IBM(R) Financial Transaction Manager for Corporate Payment Services Multiplatform Version 2.1.1.0 Interim Fix 0001 Readme Readme file for IBM(R) Financial Transaction Manager for Corporate Payment Services Multiplatform Version 2.1.1.0 Interim Fix 0001 Product/Component Release: 2.1 Update Name: FTM CPS MP iFix 0001 Fix ID: 2.1.1.0-FTM-CPS-MP-iFix0001 Publication Date: 28 May 2014 Last modified date: 28 May 2014 Online version of the readme file: www.ibm.com/software/industry/financial-transaction-manager/support/. Important: The most current version of the readme file can always be found online. ====================================================================== Contents: Download location Prerequisites and co-requisites Known Issues Installation information Prior to installation Installing Performing necessary tasks after installation Uninstalling if necessary List of fixes Copyright and trademark information Document change history ====================================================================== Download location ====================================================================== Download IBM(R) Financial Transaction Manager for Corporate Payment Services Multiplatform Version 2.1.1.0 Interim Fix 0001 from Fix Central at the following location: http://www.ibm.com/eserver/support/fixes/ Search for Fix ID: 2.1.1.0-FTM-CPS-MP-iFix0001 ====================================================================== Prerequisites and co-requisites ====================================================================== Before downloading FTM CPS MP 2.1.1.0 iFix 0001, perform the following steps: Ensure that your system meets all of the system requirements: http://www.ibm.com/software/industry/financial-transaction-manager/requirements. This action prevents technical problems that might occur after the installation and configuration of the update. Review the Flashes and open Authorized Problem Analysis Reports (APARs) on the Financial Transaction Manager product support Web site: http://www.ibm.com/software/industry/financial-transaction-manager/support. Open APARs describe defects that are not yet addressed in an update, and may contain workarounds that impact your use of FTM CPS MP 2.1.1.0 iFix 0001. Read the "Known issues" section of this readme. You need a file system with 200MB of free space; 100MB for the compressed download image and another 100 MB for its uncompressed content. If you already have an FTM product installed and you have obtained special fixes (e.g. Limited Availability iFixes or Test Fixes), contact IBM(R) support to determine whether you need an updated version of the fixes before you install FTM CPS MP 2.1.1.0 iFix 0001. This helps ensure your system is in a consistent state and that no special fixes are lost. ====================================================================== Known issues ====================================================================== None. ====================================================================== Installation information ====================================================================== Before proceeding with the installation process, view the online version of this readme file to check whether information has changed since the readme file was downloaded: http://www.ibm.com/software/industry/financial-transaction-manager/support ==================================================================== Prior to installation ==================================================================== Before installing FTM CPS MP 2.1.1.0 iFix 0001, perform the following steps: - Download the interim fix zip file to an appropriate location outside any existing FTM product installation directory. - Uncompress the zip file. Do not save the content to any existing FTM product installation directory. - Create a backup of the AdminCore_EAR Enterprise Archive deployed to WebSphere. : 1. Log in to the IBM WebSphere Application Server Integrated Solutions Console (WAS Admin Console). 2. Navigate to the Enterprise Applications screen. Applications > Application Types > Websphere enterprise applications 3. Select the check box for AdminCore_EAR 4. Select Export 5. Select the AdminCore_EAR hyperlink 6. Save File ==================================================================== Installing ==================================================================== - The content of this interim fix should NOT be transferred to any existing FTM installation directory. - Database Migration is not applicable. - This interim fix consists of a collection of Web Archive modules (WARs) that are to be deployed as updates to application AdminCore_EAR in your existing WebSphere environment. - For standalone WebSphere Server environments use the application update procedure detailed below for each WAR module affected by this interim fix level. For clustered environments, your WebSphere Administrator should adapt the procedures to your environment. Alternately, you may uninstall / install affected WAR modules. Standalone Server WAR Update Procedure ====================================== Certain steps use brackets {} for highlighting information specific to the module you are updating. Refer to the table following the update instructions for a list of affected WAR modules and their applicable parameters. 1. Log in to the IBM WebSphere Application Server Integrated Solutions Console (WAS Admin Console). 2. Navigate to the Manage Modules page for the AdminCore_EAR Enterprise Application. Applications > Application Types > Websphere enterprise applications Select the AdminCore_EAR application hyperlink to advance to the application’s configuration. Select the "Manage Modules" hyperlink. 3. Select the check box for the {module} you wish to update and choose 'Update'. 4. Using the Browse button, locate the new {war file} that contains the update. 5. Complete the update using the default options for the remaining screens. 6. 'Save' to the Master Configuration. {module} {war file} -------- ---------- Admin_web coreui_web.war base_servicesui_web iybbaseservicesui_web.war Business_Rule_UI brui_web.war GatewayUI_Web GatewayUI_Web.war PartnerProfileUI_Web partprofileui_web.war PresentmentUI_Web izlpresentmentui_web.war RiskUI_Web rskriskui_web.war Settlements_Console settleui_web.war TransactionServerUI_WEB izgui_web.war ====================================================================== Performing necessary tasks after installation ====================================================================== - Restart Enterprise Application AdminCore_EAR after affected WAR modules have been updated. - Verify version information for all Control Center user interface components: 1. Log in to the Control Center 2. Administration > About 3. For each row with a "Component Type" of "User Interface": - Verify "Specification Version" is 2.1.1.0, and - Verify "Implementation Version" is preceded with the value "Bld20140519-1539". ==================================================================== Uninstalling if necessary ==================================================================== To roll back this interim fix requires either: 1. Updating affected Web Archive (WAR) modules deployed to AdminCore_EAR with the WAR modules previously deployed, or 2. Reinstalling Enterprise Archive AdminCore_EAR from the backup exported prior to deploying the WAR modules contained in this interim fix. - Database: Not applicable for this interim fix level ====================================================================== List of fixes ====================================================================== - ClassLoader manipulation with Apache Struts affecting Financial Transaction Manager (FTM) Multiplatform (CVE-2014-0114) ====================================================================== Copyright and trademark information ====================================================================== http://www.ibm.com/legal/copytrade.shtml Notices INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you. This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice. Microsoft, Windows, and Windows Server are trademarks of Microsoft Corporation in the United States, other countries, or both. Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Other company, product, or service names may be trademarks or service marks of others. THIRD-PARTY LICENSE TERMS AND CONDITIONS, NOTICES AND INFORMATION The license agreement for this product refers you to this file for details concerning terms and conditions applicable to third party software code included in this product, and for certain notices and other information IBM must provide to you under its license to certain software code. The relevant terms and conditions, notices and other information are provided or referenced below. Please note that any non-English version of the licenses below is unofficial and is provided to you for your convenience only. The English version of the licenses below, provided as part of the English version of this file, is the official version. Notwithstanding the terms and conditions of any other agreement you may have with IBM or any of its related or affiliated entities (collectively "IBM"), the third party software code identified below are "Excluded Components" and are subject to the following terms and conditions: - The Excluded Components are provided on an "AS IS" basis - IBM DISCLAIMS ANY AND ALL EXPRESS AND IMPLIED WARRANTIES AND CONDITIONS WITH RESPECT TO THE EXCLUDED COMPONENTS, INCLUDING, BUT NOT LIMITED TO, THE WARRANTY OF NON-INFRINGEMENT OR INTERFERENCE AND THE IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE - IBM will not be liable to you or indemnify you for any claims related to the Excluded Components - IBM will not be liable for any direct, indirect, incidental, special, exemplary, punitive or consequential damages with respect to the Excluded Components. ====================================================================== Document change history ====================================================================== +--------------------+------------------------------------------------+ | Date | Description of change | +--------------------+------------------------------------------------+ | 28 May 2014 | Original publication date | +--------------------+------------------------------------------------+ | 31 Jul 2014 | Updated List of Fixes | +--------------------+------------------------------------------------+