Fix Readme
Abstract
This document contains release information for Financial Transaction Manager for Interac e-Transfers for Red Hat OpenShift 4.0.3.
Content
Financial Transaction Manager (FTM) for Interac e-Transfers for Red Hat OpenShift 4.0.3 Release Information
Contents Common Across Releases
| Release | Channel | Operator | Operand | Supported Operands | Case |
|---|---|---|---|---|---|
| 4.0.3.0 | v4.0 | 4.0.0 | 4.0.3.0 | 4.0.3.0 | v4.0.3 |
| 4.0.3.0 interim fix 1 | v4.0 | 4.0.1 | 4.0.3.0_iFix1 | 4.0.3.0_iFix1 & 4.0.3.0 | v4.0.4 |
| 4.0.3.0 interim fix 2 | v4.0 | 4.0.2 | 4.0.3.0_iFix2 | 4.0.3.0_iFix2 & 4.0.3.0_iFix1 | v4.0.5 |
| 4.0.3.0 interim fix 3 | v4.0 | 4.0.3 | 4.0.3.0_iFix3 | 4.0.3.0_iFix3 & 4.0.3.0_iFix2 | v4.0.6 |
| 4.0.3.0 interim fix 4 | v4.0 | 4.0.4 | 4.0.3.0_iFix4 | 4.0.3.0_iFix4 & 4.0.3.0_iFix3 | v4.0.7 |
| 4.0.3.0 interim fix 3.1 | v4.0 | 4.0.5 | 4.0.3.0_iFix3.1 | 4.0.3.0_iFix3.1 & 4.0.3.0_iFix3 | v4.0.8 |
| 4.0.3.0 interim fix 6 | v4.0 | 4.0.6 | 4.0.3.0_iFix6 | 4.0.3.0_iFix6 & 4.0.3.0_iFix3.1 | v4.0.9 |
| 4.0.3.1-Fixpack1 | v4.0 | 4.0.7 (head) | 4.0.3.1 | 4.0.3.1 & 4.0.3.0_iFix6 | v4.0.10 |
When you upgrade a fix pack or interim fix (iFix), in addition to the changes in the level that is being upgraded to, be sure to review the changes in the intermediate fix packs or interim fixes (iFixes).
Example:
- If currently at level fix pack 6 and upgrading to level 4.0.3.1, then review the changes in both ifix6 and 4.0.3.1.
| Back to top |
Common Across Releases
|
Fix list
For a list of fixes, see V4.0.3 Fix List for Financial Transaction Manager for Interac e-Transfers for Red Hat OpenShift.
Data Setup Utility
The following documentation describes the changes for the data setup utility (DSU) and the import and export workbooks:
- DSUmigration_v4.0.3.pdf
- DSUMigrationBR_v4.0.3.pdf
These documents are provided in the entitled documentation fix pack. For more information about getting this fix pack, refer to the Entitled Documentation section.
Transaction Server Scheduler XML
The following documentation describes the changes to the scheduler XML for the Transaction Server component:
- TransactionServerSchedulerChanges_v4.0.3.pdf
Entitled Documentation
The entitled documentation fix packs for the FTM offerings can be downloaded from Fix Central by using the following links:
- Documentation fix pack for Interac e-Transfers
- Documentation fix pack for Digital Payments
- Documentation fix pack for Immediate Payments
- Documentation fix pack for FTM (base)
| Back to top |
4.0.3.1-Fixpack1
|
Deployment
| Back to top |
4.0.3.0 interim fix 6 release
|
Deployment
- WslParty38ChoiceLimitedId20,
- WsIOrganisationIdentification29LimitId20,
- WsIGenericOrganisationIdentification1LimitId20.
- Locate the Interac artifacts pod named: ftm-artifact-interac-*
- Copy the file /home/ftmuser/ftm/artifacts/ftm-db2-check-4.0.3-iFix6-latest.zip from the Interac artifacts pod
- Extract the contents of this downloaded file.
- Locate the ../ibm/ftm/shared/v403/pfs/Database/db2/{os}/util folder in the extracted directory structure.
- Locate the PAY_AND_NON_PAY_TXN_V.PayOnly.ddl file.
| Back to top |
4.0.3.0 interim fix 3.1 release
|
Deployment
| Back to top |
4.0.3.0 interim fix 4 release
|
| Back to top |
4.0.3.0 interim fix 3 release
|
Deployment
| Back to top |
4.0.3.0 interim fix 2 release
|
Deployment
| Back to top |
4.0.3.0 interim fix 1 release
|
Deployment
Work-around: Before you do the migration as documented in DSUMigration_v4.0.3.pdf, replace the file FeatureXREF.xls with the updated version (named D122994_FeatureXREF.xls).
This file is in the entitled documentation fix pack. For more information about getting the fix pack, refer to the Entitled Documentation section.
/payment/origination/credit-transfer/{ftm-transaction-id}/cancel
Feature changes
Framework for providing the Init container support
- Use your own image to integrate with external credential management systems to get the FTM secrets
- You can provide ENV variables, config files, and passwords to the framework by using Red Hat OpenShift ConfigMaps and secrets
- Support for regular values as well as files (with base64 encoding)
121601- Implementation of pre-stop hooks in Java Platform, Enterprise Edition images
Pod shut down logic for Java Platform, Enterprise Edition containers was implemented to help ensure the orderly termination of Liberty application servers.
To assign an IBM MQ pod to a specific worker node, attach the label ftm-mq=yes to the target worker node of OCP cluster.
For more information, refer to the deployment section in the FTM online documentation.
FTM now supports CLIENT_CERT authentication for all web services components. For more information about how to enable this authentication by using config drop-ins, refer to IBM_FTM_V40_Security_Configuration.pdf, which is available to entitled users.
This file is in the entitled documentation fix pack. For more information about getting the fix pack, refer to the Entitled Documentation section.
WebServices_BusinessRules
WebServices_Gateway
WebServices_PFS
WebServices_Interac
WebServices_InteracInboundNotifications
WebServices_InteracCustomerEmulator
WebServices_InteracFraudEmulator
WebServices_InteracPaymentEmulator
WebServices_EAR (Engine)
Migration
Database migration is required. Use the instructions in the MIGRATE from Release 4.0.3.0 TO Release 4.0.3.0 iFix1.txt file. This file is in the entitled documentation fix pack. For more information about getting the fix pack, refer to the Entitled Documentation section.
Also, data migration is required for existing WIP RECORD entries. For each business day, do the following update per the command in the FTM_Database_Migration_Update_Command.txt file. This file is provided in the entitled documentation fix pack. For more information about getting this fix pack, refer to the Entitled Documentation section.
| Back to top |
4.0.3.0 release
|
Deployment
121368 - Resolved in 4.0.3.0 interim fix 1
Gateway Server has an SQL CODE: -302 error when the initiateCreditTransfer clearing_system_member_identification value has length of 32 to 35 characters.
High Availability
Additional resiliency is needed in some scenarios to improve the handling of error detection or auto recovery. This resiliency is addressed in the interim fix delivery.
120369
Interac Payments with backspace character in the payment payload are not supported and are rejected immediately in the FTM Outbound (Channel) API. Interac Payments with tab, new line, and carriage return characters are posted to the Interac Network correctly, but render as \t, \n and \r in the Control Center and OAC user interfaces.
119353 - Resolved in 4.0.3.0 interim fix 1
The Interac solution can support only Debtor names of 20 characters. If debtor name is longer than 20 characters, it is truncated to 20 characters and stored in database.
121619 - Resolved in 4.0.3.0 interim fix 1
FTM is not looking at the response body for HTTP 503 errors when it is communicating with the Interac network. This change in the response body by Interac for 503 return codes was accidentally overlooked. This problem means that the code and text that was supplied in the error scenario is not reported in the FTM repository and response to the caller.
1211147 - Resolved in 4.0.3.0 interim fix 1
Retry Delay set to 2 seconds for realtime payment types. In testing, the delay can take 2 - 7 seconds to send a retry attempt.
Feature changes
Enhanced UTF-8 Support
Implemented UTF-8 character support for DSU, Distribution Manager, and Business Rules Server.
- DSU can import and export configuration with UTF-8 characters.
- Operator is able to activate release (build and validate TBL file)
- Business Rules Server successfully receives the activated descriptors or file and process the activated releases.
- Business Rules Server is able to process transmissions and transactions that include UTF-8 characters.
Enhanced software upgrade capabilities and process management
Improved reliability of the Business Rules Server rules activation
The Business Rules Server now uses a database polling mechanism to load business rules upon activation by using the ENVIRONMENT database table settings.
Improved flexibility and scaling capabilities for the IBM App Connect Enterprise and IBM MQ containers
FTM split the combined containers into separate IBM App Connect Enterprise and IBM MQ containers.
The IBM MQ container is now a separate container that is running IBM MQ 9.2. IBM App Connect Enterprise 11.0.0.11 is running in separate IBM App Connect Enterprise containers.
Benefits of the split:
- Ability to deploy IBM App Connect Enterprise and IBM MQ separately
- Ability to have IBM App Connect Enterprise connect to a remote queue manager
- Ability to customize the IBM App Connect Enterprise deployment topology as required
- Ability to have multiple IBM App Connect Enterprise containers
- Ability to set resources (CPU and memory) for the IBM App Connect Enterprise and IBM MQ containers separately
- Provide features of both auto and manual scaling for IBM App Connect Enterprise containers
Additional error codes to better identify the source system in error scenarios
FTM is providing more error codes to help better identify the source system in which an error scenario occurs.
These additional error codes are provided with the FTM configuration sheets for the TCH and Interac references.
The following error codes were added and linked to categories for better clarity. The category linked to these error codes represents the source system (or process) that identified the issue.
| Error Code | Category |
| INT-ScorePayment | Interac Network |
| INT-CreatePayment | Interac Network |
| ACCT-Inquiry | Accounting System |
| ACCT-Credit | Accounting System |
| ACCT-DebitCredit | Accounting System |
| ACCT-FundsReserve | Accounting System |
| DUPLICATE | Duplicate Detection |
| FRAUD | Fraud Detection |
| SANCTION | Sanctions |
For Interac, the error code and category is available on the JSON Response for 'Initiate Credit Transfer' for information purposes.
Improved security of communication between FTM components
FTM communication between components is now more secure with TLS encryption.
IBM MQ and Db2 communications are running over TLS.
The Java Platform, Enterprise Edition, J2SE, and IBM App Connect Enterprise client applications connect over a TLS protocol.
The procedure to generate (if self-signed certificates) and configure TLS certificates used by all the FTM components is documented by FTM. The default CipherSuite/CipherSpec used by IBM MQ and all the clients is SSL_RSA_WITH_AES_128_CBC_SHA256/TLS_RSA_WITH_AES_128_CBC_SHA256. This default can be customized during deployment with the Operator Instance YAML.
LTPA keys by default
No customization is required. LTPA keys are managed by the individual Java Platform, Enterprise Edition Liberty server instances. The default configuration is used and LTPA keys are created when the application pod starts.
Readiness and liveness health check probes and prestop pod lifecycle event
FTM now comes with health check probes (readiness and liveness) and with prestop pod lifecycle events implemented.
Readiness and liveness probes: During the rolling upgrades, the new version pod is created and when it becomes ready, Red Hat OpenShift deletes the old pod. Red Hat OpenShift runs the readiness probe to decide whether the pod is ready or not. Unless the probe returns success, it does not mark the new pod in ready state.
Liveness probes are run periodically, like a readiness probe. If a liveness probe fails, Red Hat OpenShift restarts the container.
Prestop pod lifecycle event: Red Hat OpenShift allows adding the PreStop hook to be run inside the container before Red Hat OpenShift deletes the container. This script is called by Red Hat OpenShift before it deletes the container.
Customize FTM by using ConfigMaps
FTM operator now supports configmap-based approach to let user provide custom server.xml or other configuration files in addition to the persistent volume-based approach. Separate ConfigMaps are created for each FTM component, and the customer can place all the customized files in those ConfigMaps. This method is useful for customers who do not use persistent volumes or do not have easy access to the persistent volumes from outside the container. This method is supported for JSE and Java EE components.
Usage count metering differentiates between production and non-production environments
The FTM metering application, which is in the OAC pod, now differentiates between production and non-production usage counts. The differentiation is made based on the "Environment type" variable under "License" category of IBM FTM Base Operator.
- Customers should set this variable to "Production" or "NonProduction" based on the type of environment they are building during the operator installation.
- Regardless of "Environment type" value, all usage counts are calculated and stored in the database.
- Only production mode usage counts are reported to the IBM License Server, which is in the "ibm-common-services" namespace and is shared across all projects.
Enhance Interac Fraud Flow to propagate Interac participantFraudInstruction
The Participant Fraud Instruction field in the send payment call to Interac provides the participant FI the option to override the Interac fraud detection decision.
This field is an optional field and if the participant FI does not provide the ‘participant_fraud_instruction’ field, Interac does a rescore of the payment.
Interac accepts one of the following values in the ‘participant_fraud_instruction’ field.
1. INTERAC_TO_ALLOW:
This value from participant FI notifies Interac to simply trust the fraud judgment that was made by the participant FI and to let the payment through.
2. INTERAC_TO_BLOCK:
This value from participant FI applies only for non-real time payments. It is used to notify Interac to initiate the payment, but to keep it in a blocked state.
3. INTERAC_TO_SCORE:
This value from participant FI notifies Interac to proceed and score the payment as usual.
Note: If Participant FI does not share the value of participant_fraud_instruction’, ‘INTERAC_TO_SCORE’ behavior is used as the default by Interac.
1) Use the debtor name value to test the various cases ALLOW, SCORE, and BLOCK
2) Based on the debtor name value, the fraud response has the data under supplementary data section with key as participant_fraud_instruction
3) Based on fraud response values, the send payment request call has the value for participant_fraud_instruction.
To BLOCK debtor name value in input: SOF.BLOCK
To SCORE debtor name value in input: SOF.SCORE
Update Initiating Party handling to incorporate usage of Interac Registration ID when Participant ID is provided
Interac Events - Request for Payment Schedule Notifications
Interac Notifications API: FTM accepts Interac pushed Request for Payment Scheduled notifications. FTM logs the notification and can be customized to publish the notification to external systems.
Reject Interac Payment When Assigned to Open (Not Active) Business Day
Interac Send Money
FTM rejects an Interac Send Money transaction when the transaction gets assigned to a business day that is not active. The feature ensures a payment does not accidentally get stalled due to system misconfiguration.
Implement Interac Inbound Heartbeat
Interac Notifications API: FTM implemented the /heartbeat operation of the Interac Notifications API. FTM responds positively to the Interac Network's heartbeat requests when FTM is healthy and can receive and process Interac Push Notifications and responds negatively when FTM is unable to receive and process Interac Push Notifications.
Enhance eTransfers Workflow to Assign Error Code to Items Whose ISF Data field is Not Current
Interac Send Money: FTM rejects an Interac Send Money transaction if the transaction with a specific error code when the FTM Gateway is misconfigured. The feature ensures a payment does not accidentally get stalled due to system misconfiguration.
Reject payment when debtor not enrolled into Interac
FTM rejects an Interac Send Money transaction when its debtor is not enrolled in the Interac e-Transfers scheme.
Gateway’s Transmission Rule does the following checks:
- Originator is Defined
- Originator is Authorized for Product
FTM accepts Interac pushed Payment Scheduled notifications. FTM logs the notification and can be customized published the notification to external systems.
FTM now supports canceling Interac transactions by using the Digital Payments Control Center user interface, on the Inbound Transaction page at Origination & Receipt > Transactions.
This action can be run by using More > Actions > Cancel, and requires transactions to have the 'Interac e-Transfers' Payment Scheme and have an FTM base Status of 'Outgoing Payment Pending Creditor Action' (S_OutgoingCTPendingCreditorAction).
When the user clicks Cancel, a dialog box opens. The dialog box has three cancel actions available, Cancel, Force Cancel, and Force complete, each with different workflows and user input fields.
After the cancel is initiated, a message is sent to the Immediate Payments command queue and is then processed by an Immediate Payments workflow.
PFS Participant Directory UI: Interac Customer Support (Toggle, Create, Update)
Interac Customer Screen
A new participant directory page was added to 4.0.3, which allows viewing, creating, editing, and toggling of an Interac customer with the Interac Network.
Permissions
New view and edit permissions for access control were added. Note: Edit permission is required for using the toggle button.

Interac Customer page
A new Interac customer page is visible if the user has view permission and the selected participant has the Interac Customer role. This page is an operational data page that is editable only when the latest, active version of the participant is viewed.
If a participant is not registered with the Interac network, the page is in create mode. In create mode, the Interac participant user ID is editable. By default, this value is set to the participant ID, but can be changed.


After it is saved, the Interac participant user ID cannot be changed. If the user has edit permission, a toggle button appears to activate or deactivate the Interac customer.

Note: If the participant has no addresses, you cannot select address information



When the toggle button is clicked, a dialog box that asks for a reason for toggling this Interac customer is opened.

Retry Requirements from (send Money only)
HTTP Error Code (by default only HTTP code 408 is retried)
Key : RETRY
Value : comma-separated code lists
Key : RETRY
Value : comma-separated code lists
Key : REJECT
Value : comma-separated code lists
Category : HTTP_RESPONSE_CODES
Key : INDETERMINATE
Value : comma-separated code lists
Key : INDETERMINATE
Value : comma-separated code lists
The REJECT list supersedes the RETRY list and causes a reject.
The INDETERMINATE lists indicate that at the end of retries the payment must not be auto rejected. This behavior is because it is not known whether the payment was received by the external system.
Key : INTERAC_SENDMONEY
Value : integer value in seconds
Key : INTERAC_SENDMONEY/<interac payment type>
Value : integer value in seconds
Key : INTERAC_SENDMONEY
Key : INTERAC_SENDMONEY/<interac payment type>
Value : integer value
Automatically Reject Interac Payment When Stalled in Transaction Mapped
The design of the automated workflow includes the following changes:
2.Timeout Config:
Digital Payments Integration Package adds the following config value:
Category : IP_OBJ_STATUS_TIMEOUT
Key : S_TxnMapped
Value : 60 (seconds)
The default values for Reason code and Reason can be changed by updating FTM.VALUE table by setting the CATEGORY to ‘IP_CONFIG’ and the KEY value to one of the following values:
(a) INTERNAL_TIMEOUT_REASONCODE for Reasoncode
(b) INTERNAL_TIMEOUT_REASON for Reason
Available general options – Events configuration for WS transaction timeout
Category : CORE
Key : MAP_TIMEOUT_ACTION
Value : see the following table
| Options configured for WS transaction timeout | Events raised |
|---|---|
|
OPERATOR
(Available operator actions are: Cancel or Continue)
|
E_MapTimeoutOperator |
| CONTINUE | E_MpInTxnMapped |
| FAILED | E_MpInTxnMapFailure |
| Event | Specific event |
| Default | E_MapTimeoutFailed |
| ABORT: For Future use | E_MpInMappingAborted |
Enrich/Fetch Interac Participant ID information from participant directory and pass it to Interac
<Addenda xsi:type="isf:ISFMessageAddenda">
<SourceData>
<MessageData>
<Expiry>
<Period>10000</Period>
<Action>RJCT</Action>
</Expiry>
</MessageData>
</SourceData>
</Addenda>
| This function is related to [Payment APIs] Add to Error Code a Source System Attribute and Include in RESTful API Responses [#23] (116606) Where the system is configured to record PFS errors as additional error records in Immediate Payments, the Status to Debtor ISF includes the PFS error Category in the Originator element of the StatusReason ISF. |
2) For a few fields, minLength is added.
FTM includes the fraud case ID in the ISF message that is transmitted to the fraud system of the bank for RTD fraud check and sanction check. It also includes this fraud case ID in the send payment request to Interac.
The FTM base, Immediate Payments, Digital Payments, or Interac case bundles have the same ImageContentSourcePolicy that configures the cp.icr.io/cp and docker.io/ibmcom to mirror to the local customer repository. The ImageContentSourcePolicy should be applied in the FTM base case bundle. You do not need to reapply the policy for Immediate Payments, Digital Payments, or Interac e-Transfers. By applying the policy only one time, the worker nodes are restarted only during the FTM base installation.
Red Hat OpenShift plans to avoid restarting the worker nodes on ImageContentSourcePolicy configuration in future releases.
Was this topic helpful?
Document Information
Modified date:
10 June 2022
UID
ibm16430593