IBM Application Performance Management 8.1.4 8.1.4.0-IBM-APM-SERVER-IF0001 Readme

IMPORTANT NOTE: To download this update, you must first login to IBM Fix Central. Once logged in, you may select from the individual download packages. When selecting fixes, ensure your download options are set to "Include requisites: Yes".
http://www.ibm.com/support/fixcentral/

Below is a list of components, platforms, and file names that apply to this Readme file.

General description
This is a cumulative interim fix for IBM Cloud Application Performance Management family of products, Version 8.1.4.0.
It includes these component patch versions for the IBM Cloud Application Performance Management server:

apmui-8.1.4.0.1
ccm-scripts-8.1.4.0.1
ccs-8.1.4.0.1
ibmjava-8.1.4.0.1
itportal-8.1.4.0.1
min-8.1.4.0.1
oidc-8.1.4.0.1
omnibus-8.1.4.0.1
rbac-8.1.4.0.1
scr-6.1.2.15.1
synthetics_script_manager-01.00.05.01
tt-8.1.4.0.1
uview-1.1.0.0.1

Platforms and prerequisites
This interim fix is supported on the IBM Cloud Application Performance Management server platforms documented here.

Prerequisites for this interim fix
This interim fix is intended to be applied to any of the following levels of IBM Cloud Application Performance Management server software:

IBM Cloud Application Performance Management Base, Version 8.1.4.0
IBM Cloud Application Performance Management Advanced, Version 8.1.4.0

None

None

Prior to installation

The IBM Cloud Application Performance Management server must be installed and running before applying the interim fix.

Installing

Installing the IBM Cloud Application Performance Management Server update

1. Download 8.1.4.0-IBM-APM-SERVER-IF0001.tar from IBM Fix Central to a temporary directory (e.g. /tmp/IF01-patch) on the computer where you installed the Performance Management server.
   
   
2. Change your current directory to the download location, e.g.

cd /tmp/IF01-patch


3. Expand the archive file using the tar command e.g.

tar -xf 8.1.4.0-IBM-APM-SERVER-IF0001.tar


4. Run the script apmpatch.sh:

cd 8.1.4.0-IBM-APM-SERVER-IF0001
./apmpatch.sh


   

Performing the necessary tasks after installation

None

Troubleshooting installation problems from the Support site

For more detailed information, refer to the Troubleshooting and support Guide:
http://www.ibm.com/support/knowledgecenter/SSHLNR_8.1.4/com.ibm.pm.doc/install/trouble_intro.htm

Uninstalling if necessary

Files modified by the patch are backed up during the patch installation. If you encounter an issue with the patch and need to back it out then contact IBM support for assistance.

For detailed instructions to Uninstall the server, please refer to the IBM Cloud Application Performance Management guide, here:
http://www.ibm.com/support/knowledgecenter/SSHLNR_8.1.4/com.ibm.pm.doc/install/install_server_uninstall.htm

The Secure Hash Algorithm 1 (SHA1) checksum of the image is as follows:
SHA1(8.1.4.0-IBM-APM-SERVER-IF0001.tar)= 1c94fdea8d92689506aa0417a99b6328b4891adb

Image Contents
The following files implement this fix:
- 8.1.4.0-IBM-APM-SERVER-IF0001.readme.html - This README file
- 8.1.4.0-IBM-APM-SERVER-IF0001.tar - For extracting patch files use the tar utility

Extracting the above bundle (.tar) creates the following directory and patch files:

8.1.4.0-IBM-APM-SERVER-IF0001/
|-- apmpatch_functions
|-- apmpatch.sh
|-- msg
|-- nls_replace
|-- patches
|-- patch.properties

New Features

The following changes are included in IBM Cloud Application Performance Management 8.1.4.0 Interim Fix 1:

• Defect fixes and other stability improvements

The following problems are addressed by this interim fix.

APARs

• IV98544: Disable usage of the JVM Shared Class Cache for the APM Liberty processes so that they will not crash if the cache becomes corrupted
• IV98547: Events status is stale in the APMUI intermittently
• IV98921: User cannot access the Attribute Details page if their LDAP DN contains a comma
• IJ00816: User cannot access the Attribute Details page if their LDAP DN contains an apostrophe

• 113421: Prevent Cross-Site Request Forgery in RBAC API
• 117103: Invalid OS dashboard when drilling down from Tuxedo service dashboard
• 122916: Updated CCS error handling to ensure threads that create/update private situation files do not stop running
• 123744: Need to click Application Performance dashboard link at least twice to see the dashboard page after the first login
• 123840: Handle unreconciled database instances.
• 124117: No content is displayed when displaying Cloud APM console dashboard pages in Dashboard Application Services Hub
• 124121: Prevent out of memory error in server1 if you create a custom view for a dataset that has a large quantity of data
• 124130: Cannot open Advanced Configuration panel with IE browser
• 124131: Prevent RBAC policies from being corrupted
• 124396: Prevent deadlock issue for SCR database
• 124420: SCR threads may hang when the JDBC connection pool is exhausted
• 124543: Change way the threshold manager determines the group name so that the label is not used
• 124783: Fix Cross Site Scripting error in the Threshold Manager UI
• 124784: Fix SQL injection issue for resource group manager UI
• 124995: Updates to create_security_artifacts.sh for using a private certificate authority
• 125030: Agents visible to users who are not authorized to see them if the agent hostname is long
• 125131: In 10K agent environment, APMUI status queries take ~10 seconds, causing high APMUI, server1 and db2 utilization
• 125460: Updates to the min service JMX thresholds in the server_size.sh script
• 125690: WAS agent sending AARS containing requestName and transactionName > 256 characters causes the MongoETL to crash and the DataMart ETL to fail
• 125764: Resource Group API security Issue for SaaS - smadmin can be used externally to access the API for any subscription
• 125796: Prevent Authentication Bypass using HTTP Verb Tampering vulnerability for custom view pages
• 125797: Add Secure Attribute to Custom Views SSL cookie
• 126209: Global timestamp for an event should not be updated when the agent goes offline and back online
• 126307: Events should not be un-suspended if the thrunode has changed for a subnode and agent offline events should be generated when subnodes go offline but the agent is still online
• 126361: Update help for the SMTP advanced config properties
• 127045: After the APM server is upgraded from 8..1.3 to 8.1.4, the Hybrid Gateway cannot connect to the TEPS if the Hybrid Gateway is upgraded to 8.1.4 or a new Hybrid Gateway is connected to the APM server.
• 127210: The About page for the Cloud APM console indicates the offering type is IBM Monitoring instead of Cloud APM Base after an upgrade.
• 127271: Online help updates
• 127363: Prevent SCR Derby errors that occur when SaaS subscriptions are provisioned
• 127378: Add additional SCR debug messages
• 127380: Synthetic scripts are not removed from an application when you delete the script from the application.
• 128092: Cross-site scripting error in Hybrid Gateway Manager UI
• 128211: Fix typo in OMNIbus probe itm_apm_event.rules file for the SourceType slot
• 128240: Error message box pops up when click the location on Synthetic transaction details page
• 128252: Fix Cross-Site Scripting error in the Synthetics Script Manager UI
• 128481: If an Agent Builder agent is upgraded or an agent patch is applied then an agent's summary group widget may not display data after a disaster recovery is performed.

• None.

• None.