PH58451: THIS APAR PROVIDES THE ABILITY TO HAVE A "DBAUSER" WHICH IS AUTHENTICATED VIA A CLIENT CERTIFICATE.

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• Updates for the IBM Unified Management Server (UMS) for z/OS
  v1.2 to allow having a UMS administrator to specify a "dbaUser"
  with a certificate (globally, or for specific "registered
  subsystems") to avoid having to store an encrypted password. UMS
  would authenticate via a client certificate for any "dbaUser"
  configured this way. For example, the "dbaUser" could be a
  SAF-protected userid with no password.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of the IBM Unified Management Server   *
  *                 for z/OS and the following experiences:      *
  *                 - Db2 DevOps Experience for z/OS             *
  *                 - Db2 Administration Foundation for z/OS     *
  *                 - IMS Administration Foundation for z/OS     *
  ****************************************************************
  * PROBLEM DESCRIPTION: This APAR provides the ability to have  *
  *                      a "dbaUser" which is authenticated via  *
  *                      a client certificate                    *
  ****************************************************************
  This APAR for the IBM Unified Management Server (UMS) for z/OS
  v1.2 provides Db2 support to allow having a UMS administrator to
  specify a "dbaUser" with a certificate (globally, or for
  specific "registered subsystems") to avoid having to store an
  encrypted password.
  
  UMS would authenticate via a client certificate for any
  "dbaUser" configured this way. For example, the "dbaUser" could
  be a SAF-protected userid with no password. This support applies
  to RACF, TSS, and ACF2 ESMs.
  
  Additionally this APAR provides such support in the IMS
  Administration Foundation when using TSS or ACF2 ESMs. RACF
  support was previously introduced in PH60228.
  

Problem conclusion

• Apply the PTF
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• IZPCHG   IZPDAJP  IZPDISCP IZPEXPIN IZPHLVP  IZPIPLUG IZPJOBSP
  IZPMNFST IZPSERVE IZPSIQC0 IZPSIQD0 IZPSIQR0 IZPSTEPL IZPUI
  IZPUSRMD
  

Fix information

• Fixed component name

  UNIFIED MGMT SV

• Fixed component ID

  5698UM100

Applicable component levels

• R120 PSY UI97871

     UP24/08/09 P F408

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.