IBM Support

How to retain SSL certificate of Rational Change after Rational Synergy JRE upgrade

Question & Answer


Question

How do you retain the previous version of your SSL certificate for Rational Change after an IBM Rational Synergy fix pack is applied which ships a new JRE causing the the SSL certificates that belong to Rational Change configured in HTTPS mode to be lost?

Cause

The SSL certificates that belong to Rational Change and its integrations are stored in cacert keystore file in the JRE provided by Synergy.

If a new fix pack of Synergy is shipping a new JRE, upgrading this fix pack will update the cacerts keystore file making all the stored SSL certificates to be lost.

This makes Rational Change configured in HTTPS mode stop communicating with its integrated tools.

Answer

This issue is applicable only for the JRE updates within a major release.

If there is a new version change of JRE, such as from JRE 7 to 8, then the certificates need to be recreated.


INSTRUCTIONS:

To retain the previous SSL certificates of Rational Change after a JRE upgrade caused by Rational Synergy fix pack installation, apply the following steps:

  1. Back up your current cacerts file in the <CCM_HOME>/jre/lib/security directory prior to upgrading Rational Synergy.

    Note: Before the step 2, if you have imported any certificate to the cacerts keystore file, then make sure you re-import them after replacing it with the old copy.

  2. Install Rational Synergy fix pack

    Note:
    After successful installation of a Rational Synergy fix pack which has new JRE, a back up of the original files which were replaced can be found in the following location:

    CCM_HOME>/patches/<patch_number>/CCM_HOME

  3. Copy the cacerts file from the backup folder

    <CCM_HOME>/patches/<patch_number>/CCM_HOME/jre/lib/security

  4. Paste the copy from step 2 to the following directory

    <CCM_HOME>/jre/lib/security

  5. Restart Change server

Where:
  • <CCM_HOME> is Synergy installation path
  • CCM_HOME is actual directory name inside <CCM_HOME>/patches/<patch_number>
  • <patch_number> is the current fix pack level applied to Synergy

[{"Product":{"code":"SSYQQ2","label":"Rational Change"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"General Information","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"5.2;5.2.0.1;5.2.0.2;5.2.0.3;5.2.0.4;5.2.0.5;5.2.0.6;5.3;5.3.0.1;5.3.0.2","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
16 June 2018

UID

swg21596801