Proventia Network Multi-Function Security Java Update 24 LMI Fix README ======================================================================== ======================================================================== ABSTRACT ======================================================================== This patch addresses an issue where after updating to java version 1.6.0 update 24 or higher you may no longer be able to save policies via the LMI. This is due to increased security enforcement in update 24 between the interaction of webpages and java applets. SUMMARY ======================================================================== Readme file for: IBM Proventia Network Multi-Function Security Java Update 24 LMI Fix Product/Component Release: 4.6 Update Name: Java Update 24 LMI Fix Platforms: Proventia M Publication date: March 25, 2011 Last Modifcation date: June 29, 2011 © Copyright IBM Corporation 2011. All rights reserved worldwide. Please read this document in its entirety. ======================================================================== CONTENTS ======================================================================== * Description * Compatibility and Prerequisites * Installation information o Prior to installing this fix pack o Installing this fix pack o Performing the necessary tasks after installation * List of fixes * Known Issues * Additional information * Files included in this update * Contacting IBM Support * Copyright and trademarks * Document change history ======================================================================== DESCRIPTION ======================================================================== This patch addresses an issue where after updating to java version 1.6.0 update 24 or higher you may no longer be able to save policies via the LMI. This is due to increased security enforcement in update 24 between the interaction of webpages and java applets. This patch allows the java applet to use security settings within the new java security model to perform various actions such as verifying the java version. The affected audience may be anyone who uses the Proventia M LMI to manage policies and who has installed java 1.6.0 update 24 or higher on the system used to launch the LMI. SiteProtector management is unaffected since it does not use applets. ======================================================================== COMPATIBILITY AND PREREQUISITES ======================================================================== This update is compatible with IBM Proventia Multi-Function Security firmware 4.6. It can be applied on top of any previously installed patches. MD5 checksum calculation: - 5715ee8e317060e800156ff783ac75dc 4.6.0.0-TIV-ProvM-IF0002.pkg ======================================================================== INSTALLATION INFORMATION ======================================================================== To apply the update: Step 1 - Close any browsers you wish to use the LMI on. Step 2 - Copy the install package (*.pkg) to the appliance Step 3 - SSH to the appliance as root and apply the patch: hotfix-install 4.6.0.0-TIV-ProvM-IF0002.pkg To uninstall the update: The original policy editor archive has been backed up into: /cache/backup/20110325_ProvM_4_6_Policy-Editor-Compatibility_Hotfix/CPE.jar.orig To restore the package, copy CPE.jar.orig to /var/www/html/lmi/viewers/CPE.jar ======================================================================== KNOWN ISSUES ======================================================================== There are no known issues with this patch. ======================================================================== ADDITIONAL INFORMATION ======================================================================== There is no additional information for this patch. ======================================================================== FILES INCLUDED IN THIS UPDATE ======================================================================== 4.6.0.0-TIV-ProvM-IF0002.zip | |--4.6.0.0-TIV-ProvM-IF0002.pkg | |--4.6.0.0-TIV-ProvM-IF0002_Readme.txt ======================================================================== CONTACTING IBM SUPPORT ======================================================================== To Contact IBM Support Worldwide Phone: Call IBM Support by selecting phone number from this location: http://www.ibm.com/planetwide When prompted for type of support, select option 2 for Software Support You will need to provide your IBM Customer Number (ICN) Electronically: Go to http://www.ibm.com/legal/copytrade.shtml and open a new service request =========================================================================== COPYRIGHT AND TRADEMARK =========================================================================== Copyright and trademark information http://www.ibm.com/legal/copytrade.shtml Notices INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you. This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice. Microsoft, Windows, and Windows Server are trademarks of Microsoft Corporation in the United States, other countries, or both. Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Other company, product, or service names may be trademarks or service marks of others. *THIRD-PARTY LICENSE TERMS AND CONDITIONS, NOTICES AND INFORMATION* Please see the license agreement for this product for details concerning terms and conditions applicable to third party software code included in this product, and for certain notices and other information IBM must provide to you under its license to certain software code. Notwithstanding the terms and conditions of any other agreement you may have with IBM or any of its related or affiliated entities (collectively "IBM"), the third party software code identified below are "Excluded Components" and are subject to the following terms and conditions: * the Excluded Components are provided on an "AS IS" basis * IBM DISCLAIMS ANY AND ALL EXPRESS AND IMPLIED WARRANTIES AND CONDITIONS WITH RESPECT TO THE EXCLUDED COMPONENTS, INCLUDING, BUT NOT LIMITED TO, THE WARRANTY OF NON-INFRINGEMENT OR INTERFERENCE AND THE IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * IBM will not be liable to you or indemnify you for any claims related to the Excluded Components * IBM will not be liable for any direct, indirect, incidental, special, exemplary, punitive or consequential damages with respect to the Excluded Components. ===========================================================================