IT07055: FASTBACK FOR WORKSTATIONS CENTRAL ADMINISTRATION CONSOLE DOES NOT ALLOW THE REMOVAL OF A PREVIOUSLY IMPORTED SSL CERTIFICATE.

APAR status

• Closed as program error.

Error description

• After initially configuring the Central Administration Console
  (CAC) to send email alerts via an SMTP server with SSL enabled,
  it is not possible to change or remove the key/alias 'mykey' in
  the java keystore. This results in not being able to change or
  update the SSL certificate used to authenticate to the desired
  SMTP server.
  
  
  Customer/L2 Diagnostics:
  Instructions in the CAC admin guide contain steps to import an
  SSL certificate, but show only the use of the -add option when
  importing the certificate. If this -add action has been
  previously run it will fail stating the 'mykey' alias already
  exists in the java key store.
  
  Example:
  C:\"%CAC_INSTALL_DIR%\java\jre\bin\java" -cp fbfwca.jar
  com.tivoli.fbfw.ca.backend.security.CaSecurity -add
  
  keytool error: java.lang.Exception: Certificate not imported,
  alias <mykey> already exists
  
  
  
  The fbfwca.jar has been updated to include a -remove option to
  remove the 'mykey' alias and allow the -add to correctly import
  the new SSL certificate.
  
  
  Tivoli Storage Manager Versions Affected:
  7.1, 7.1.1
  
  Initial Impact:
  Low
  
  Additional Keywords:
  mail, monitor, alert, exchange, key
  

Local fix

Problem summary

• Tivoli FastBack for Workstations does not allow
   for the removal and adding of a new ssl email certificate
  

Problem conclusion

• Fixed in version 7.1.1.8 or higher
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  FB FOR WKST

• Fixed component ID

  5608FBW01

Applicable component levels

• R711 PSY

     UP