PH66388: RESTRICTING TO TLSV1.3 NOT ALWAYS SUCCESSFUL

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Some UMS connections to z/OSMF will not honor restriction to TLS
  1.3 only, but end up connecting to z/OSMF via TLS 1.2
  erroneously
  

Local fix

• add these options to your javaArgs: array in ZWEYAML:
  
  "- -Dcom.rocketsoft.core.util.TCPSocketManager.SSLContextName=T
  LSv1.3"
  "- -Dcom.rocketsoft.core.util.TCPSocketManager.SSLEnabledProtoc
  ols=TSLv1.3"
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of the IBM Unified Management Server   *
  *                 for z/OS                                     *
  ****************************************************************
  * PROBLEM DESCRIPTION: Restricting to TLSv1.3 not always       *
  *                      successful                              *
  ****************************************************************
  Some UMS connections to z/OSMF will not honor restriction to
  TLS 1.3 only, but end up connecting to z/OSMF via TLS 1.2
  erroneously
  

Problem conclusion

• Apply the PTF provided by this APAR
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• IZPHLVP  IZPMNFST IZPSERVE IZPUI    IZPYAML
  

Fix information

• Fixed component name

  UNIFIED MGMT SV

• Fixed component ID

  5698UM100

Applicable component levels

• R120 PSY UO03795

     UP25/06/28 P F506

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.