+----------------------------------------------------------------------------------------------------------+ |+--------------------------------------------------------------------------------------------------------+| ||Readme file for IBM Tivoli Common Reporting 2.1.1.0 Interim Fix 20 || |+--------------------------------------------------------------------------------------------------------+| +----------------------------------------------------------------------------------------------------------+ +--------------------------------------------------NOTE------------------------------------------------------+ |Before using this information and the product it supports, read the information in 4."Notices".| +--------------------------------------------------------------------------------------------------------------+ This Readme applies to Interim Fix 20 for version 2, release 1, modification 1 of IBM Tivoli Common Reporting (program number 5724-T69). Copyright International Business Machines Corporation 2015. US Government Users Restricted Rights -- Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. +----------------------+ |Table of Contents | +----------------------+ 1. Description 1.1 APARs included 1.2 Internal defects 2. Applying Tivoli Common Reporting 2.1.1.0 Interim Fix 18 4. Notices +------------------+ | 1. Description| +------------------+ This Interim Fix 20 for Tivoli Common Reporting 2.1.1.0 contains Cognos fix which addresses "Security vulnerability affecting IBM Cognos Business Intelligence 8.4.1". This readme contains the most current information for this Interim Fix and takes precedence over all other documentation. IMPORTANT NOTES: 1) IBM & TCR team recommends to test the fix in a test / pre-production environment before applying the same fix on production environment. 2) TCR 2.1.1.0 IFixes are NOT cumulative. They are generated and given to the customers based on the critical issues discovered. 3) Interim Fix TCR 2.1.1.0-IF0020, is avaliable on AIX,Windows,zLinux,Solaris,Linux 4) Interim Fix TCR 2.1.1.0-IF0020 is applicable only on TCR single machine installation. To apply this fix on TCR dispatcher/gateway setup, please reach TCR support. 5) For patches on HPUX environment please reach TCR support +-----------------------+ | 1.1 APARs included| +-----------------------+ APAR(I): IV75361 Description: Cognos fix which addresses "Security vulnerability affecting IBM Cognos Business Intelligence 8.4.1". +------------------------+ | 1.2 Internal defects| +------------------------+ None +---------------------------------------------------------------------------------------------+ | 2 Applying Tivoli Common Reporting 2.1.1.0 Interim Fix 20| +---------------------------------------------------------------------------------------------+ To apply the fix: 1. Stop the Tivoli Common Reporting server eg,UNIX: /tipv2Components/TCRComponent/bin/stopTCRserver.sh Windows:\tipv2Components\TCRComponent\bin\stopTCRserver.bat Note: a) is the directory where Tivoli Common Reporting 2.1.1.0 is installed. Example: /opt/IBM/tivoli/tipv2Components/TCRComponent b) = Should be Tivoli Integrated Portal Admin user ex: tipadmin c) = Should be replaced with Tivoli Integrated Portal Admin password 2. Download and install 2.1.1.0-TIV-TCR--IF6 (please refer IF6 readme for installation instructions) 3. Execute below sub points, if trying to install this patch on 64 bit TCR instance a) Go to /tipv2Components/TCRComponent/cognos/temp/ b) Take the copy of build.xml as build.xml.previous c) Edit build.xml in notepad or any editor d) Search for content "tomcat4.1.27/common/lib" and rename it to "tomcat4.1.27/lib" (Should be updated in two places) e) Save build.xml 4. Its mandatory to take full back of Deployment Engine(DE) folder, TCR_INSTALLATION_DIR and TIP_HOME eg, TCR_INSTALLATION_DIR = /opt/IBM/tivoli/tipv2Components/TCRComponent TIP_HOME= /opt/IBM/tivoli/tipv2 DE = Root users - /usr/ibm/common/acsi, Non-root users - /home/.acsi_ 5. Please unpack the 2.1.1.0-TIV-TCR--IF20.zip into a temporary directory. Lets call this as: -IF20> 6. If Tivoli Common Reporting is using DB2/Oracle/MSSQL contentstore database, then please make sure to move respective jdbc libraries from TIP_HOME/profiles/TIPProfile/InstalledApps/TIPCell/IBM Cognos 8.ear/p2pd.war/WEB-INF/lib to temperory folder 7. Install the Interim Fix by running the following command from shell: eg., Unix: /tipv2Components/TCRComponent -username -password Windows: \install.bat -i \tipv2Components\TCRComponents -username -password Note: a) On Unix: Ensure that executable permission (+x) is set for install.sh script. eg., chmod u+x install.sh 8. Verify the installation: Navigate to the folder where the Deployment Engine has been installed. Source the DE environment by running the following command: . /var/ibm/common/acsi/setenv.sh for root user, OR . ~/.acsi_/setenv.sh for non-root users. Make sure you include the . (dot and space) characters when running the command. Browse to the following directory: /usr/ibm/common/acsi/bin for root user, OR ~/.acsi_/bin for non-user users. Type listUI.sh and the output at the bottom should show TCR-2110-00020 entry which confirms the installation. 9. Start the Tivoli Common Rerporting server ex: /opt/IBM/tivoli/tipv2Components/TCRComponent/bin/ eg,UNIX: /tipv2Components/TCRComponent/bin/startTCRserver.sh Windows:\tipv2Components\TCRComponent\bin\startTCRserver.bat 10. Its mandatory to run below steps after successful installation of this interimfix a) Go to /tipv2Components/TCRComponent/cognos/temp/ b) Edit build.xml in notepad or any editor c) Search for the content "tomcat4.1.27/lib" and rename it to "tomcat4.1.27/common/lib" (Should be updated in two places) d) Save build.xml +-------------------------------------------------------------------------------------------------+ | 3 Uninstalling Tivoli Common Reporting 2.1.1.0 Interim Fix 20| +-------------------------------------------------------------------------------------------------+ To remove from your Tivoli Common Reporting 2.1.1.0 Interim Fix 20, follow these steps: 1. Stop the Tivoli Common Reporting server. eg,UNIX: /tipv2Components/TCRComponent/bin/stopTCRserver.sh Windows:\tipv2Components\TCRComponent\bin\stopTCRserver.bat 2. Uninstall the Interim Fix by running the following command from shell: install[.sh] -r -username -password eg., Unix: /tipv2Components/TCRComponent -username -password Windows: \install.bat -r \tipv2Components\TCRComponents -username -password Note: a) is the directory where Tivoli Common Reporting 2.1.1.0 is installed. Example: /opt/IBM/tivoli/tipv2Components/TCRComponent b) = Should be Tivoli Integrated Portal Admin user ex: tipadmin c) = Should be replaced with Tivoli Integrated Portal Admin password d) On Unix: Ensure that executable permission (+x) is set for install.sh script. eg., chmod u+x install.sh 3. Verify from the Deployment Engine that the fix has been removed. Source the DE environment by running the following command: . /var/ibm/common/acsi/setenv.sh for root user, OR . ~/.acsi_/setenv.sh for non-root users. Make sure you include the . (dot and space) characters when running the command. Browse to the following directory: /usr/ibm/common/acsi/bin for root user, OR ~/.acsi_/bin for non-user users. Type listUI.sh and the output at the bottom should NOT show TCR-2110-00020 entry which confirms the uninstallation. 4. Start the Tivoli Common Reporting server. eg,UNIX: /tipv2Components/TCRComponent/bin/startTCRserver.sh Windows:\tipv2Components\TCRComponent\bin\startTCRserver.bat +------------+ | 4 Notices| +------------+ This information was developed for products and services offered in the U.S.A. IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-IBM product, program, or service. IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not give you any license to these patents. You can send license inquiries, in writing, to: IBM Director of Licensing IBM Corporation North Castle Drive Armonk, NY 10504-178, U.S.A. For license inquiries regarding double-byte (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to: IBM World Trade Asia Corporation Licensing 2-31 Roppongi 3-chome, Minato-ku Tokyo 106, Japan The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement might not apply to you. This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice. Any references in this information to non-IBM Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk. IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you. Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact: IBM Corporation 2Z4A/101 11400 Burnet Road Austin, TX 78758 U.S.A. Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee. The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement or any equivalent agreement between us. Any performance data contained herein was determined in a controlled environment. Therefore, the results obtained in other operating environments may vary significantly. Some measurements may have been made on development-level systems and there is no guarantee that these measurements will be the same on generally available systems. Furthermore, some measurement may have been estimated through extrapolation. Actual results may vary. Users of this document should verify the applicable data for their specific environment. Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products. This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to the names and addresses used by an actual business enterprise is entirely coincidental. +-------------------+ |4.1 Trademarks| +-------------------+ The following terms are trademarks of the IBM Corporation in the United States or other countries or both: IBM The IBM logo AIX DB2 DB2® Universal Database Tivoli WebSphere zSeries Microsoft®, Windows®, and the Windows logo are registered trademarks, of Microsoft Corporation in the U.S. and other countries. UNIX is a registered trademark of The Open Group in the United States and other countries. Intel® is a trademark of Intel Corporation in the United States, other countries, or both. Linux® is a trademark of Linus Torvalds in the United States, other countries, or both. Other company, product, and service names may be trademarks or service marks of others.