IBM Support

IT38008: No mechanism to set MQIPT_JVM_OPTIONS for IBM MQ Internet PassThru when run as a service

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • MQ IPT running on Windows as a service is not started with the
    mqipt.bat file but through a different process. This process
    is unable to check the MQIPT_JVM_OPTIONS environment variable,
    which is used to set JVM options when starting MQ IPT
    interactively
    
    This results in being unable to set any JVM options for MQ IPT
    when it is running as a server.
    

Local fix

  • Run MQ IPT as a standalone application not as a service.
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    MQIPT users who use SSLv3 with MQIPT installed as a service on
    Windows.
    
    
    Platforms affected:
    Windows
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    SSLv3 is disabled by default in the Java runtime environment
    (JRE) that is supplied with MQIPT. To enable SSLv3 the Java
    system property com.ibm.jsse2.disableSSLv3=false must be set.
    However, there is no way to set Java properties when MQIPT is
    started as a service on Windows.
    

Problem conclusion

  • The MQIPT service on Windows has been enhanced to allow Java
    properties to be set using a value in the Windows registry.
    
    After applying the APAR, to enable SSLv3 for the MQIPT service
    on Windows define a new string value in the registry under the
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MQInternetP
    assThru key. The value should have the following attributes:
    
    Name: MqiptJvmOptions
    Value data: -Dcom.ibm.jsse2.disableSSLv3=false
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
    Version    Maintenance Level
    v9.2 LTS   9.2.0.4
    v9.x CD    9.2.5
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT38008

  • Reported component name

    MQ APPL M2002 V

  • Reported component ID

    5737H4701

  • Reported release

    920

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2021-08-13

  • Closed date

    2021-10-06

  • Last modified date

    2021-10-06

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    MQ APPL M2002 V

  • Fixed component ID

    5737H4701

Applicable component levels

[{"Line of Business":{"code":"LOB36","label":"IBM Automation"},"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Product":{"code":"SS5K6E","label":"IBM MQ Appliance"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"920"}]

Document Information

Modified date:
13 October 2021