Abstract
Readme documentation for IBM Security Key Lifecycle Manager for Distributed Platforms, Version 3.0.1 Fix Pack 1 including installation-related instructions, prerequisites and corequisites, and a list of fixes. All IBM Security Key Lifecycle Manager for Distributed Platforms fix packs are cumulative.
Fix pack publication date: 29 March 2019
Last modified date: 28 March 2019
Contents
Platform support
Download locations
Prerequisites and corequisites
Known limitations
Installation information
Installing the IBM Security Key Lifecycle Manager fix pack
Prior to fix pack installation
Performing the necessary tasks after fix pack installation
Installing fix pack when IBM Security Key Lifecycle Manager Multi-Master environment is set up
Uninstalling the IBM Security Key Lifecycle Manager along with fix pack
List of fixes and features
Copyright and trademark information
Document change history
IBM Security Key Lifecycle
Manager, Version 3.0.1 platforms supported |
AIX Version 7.1 64-bit |
AIX Version 7.2 64-bit |
Red Hat Enterprise Linux Version 6.7 x86 64-bit mode |
Red Hat Enterprise Linux Version 7.1 - 7.6 on x86 64-bit mode |
Red Hat Enterprise Linux Version 7.1 (System z) on x86 64-bit mode |
Red Hat Enterprise Linux Version 7.1 (PowerPC Little Endian (LE)) on x86 64-bit mode |
SuSE Linux Enterprise Server Version 12 on x86 64-bit mode |
SuSE Linux Enterprise Server Version 12 (System z) on x86 64-bit mode |
Ubuntu 16 x86_64 |
Windows Server 2012 (64-bit mode for all Intel and AMD processors) Standard Edition |
Windows Server 2012 R2 (64-bit mode for all Intel and AMD processors) Standard Edition |
Windows Server 2016 (64-bit mode for all Intel and AMD processors) Standard Edition |
For more information about supported operating systems, see IBM Security Key Lifecycle Manager Support Matrix.
IBM Security Key Lifecycle Manager Version 3.0.1 has been certified to run on the following virtual environments. The platform running within the virtual machine must be supported by the virtual platform server and Security Key Lifecycle Manager Version 3.0.1 (see "Platform support" table).
IBM Security Key Lifecycle
Manager Version 3.0.1 virtual platforms supported |
VMWare ESX Server Versions 6.0 and 6.5 |
Download IBM Security Key Lifecycle Manager, Version 3.0.1 fix pack from IBM Fix Central
1. Go to IBM Fix Central home page: http://www.ibm.com/support/fixcentral/
2. For the Product Group, select "Security Systems"
3. For the Product, select "IBM Security Key Lifecycle Manager".
4. For Installed Version, select your system's appropriate version level, ie. 3.0.1.
5. For Platform, select the appropriate platform. Choose "Continue".
6. At the Identify Fixes page, select the "Browse for Fixes" radio button (default) and choose "Continue".
7. At the Select Fixes page, choose Fix Pack "3.0.1-ISS-SKLM-FP0001". Choose "Continue".
8. You might be prompted to "Sign In". If you do not have an ID, click on the "register now" link and follow the registration steps as appropriate.
9. At the Download Options page, choose a download method (default is "Download using Download Director").
10. Select the associated files and README for Fix Pack 3.0.1-ISS-SKLM-FP0001 and select "Download now".
Platforms updated by this Fix Pack
For current version 3.0.1 installations: This fix pack can be installed on systems with IBM Security Key Lifecycle Manager, Version 3.0.1 GA.
Prerequisites and corequisites
IBM Security Key Lifecycle Manager, Version 3.0.1 GA.
Installing the IBM Security Key Lifecycle Manager fix pack
Prior to fix pack installation
1. Ensure that IBM Security Key Lifecycle Manager is not in use before installing the fix pack. If your facility has a "service maintenance outage" process, consider installing this fix pack during an arranged service outage.
2. A backup of your IBM Security Key Lifecycle Manager server should be performed prior to installing this fix pack. Follow the steps Backing up critical files in the Administering section of the IBM Security Key Lifecycle Manager Product Manuals.
Backup WebSphere Application Server files on Windows operating system
Instruction |
Command |
Open a command prompt. |
Click the Start button, click Run, type cmd, and click the OK button. |
Stop WebSphere Application Server. |
<WAS_HOME>\bin\stopServer.bat server1 -username <WAS_ADMIN> -password <WAS_PASSWORD> |
Make a temporary directory. |
mkdir <WAS_BACKUP_DIRECTORY> |
Change to the temporary directory. |
cd c:\wasbackup |
Copy the files from the directory where WebSphere Application Server is installed. |
xcopy /y /e /d <WAS_HOME> c:\wasbackup |
Start WebSphere Application Server. |
<WAS_HOME>\bin\startServer.bat server1 |
Backup WebSphere Application Server files on AIX and Linux operating systems
Instruction |
Command |
Open a ksh or bash shell. |
If your default shell is not ksh or bash, run "exec ksh" or "exec bash". |
Stop WebSphere Application Server. |
<WAS_HOME>/bin/stopServer.sh server1 -username <WAS_ADMIN> -password <WAS_PASSWORD> |
Make a temporary directory. |
mkdir <WAS_BACKUP_DIRECTORY> |
Change to the temporary directory. |
cd /tmp/wasbackup |
Archive the files from the directory where WebSphere Application Server is installed. |
tar -cvf wasbackup.tar <WAS_HOME>/* |
Start WebSphere Application Server. |
<WAS_HOME>/bin/startServer.sh server1 |
Instruction |
Steps |
Make a repository directory. |
Windows Default repository
directory is C:\sklminstall_windowsfp Unix Default repository
directory is /sklminstall_linuxfp |
Change directory to the directory created. |
Windows cd C:\sklminstall_windowsfp Unix cd /sklminstall_linuxfp |
Download the fix pack into the repository directory. |
|
Extract the downloaded file. |
Windows Extract the downloaded file: 3.0.1-ISS-SKLM-FP0001-Windows.zip Unix Extract the downloaded file: 3.0.1-ISS-SKLM-FP0001-Linux.tar.gz |
Steps for installing fix pack for IBM Security Key Lifecycle Manager, Version 3.0.1 on Windows and Unix operating systems in GUI mode
Instruction |
Steps |
Stop WebSphere Application Server, update Java SDK, and then start Installation Manager in GUI mode. |
Windows
Example: Unix
chmod +x ./updateSKLM.sh ./updateSKLM.sh <IM_INSTALL_LOCATION> <WAS_HOME> <WAS_ADMIN> <WAS_PASSWORD> Example: Where: <IM_INSTALL_LOCATION> refers to the installation root directory for IBM Installation Manager. Default value on Windows system is “c:\Program Files\IBM\Installation Manager”. For Linux system: “/opt/IBM/InstallationManager” <WAS_HOME> refers to installation root directory for WebSphere Application Server (WAS). Default value on Windows system is "c:\Program Files\IBM\WebSphere\AppServer". For Linux system: /opt/IBM/WebSphere/AppServer <WAS_ADMIN> refers to the ID for the WebSphere Application Server Administrator. <WAS_PASSWORD> refers to the password for the WebSphere Application Server Administrator. |
Select the IBM Security Key Lifecycle Manager, Version 3.0.1 software package group. |
1. Select the base offering software package group (IBM Security Key Lifecycle Manager, Version 3.0.1). 2. Click Next. 3. In the Update Packages updates panel, select Version 3.0.1.1, and click Next. |
Provide credentials for |
|
Click the Update button. |
In the Update Packages > Summary panel,
review the software packages that you want to install and click Update.
|
Steps for installing a fix pack for IBM Security Key Lifecycle Manager, Version 3.0.1 on Windows and Unix operating systems in silent mode
Instruction |
Steps |
Installation Manager utility to encrypt the passwords for users as required. |
Windows Run the following command to generate an
encrypted password: Unix Run the following command to generate an
encrypted password: |
Make a backup of the response file. |
Create a backup of original response file
SKLM_Silent_Update_<platform>_Resp.xml by renaming it. |
Edit the response file. |
Windows Edit the silent response file "SKLM_Silent_Update_<platform>_Resp.xml".
Unix Edit the silent response file "SKLM_Silent_Update_<platform>_Resp.xml".
|
Install the fix pack. |
Windows
Example: C:\sklminstall_windowsfp
silent_updateSKLM.bat <IM_INSTALL_LOCATION> <WAS_HOME> <WAS_ADMIN> <WAS_PASSWORD> Example: silent_updateSKLM.bat "c:\Program Files\IBM\Installation Manager" "c:\Program Files \IBM\WebSphere\AppServer" wasadmin wasadminpwd Unix
Example: /sklminstall_linuxfp
chmod +x ./silent_updateSKLM.sh ./silent_updateSKLM.sh <IM_INSTALL_LOCATION > <WAS_HOME> <WAS_ADMIN> <WAS_PASSWORD> Example: ./silent_updateSKLM.sh /opt/IBM/InstallationManager /opt/IBM/WebSphere/AppServer wasadmin wasadminpwd. Where: IM_INSTALL_LOCATION refers to the installation root directory for IBM Installation Manager. Default value on Windows system is “c:\Program Files\IBM\Installation Manager”. For Linux system: “/opt/IBM/InstallationManager” <WAS_HOME> refers to installation root directory for WebSphere Application Server. Default value on Windows system is "c:\Program Files\IBM\WebSphere\AppServer". For Linux system: /opt/IBM/WebSphere/AppServer WAS_ADMIN refers to the ID for the WebSphere Application Server Administrator. WAS_PASSWORD refers to the password for the WebSphere Application Server Administrator. |
Check logs for fix pack installation success. |
View the log file output produced for successful fix pack installation. |
Performing the necessary tasks after fix pack installation
1. Verify Installation - Run the wsadmin AdminTask.tklmVersionInfo() command.
Unix users:
Type: ./wsadmin.sh -lang jython -username <sklmadminUserID> -password <sklmadminPassword>
Example: ./wsadmin.sh -lang jython -username sklmadmin -password sklmpasswordWindows users:
Example: wsadmin.bat -lang jython -username sklmadmin -password sklmpassword
IBM Security Key Lifecycle Manager Version = 3.0.1.1
IBM Security Key Lifecycle Manager Build Level = 201903280336
WebSphere Application Server Version = 9.0.0.5
DB2 Version = 11.1.2020.1393
Java Version = JRE 1.8.0_144 IBM J9 VM 2.9
Operating System Version = Windows Server 2016:10.0:amd64
Agent Version : 1.0
You can also view the detailed server information such as version number of IBM Security Key Lifecycle Manager, DB2, Java, and WebSphere Application Server through GUI.
2. A backup of your IBM Security Key Lifecycle Manager server must be performed after installing this fix pack. Follow the steps Backing up critical files in the Administering section of the IBM Security Key Lifecycle Manager Product Manuals.
Installing fix pack when IBM Security Key Lifecycle Manager Multi-Master environment is set up
Windows
C:\Program Files\IBM\WebSphere\AppServer\bin
Linux
/opt/IBM/WebSphere/AppServer/bin
Windows
stopServer.bat server1 -username <wasadmin> -password <mypwd>
Linux
./stopServer.sh server1 -username <wasadmin> -password <mypwd>
Windows
C:\Program Files\IBM\SKLMV30\agent
Linux
/opt/IBM/SKLMV30/agent
Windows
stopAgent.bat <WAS_HOME>
stopAgent.bat "C:\Program Files\IBM\WebSphere\AppServer"
Linux
./stopAgent.sh <WAS_HOME>
./stopAgent.sh /opt/IBM/WebSphere/AppServer
Uninstalling the IBM Security Key Lifecycle Manager along with fix pack
Note: This will uninstall the entire product package i.e. IBM Security Key Lifecycle Manager, IBM DB2 and WebSphere Application Server, and all your data will be lost. Please take backup before uninstalling.
Steps for uninstalling IBM Security Key Lifecycle Manager version 3.0.1 along with fix pack on Windows and Unix operating systems in GUI mode
Instruction |
Steps |
Before you begin. |
Stop WebSphere Application Server before you uninstall IBM Security Key Lifecycle Manager. |
Start uninstalling the IBM Security Key Lifecycle Manager in GUI mode. |
Windows
Unix
|
Steps for uninstalling IBM Security Key Lifecycle Manager version 3.0.1 along with fix pack on Windows and Unix operating systems in silent mode
Instruction |
Steps |
Go to the repository directory. |
1. Go to the repository directory
2. Backup the original response file SKLM_Uninstall_<platform>_Resp.xml by renaming it to SKLM_Uninstall_<platform>_Resp_original.xml 3. Edit the silent response file "SKLM_Uninstall_<platform>_Resp.xml".
|
Start uninstalling IBM Security Key Lifecycle Manager in silent mode. |
Windows
imcl.exe -input "c:\sklminstall_windowsfp\SKLM_Uninstall_Win32_Resp.xml" -silent Unix
./imcl -input /sklminstall_linuxfp/SKLM_Uninstall_Linux_Resp.xml -silent |
Where:
<IM_INSTALL_LOCATION> refers to the installation root directory for IBM Installation Manager. Default value on Windows system is “c:\Program Files\IBM\Installation Manager”. For Linux system: “/opt/IBM/InstallationManager”
<PATH_TO_UNINSTALL_RESPONSE_FILE> refers to the uninstallation response file provided or bundled with the update installer.
<platform> refers to the operating system where the fix pack is being installed / uninstalled. For example: SKLM_Uninstall_<platform>_Resp.xml on Linux would be SKLM_Uninstall_Linux_Resp.xml
New Features Provided by Version 3.0.1.1
APAR fixes included in Fix Pack 1
APAR
No. |
Sev. |
Abstract |
3 |
NO "CONFIGURED CLONE" TABLE IN REPLICATION TAB OF WEBLCOME PAGE ON IBM SECURITY KEY LIFECYCLE MANAGER 3.0.1 |
|
3 |
ERROR: COULD NOT FIND OR LOAD MAIN CLASS KLM.SERVER.MIGRATE.EKM21.BACKUP.BACKUPHANDLEREKM21 |
|
3 |
IT IS UNEXPECTED 'START REPLICATION SERVER' BUTTON APPEARS AND "REPLICATE NOW" BUTTON IS GRAY OUT IN REPLICATION PAGE |
Copyright and trademark information
http://www.ibm.com/legal/copytrade.shtml
Notices
INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS
IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING,
BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY
OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer
of express or implied warranties in certain transactions, therefore, this
statement may not apply to you.
This information could include technical inaccuracies or typographical errors.
Changes are periodically made to the information herein; these changes will be
incorporated in new editions of the publication. IBM may make improvements
and/or changes in the product(s) and/or the program(s) described in this
publication at any time without notice.
Microsoft, Windows, and Windows Server are trademarks of Microsoft Corporation
in the United States, other countries, or both.
Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel
Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are
trademarks or registered trademarks of Intel Corporation or its subsidiaries in
the United States and other countries.
Other company, product, or service names may be trademarks or service marks of
others.
THIRD-PARTY LICENSE TERMS AND CONDITIONS, NOTICES AND INFORMATION
The license agreement for this product refers you to this file for details
concerning terms and conditions applicable to third party software code
included in this product, and for certain notices and other information IBM
must provide to you under its license to certain software code. The relevant
terms and conditions, notices and other information are provided or referenced
below. Please note that any non-English version of the licenses below is
unofficial and is provided to you for your convenience only. The English
version of the licenses below, provided as part of the English version of this
file, is the official version.
Notwithstanding the terms and conditions of any other agreement you may have
with IBM or any of its related or affiliated entities (collectively
"IBM"), the third party software code identified below are
"Excluded Components" and are subject to the following terms and
conditions:
the Excluded Components are provided on an "AS IS" basis
IBM DISCLAIMS ANY AND ALL EXPRESS AND IMPLIED WARRANTIES AND CONDITIONS WITH RESPECT TO THE EXCLUDED COMPONENTS, INCLUDING, BUT NOT LIMITED TO, THE WARRANTY OF NON-INFRINGEMENT OR INTERFERENCE AND THE IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
IBM will not be liable to you or indemnify you for any claims related to the Excluded Components
IBM will not be liable for any direct, indirect, incidental, special, exemplary, punitive or consequential damages with respect to the Excluded Components.
Change Date |
Reason |
Modified by |
29 March 2019 |
Created initial draft for 3.0.1-ISS-SKLM-FP0001 |
AP |