JR46081: CMVC 228052 - ALLOW MIGRATION OF 16 CHARACTER MERCHANT KEY TO 32 CHARACTER MERCHANT KEY USING KLF

7.0.0-WS-WCServer-FP009
WebSphere Commerce Version 7.0.0.8 Fix Pack
WebSphere Commerce Version 7.0.0.9 Fix Pack

APAR status

• Closed as program error.

Error description

• The option of using a 32 character Merchant Key was introduced
  in Commerce 7.0.0.1. Migrating the Merchant Key to 32 characters
   using the MigrateEncryptedInfo utility may result in one of the
   following errors, when using the Key Locator Framework
  (KLF):\line \line 1) Error in command-line while migrating from
  16 to 32 character Merchant Key:\line
  _ERR_OBJECT_NOT_FOUND\line Stack trace:\line
  com.ibm.commerce.exception.ECApplicationException:
  MerchantKey/WC was not found.\line \tab at
  com.ibm.commerce.security.keys.WCKeyRegistry.getNewKey(WCKeyRegi
  stry.java:1276)\line \tab at
  com.ibm.commerce.security.keys.WCKeyRegistry.getNewKey(WCKeyRegi
  stry.java:1301)\line \tab at
  com.ibm.commerce.foundation.internal.common.util.encryption.impl
  .ClassicCommerceActiveEncryptionProviderWithoutVersioningImpl.<i
  nit>(ClassicCommerceActiveEncryptionProviderWithoutVersioningImp
  l.java:49)\line \line \line 2) Error in
  MKChangeUserAndCCInfoMigration.log while migrating from 16
  character Merchant Key to 32 character Merchant Key:\line
  CMN0409E: The following error occurred during processing:
  "java.lang.ArrayIndexOutOfBoundsException: Array index out of
  range: 32\line        ...\line
  com.ibm.commerce.foundation.internal.common.util.encryption.impl
  .ClassicCommerceActiveEncryptionProviderImpl.encrypt(ClassicComm
  erceActiveEncryptionProviderImpl.java:179)\line         at
  com.ibm.commerce.foundation.internal.common.util.encryption.impl
  .ClassicCommerceActiveEncryptionProviderImpl.encrypt(ClassicComm
  erceActiveEncryptionProviderImpl.java:205)\line         at
  com.ibm.commerce.foundation.internal.common.util.encryption.impl
  .ClassicCommerceActiveEncryptionProviderImpl.encrypt(ClassicComm
  erceActiveEncryptionProviderImpl.java:130)\line \line \line 3)
  Error in MKChangeUserAndCCInfoMigration.log while migrating from
   32 character Merchant Key to another 32 character Merchant
  Key:\line  CMN0409E: The following error occurred during
  processing: "javax.crypto.BadPaddingException: Given final block
   not properly padded\line \tab at
  com.ibm.crypto.provider.DESedeCipher.engineDoFinal(Unknown
  Source)\line \tab at javax.crypto.Cipher.doFinal(Unknown
  Source)\line \tab ...\line \tab at
  com.ibm.commerce.foundation.internal.common.util.encryption.impl
  .ClassicCommerceActiveEncryptionProviderImpl.decrypt(ClassicComm
  erceActiveEncryptionProviderImpl.java:112)\line \tab at
  com.ibm.commerce.foundation.internal.common.util.encryption.impl
  .ClassicCommerceActiveEncryptionProviderImpl.decrypt(ClassicComm
  erceActiveEncryptionProviderImpl.java:70)\line \line \line 4)
  Only on IBM iSeries:\line The migration will complete
  successfully. After a new shopper registers, change the password
   using the chgwcspwd.sh utility. The shopper will be unable to
  login with the new password.
  

Local fix

Problem summary

• USERS AFFECTED:
   WebSphere Commerce v7.0 (Fixpack 6 and lower) users trying to
  migrate to a 32 character merchant key using KLF
  
   PROBLEM ABSTRACT:
   Running MigrateEncryptedInfo to migrate the Merchant Key from
  16 characters to 32 characters using KLF fails.
  
   BUSINESS IMPACT:
   Merchant Key cannot be migrated to a 32 character length using
  KLF
  
   RECOMMENDATION:
  

Problem conclusion

• The MigrateEncryptedInfo utility was updated to correctly handle
  Merchant Keys of 32 characters.
   The fix is targeted to be included in fix pack 7.0.0.7.
   -------------------------------------------------------------
   The latest available maintenance information can be obtained
  from the Recommended Fixes for WebSphere Commerce technote:
   http://www.ibm.com/support/docview.wss?rs=3046&uid=swg21261296
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WC BUS EDITION

• Fixed component ID

  5724I3800

Applicable component levels

• R700 PSY

     UP