IT14121: SERVER.XML FAILS WHEN PASSWORD INCLUDES { OR }

7.1.7.000-TIV-TSMOC-AIX
7.1.7.000-TIV-TSMOC-LinuxPPC64
7.1.7.000-TIV-TSMOC-LinuxPPC64le
7.1.7.000-TIV-TSMOC-LinuxS390
7.1.7.000-TIV-TSMOC-Linuxx64
7.1.7.000-TIV-TSMOC-Windows
IBM Spectrum Protect Operations Center V7.1.7 Download

APAR status

• Closed as program error.

Error description

• When installing operations center, if the password specified
  includes a { or } it will fail to encode properly.  As a result
  the ssl port specified will not be functional.
  The installation will report successful and provide a link.  For
  example,
  https://172.16.33.133:11090/oc
  However, port 11090 will not be operational.  messagages.log
  will report the following:
  [2/8/16 17:11:59:040 PST] 0000001c
  com.ibm.ws.ssl.config.WSKeyStore                             E
  CWPKI0033E: The keystore located at C:/Program
  Files/Tivoli/TSM/ui/Liberty/usr/servers/guiServer/gui-truststore
  .jks did not load because of the following error: Keystore was
  tampered with, or password was incorrect
  [2/8/16 17:11:59:040 PST] 0000001c
  com.ibm.ws.ssl.config.WSKeyStore                             W
  CWPKI0809W: There is a failure loading the defaultKeyStore
  keystore. If an SSL configuration references the defaultKeyStore
  keystore, then the SSL configuration will fail to initialize.
  The installation manager log file will report the following:
  ERROR  03:09.57 ERROR:
  SSLPasswordEncoder.encodePasswordOnWindows : There was an error
  executing securityUtilty, RC : 1
  The problem is due to the fact that the { and } characters in
  the password will need to be escaped so they are encoded
  properly.
  Tivoli Storage Manager Versions Affected:
  7.1.x Tivoli Storage Manager/IBM Spectrum Protect Operations
  Center
  Initial Impact: Low
  Additional Keywords: TSM https ssl securityutility guiserver
  

Local fix

• When specifying a password with { or }, preceed the character
  with a ^.  For example, if the password desired is {Password},
  then input it as ^{Password^} when installing.
  -or-
  If the install has been completed, use the the securityUtility
  execuatable to recreate the SSL certificate with the correct
  password with ^ in front of { or }.  More information on this
  can be found in the following link:
  http://www-01.ibm.com/support/docview.wss?uid=swg21685478
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Operation Center users.                                  *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See error description.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available.  This problem is          *
  * currently projected to be fixed in level 7.1.7.              *
  * Note that this is subject to change at the discretion of     *
  * IBM.                                                         *
  ****************************************************************
  

Problem conclusion

• This problem was fixed.
  Affected platforms:  AIX, Linux and Windows.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSM OPERATIONS

• Fixed component ID

  5608E01UI

Applicable component levels