IBM Support

PI94230: CERTIFICATE MONITOR DOES NOT REFRESH RSA KEYS AFTER RENEWAL

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • In certain cases the Certificate Expiration Monitor may not
    refresh the RSA keys in the runtime after they are renewed.
    

Local fix

  • Restart the server to refresh the RSA keys
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server                                      *
    ****************************************************************
    * PROBLEM DESCRIPTION: In standalone server environment,       *
    *                      RSA keystores are not dynamically       *
    *                      refreshed after updates                 *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    In standalone server environment, RSA keystores are not
    dynamically refreshed after updates because the
    re-initialization logic is only invoked for cell environment.
    

Problem conclusion

  • The bug was corrected.  Changes in RSA keystores are reflected
    immediately if "Dynamically update the run time when SSL
    configuration changes occur" checkbox is checked.
    
    The fix for this APAR is currently targeted for inclusion in
    fix pack 8.5.5.14 and 9.0.0.9.  Please refer to the Recommended
    Updates
    page for delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI94230

  • Reported component name

    WEBSPHERE APP S

  • Reported component ID

    5724J0800

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-02-23

  • Closed date

    2018-05-10

  • Last modified date

    2018-05-10

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBSPHERE APP S

  • Fixed component ID

    5724J0800

Applicable component levels

  • R850 PSY

       UP

  • R900 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"850","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
18 October 2021