PH66115: UNSUPPORTEDOPERATIONEXCEPTION AGAINST ENGINEGENERATESEED WHEN USING IBMJCECCA ON Z/OS

APAR status

• Closed as program error.

Error description

• Exception = java.lang.UnsupportedOperationException
  Source =
  com.ibm.ws.security.token.ltpa.internal.LTPAKeyCreateTask
  probeid = 123
  Stack Dump = java.lang.UnsupportedOperationException: Hardware
  error, function engineGenerateSeed has no meaning in hardware
  	at ibm.crypto.hdwrcca/com.ibm.crypto.hdwrCCA.provider.SecureRa
  ndom.engineGenerateSeed(SecureRandom.java:126)
  	at java.base/java.security.SecureRandom.generateSeed(SecureRan
  dom.java:879)
  	at com.ibm.ws.common.crypto.CryptoUtils.generateRandomBytes(Cr
  yptoUtils.java:406)
  	at com.ibm.ws.crypto.ltpakeyutil.LTPACrypto.generateSharedKey(
  LTPACrypto.java:1033)
  	at com.ibm.ws.crypto.ltpakeyutil.LTPAKeyFileUtilityImpl.genera
  teLTPAKeys(LTPAKeyFileUtilityImpl.java:57)
  ...
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of WebSphere Liberty running on   *
  *                  Liberty 25.0.0.3 and using Hardware Crypto  *
  *                  on                                          *
  *                  z/OS                                        *
  ****************************************************************
  * PROBLEM DESCRIPTION: While creating an LTPA token on         *
  *                      Websphere                               *
  *                      Liberty running with Hardware Crypto,   *
  *                      the                                     *
  *                      above stack trace error is seen.        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  While creating an LTPA token on Websphere Liberty running with
  Hardware Crypto, the above stack trace error is seen.
  

Problem conclusion

• The code has been revised and updated to fix this error.
  
  The fix for this APAR is targeted for inclusion in fix pack
  25.0.0.5. For more information, see 'Recommended Updates for
  WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY PROF -

• Fixed component ID

  5655W6514

Applicable component levels