IBM Support

PH60895: WEBSPHERE Z/OS DOES NOT ROLL BACK TO A CORRECT STATE AFTER FAILING TO ENABLE AES PASSWORD ENCRYPTION ON A CELL

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • When the AES password encryption process fails, users may find
that the cell gets into an inconsistent state where some regions
(i.e. the DMGR) is unable to decrypt the saved passwords.  This
will cause those regions to fail to start.

Local fix

  • Restore a configuration from prior to attempting to enable
password encryption.

Problem summary

  • ****************************************************************
* USERS AFFECTED:  All users of IBM WebSphere Application      *
*                  Server                                      *
*                  V8.5                                        *
****************************************************************
* PROBLEM DESCRIPTION: AdminTask.enablePasswordEncryption()    *
*                      command may lead to configuration       *
*                      inconsistency                           *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
In rare cases, when an encryption error occurs,
AdminTask.enablePasswordEncryption() command may incorrectly
show
a success message, leading to configuration inconsistency upon
saving.

Problem conclusion

  • A bug in the code delayed the RuntimeException, preventing the
rollback from occurring.

The fix for this APAR is targeted for inclusion in fix pack
8.5.5.27 and 9.0.5.22. For more information, see 'Recommended
Updates for WebSphere Application Server':
https://www.ibm.com/support/pages/node/715553

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    PH60895
    • 

  • Reported component name
    WEBSPHERE FOR Z
    • 

  • Reported component ID
    5655I3500
    • 

  • Reported release
    850
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2024-04-15
    • 

  • Closed date
    2024-10-11
    • 

  • Last modified date
    2024-10-11
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    WEBSPHERE FOR Z
    • 

  • Fixed component ID
    5655I3500
    • 



Applicable component levels


    








      
              
                            

              

              [{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"850","Line of Business":{"code":"LOB67","label":"IT Automation \u0026 App Modernization"}}]
              

                                                                    

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            12 October 2024
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback