IBM Support

IZ96600: MS SQL AGENT DB_PASSWORD WRITTEN AS DES

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When the MS SQL Agent db_password is configured using the TEP,
    the
    password is written with DES encryption rather than AES256.
    
    
    RECREATE INSTRUCTIONS:
    
    Setup Windows Domain user as administrator on all machines.
    Install TEMS 6.2.2 FP3 on Windows box A.
    Install TEP 6.2.2 FP3  on Windows box B.
    Install TEMA 6.2.2 FP3 on Windows 2003 Server Endpoint
    Add MS SQL Agent 6.2.1 to TEMS Depot
    Execute "Add Managed System" on TEP
    Specify MS SQL Server Password as "abcd"
    Examine the MS SQL Agent configuration file on TEMA.
    Observe that the db_password text is preceeded by the string DES
    and not
    AES256.
    

Local fix

  • No workaround available.
    

Problem summary

  • Wrong password type is used on a 64-bit machine.
    
    When configuring the MSSQL agent via remote deploy, the 64-bit
    version of the cryptographic routines are used with the 32-bit
    agent and the MSSQL agent configuration fails.  The problem
    occurs on a 64-bit Windows system running a 64-bit NT agent and
    a 32-bit MSSQL Server agent.
    

Problem conclusion

  • Code has been added to make sure that the correct cryptographic
    routines are always invoked.
    
    
    The fix for this APAR is contained in the following maintenance
    packages:
    
      | fix pack | 6.2.2-TIV-ITM-FP0006
    

Temporary fix

  • Only run 64-bit agents on 64-bit Windows or do not use remote
    deploy to configure 32-bit agents on 64-bit Windows.
    

Comments

APAR Information

  • APAR number

    IZ96600

  • Reported component name

    TEMS

  • Reported component ID

    5724C04MS

  • Reported release

    622

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2011-03-14

  • Closed date

    2011-06-20

  • Last modified date

    2011-09-29

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    OA37533 OA38991

Fix information

  • Fixed component name

    TEMS

  • Fixed component ID

    5724C04MS

Applicable component levels

  • R622 PSY

       UP

[{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTFXA","label":"Tivoli Monitoring"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"622"}]

Document Information

Modified date:
30 December 2022