Download
Downloadable File
| File link | File size | File description |
|---|---|---|
Abstract
This cumulative Fix Pack includes updates and defect fixes delivered since the release of IBM Tivoli Netcool/Impact version 7.1.0.
Download Description
Attention! Fix Pack 7.1.0-TIV-NCI-FP0038 has been re-published to include the following fix:
If you installed the original 7.1.0.38 fix pack but the scenario described in the known issue are not applicable to your environment, then no further action is needed. For further details and workaround on these issues, refer to the following support page: https://www.ibm.com/support/pages/node/7268526 All new installations or upgrades to Fix Pack 7.1.0.38 should use the refreshed package from Fix Central. |
IBM Tivoli Netcool/Impact Version 7.1.0.38 – Fix Pack Summary
This Fix Pack provides important updates for IBM Tivoli Netcool/Impact and its extension for Netcool Operations Insight.
Key Highlights:
- Cumulative Fixes: Addresses known issues and internally identified defects since version 7.1.0.
- Enhancements: Improves stability, performance, and compatibility across supported environments.
- Java Upgrade: Updated to Java 17 for enhanced security and long-term supportability.
Notes:
- Before installing this Fix Pack, ensure that your environment is at the required base level.
- TBSM environments are not supported on version 7.1.0.36 or later.
To view details on specific Known Issues, visit the IBM Support Search site, enter the Known Issue identifier, and click Search.
For installation instructions and a full list of fixes and enhancements, please refer to the 7.1.0-TIV-NCI-FP0038-README file.
Prerequisites
This Fix Pack is cumulative and includes all maintenance updates released since the General Availability (GA) of Impact version 7.1.0.
It also upgrades the bundled Java runtime to Java 17.
You can apply this Fix Pack directly to the base V7.1.0.14 product release, or to any subsequent fix pack or interim fix.
For more information, please refer to the official documentation or contact IBM Support.
- Systems running versions 7.1.0.0 through 7.1.0.3 must be upgraded incrementally to the following levels:1. Upgrade to version 7.1.0.42. Upgrade to version 7.1.0.14After both upgrades are completed, this Fix Pack can be applied.
- Systems running versions 7.1.0.4 through 7.1.0.13 must first be upgraded to version 7.1.0.14 before applying this Fix Pack.
Before installing or upgrading IBM Tivoli Netcool/Impact, download and review the attached 7.1.0-TIV-NCI-FP0038-README file. Pay particular attention to section 3.0 "Installation Information" and its subsections.
Important: IBM will no longer release Netcool/Impact Fix Packs for Solaris after version 7.1.0.35. For more information: https://www.ibm.com/support/pages/node/7160024
Installation Instructions
Installation Instructions and Additional Information
Detailed installation steps are provided in section 3.0 "Installation Information" of the attached 7.1.0-TIV-NCI-FP0038-README file.
For comprehensive details on enhancements, prerequisites, installation procedures, and known issues, please refer to the full README document.
Problems Solved
Known Issues Resolved:
DT452712: The mapRoles.sh utility reports groups are assigned to roles when they are not.
DT454234: Impact looping with error in RoundRobinEventQueueManager
DT455113: DSA configuration resets after applying Fix Pack 7.1.0.37
DT455462: FP36 update fails with SSL TLSv2 message
DT455812: JRExec Server fails to start after applying Fix Pack 7.1.0.37
DT456408: Kerberos Auth fails when multiple oracle accounts are used with different datasources
DT456974: User Preferences Not Persisting
DT457010: startImpactServer.sh allows non-root install to be started as root
DT457267: PolicyLogger settings not fully propagated to runtime following primary/secondary role switch
DT457301: Data source TestSocketConnection doesn't pickup changes added in the GUI
DT457304: NoRouteToHostException for Insert-Only Omnibus Event Readers, which use IDUC starting at Fix Pack 7.1.0.37 (DT442123)
DT457432: When Sub Grouping is enabled the FirstOccurrence for the Parent event is not correct
DT457434: After upgrade to FP36, removing the NOI extension from Installation Manager leaves NOI components in place on Impact.
DT457574: In FP37, ReturnEvent function fails for policies triggered by Insert Only Event Readers
DT460043: FP37 install fails when user had $TMPDIR set
DT460113: Netcool/Impact Derby DB - when Encrypted and SSL Mode enabled, the URL has duplicate bootPassword and ssl parameters
DT460116: Netcool/Impact nci_db utility does not work in SSL Mode
DT460288: svn commit error getting logged in secondary cluster member when using nci_policy push command to update the policy
DT460650: Unable to suppress "WARN [NOIProcessRelatedEventPatternsRequest] OS to Impact mapping already exists" message
DT460655: JRExec SSL keystore type defaults to JKS
DT461412: Improve confAuth4LDAP to take backup of keystores for simpler and more reliable rollback
DT463491: The impactadmin LDAP account is locked out by the impactgui pod
DT463693: Create KI for variable (Server Name) NCI to reflect accurately the actual name of the server from confAuth4LDAP script
DT464676: Improve Omnibus connection handling when Omnibus Authentication is enabled.
DT452242: NOI on-prem Event Analytics Configuration errors, if non-integer fields are marked as actionable
DT455374: Fix Pack Upgrade takes excessive time due to slow password migration
DT456668: Intermittent decrypt() password failures in policies/data sources
DT464953: CallStoredProcedure function producing excessive logging
DT465092: FP38 Upgrade Installer dynamic space assessment for backups
DT467170: Impact 7.1.0 FP38 upgrade fails if self-monitoring is enabled
Security-related Known Issues:
DT457256: UPGRADE JAVA IN IMPACT 7.1.0.38
DT457258: UPGRADE WEBSPHERE LIBERTY IN IMPACT 7.1.0.38
DT459858: UPGRADE LOG4J TO VERSION 2.25.3
DT460111: Netcool/Impact bootPassword printed in log file when using encrypted Derby DB
DT465064: UPGRADE IMMUTABLEJS IN IMPACT
List of Impact Known Issues that have documentation updates or have additional information:
DT452710: Impact mapRoles.sh utility docs don't explain GUI and backend roles.
DT453946: Add mutual authentication topic to documentation
DT456669: Doc: Impact 7.1.0.37 Upgrade considerations for policies using decrypt()
DT454537: Service runtime state persists across cluster failover/failback even when AutoStart is disabled
IRISCART-I-2068: Keycloak AuthorizationStarting with Impact Fix Pack 7.1.0.38, deployers can integrate Keycloak authentication with Netcool/Impact.
For more information, refer to:
https://www.ibm.com/docs/tivoli-netcoolimpact/7.1.0?topic=server-enabling-keycloak-openid-connect-authenticationDT460116: Updated nci_db to support encrypted connections
The nci_db tool has been updated to support encrypted connections up to and including TLS v1.3. To encrypt
the connection, set the SSL options in the command line.For more information, refer to:
https://www.ibm.com/docs/tivoli-netcoolimpact/7.1.0?topic=server-connecting-database-command-line-clientDT461412: Rollback and usability improvements for the confAuth4LDAP script
Several usability enhancements have been added to the confAuth4LDAP script, including improved detection of invalid keystores,
a more robust backup and rollback mechanism, and enhanced logging.For more information about the LDAP topic, refer to:
https://www.ibm.com/docs/tivoli-netcoolimpact/7.1.0?topic=servers-ldap
Known Side Effects
For a complete list of known issues including late breaking issues, refer to the Known issues support page:
For known issues related to Cloud Native Event Analytics, refer to the following link:
Websphere Liberty Fix PH69658 breaks Impact scripts
Symptom: After applying Websphere Liberty Interim Fix PH69658, security related scripts will fail with the following error:
"Error: When using AES encoding, one of the following arguments must be specified:
--key, --base64Key, --aesConfigFile, or --keyring."
Affected Scripts:
confAuth4LDAP.sh/bat
confAuth4OMNIbus.sh/bat
configImpactSSO.sh/bat
configUsersGroups.sh/bat
resetAdminPassword.sh/bat
resetLDAPAdminPassword.sh/bat
resetOMNIbusPassword.sh/bat
Resolution: Un-install the interim fix PH69658.
Refer to the following IBM support article for further guidance:
https://www.ibm.com/mysupport/s/defect/aCIgJ000000BSx3/dt465367- SSL Certificate Validation Failure in Impact Health Checker
Symptom: Starting with Impact 7.1.0 Fix Pack 32, the Health Checker validates SSL certificates during fix pack upgrades. If expired or invalid certificates are detected, the upgrade may fail.
Resolution: To bypass SSL certificate validation during the upgrade, set the following environment variable before running the upgrade scripts (update_*.bat or update_*.sh):
impactbypasscertcheck=true
Platform-Specific Instructions:
Windows:
1. Set the environment variable in either the System Properties profile.
2. Open a new command window.
3. Run the following command:
echo %impactbypasscertcheck%
Ensure it returns true before re-running the upgrade script.
Unix/Linux:
1. Set the environment variable:
export impactbypasscertcheck=true
2. Confirm with:
echo $impactbypasscertcheck
IMPORTANT:
Remove the impactbypasscertcheck environment variable after the upgrade is complete to restore standard certificate validation. - NOI Inference Service can exceed its memory limit resulting in pod restartSymptom: When running under a heavy event load the Inference Service can exceed it's memory limit resulting in pod restartResolution: Scale the Inference Service to include 3 or more replicas. This will ensure that service is not impacted while one pod restarts
- PKIX Path Building Failure during Event Analytics ConfigurationSymptom: Event Analytics displays a "PKIX path building failed" exception error when launching the on-prem Event Analytics Configuration page:
"PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target."Resolution: Export the Impact UI SSL certificates and them into the backend Impact server’s trust store.
Refer to the following IBM support article for further guidance:
https://www.ibm.com/docs/en/tivoli-netcoolimpact/7.1.0?topic=manually-exchanging-certificates-between-impact-servers
Document Location
Worldwide
Product Synonym
Tivoli; Netcool;IMPACT;NOI
Problems (APARS) fixed
Problems (APARS) fixed
Was this topic helpful?
Document Information
Modified date:
03 April 2026
UID
ibm17184732