IJ25003: IMPACT CONSOLE INTEGRATION CERTIFICATE POP-UP IN JAZZSM DASH

7.1.0-TIV-NCI-WINDOWS-FP0020
7.1.0-TIV-NCI-ZLINUX-FP0020
7.1.0-TIV-NCI-AIX-FP0020
7.1.0-TIV-NCI-SOLARIS-FP0020
7.1.0-TIV-NCI-LINUX-FP0020
7.1.0-TIV-NCI-FP0020-README.txt
IBM Tivoli Netcool/Impact V7.1.0 Fix Pack 20 (7.1.0-TIV-NCI-FP0020)

APAR status

• Closed as program error.

Error description

• PEN Test related security changes in Impact FP17 requires fixes
  in Impact/Blaze and Dash to avoid Certificate popup from being
  displayed every time user logs in.
  
  This issue is specific to
  DASH to Impact Console Integration scenarios.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Impact users that use Dash console integration               *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Dash/Impact integrated console configurations.  When the     *
  * user logs into a dash GUI the dash GUI always presents the   *
  * user with a dialog claiming                                  *
  * that the certificate to the impact server needs to be        *
  * validated.                                                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * install this fix                                             *
  ****************************************************************
  This issue was caused by new security settings in impact http
  responses
  

Problem conclusion

• The fix will allow Dash to perform CORS type requests when there
  is an integrated console configuration.
  The fix for this APAR is contained in the following:
  
  | Fix Pack | 7.1.0-TIV-NCI-FP0020 |
  
  | MDVREGR 7.1.0-TIV-NCI-FP0017 |
  | MDVREGR 7.1.0-TIV-NCI-FP0018 |
  | MDVREGR 7.1.0-TIV-NCI-FP0019 |
  

Temporary fix

• turn off the nosniff option by adding an alternate value for
  X-Content-Type-Options  in the blaze.war web.xml file:
  
  <context-param>
  
  <param-name>HTTP_HEADER_X_CONTENT_TYPE_OPTIONS</param-name>
         <param-value>123</param-value>
     </context-param>
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• UNKNOWN
  

Fix information

• Fixed component name

  NETCOOL/IMPACT

• Fixed component ID

  5724O59IS

Applicable component levels

• R710 PSY

     UP