+--------------------------------------------------------------------------------------------------------------------+ Interim Fix 7.2.0-ISS-SDI-LA0017 README Security Directory Integrator version 7.2.0 LA Interim Fix 17 (All platforms) Date: April 2018 +--------------------------------------------------------------------------------------------------------------------+ COPYRIGHT STATEMENT ==================== April 2018 References in this publication to IBM products, programs, or services do not imply that IBM intends to make these available in all countries in which IBM operates. Any reference to an IBM program product in this publication is not intended to state or imply that only IBM's program product may be used. Any functionally equivalent program may be used instead. IBM is a trademark of the International Business Machines Corporation. Copyright International Business Machines Corporation 2018. All rights reserved. Fix For ======== APAR - IO25913 PMR - 26722,L6Q,000 General Description: ==================== This Limited Availability Interim Fix contains jar for APAR IO25913 Details: ======== IO25913 AMC AND AM SUPPORT FOR TLS COMMUNICATIONS Prerequisites: ============== Tivoli Directory Integrator 7.2.0 Fixpack 4 is recommended to be installed. Platforms: ========== All supported Platforms. Sizes of Files Included in this Fix: ============================ 670,320 action_manager.jar 1,338,103 amc.jar Applying the Fix: ================= - Unzip the fix package to a temporary directory. The zip file contains amc.jar and action_manager.jar. - For the Embedded Integrated Solutions Console Standard Edition (SE) - (provided with TDI) - Stop the application server. In case of default SDI installation execute stop_tdiamc[.bat / .sh ] file. - The stop_tdiamc[.bat / .sh ] is present in the /bin/amc directory. - Replace the amc.jar file present in the current deployment with the new amc.jar file. - The amc.jar file is present in /lwi/runtime/isc/eclipse/plugins/AMC_7.2.0.0/WEB-INF/lib directory. - For the Integrated Solutions Console Advanced Edition (AE) - (Not provided with TDI) - Replace the amc.jar file present in the current tdiamc.war file deployment, with the new amc.jar - Refer to the Application Server documentation for further instruction. - Stop the Action Manager by executing the stopAM[.bat / .sh ] file. - The stopAM[.bat / .sh ] is present in the /bin/amc directory. - Replace the /bin/amc/ActionManager/jars/action_manager.jar file with the new action_manager.jar file. - Copy the following jars files from /jars/common to /lwi/rutime/isc/eclipse/plugins/AMC_7.2.0.0/WEB-INF/lib - miserver.jar - mmconfig.jar - miconfig.jar - diiserverapi.jar - diserverapirmi.jar - The property com.ibm.di.SSLProtocols=TLSv1.2 should be added to the following property files. - /lwi/runtime/isc/eclipse/plugins/AMC_7.2.0.0/amc.properties - /bin/amc/ActionManager/am_config.properties - Add or Modify below property in /lwi/conf/webcontainer.properties com.ibm.ssl.protocol.13101=TLS - Start the application server. Confirming the Fix has been applied successfully: ================================================= The problem should be solved. md5sum of Files Included in this Fix: ===================================== 47a6ed3390931397d43f0b4e00109e5f action_manager.jar e7b29bac51526215a64b91096b96dea4 amc.jar