, CVE-2019-19645, CVE-2019-19646, CVE-2019-19880, CVE-2019-19923, CVE-2019-19924, CVE-2019-19925, CVE-2019-19926
  • 85102 WRT stops showing data after 1 day running
  • 31659 D - PSIRT ALERT: 18003 Open Source SQLite Vulnerabilities CVE-2019-16168 - 7.4.0.1
  • 31609 D - PSIRT ALERT: 161901 Open Source SQLite Vulnerabilities CVE-2019-8457 - 7.4.0.1
  • 31559 D - PSIRT ALERT: 14951 Open Source SQLite Vulnerabilities CVE-2018-20346 - 7.4.0.1
  • 31537 Update Java Certificates for 7.4 on Nov 2018
  • 31488 D - PSIRT ALERT: 11534 Open Source SQLite Vulnerabilities CVE-2018-8740 - 7.4.0.1
  • 31397 TS000055529 Garbled text in "Information" RRT Agent Messages
  • 31246 D - PSIRT ALERT: 9137 Open Source SQLite Vulnerabilities CVE-2017-10989
  • 31022 PSIRT ALERT: 7621 Zlib Vulnerabilities
  • 30922 PSIRT ALERT: 6888 Open Source SQLite Vulnerabilities
  • 30818 PSIRT ALERT: 5934 xerces-C Vulnerability & possible mitigation
  • 30644 Update ARM with newer version TRANS_5907 for xerces-c PSIRT
  • 30420 PSIRT 5417 Open Source Apache Xerces-C XML parser Vulnerabilities - CVE-2016-0729
  • 29817 T3 writes blank value to ORIGINNODE column when the AMC ISM table is being queried
  • 29758 RPT Citrix playbacks time out after starting new playbacks
  • 29347 Make RRT work well when the installation directory contains SPACE
  • 28937 Fix buildWhereClause SQL insertion vulnerability in CTableManager
  • 28820 PSIRT 3528 IBM SDK, Java Technology Edition Quarterly CPU
  • 28813 WRT crash in CSpec_DecryptAESGCM()
  • 28390 kfcm120 segmentation fault on shutdown with incomplete SSL sessions
  • 25603 RIS: Default password incorrect when exporting a script using SSL
  • 20392 RIS: RFT Export of script inside folder fails
  • 32002: D - PSIRT PRD0333951 Open Source SQLite Vulnerabilities CVE-2021-45346 for 7.4.0.1
  • 32003: D - PSIRT PRD0347267 Open Source zlib Vulnerabilities CVE-2018-25032 - 7.4.0.1
     

    • Document change history

      Version	Date	Description of change
      1.0	12 November 2022	Initial Version