IBM Support

IT24680: KEYSTORE OPTION FOR CICS CONFIGURABLE SERVICE

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as requirement.

Error description

  • Keystore option for CICS configurable service to configure a
    different  keystore file for CICS connections.
    

Local fix

  • n/a
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    All users of IBM App Connect Enterprise v11 and IBM Integration
    Bus V10 wishing to use SSL to connect to CICS.
    
    
    Platforms affected:
    MultiPlatform
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    When using SSL with the CICSRequest node, prior to this change,
    certificates used to secure the connection must be located in
    the Integration Server keystore. This caused particular issue
    when an update was required to the certificates.
    

Problem conclusion

  • A pair of properties have been added to the CICSConnection
    configurable service(v10) / Policy (v11) to allow a specific
    keystore to be used by the CICSRequest node.
    
    v10
    keystoreFile - This property specifies the fully-qualified path
    to the location of the keystore that is to be used when using an
    SSL connection. If this value is not specified, the keystore
    that is configured for the integration server will be used. The
    CICS Request node uses this as the store for the private and
    public certificates used to secure the connection to CICS.
    keystorePass - This property specifies the security identity to
    be used for accessing the keystore.
    
    v11
    sslKeystoreLocation - This property specifies the
    fully-qualified path to the location of the keystore that is
    used when using an SSL connection. If this value is not
    specified, the keystore that is configured for the integration
    server will be used. The CICS Request node uses this as the
    store for  the private and public certificates used to secure
    the connection to CICS.
    sslKeystoreSecurityIdentity - This property specifies the
    security identity to be used for accessing the keystore.
    

Temporary fix

Comments

  • A pair of properties have been added to the CICSConnection
    configurable service
    

APAR Information

  • APAR number

    IT24680

  • Reported component name

    INTEGRATION BUS

  • Reported component ID

    5724J0540

  • Reported release

    A00

  • Status

    CLOSED REQ

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-04-10

  • Closed date

    2020-08-25

  • Last modified date

    2020-08-25

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSNQK6","label":"IBM Integration Bus"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"10.0","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
26 August 2020