Update runtime environment to disable HTTP and HTTPS

Update your runtime environment to disable HTTP and HTTPS.

Before you begin

Important: With APAR OA64188, HTTPS is the default communication protocol for new runtime environments. For existing runtime environments, if you do not make the necessary manual configuration updates after applying the APAR, HTTPS will be the default protocol using the default HTTPS port number 3661. You must make the updates before running the Configuration Manager GENERATE action or the PARMGEN $PARSE job.

About this task

If you do not want to communicate between the Tivoli Enterprise Monitoring Server (TEMS) and the IBM Tivoli Monitoring Service Console, tacmd, SOAP, or TEMS REST services, you can disable HTTP and HTTPS protocols by performing the following procedure. With these steps, you will disable the HTTP and HTTPS protocols for both the TEMS and the agents.

You will use the following parameter when disabling HTTP and HTTPS for your runtime environment:
For the TEMS:

Procedure

  1. Add (or update) the following parameter in RTEDEF(rte_name) for Configuration Manager or WCONFIG(rte_name) for PARMGEN:
    For the TEMS:
    RTE_TEMS_TRANSPORT_MODE    "NONE"
  2. Refresh your runtime environment, as follows:
  3. Start your OMEGAMON started tasks. You should see the following message in the log:
    KDE_TRANSPORT=KDC_FAMILIES="HTTP:0 HTTPS:0 USE:Y <...> "
    You should not see any listening: messages for HTTP or HTTPS in the log.
  4. Test your configuration using the following methods:
    • If you have tacmd configured, issue tacmd commands using your TEMS IP or DNS and the HTTP or HTTPS port number. For example:
      C:\Users\userID>tacmd login -s ip:http_port_num 
       Username? tso_user_id 
       Password? 
      
      Validating user... 
      
      KUIC00003E: Cannot connect to a hub monitoring server at addresses: 
      https://ip:http_port_num , http://ip:http_port_num
    • Attempt to access the Service Console using ip:http_port_num or dns:http_port_num. These attempts should fail.