IBM Support

IC63729: The MQ Explorer does not have a mechanism to set the OCSPAuthentication setting in the qm.ini or Windows registry

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Users of WebSphere MQ are unable to change the behaviour of
    OCSP on a queue manager by using the MQ Explorer, contrary
    to what is stated in the MQ manuals. This is due to the fact
    that the SSL tab on the properties pane of a queue manager
    does not include a field for the OCSPAuthentication attribute.
    

Local fix

  • Create registry key under:
     HKEY_LOCAL_MACHINE\SOFTWARE\IBM\MQSeries\CurrentVersion\Configu
    ration\QueueManager\<name of queue manager>\SSL
       where SSL is the new keyword
       create string value pair as  OCSPAuthentication
       set value to either 'Optional' or 'Warn'
    OR
     run amqmdain command to set the new registry key
     amqmdain reg QMGRNAME -c add -s SSL -v
    OCSPAuthentication=Optional
     amqmdain reg QMGRNAME -c add -s SSL -v OCSPAuthentication=Warn
    Restart the queue manager or run REFRESH SECURITY TYPE(SSL) for
    the change to take effect.
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    Any users of WebSphere MQ wishing to change the behaviour of
    OCSP by using the MQ Explorer.
    
    Platforms affected:
    Linux (x86),Windows
    
    ****************************************************************
    PROBLEM SUMMARY:
    The problem was caused by the fact that the SSL tab in the
    properties pane of a queue manager within the MQ Explorer did
    not contain a key to change the OCSPAuthentication parameter.
    

Problem conclusion

  • The WebSphere MQ Explorer was modified to include a field which
    allows the user to change the OCSPAuthentication setting.
    
    Additionally, the OCSP Authentication setting can be modified
    using the amqmdain utility or by modifying the registry or
    qm.ini directly as appropriate.
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
                       v7.0
    Platform           Fix Pack 7.0.1.2
    --------           --------------------
    Windows            U200316
    Linux (x86)        U829677
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available, information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC63729

  • Reported component name

    WMQ WINDOWS V7

  • Reported component ID

    5724H7220

  • Reported release

    701

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2009-10-13

  • Closed date

    2009-11-27

  • Last modified date

    2009-11-27

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WMQ WINDOWS V7

  • Fixed component ID

    5724H7220

Applicable component levels

  • R701 PSY

       UP

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCPQ63","label":"APAR \/ Maintenance"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0.1","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
27 November 2009