IT25474: THE DOCUMENTATION WILL BE CHANGED FOR "DISABLING TLS 1.1 AND 1.0FOR IBM SPECTRUM CONTROL PORTS"

APAR status

• Closed as documentation error.

Error description

• The documentation "Disabling TLS 1.1 and 1.0 for IBM Spectrum
  Control ports" needs to be modify for IBM Spectrum Control
  5.2.13 and earlier.
  The following stanza will replace the existing one:
  
  3. For IBM Spectrum Control 5.2.13 and earlier, complete the
  following steps:
          a. Open the file
  installation_directory/jre/lib/security/java.security.
          b. To disable TLS 1.0 only, add the following text at
  the end of the jdk.tls.disabledAlgorithms line: , TLSv1
                  For example:
  jdk.tls.disabledAlgorithms=MD5withRSA, DH keySize < 768, TLSv1
              To disable TLS 1.0 and 1.1, add the following text
  at the end of the jdk.tls.disabledAlgorithms line: , TLSv1,
  TLSv1.1
          c. Open the file
  installation_directory/ewas/profiles/WebServerProfile/properties
  /ssl.client.props.
          d. To disable TLS 1.0 only, set the com.ibm.ssl.protocol
  property to TLSv1.1.
              To disable TLS 1.0 and 1.1, set the
  com.ibm.ssl.protocol property to TLSv1.2.
          e. Log in to WAS Admin Console on port 9563, see this
  URL as example:
  https://your.spectrum.control.server.com:9563/ibm/console/login.
  do?action=secure
              Navigate to Security > SSL certificate and key
  management, and under Related Items, click SSL configurations.
              Select each SSL Configuration like
  NodeDefaultSSLSettings - Quality of protection (QoP) settings
  under Additional Properties ? Protocol ? select desired
  protocol: TLSv1.2 - Apply and Save.
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  

Problem conclusion

• The fix for this APAR is targeted for the following release:IBM
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels