IBM Support

IBM Security Privileged Identity Manager fix pack 2.1.0-ISS-ISPIM-VA-FP0006

Download


Abstract

This fix pack for IBM Security Privileged Identity Manager, Version 2.1.0 contains new enhancements and fixes.

Download Description


IMPORTANT: The license file is updated. Refer to the license file in the fix pack package.
Enhancements:
This fix pack corrects security vulnerabilities and the following issues that are found in IBM® Security Privileged Identity Manager 2.1.0 release:
  • APAR IV95439
    When the checkout justification field is set to mandatory and a user checks out a credential without providing a justification in the Privileged Identity Manager Self-service console, a blank page is displayed.
  • APAR IV95896
    The user is unable to remove any requested access that is approved in the Privileged Identity Manager Self Service Console.
  • APAR IV96484
    In a virtual appliance cluster deployment, if the database configuration is set to run on non-SSL connection, reconfiguring any database related configuration parameters will cause the member nodes synchronization to fail.
  • APAR IV96942
    An error message is shown in the Administrative Console when the user is performing a search for a credential or credential pool by using the resource name as the filtering condition.
  • APAR IV92329
    The REST API request for creation of resource does not fail when there are spacing character(s) in the resource UID.
  • APAR IV89554
    When a user is executing commands on the virtual appliance with the command line interface (CLI), the system generates misleading error messages. For example, No such file or directory errors, even though the command execution is successful.
  • APAR IV97169
    Unable to check in or delete a credential when the user that has the credential checked out is deleted in IBM Security Privileged Identity Manager.
  • APAR IV88917
    The fix pack version is not reflected correctly in the About page in the Administrative Console.
  • Defect
    The configured syslog from the IBM Security Privileged Identity Manager Virtual Appliance is not sent to IBM QRadar Security Intelligence Platform.
  • Defect
    Once an Access, with the "By Rule" assignment type is created, the rule cannot be modified anymore.

For more information on new features and enhancements, see New in Version 2.1.0.

Installation Instructions

Note:

  • This fix pack can take up to 10 minutes to install. Do not shut down or reboot the virtual appliance while installation is in progress.
  • This fix pack is certified for use with virtual appliances that are operating in FIPS-compliant mode.

Installation from the LMI User Interface (recommended)
Access the LMI of the virtual appliance by using a web browser at https://<pimva>:9443/login.

Procedure
  1. Download the fix pack to your local workstation.
  2. From the IBM Security Privileged Identity Manager dashboard, select Manage.
  3. Under Manage, click Fix Packs.
  4. In the Fix Pack page, select New.
  5. In the Add Fix Pack, select Browse for Fix Pack.
  6. Select the required fix pack.
  7. Select Save Configuration in the Add Fix Pack panel.
  8. Restart the virtual appliance.

Installation from the command line interface (CLI)
Access the command line interface of the virtual appliance by using either an SSH session or the console.

Procedure
  1. Copy the fix pack to a USB device.
    Note: The fix pack must not be in a folder on the USB device.
  2. Attach the USB device to your virtual appliance.
  3. In the virtual appliance CLI, run the command, fixpacks.
  4. Run the command, install.
    Note: It lists all the fix packs that are available in the USB device.
  5. Select the index of the 2.1.0-ISS-ISPIM-VA-FP0006.fixpack and press Enter.
  6. Run the list command to view the list of installed fix packs.
  7. Restart the virtual appliance.

Post Installation

Generating the SSL Certificate with the Subject Alternative Name (SAN) attribute


Note: Ensure that you have installed the fix pack before you generate the SSL certificate with the SAN attribute.
Procedure
  1. Log in to the command line interface (CLI) as an administrator.
  2. Run lmi reset_lmi_cert.
    Step Result: The SSL certificate is renewed with the SAN attribute. The value that is generated in the certificate is the virtual appliance hostname.

On
[{"DNLabel":"2.1.0-ISS-ISPIM-VA-FP0006","DNDate":"30 Jun 17","DNLang":"English","DNSize":"124779603","DNPlat":{"label":"Platform Independent","code":"PF025"},"DNURL":"https://www-945.ibm.com/support/fixcentral/swg/downloadFixes?parent=Security%2BSystems&product=ibm/Tivoli/IBM+Security+Privileged+Identity+Manager&release=2.1.0&platform=Linux&function=fixId&fixids=2.1.0-ISS-ISPIM-VA-FP0006&includeRequisites=1&includeSup","DNURL_FTP":" ","DDURL":null}]
[{"Product":{"code":"SSRQBP","label":"IBM Security Privileged Identity Manager"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"2.1.0","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
15 June 2018

UID

swg24043785

Page Feedback