IBM Support

IBM Security Access Manager for Enterprise Single Sign-On AccessAgent fix pack 8.2.1-ISS-SAMESSO-AA-FP0015



Fix pack for IBM Security Access Manager for Enterprise Single Sign-On, AccessAgent, Version 8.2.1

Download Description

This fix pack corrects the following issues that are found in IBM Security Access Manager for Enterprise Single Sign-On AccessAgent, Version 8.2.1 release:

  • APAR IV78000
    With RFID-only and fast unlock enabled, the user might need to provide the ESSO password before the RFID-only logon timeout.
  • APAR IV76631
    Unlocking the workstation might fail when both "Password" and "Password + RFID" wallet authentication policies are enabled.
  • APAR IV76634
    User might encounter login issues if the user logon name is longer than the domain name.
  • APAR IV78791
    Unlocking the workstation might fail if the user that performs the unlocking is different from the one who was previously logged in.
  • APAR IV78799
    An ISAM ESSO message might appear when the user restarts or shuts down the workstation.
  • APAR IV78795
    Slowness might be experienced with application profile that includes the action "Notify AccessAgent of application logoff".

The following fixes and defects only affect IBM Security Privileged Identity Manager users:
  • APAR IV78341
    Shared credential check-out for applications might fail when UAC is enabled.
  • APAR IV76205
    User consent dialog window for session recording might appear behind application.
  • APAR IV76427
    Application might fail when session recording is enabled.
  • Defect
    Low-level integrity processes cannot log messages in the Recorder log file. The administrator is required to delete all existing Recorder log files.
  • Defect
    Text recorder upload issues might occur when commands entered are longer than 128 characters.

Related links
For more information about the IBM Security Access Manager for Enterprise Single Sign-On, Version 8.2.1, see the following links:


This fix pack contains the following files:

  • 8.2.1-ISS-SAMESSO-AA-FP0015_32.msp
  • 8.2.1-ISS-SAMESSO-AA-FP0015_64.msp
  • RegisterBgMonitor.vbs
  • Widget_PSR_init.eas
Before you install this fix pack, ensure that you installed one of the following versions of AccessAgent:
  • AccessAgent (GA)
  • AccessAgent (Interim fix 1)
  • AccessAgent (Interim fix 2)
  • AccessAgent (Fix pack 4)
  • AccessAgent (Interim fix 5)
  • AccessAgent (Fix pack 6)
  • AccessAgent (Fix pack 7)
  • AccessAgent (Fix pack 8)
  • AccessAgent (Fix pack 9)
  • AccessAgent (Fix pack 10)
  • AccessAgent (Fix pack 11)

Installation Instructions

Installing the AccessAgent fix pack

  1. Download the AccessAgent installer file from Fix Central into your local computer. For example: C:\Temp.
    • For Windows 32-bit 8.2.1-ISS-SAMESSO-AA-FP0015_32.msp
    • For Windows 64-bit 8.2.1-ISS-SAMESSO-AA-FP0015_64.msp
  2. Perform the following steps:
  3. a. Create a Script folder in the same location where you downloaded the msp installer. For example: If you downloaded the msp installer in C:\Temp\, then create the C:\Temp\Script folder.

    b. Download the RegisterBgMonitor.vbs file from Fix Central.
    c. Put the RegisterBgMonitor.vbs file in the Script folder. For example: C:\Temp\Script\RegisterBgMonitor.vbs.
    d. The installer automatically runs the script file at runtime.
    • Ensure that there is no other folder named Script in C:\Temp.
    • Ensure that there are no other VBScript files inside the Script folder.
  4. Run the AccessAgent installer file with administrator privileges.
  5. Note: For Windows 7, right-click cmd.exe and choose Run as Administrator.
    • For Windows 32-bit msiexec /p "8.2.1-ISS-SAMESSO-AA-FP0015_32.msp"
    • For Windows 64-bit msiexec /p "8.2.1-ISS-SAMESSO-AA-FP0015_64.msp"
  6. Click Finish. The ISAM ESSO AccessAgent Installer Information window is displayed.
  7. Click Yes.
  8. Restart the computer.
  9. Right-click the AccessAgent tray icon in the system tray and select About ISAM ESSO AccessAgent. The AccessAgent version is displayed.
  10. If you successfully installed 8.2.1-ISS-SAMESSO-AA-FP0015, the AccessAgent version is updated to and the AccessAgent maintenance level is FP0015.

Silent Installation Procedure

You can also install the fix pack silently.

Before you begin

Ensure that you have administrator privileges.


Use the following script for silent installation on a command line. Note: For Windows 7, right-click cmd.exe and choose Run as Administrator.
  • For Windows 32-bit msiexec /p "8.2.1-ISS-SAMESSO-AA-FP0015_32.msp" /quiet
  • For Windows 64-bit msiexec /p "8.2.1-ISS-SAMESSO-AA-FP0015_64.msp" /quiet

Post Installation

APAR IV76205

Do the following procedures to update the Widget_PSR_init:

  1. Log in to AccessAgent as an IMS Server administrator.
  2. In AccessStudio, back up the existing Widget_PSR_init.
  3. Upload the new Widget_PSR_init.eas to IMS Server.
  4. AccessAgent is updated with the new widget after an automatic synchronization.

Note: Ensure that Widget_PSR_init is updated to version 1.0.1.

Delete all existing Privileged Session Recorder log files located in the AccessAgent log directory.
For example: C:\Program Files\IBM\ISAM ESSO\AA\logs

[{"DNLabel":"8.2.1-ISS-SAMESSO-AA-FP0015","DNDate":"11 Dec 2015","DNLang":"English","DNSize":"58185443","DNPlat":{"label":"Windows","code":"PF033"},"DNURL":"","DNURL_FTP":" ","DDURL":null}]
[{"Product":{"code":"SS9JLE","label":"IBM Security Access Manager for Enterprise Single Sign-On"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"AccessAgent","Platform":[{"code":"PF033","label":"Windows"}],"Version":"8.2.1","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
15 June 2018