IT12608: UNABLE TO EXPORT THE SSH HOST IDENTITY KEY. IT CAN BE IMPORTED INTO STERLING SECURE PROXY SERVERS.

si_52_build_5020500_interimfix_12
si_52_build_5020500_interimfix_12

APAR status

• Closed as program error.

Error description

• Unable to export the SSH Host Identity Key from Sterling B2B
  Integrator (SBI), so that you import the key into SSP Sterling
  Secure Proxy servers.
  
  When you export an SSH Host Identity Key created within
  Sterling B2B Integrator (SBI), the passphrase is encrypted
  (unreadable). There is nomethod to decrypt this passphrase, so
  you cannot import the SSH Host Identity Key into Sterling Secure
  Proxy (SSP) server.
  
  A customer requests a valid method to export the SSH Host
  Identity Key, originally created within SBI, so that this key
  can be imported into their SSP server.
  This export or import method ensures that there is no
  impact to the remote customers. The remote trading
  partners can continue to use the existing public key,
  even though SSP is added into the environment configuration.
  

Local fix

• STRRTC - 473862
  LB / LB
  Circumvention: None
  

Problem summary

• Users Affected:
  All SFTP users who need to Export private keys from Sterling B2B
  Integrator to another product.
  
  Problem Description:
  At present, there is no way to export Host Identity Keys.
  You must export the keys and import into another
  SSP Server for existing SFTP connections.
  
  Platforms Affected:
  All
  

Problem conclusion

• Resolution Summary:
  A script has been created to export Host Identity Keys:
  
  ExportSSHCerts.sh <Key Name of key to be exported> <NewPassword
  to be set> <Filename for exported file> <Metadata file name for
  key details>
  
  This script resides in the <Install>\bin\ directory. For more
  information, see the documentation here:
  http://www.ibm.com/support/knowledgecenter/SS3JSW_5.2.0/com.ibm.
  help.bin_directory.doc/SI_binDir_files.html
  
  Delivered In:
  5020500_12
  5020601_7
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR B2B INTEGRA

• Fixed component ID

  5725D0600

Applicable component levels

• R525 PSY

     UP