How to update the IBM SDK for Java of Engineering Lifecycle Management products
Question & Answer
Question
How do you update the IBM SDK for Java (JRE) for existing IBM Engineering Lifecycle Management (ELM) applications?
Cause
IBM Engineering Lifecycle Management products based on Jazz technology are shipped with an IBM SDK for Java (JRE) that is based on the Oracle™ JDK. IBM releases critical patch updates (CPU) based on Oracle CPU updates that contain security vulnerability fixes for the JRE.
Answer
The IBM Engineering Lifecycle Management products based on Jazz technology can be updated with a corrected JRE by following the instructions in this document. Depending on how products are deployed and your usage scenarios, you might need to upgrade the JRE in IBM WebSphere Application Server (WAS), WebSphere Application Server Liberty, Apache Tomcat, and Eclipse. Be sure to upgrade all the components that your deployment uses. If you are referred to this technote from a security bulletin to perform a manual JRE update for a version that is not mentioned in this technote, it is safe to assume that the security bulletin is correct and that you can also apply the procedures in this technote to the JRE versions described in the security bulletin.
There are multiple places where the JRE must be updated. Exact steps depend on what Application Server and what clients you are using. See the flow chart to determine what actions you need to take. Instructions for each action are in the sections that follow. Note: IBM Jazz Team Server can be deployed on either IBM WebSphere Application Server or Apache Tomcat.
To obtain the latest JRE, search in Fix Central for the parent product ("IBM Engineering Lifecycle Management" for recent products and "Rational Collaborative Lifecycle Management" for previous versions), or contact IBM Support to request a fix with the new JRE version for the operating system and platform you are running the IBM Engineering Lifecycle Management Base (ELMB), the IBM Engineering Lifecycle Optimization - Engineering Insights (ENI) application server, CLM Server Monitoring plug-in (CSM), or Jazz Authorization Server (JAS) on. ELM is tested and supported by the IBM JRE that must be obtained from IBM support. Using a JRE downloaded publicly is not supported, unless it was downloaded from Fix Central. Once the JRE is obtained from Fix Central or IBM Support, follow the instructions in this document to replace the existing JRE:
Note: The applications might be running in different application server instances or that use a delegated converter.
Navigate to the original installation directory and rename the JRE folder <InstallDir>/server/jre to <InstallDir>/server/jre-Original
To ensure that the original JRE is kept as a backup if a restore is required.
Example (Linux): mv <OrigInstallDir>/server/jre <OrigInstallDir>/server/jre-Original
Extract the new JRE file provided by support to the installation directory.
Example (Linux):
tar zxvf ibm-java-jre-7.1-4.50-linux-x86_64.tgz -C <OrigInstallDir>/server/mv <OrigInstallDir>/server/ibm-java-x86_64-71/jre <OrigInstallDir>/server/
Restart the server.
Upgrading the JRE for a Tomcat installation
Stop the server.
Note: The applications might be running in different application server instances or that use a delegated converter.
Navigate to the original installation directory and rename the JRE folder <InstallDir>/server/jre to <InstallDir>/server/jre-Original
To ensure that the original JRE is kept as a backup if a restore is required.
Example (Linux): mv <OrigInstallDir>/server/jre <OrigInstallDir>/server/jre-Original
Extract the new JRE file provided by support to the installation directory.
Example (Linux):