
Date: December 7, 2017

Interim Fix: 7.0.1.0-ISS-SIM-RENEW-APPLET-JARS


GENERAL DESCRIPTION:
This is an Appliance Interim Fix (.fixpack) for IBM Security Identity Manager Version 7.0.0 up to and including 7.0.1 Fix Pack 7 Interim Fix 1.


DETAILED DESCRIPTION:
ISIM's applets (Form Designer, Workflow Designer, and Join Directive) from ISIM 7.0.0 up to and including 7.0.1 Fix Pack 7 Interim Fix 1 were signed with code signing certificates in order to work with Java Security.  The class files of these ISIM applets are signed to avoid JRE strict security policy from blocking invocation of the applets.  When the signing certificate of the ISIM applet class files expires, ISIM administrators will no longer be able to launch the affected ISIM applets, and thus design approval processes and policies.

These code signing certificates will expire on December 24, 2017.  The expiration of these certificates does not impact end-user functions like change password, request access, provisioning accounts, approving requests, etc.

The updated ISIM applet jar files are signed with a renewed certificate that now expires in December, 2020.  To prevent this from happening again, the applets are now signed with a timestamp option that allows our customers to run the applets with a security warning that may be accepted prior to execution of the applets.

The fix for this issue is available in Patch 7.0.1.0-ISS-SIM-APPLET-JARS and Interim Fix 7.0.1-ISS-SIM-FP0008.


PROBLEM FIXED:
APAR: IJ02611
Symptom: APPLET JAR CERTIFICATE EXPIRATION DECEMBER 24 2017


FIX CONTENTS:
7.0.1.0-ISS-SIM-RENEW-APPLET-JARS.readme
7.0.1.0-ISS-SIM-RENEW-APPLET-JARS.fixpack


MD5 CHECKSUM:
c9d6f5fecb229612c79de9316825cae4     7.0.1.0-ISS-SIM-RENEW-APPLET-JARS.fixpack


INSTALLING AND UNINSTALLING THIS MAINTENANCE DELIVERY VEHICLE - UPDATED FOR 7.0.1.7 - KNOWLEDGE CENTER:
http://www.ibm.com/support/knowledgecenter/SSRMWJ_7.0.1.7/com.ibm.isim.doc/admin/tsk/t_installing_fix_pack.htm


ADDITIONAL NOTES ON INSTALLING THIS MAINTENANCE:
This maintenance must be applied to all Primary and Member nodes individually.  Please take a VM level snapshot of all nodes before applying the Fix Pack.  The Virtual Appliance must be restarted after applying this maintenance.

The time required to install this maintenance will vary according to the number and size of the individual installables, network speed, machine or machines resource's available such as memory, disk, and processor speed.

Please avoid taking any actions during the install.  After installing the maintenance, view the required actions on the notifications widget on the appliance dashboard and take the appropriate actions.

You will need to apply this maintenance every time the software level is installed to any level between 7.0.0 and 7.0.1.7.


END OF README
