IT40996: IBM STORAGE INSIGHTS FAILS TO ADD STORAGE DEVICES DUE TO LEGACY TLS PROTOCOL.

APAR status

• Closed as program error.

Error description

• DETAIL OF PROBLEM:
  Storage Devices that use legacy TLS 1.0 or 1.1 fail to be added
  to IBM Storage Insights with the following possible error(s):
  
  i.e.
  2022-03-11 07:18:46.791-0500 [pool-1-thread-1902]
  [XIVUtils.xivConfig] [ERROR] Error Collecting Config Information
  for XIV device with IP: <ip_address> using username
  <unique_username>
  javax.net.ssl.SSLHandshakeException: The server selected
  protocol version TLS10 is not accepted by client preferences
  [TLS12]
  
  Work around (security issue, continue at your own risk):
  Review the information on enabling the collection of metadata
  for devices that use TLS 1.0 or 1.1:
  https://www.ibm.com/docs/en/storage-insights?topic=didc-enablin
  g-collection-metadata-devices-that-use-tls-10-11
  ____________________________________________________
  DB2 Version used for Server: N/A
  The defect is against component: 5608TPCSI
  Server/Manager build/release (TPC): 5.4.x
  Agent build/release (TPC):
  Server/Manager (OS): N/A
  Agent (OS):  N/A
  ____________________________________________________
  Problem as described by customer: Unable to add XIV Storage
  Device to Storage Insights
  Initial customer impact (low/med/high): low
  

Local fix

• Local Fix: none
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Storage Insights users adding storage device which is    *
  * only configured with legacy TLS protocol                     *
  *                                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Storage devices that use legacy TLS 1.0 or 1.1 fail to be    *
  * added to IBM Storage Insights, and it isn't really clear why *
  * it wasn't added.                                             *
  *                                                              *
  * Work around (security issue, continue at your own risk):     *
  *                                                              *
  * Review the information on enabling the collection of         *
  * metadata                                                     *
  * for devices that use TLS 1.0 or 1.1:                         *
  *                                                              *
  * https://www.ibm.com/docs/en/storage-insights?topic=didc-enab *
  * lin                                                          *
  * g-collection-metadata-devices-that-use-tls-10-11             *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  This fix will surface to the user more details surrounding why
  the device add failed.
  

Problem conclusion

• The fix for this APAR is targeted for the following release:
  
  IBM Storage Insights 3Q22   [ 54X-IBM-SI ]
  ( release target 3Q 2022 / August )
  
  The target dates for future releases do not represent a formal
  commitment by IBM. The dates are subject to change without
  notice.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STORAGE INSIGHT

• Fixed component ID

  5608TPCSI

Applicable component levels