IT42847: SSL CERTIFICATE DOES NOT PROPERLY APPLY TO SERVICE ON PORT 8443

APAR status

• Closed as program error.

Error description

• Customer issued SSL certificates that are uploaded to the IBM
  Spectrum Copy Data Management appliance do not get properly
  applied to the service running the SCDM UI Console on port 8443
  
  The default self-signed IBM certificate that ships with the
  appliance does not get replaced.
  
  The SSL certificate does get applied properly to the service
  that is serving the Administrator's console on port 8090
  
  Affected levels:
  IBM Spectrum Copy Data Management 2.2.x
  

Local fix

• For IBM Spectrum Copy Data Management 2.2.17 and later,
  to add ssl certificate to keystore, use the following steps:
  
  Note: User may need to enter password which was requested during
  certificate generation.
  
  1. login as the root user
  2. go to /opt/ECX/virgo/configuration directory
  3. make a copy of keystore file (keystore-bak file).
  4. make a copy of ecx-beta.crt and ecx-beta.key files
  (ecx-beta-bak.crt and ecx-beta-bak.key).
  5. run script with the proper PASSWORD to create ecx-beta-p12:
  /usr/bin/openssl pkcs12 -export -in ecx-beta.crt -inkey
  ecx-beta.key -out ecx-beta.p12 -passin pass:PASSWORD -passout
  pass:PASSWORD.
  6. run script to add certificate to keystore: /usr/bin/keytool
  -importkeystore -srckeystore ecx-beta.p12 -srcstorepass PASSWORD
  -destkeystore keystore -deststorepass PASSWORD -srcstoretype
  pkcs12
  7. reboot appliance
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Copy Data Management level 2.2.17, 2.2.18,      *
  * 2.2.19                                                       *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * see Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply the fixing level when available. This problem is       *
  * currently projected to be fixed in  IBM Spectrum Copy Data   *
  * Management level 2.2.20. Note that this is subject to change *
  * at the discretion of IBM.                                    *
  ****************************************************************
  

Problem conclusion

• Steps provided in the Local Fix were added programmatically
  within Admin Console code.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• Admin    Console
  

Fix information

• Fixed component name

  SPECTRUM COPY D

• Fixed component ID

  5737B3400

Applicable component levels