IT21131: ENTERPRISE CONFIGURATION SERVER RESETS THE MANAGED SERVER SSL SETTING FROM 'YES' TO 'NO' DURING CONFIGURATION REFRESH

7.1.8.000-TIV-TSMSRV-AIX
7.1.8.000-TIV-TSMSRV-HP-UX
7.1.8.000-TIV-TSMSRV-Linuxppc64
7.1.8.000-TIV-TSMSRV-Linuxs390x
7.1.8.000-TIV-TSMSRV-Linuxx86_64
7.1.8.000-TIV-TSMSRV-SolarisSPARC
7.1.8.000-TIV-TSMSRV-WIN
7.1.8.000-TIV-TSMOC-AIX
7.1.8.000-TIV-TSMOC-Linuxx64
7.1.8.000-TIV-TSMOC-Windows
7.1.8.000-TIV-TSMOC-LinuxPPC64
7.1.8.000-TIV-TSMOC-LinuxPPC64le
7.1.8.000-TIV-TSMOC-LinuxS390
8.1.4.000-IBM-SPSRV-AIX
8.1.4.000-IBM-SPSRV-Linuxppc64le
8.1.4.000-IBM-SPSRV-Linuxs390x
8.1.4.000-IBM-SPSRV-WindowsX64
8.1.4.000-IBM-SPSRV-Linuxx86_64
7.1.9.000-TIV-TSMSRV-AIX
7.1.9.000-TIV-TSMSRV-HP-UX
7.1.9.000-TIV-TSMSRV-Linuxppc64
7.1.9.000-TIV-TSMSRV-Linuxs390x
7.1.9.000-TIV-TSMSRV-Linuxx86_64
7.1.9.000-TIV-TSMSRV-SolarisSPARC
7.1.9.000-TIV-TSMSRV-WIN
7.1.9.000-TIV-TSMOC-AIX
7.1.9.000-TIV-TSMOC-Linuxx64
7.1.9.000-TIV-TSMOC-Windows
7.1.9.000-TIV-TSMOC-LinuxPPC64
7.1.9.000-TIV-TSMOC-LinuxS390
7.1.9.000-TIV-TSMCMS-Linuxx64
7.1.9.000-TIV-TSMCMS-Windows32
7.1.9.000-TIV-TSMCMS-Windows64
IBM Spectrum Protect Server V8.1 Fix Pack 4 (V8.1.4) Downloads
IBM Spectrum Protect Server V7.1 Fix Pack 9 (7.1.9.000) Downloads

APAR status

• Closed as program error.

Error description

• When server to server communication is configured to use SSL and
  the configuration manager runs a configuration refresh using
  'notify subscribers', SSL is reset to no and breaks the SSL
  configuration.
  This happens because the SSL column is not propagated during a
  configuration refresh.
  
  Example:
  
  Both the managed server and the configuration manager have the
  following server definition (removed some fields for
  readability):
  
  Protect: server>q server managedserver f=d
  
                                    Server Name: MANAGEDSERVER
                                   Comm. Method: TCPIP
                                Transfer Method: TCPIP
                             High-level Address: a.b.c.d
                              Low-level Address: 1543
                                           ..........
                                            SSL: Yes
  
  After running 'notify subscribers' on the configuration manager,
  the managed server has:
  
  Protect: server>q server managedserver f=d
  
                                    Server Name: MANAGEDSERVER
                                   Comm. Method: TCPIP
                                Transfer Method: TCPIP
                             High-level Address: a.b.c.d
                              Low-level Address: 1543
                                           ..........
                                            SSL: No
  
  The SSL parameter changed from 'Yes' to 'No', while the
  Low-level Address still is the SSL enabled port. This breaks the
  server to server communication.
  
  | MDVPARTL 6.3.3.0-TIV_5698ISMSV IC83655 |
  
  IBM Spectrum Protect Versions Affected:
  All supported IBM Spectrum Protect server version on all
  platforms
  
  Initial Impact: Medium
  
  Additional Keywords: S2S, TSM, tivoli, storage, manager, sslno,
  config,
  

Local fix

• Update server definition on the managed server with 'SSL=YES'
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All IBM Tivoli Storage Manager and IBM Spectrum Protect      *
  * server users.                                                *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See error description.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed in levels 7.1.9 and 8.1.4. Note that   *
  * this is subject to change at the discretion of IBM.          *
  ****************************************************************
  

Problem conclusion

• Problem Conclusion:
  This problem was fixed.
  Affected platforms for reported release:  AIX, Solaris, Linux,
  and Windows.
  Platforms fixed:  AIX, Solaris, Linux, and Windows.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSM SERVER

• Fixed component ID

  5698ISMSV

Applicable component levels