Troubleshooting
Problem
The initial steps for installing a Fix Pack for a TWS MDM or BKM include a connection to the instance's eWAS. If custom changes have been made to the SSL certificates, there may be a need to add the twsUser as an SSL signer.
Symptom
Tivoli Workload Scheduler (TWS) master domain manager (MDM) or backup manager (BKM) installation hangs and a message similar to the following is written to the twsismp.log file:
"(Jan 15, 2013 3:47:49 PM), TWSInstall, com.ibm.tws.ismp.services.WASService, dbg, CLI command to execute: "/TWA/eWAS/bin/wsadmin.sh" -conntype SOAP -port 31118 -username tws -password ***** -c "puts ok"
....
*** SSL SIGNER EXCHANGE PROMPT ***
SSL signer from target host 127.0.0.1 is not found in trust store /TWA/eWAS/profiles/TIPProfile/etc/TWSClientTrustFile.jks.
*****************************************
Here is the signer information (verify the digest value matches what is displayed at the server):
Subject DN: CN=tws86
Issuer DN: CN=tws86
Serial number: 1356026103678345000
Expires: Tue Dec 14 12:55:03 EST 2032
SHA-1 Digest: 07:9C:07:2B:19:91:2B:1F:9B:A2:48:2B:BF:37:16:A9:A4:EB:B3:6F
MD5 Digest: 2B:4C:79:45:F2:59:18:55:27:65:93:78:1A:89:97:69
Add signer to the trust store now? (y/n)"
*****************************************
Also, the following messages are written to WebSphere's native_stdout.log:
"....
15:47/AWSDEB001I Getting a new socket: 346
15:47/AWSDEB001I Getting a new socket: 346
15:47/AWSDEB001I Getting a new socket: 346
15:47/AWSDEB001I Getting a new socket: 346
15:47/AWSDEB001I Getting a new socket: 346
15:47/AWSDEB001I Getting a new socket: 346
...."
Cause
There was a modification made to the SSL certificates and a signer needs to be added to the trust store.
Resolving The Problem
1. Launch the wsadmin.sh command that is resulting in the interactive prompt that is written to twsismp.log.
Following the example from above, enter:
/TWA/eWAS/bin/wsadmin.sh -conntype SOAP -port 31118 -username tws -password ***** -c "puts ok"
NOTE: When specifying the value for -password you must specify the plain text password rather than asterisks.
2. This will produce the same prompt that is written to twsismp.log. Answer 'y' to the question: "Add signer to the trust store now?"
After this, the wsadmin.sh command that is performing the connection to eWAS through the GUI installer will succeed without hanging.
Product Synonym
Maestro;TWS;TWA
Was this topic helpful?
Document Information
Modified date:
17 June 2018
UID
swg21622466