PM05142: SECJ0207E: FAILED TO LOAD SECURITY.XML RESOURCE FROM CELL. VALUE JCECCARACFKS IS NOT A VALID ENUMERATOR OR 'KEYFILEFORMATKIND'

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• If Hardware Crypto is enabled (provider IBMJCECCA) in a
  WebSphere for z/OS cell that has both V6.1 and V6.0.2 nodes,
  the V6.0.2 nodes cannot tolerate the generated security.xml
  file.  The following exception is logged and the server
  terminates.
  
  BossLog: { 0001} 2009/12/03 10:41:43.700 01 SYSTEM=XXXX
  SERVER=YYYYYYY PID=0X050807B6 TID=0X38719000 00000000 c=UNK
  ./bborjtr.cpp+934 ... BBOO0220E: SECJ0207E: Failed to load
  security.xml resource from cell. The exception is
  java.lang.IllegalArgumentException:
  The value 'JCECCARACFKS' is not a valid enumerator of
  'KeyFileFormatKind'
  at com.ibm.websphere.models.config.ipc.ssl.impl.
      SslFactoryImpl.createFromString(SslFactoryImpl.java:64)
  at org.eclipse.emf.ecore.xmi.impl.XMLHelperImpl.
      createFromString(XMLHelperImpl.java(Compiled Code)
  at org.eclipse.emf.ecore.xmi.impl.XMLHelperImpl.setValue(
      XMLHelperImpl.java(Compiled Code)
  at com.ibm.wtp.emf.resource.MappedXMIHelper.setValue(
      MappedXMIHelper.java(Compiled Code).
  

Local fix

• Do not configure the mixed-node Cell to use Hardware crypto.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM WebSphere Application       *
  *                 Server V7.0                                  *
  ****************************************************************
  * PROBLEM DESCRIPTION: The value 'JCECCARACFKS' is not a       *
  *                      valid enumerator of                     *
  *                      'KeyFileFormatKind' is thrown at        *
  *                      WebSphere Application Server            *
  *                      V6.0.1 server startup                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  In mixed cell environment where WebSphere Application
  Server V6.0.1 servers are federated into WebSphere
  Application Server V7.0 Deployment Manager,  if the
  WebSphere Application Server V7.0 deployment manager is
  configured with hardware crypto device, federated WebSphere
  Application Server V6.0.1 server fails to startup.  This is
  because once V6.0.1 server is synchronized with V7.0 server,
  its security.xml is updated with values for hardware
  crypto device from V7.0 security.xml. The values are not
  supported by V6.0.1 server and it fails to start because it
  does not understand updated security.xml.
  

Problem conclusion

• V7.0-to-V6.0.1 transformation code for security.xml is
  updated so that it will detect values for hardware crypto
  device that is only supported by V7.0 server and convert it
  into values that V6.0.1 server supports.
  
  APAR PM05142 is currently targeted for inclusion in Service
  Level (Fix Pack) 7.0.0.11 of WebSphere Application Server V7.0.
  
  Please refer to URL:
  //www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
  for Fix Pack availability.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PM04694

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE FOR Z

• Fixed component ID

  5655I3500

Applicable component levels

• R700 PSY UK57722

     UP10/06/17 P F006

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.