IC99693: WEB CLIENT INTERFACE DOES NOT WORK WITH SUN JAVA VERSION 1.7.0_51 OR LATER

IBM Tivoli Storage Manager (TSM) client 7.1.0.x interim fix downloads
IBM Tivoli Storage Manager (TSM) Client 7.1.1 Downloads and READMEs
IBM Tivoli Storage Manager (TSM) client 6.3.2.x interim fix downloads - EOL

APAR status

• Closed as program error.

Error description

• Error Description:
  Starting the Tivoli Storage Manager Web Client Interface on a
  system where the latest release of Java JRE and Java Browser
   plugin has been installed (version 1.7.0_51 - January 2014 or
  later ) will result in the following popup message:
  
  Security Exception.
  Missing required Permissions manifest attribute in main jar:
  http://ip_address:1581/dsm.jar
  
  
  Customer/L2 diagnostics:
  Taking a Java trace, the Java console will show the following
  error:
  basic: exception: Missing required Permissions manifest
  attribute in main jar: http://IP_ADDRESS:1581/dsm.jar.
  java.lang.SecurityException: Missing required Permissions
  manifest attribute in main jar: http://IP_ADDRESS:1581/dsm.jar
   at
  com.sun.deploy.security.DeployManifestChecker.verifyMainJar(Unkn
  own Source)
   at
  com.sun.deploy.security.DeployManifestChecker.verifyMainJar(Unkn
  own Source)
   at sun.plugin2.applet.Plugin2Manager.isAppletTrusted(Unknown
  Source)
   at sun.plugin2.applet.Plugin2Manager.initAppletAdapter(Unknown
  Source)
   at
  sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Un
  known Source)
   at java.lang.Thread.run(Unknown Source)
  basic: Removed progress listener:
  sun.plugin.util.ProgressMonitorAdapter@105013c
  security: Reset deny session certificate store
  
  The error is caused by the updates that were made to the Java
  trust and signing requirements starting with Java version
  1.7.0_51.
  
  Tivoli Storage Manager Versions Affected: All Tivoli Storage
  Manager  Client  on all platforms.
  
  
  Initial Impact: Medium
  
  Additional Keywords: java web interface security warning
  

Local fix

• Add the web client interface URL in the exception list through
  the Java control panel:
      Go to the Java Control Panel
      Click on the Security tab
      Click on the Edit Site List button
      Click the Add in the Exception Site List window
      Add url to Exception Site list
      Click in the empty field under Location field to enter the
  URL
      Example: http://10.0.2.15:1581
      ( URL should begin with http:// or https://)
  
   If the URL where the applet is hosted is different than the URL
  for
  the page on which the applet is called you need to add both the
  URL for
  the applet.
      Click OK to save the URL that you entered.
      Click Continue on the Security Warning dialog
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Backup-archive client versions 7.1 and       *
  *                 earlier on all supported platforms.          *
  ****************************************************************
  * PROBLEM DESCRIPTION: See ERROR DESCRIPTION                   *
  *                                                              *
  ****************************************************************
  * RECOMMENDATION: Apply fixing level when available. This      *
  *                 problem is currently projected to be fixed   *
  *                 in levels 6.4.2 and 7.1.1. Note that until   *
  *                 these levels are available, this             *
  *                 information is subject to change at the      *
  *                 discretion of IBM.                           *
  ****************************************************************
  The manifest file included with the dsm.jar file did not
  specify the correct permissions.
  

Problem conclusion

• The manifest file was updated to specify the necessary
  permissions. The problem no longer occurs.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSM CLIENT

• Fixed component ID

  5698ISMCL

Applicable component levels

• R64A PSY

     UP

• R64H PSY

     UP

• R64L PSY

     UP

• R64M PSY

     UP

• R64S PSY

     UP

• R64W PSY

     UP

• R71A PSY

     UP

• R71H PSY

     UP

• R71L PSY

     UP

• R71M PSY

     UP

• R71S PSY

     UP

• R71W PSY

     UP