PH61411: WAS PASSWORD ENCRYPTION CAUSES DELAYED TRANSACTIONS

APAR status

• Closed as program error.

Error description

• Transactions become slow when AES decryption happens during
  runtime.
  
  Occasionally, the encryption/decryption cause hang thread with
  the following thread dump.
  
  -------------------------------------
  [7/10/24 1:38:44:461 IST] 0000003b ThreadMonitor W WSVR0605W:
  Thread "WebContainer : 5" (00000224) has been active for
  713214 milliseconds and may be hung. There is/are 1 thread(s)
  in total in the server that may be hung.
  at com.ibm.crypto.provider.MD5.a(Unknown Source)
  at com.ibm.crypto.provider.MD5.engineDigest(Unknown Source)
  at
  com.ibm.crypto.provider.PBEWithMD5AndTripleDESCipher.engineInit(
  Unknown Source)
  at
  com.ibm.crypto.provider.PBEWithMD5AndTripleDESCipher.engineInit(
  Unknown Source)
  at javax.crypto.Cipher.init(Unknown Source)
  at javax.crypto.Cipher.init(Unknown Source)
  at com.ibm.crypto.provider.I.a(Unknown Source)
  at com.ibm.crypto.provider.JceKeyStore.engineGetKey(Unknown
  Source)
  at java.security.KeyStore.getKey(KeyStore.java:1038)
  at
  com.ibm.ISecurityUtilityImpl.aes.DefaultEncryptionKeyManager.get
  Key(DefaultEncryptionKeyManager.java:135)
  ....
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  *                  planning to use or currently using AES      *
  *                  encryption                                  *
  ****************************************************************
  * PROBLEM DESCRIPTION: AES encryption-related processes can    *
  *                      lead to slow transactions, timeouts, or *
  *                      thread hangs under high system load     *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Potential Problem Symptoms:
  1. Slow transaction processing during AES password encryption
  and
  decryption.
  2. SOAP connection timeouts when enabling AES encryption via
  AdminTask.enablePasswordEncryption() command.
  3. AES encryption/decryption threads may hang during system
  overload.
  

Problem conclusion

• Performance improvement has been made.
  
  The fix for this APAR is targeted for inclusion in fix pack
  9.0.5.22 abd 8.5.5.27.
  For more information, see 'Recommended Updates for WebSphere
  Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels