OA63068: NEW FUNCTION - PRIVATE CA CERTIFICATE SUPPORT

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• NEW FUNCTION
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All IBM Foundation for Red Hat OpenShift     *
  *                 (HHRH110) users,                             *
  ****************************************************************
  A private CA certificate may be provided, enabling the zCX
  bootloader to create an https connection to a private web server
  for downloading the Red Hat CoreOS installer binaries.
  
  Updates to information in the comprehensive collection of
  content for zCX Foundation for Red Hat OpenShift in IBM Docs:
  https://www.ibm.com/docs/en/zcxrhos/1.1.0
  
  zCX Foundation for Red Hat OpenShift 1.1.0
  z/OS Management Facility workflows for zCX for OpenShift
  Running zCX for OpenShift workflows
  OCP provisioning workflow
  
  3. Provide fully qualified URLs for Red Hat CoreOS disk image,
     RH CoreOS Installer kernel and initramfs, and corresponding
     node type ignition file.
      a.Refer to IBM zCX for OpenShift Install documentation for
        more details.
      b.URLs should be accessible from the zCX for OpenShift
        appliance instance on the provisioned system.
      c.Installation files are downloaded from during the first
        boot (run-time) of the appliance instance.
  
     Enable TLS authentication for system trust CA, if needed:
      a.System trust CA: select the checkbox to enable.
        Default value for System trust CA: FALSE
        The z/OSMF input variable is:
        ZCX_SYSTEM_TRUST_CA_CERT_ENABLE
      b.System-wide trusted TLS CA Certificate
        Provide the file path to the private System-wide trusted
        CA certificate
        The z/OSMF input variable is:
        ZCX_SYSTEM_TRUST_CA_CERT
  
  KEYWORDS: zCXOCP/K
  

Problem conclusion

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ08958

Modules/Macros

• AZREWJID AZREWOAE AZREWOGS AZREWOVS AZRISALC AZRISDDD AZRISMKD
  AZRMKDIR AZRPPWFV AZRPRD60 AZRPRDZF AZRRBBS0 AZRRBBSA AZRRBCN0
  AZRRBCNA AZRRBCP0 AZRRBCPA AZRRECAL AZRSWKAR AZRSWKAU AZRSWKCD
  AZRSWKCG AZRSWKCT AZRSWKCU AZRSWKDC AZRSWKDD AZRSWKDL AZRSWKDP
  AZRSWKDT AZRSWKFP AZRSWKID AZRSWKIP AZRSWKIU AZRSWKLC AZRSWKLR
  AZRSWKLU AZRSWKPC AZRSWKPD AZRSWKPF AZRSWKPO AZRSWKPR AZRSWKPS
  AZRSWKRC AZRSWKRD AZRSWKRG AZRSWKRL AZRSWKRS AZRSWKRW AZRSWKSA
  AZRSWKSD AZRSWKSF AZRSWKSG AZRSWKSI AZRSWKSJ AZRSWKSL AZRSWKSO
  AZRSWKSR AZRSWKSU AZRSWKUD AZRSWKVC AZRSWKVD AZRSWKVF AZRSWKVJ
  AZRSWKVP AZRSWKVR AZRSWKVS AZRSWKVT AZRSWKVY AZRSWKWI AZRSWKZD
  AZRSWKZR AZRTJACF AZRTJADL AZRTJADT AZRTJART AZRTJAZF AZRTJLCF
  AZRTJLRT AZRTJPAD AZRTNCA  AZRTNCX  AZRTNCZ  AZRURCI0 AZRURISO
  AZRURPAD AZRUSBRT AZRUSSCD AZRUSSID AZRWKFAD AZRWKFDV AZRWKFPV
  AZRWKFRE AZRWKFRR AZRWKFVC AZRWKFVI
  

Fix information

• Fixed component name

  ZCX RH OPENSHIF

• Fixed component ID

  5752SCCRH

Applicable component levels

• R110 PSY UJ08958

     UP22/08/10 P F208

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.