Features introduced with Fix Pack 4

The following features have been introduced with Fix Pack 4:

Support for TLS V1.3

For more information on TLS V1.3, see Configuring the TLS V1.3 security protocol

Universal Base Image 9(ubi9) on docker containers

1. Docker containers now support UBI9.
2. You must use zLinux based on a zOS version z14 or higher if you wish to use the 10.1 FP4 docker containers (with UBI9) on zLinux.

Changed features and feature capabilities

Supported WebSphere Application Server Liberty Base versions

IBM Workload Scheduler 10.1 Fix Pack 4 was formally tested by using WebSphere Application Server Liberty Base 23.0.0.10.

Updated OpenSSL libraries

IBM Workload Scheduler 10.1 Fix Pack 4 has been updated with OpenSSL libraries version to 1.1.1.23 (means 1.1.1w).

OpenJDK Runtime Environment

IBM Workload Scheduler10.1 Fix Pack 4 has been updated with OpenJDK 11.0.20.1" 2023-08-24.

Updated JDBC drivers

Supports TLS v1.3

IBM Workload Scheduler10.1 Fix Pack 4 has been updated to support TLS v1.3.

APARs and defects fixed in Fix Pack 4

This section lists APARs resolved in Fix Pack 4.

Resolved Common Vulnerabilities and Exposures (CVE)

Known limitations and workarounds

Rest API submit job stream not possible with time restriction filters

Submitting a job stream with restful API is not possible when using time restriction filters.

Workaround:The Rest API is POST /plan/{planId}/jobstream/{jobstreamId}/action/submit_jobstream with the jobstreamId as NONE value, the planId where the job stream has to be submitted and the body with the SubmitJobStreamInfo as following:

To avoid inserting manually all jobs definitions, use the response of the Rest API POST /plan/{planId}/jobstream/{jobstreamId}/action/make_jobstream that requires the jobstreamId, the planId and the following body:

The response of the make_jobstream Rest API can be used as a job stream field in the submit_jobstream API body. Before calling the Rest API it is necessary to replace all the occurrences of timeRestriction with the correct ones and whatever you need to change for the submission.

Remote Command plug-in on Cloud

CLOUD TASK LAUNCHER - REXEC is a not supported protocol for Remote Command plug-in on Cloud.

Workaround:

The Remote Command plug-in for Maestro does not support the RXEC and RSH protocols. These protocols don't function as intended on a container, and the jobs remain in the EXEC state permanently.

Considering the fact that it is not feasible to hide the protocols in the plug-in (only for agents operating in containers).

Pool workstation details defined on the dynamic domain manager are not visible after switching the dynamic domain manager to backup dynamic domain manager

When you install a dynamic domain manager and then switch it to backup dynamic domain manager, the operation seems to be successful if you check the environment from the command line, but in the dynamic domain manager database some fields in the PPS_PRODUCT_PROPERTIES table are not correctly updated and still refer to the workstation which was previously the dynamic domain manager. An error similar to the following is returned:

Workaround: To workaround the problem, perform the following steps:

1. Retrieve the domain ID by running a query similar to the following:
   
2. Check that the domain ID is correct.
3. Correct the following fields in the table:

   DomainManager.Workstation.NameThis is the workstation name of the new dynamic domain manager. Verify the current value is the expected one. You can obtain this value using the conman command line or from the MDL.WKS_WORKSTATIONS table on the master domain manager.

   MasterDomainManager.HostName This is the full qualified host name or the IP of the new master domain manager. Verify the current value is the expected one. You can obtain this value using the conman command line or from the MDL.WKS_WORKSTATIONS table on the master domain manager.

   MasterDomainManager.Name This is the workstation name of the new master domain manager. Verify the current value is the expected one. You can obtain this value using the conman command line or from the MDL.WKS_WORKSTATIONS table on the master domain manager.

   MasterDomainManager.URIs This is the list of the master domain managers to be contacted by the dynamic domain manager The list must contain in the first position the new master domain manager and in second position the new backup master domain manager.

   DomainManager.Workstation.Address This is the full qualified host name or the IP of the new dynamic domain manager.

Installation 10.1 agent on IBMi with any fix pack

Installing a 10.1 agent on IBMi requires you to use the following parameters:

• Either use wauser, wapassword, and jwt=false parameters
  The Installation appears as follows:

  ./twsinst -new -acceptlicense yes -agent dynamic -uname username -displayname DA_IBMI186 -inst_dir /TWSINSTANCES/DA102FP1 -tdwbhostname  MDM_hostname  -tdwbport MDM_port -wauser wauser -wapassword wapassword  -jmport 37477 -hostname agent_ip_addr -jwt false

  or

• Theagentcertificatedownloader command must be executed with jwt=false, jwt=false, and you must install using jwt=true or via sslkeysfolder and sslpassword. This is applicable to all versions of fix packs that reference a 10.2.1 master.

  If the certificate did not register on the MDM, you have to run the agentcertificatedownloader command to retrieve it. The command appears as follows:./AgentCertificateDownloader.sh --tdwbport TDWB_port --tdwbhostname TDWB_hostname --wauser wauser --wapassword wapassword --work_dir /your_dir --jwt false

Performing the centralized agent update

Before performing a centralized update on fix packs or upgrade on releases on a stand-alone fault-tolerant agent to V10.1 Fix Pack 4, you must enable, if not already enabled, the use of the HTTPS protocol to connect to the event processor server. For more information about enabling enEventProcessorHttpsProtocol | eh, see Global options - detailed description.

Then, search for the APAR number IJ50967 on IBM Fix Central, download the curl file and save it inside TWS/ITA/cpa/ita.

Note: The owner of the new curl file and the permissions granted must be the same of the existing curl file.

Fix pack structure

This section describes the structure of the images contained in this Fix Pack.

Fix pack files available for IBM Workload Scheduler using FixCentral

This is the structure of the Fix Pack for the engine on Fix Central:

+----README.zip
|
+---10.1.0.04-IWS-AGENT-IBMi.zip
|
+---10.1.0.04-IWS-SERVER-AIX.zip
|
+---10.1.0.04-IWS-AGENT-AIX.zip
|
+---10.1.0.04-IWS-BATCH_REPORT-AIX.zip
|
+---10.1.0.04-IWS-AGENT-HPIA64.zip
|
+---10.1.0.04-IWS-AGENT-SOLARIS.zip
|
+---10.1.0.04-IWS-SERVER-LNX_X86_64.zip
|
+---10.1.0.04-IWS-AGENT-LNX_X86_64.zip
|
+---10.1.0.04-IWS-FILEPROXY-LNX_X86_64.zip
|
+---10.1.0.04-IWS-OCLI-LNX_X86_64.zip
|
+---10.1.0.04-IWS-BATCH_REPORT-LNX_X86_64.zip
|
+---10.1.0.04-IWS-SERVER-LNX_Z.zip
|
+---10.1.0.04-IWS-AGENT-LNX_Z.zip
|
+---10.1.0.04-IWS-FILEPROXY-LNX_Z.zip
|
+---10.1.0.04-IWS-BATCH_REPORT-LNX_Z.zip
|
+---10.1.0.04-IWS-BATCH_REPORT-LNX_X86_64.tar
|
+---10.1.0.04-IWS-SERVER-WINDOWS.zip
|
+---10.1.0.04-IWS-AGENT-WINDOWS.zip
|
+---10.1.0.04-IWS-FILEPROXY-WINDOWS.zip
|
+---10.1.0.04-IWS-OCLI-WINDOWS.zip
|
+---10.1.0.04-IWS-BATCH_REPORTS-WINDOWS.zip
|
+---10.1.0.04-IWS-AGENT-LNX_PPC_LE.zip
|
+---10.1.0.04-IWS-OCLI-MACx86.zip
|
+---10.1.0.04-IWS-BATCH_REPORTS-Z_USS.tar
|
+---10.1.0.04-IWS-ZAGENT-IBMi.zip
|
+---10.1.0.04-IWS-ZAGENT-AIX.zip
|
+---10.1.0.04-IWS-ZAGENT-LNX_Z.zip
|
+---10.1.0.04-IWS-ZAGENT-HPIA64.zip
|
+---10.1.0.04-IWS-ZAGENT-SOLARIS.zip
|
+---10.1.0.04-IWS-ZAGENT-LNX_X86_64.zip
|
+---10.1.0.04-IWS-ZAGENT-WINDOWS.zip
|
+---10.1.0.04-IWS-ZAGENT-LNX_PPC_LE.zip
|
+---10.1.0.04-IWS-DOCKER-ZAGENT-LNX_X86_64.zip
|
+---10.1.0.04-IWS-DOCKER-ZAGENT-LNX_Z.zip
|
+---10.1.0.04-IWS-DOCKER-SERVER-LNX_X86_64.zip
|
+---10.1.0.04-IWS-DOCKER-AGENT-LNX_X86_64.zip
|
+---10.2.1.0-IWS-DOCKER-AIDA-LNX_X86_64.zip
|
+---10.1.0.04-IWS-DOCKER-FILEPROXY-LNX_X86_64.zip
|
+---10.1.0.04-IWS-DOCKER-SERVER-LNX_Z.zip
|
+---10.1.0.04-IWS-DOCKER-AGENT-LNX_Z.zip
|
+---10.2.1.0-IWS-DOCKER-AIDA-LNX_Z.zip
|
+---10.1.0.04-IWS-DOCKER-FILEPROXY-LNX_Z.zip
|
+---10.1.0.04-IWS-OCLI-MACARM.zip
|
+---10.1.0.04-IWS-OCLI-MACx86.zip

Installing the Fix Pack

This section describes how to apply Fix Pack 4 to IBM Workload Scheduler.

Installation notes

• Before installing the Fix Pack, ensure you have installed the required prerequisite software. To obtain the latest information about software requirements for IBM Workload Scheduler, run the Detailed Software Requirements report and browse to the relevant section.
• The minimum required WebSphere® Liberty version to successfully install the Fix Pack is 22.0.0.3 or later.
• This Fix Pack supports DB2 Advanced Enterprise Server Edition, Version 10.5 on HP-UX and Sun Solaris operating systems only. It is available for download from the Passport Advantage web site with part number: CNED3ML. After the installation of DB2 Advanced Enterprise Server Edition, Version 10.5, you must manually apply the license activation key (.lic file). The license key must be downloaded separately from the Passport Advantage web site. The part number related to the license activation key is CNED3ML. The key must be registered using the db2licm command. See Applying DB2 licenses licenses for the procedure to register the key.

  If you already have installed DB2 Advanced Workgroup Server Edition, you can switch this license with a DB2 Advanced Enterprise Server Edition license, by following the procedure in Updating licenses. Note that when the procedure references the product-identifier as in step 3:db2licm -a product-identifier, replace the product-identifier with the file representing the license activation key (.lic).

• Before installing this Fix Pack on AIX® V7.1 operating systems, you must apply the patch for APAR IZ99634. For more information, see: APAR IZ99634.
• On UNIX™ operating systems, before installing the IBM Workload Scheduler Fix Pack, ensure that your umask is set to 022. To verify that umask is set to the correct value, from a command prompt, run the umask command. If the value is different from 022, modify it by running the command:

  umask 022

• On UNIX operating systems, the database administrator must have read and run privileges for the IBM Workload Scheduler installation path; otherwise the installation fails. (54367)

After the Fix Pack installation completes, verify the following information:

• This Fix Pack installs a new version of the file tws_env.sh (tws_env.cmd) and also creates a backup file named, tws_env.sh.bk (tws_env.cmd.bk), which are both saved to the TWA_HOME/TWS directory, where TWA_HOME is the IBM Workload Scheduler installation directory. After installing the Fix Pack, if you have modified the original version, merge the content of the new version with the content of the original version to carry your customized content into the new version.
• On IBM i operating systems, if you want to install the Fix Pack on the agent for z/OS and IBM Workload Scheduler Dynamic Agent, verify that the user profile used as TWSUser is not a member of a group profile. Set the group profile associated with the TWSUser to *NONE. If the TWSUser is a member of a group, the Fix Pack installation fails.
• Only on Windows™ operating systems, to correctly display double-byte character set (DBCS) characters, you must perform the following actions:
  • Set the LANG environment variable to the DBCS language code you want to use, for example, set LANG=zh_CN.
  • Set the TWS_TISDIR environment variable to the IBM Workload Scheduler home directory, for example, set TWS_TISDIR=C:\FTA\TWS.
  • Open the Control Panel window and click Clock, Language, and Region.
  • Click Region and Language.
  • In the Format tab, choose from the Format drop-down list the language you want to use.
  • In the Keyboards and Languages tab, under Display Language, click install and follow the steps to install the DBCS language pack you want to use.
  • In the Administrative tab, click Change system locale and, from the drop-down list, choose the language (system locale) you want to use.
  Note that all the settings must be coherent, that is they must refer to the same DBCS language setting. After you have completed these changes, reboot your workstation to have the changes take effect.
• When installing a dynamic agent or a fault-tolerant agent, ensure that the agent name does not start with a number. If the name of the dynamic agent starts with a number, use the -displayname parameter at installation time to specify a different name. If the name of the fault-tolerant agent starts with a number, use the --thiscpu parameter at installation time to specify a different name.

Interoperability notes

IBM Workload Scheduler version 10.1.0 Fix Pack 4 supports all product versions indicated in the IBM Workload Scheduler version 10.1.0 Fix Pack 4 Release Notes which can be accessed at the following link: Release Notes.

Installation methods

You can install the Fix Pack using one of the following methods:

For master domain manager or its backup:

see Updating the master domain manager and its backup

For dynamic domain manager or its backup:

see Updating the dynamic domain manager

For fault-tolerant agent, dynamic agent or domain manager:

see Updating agents

Disk space requirements

To obtain the latest information about permanent disk space requirements when installing IBM Workload Scheduler on supported operating systems, run the Hardware requirements report and click on the relevant operating system link

Before starting the Fix Pack installation, ensure that you have the necessary disk space available on the file system. Consider that the disk space check calculated by the installation considers the entire space occupied by the TWA_HOME directory. The space required by the backup is the sum of the following directories:

TWA_HOME/TWS + TWA_HOME/TDWB + TWA_HOME/wastools + TWA_HOME/properties

If the installation fails because of lack of free disk space, you must stop the installation, free space on your disk, and start the installation again.

In addition to the disk space in the following table, the installation requires an additional 600 MB on the file system where the IMShared directory is located.

Table 3. Disk space requirements for installing a master domain manager or a backup master Fix Pack

Operating System	Installation directory	Temporary directory
AIX	2,5 GB	1,5 GB
Microsoft® Windows	2 GB	1 GB
Linux®	1,5 GB	800 MB

Table 4. Disk space requirements for installing the Fix Pack for IBM Workload Scheduler fault-tolerant agents

Operating System	Installation directory	Temporary directory
AIX	900 MB	400 MB
HP-UX	1.3 GB	400 MB
Solaris	920 MB	400 MB
Microsoft Windows	700 MB	350 MB
Linux	720 MB	350 MB

Table 5. Disk space requirements for installing the Fix Pack for IBM Workload Scheduler dynamic agents and z/OS agents

Operating System	Installation directory	Temporary directory
AIX	600 MB	250 MB
HP-UX	920 MB	400 MB
Solaris	580 MB	120 MB
Microsoft Windows	800 MB	400 MB
Linux	600 MB	250 MB

Note: Only on HP and Solaris operating systems, the Fix Pack installation requires also 300 MB free disk space in the temporary directory /var/tmp.

Documentation updates

Any additions or changes to the documentation as a result of this Fix Pack have been integrated into the online product documentation available in IBM Knowledge Center.

Contacting IBM Software Support

Before contacting IBM Software Support with a problem, refer to the IBM Software Support site by accessing the following Web address: https://www.ibm.com/support/home/

To access IBM support, click the IBM support link at the bottom right of the page.

If you want to contact IBM Software Support, see the IBM Software Support Handbook at the following Web site: http://techsupport.services.ibm.com/guides/handbook.html

Notices

This information was developed for products and services offered in the US. This material might be available from IBM in other languages. However, you may be required to own a copy of the product or product version in that language in order to access it.

IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-IBM product, program, or service.

IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not grant you any license to these patents. You can send license inquiries, in writing, to:

IBM Director of Licensing
IBM Corporation
North Castle Drive, MD-NC119
Armonk, NY 10504-1785
US

For license inquiries regarding double-byte character set (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to:

Intellectual Property Licensing
Legal and Intellectual Property Law
IBM Japan Ltd.
19-21, Nihonbashi-Hakozakicho, Chuo-ku
Tokyo 103-8510, Japan

INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice.

Any references in this information to non-IBM websites are provided for convenience only and do not in any manner serve as an endorsement of those websites. The materials at those websites are not part of the materials for this IBM product and use of those websites is at your own risk.

IBM may use or distribute any of the information you provide in any way it believes appropriate without incurring any obligation to you.

Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact:

IBM Director of Licensing
IBM Corporation
North Castle Drive, MD-NC119
Armonk, NY 10504-1785
US

Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee.

The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement or any equivalent agreement between us.

The performance data discussed herein is presented as derived under specific operating conditions. Actual results may vary.

Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products.

This information is for planning purposes only. The information herein is subject to change before the products described become available.

This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to actual people or business enterprises is entirely coincidental.

COPYRIGHT LICENSE:

This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. The sample programs are provided "AS IS", without warranty of any kind. IBM shall not be liable for any damages arising out of your use of the sample programs.

© (IBM) (2023).
Portions of this code are derived from IBM Sample Programs.
© Copyright IBM Corp. _2023_.

Trademarks

IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.

Adobe™, the Adobe logo, PostScript™, and the PostScript logo are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States, and/or other countries.

IT Infrastructure Library™ is a Registered Trade Mark of AXELOS Limited.

Linear Tape-Open™, LTO™, the LTO Logo, Ultrium™, and the Ultrium logo are trademarks of HP, IBM Corp. and Quantum in the U.S. and other countries.

Intel™, Intel logo, Intel Inside™, Intel Inside logo, Intel Centrino™, Intel Centrino logo, Celeron™, Intel Xeon™, Intel SpeedStep™, Itanium™, and Pentium™ are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.

Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both.

Microsoft, Windows, Windows NT™, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both.

Java™ and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates.

Cell Broadband Engine™ is a trademark of Sony Computer Entertainment, Inc. in the United States, other countries, or both and is used under license therefrom.

ITIL™ is a Registered Trade Mark of AXELOS Limited.

UNIX is a registered trademark of The Open Group in the United States and other countries.

Terms and conditions for product documentation

Permissions for the use of these publications are granted subject to the following terms and conditions.

Applicability

These terms and conditions are in addition to any terms of use for the IBM website.

Personal use

You may reproduce these publications for your personal, noncommercial use provided that all proprietary notices are preserved. You may not distribute, display or make derivative work of these publications, or any portion thereof, without the express consent of IBM.

Commercial use

You may reproduce, distribute and display these publications solely within your enterprise provided that all proprietary notices are preserved. You may not make derivative works of these publications, or reproduce, distribute or display these publications or any portion thereof outside your enterprise, without the express consent of IBM.

Rights

Except as expressly granted in this permission, no other permissions, licenses or rights are granted, either express or implied, to the publications or any information, data, software or other intellectual property contained therein.

IBM reserves the right to withdraw the permissions granted herein whenever, in its discretion, the use of the publications is detrimental to its interest or, as determined by IBM, the above instructions are not being properly followed.

You may not download, export or re-export this information except in full compliance with all applicable laws and regulations, including all United States export laws and regulations.

IBM MAKES NO GUARANTEE ABOUT THE CONTENT OF THESE PUBLICATIONS. THE PUBLICATIONS ARE PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE.