This fix pack contains several fixes for problems in the various components that comprise the Tivoli Key Lifecycle Manager Version 1.0 software.
APARs fixed by 1.0.0-TIV-TKLM-FP0004
List of fixes
APARs fixed by 1.0.0-TIV-TKLM-FP0004
APAR fixes included from Fix Pack 3
| APAR No. |
Sev. |
Abstract |
| IZ81352 |
3 |
THE REFERENCE GUIDE FOR TKLM v1 IMPLIES THAT THE COMMAND TKLMGROUPENTRYADD WILL ACCEPT MULTIPLE KEY VALUES OR ALIAS RANGE (Documenation Change) |
| IZ84588 |
3 |
IMPROVEMENTS IN CRYPTOGRAPHIC OPERATION HANDLING FOR FIPS 140-2 MODE
|
| IZ84600 |
3 |
KEY EXPORT FAILURE WHEN FIPS IS ENABLED |
| IZ84617 |
2 |
KEYSERVER ERROR HANDLING WHEN DB2 IS NOT RESPONDING OR DOWN |
| IZ84618 |
3 |
JAG4 ENABLEMENT |
APAR fixes included from Fix Pack 3
| APAR No. |
Sev. |
Abstract |
| OA28879 |
3 |
TKLM DID NOT REESTABLISH PORT LISTEN AFTER TCPIP RECYC |
| OA30311 |
3 |
UNABLE TO MOVE EXISTING KEY BETWEEN TWO TKLM KEYSTORES WITHIN A PLEX. WANTS TO MOVE KEY FROM ONE KEYSTORE TO ANOTHER. |
| IZ58749 |
3 |
TIP SERVICE IS NOT GETTING SET UP CORRECTLY DURING TKLM V1 INSTALL ON WINDOWS PLATFORMS. |
| IZ53864 |
3 |
COMMAND LINE REFERENCE DOES NOT PROPERLY EXPLAIN HOW PATHS ARE REFERENCED IN CLI COMMANDS ON WINDOWS PLATFORMS FOR TKLM |
| IZ59680 |
3 |
INCONSISTENCY IN ERROR MESSAGES FOR TKLMKEYLIST & TKLMCERTLIST |
| IZ59685 |
3 |
EXPIRED CERTIFICATES CAN BE SET AS SYSTEM DEFAULT AND/OR SYSTEM PARTNER EVEN IF CERT.VALIDATE=TRUE |
| IZ59690 |
3 |
INSTALLING TKLM FIX PACK WITHOUT FIRST CONFIGURING MASTER KEYSTORE WILL SHOW ERROR |
| IZ59701 |
3 |
TKLMKEYIMPORT ONLY DISPLAYS PRIVATE KEY AND NOT PUBLIC KEY IN TKLM DB |
| IZ59774 |
3 |
THE IBMPKCS.JAR IS NOT BEING INSTALLED IN THE RIGHT PLACE ON A SOLARIS SYSTEM |
| IZ60527 |
3 |
TKLM UI ALLOWS SETTING OF TCP AND SSL PORTS TO SAME VALUE |
| IZ60537 |
3 |
CANNOT ADD DEFAULTROLLOVER WITH CURRENT DATE BETWEEN 0-9 |
| IZ60751 |
3 |
Delete & Modify button remain enabled even cert is not selected |
| IZ54633 |
2 |
TKLM V1 INSTALL ON SUSE 10 LINUX PLATFORM CORRUPTS /ETC/PASSWD
AND /ETC/SHADOW FILES. |
| IZ60763 |
3 |
KEYSIZE OF IMPORTED KEYS IS NOT CALCULATED CORRECTLY |
| IZ61332 |
3 |
THE TKLM UNINSTALLER WILL NOT RUN ON DBCS AND FRENCH SYSTEMS |
| IZ61333 |
3 |
TKLM INSTALLER WILL TRY TO USE LATER VERSION OF DB2 9.1 |
| IZ61349 |
3 |
TKLM GA REFRESH TO AUTOMATICALLY INSTALL FIXPAK 3 |
| IZ61350 |
3 |
TKLM INSTALL DETECTION AND DIRECTORY CHECKING |
| IZ61352 |
3 |
UNABLE TO SPECIFY PASSWORD FOR TKLMADMIN DURING INSTALL |
| IZ61583 |
3 |
REMOVE NEED TO SET BYPASS_CHECKSYS="YES" BEFORE TKLM INSTALL |
APAR fixes included from Interim Fix 2
| APAR No. |
Sev. |
Abstract |
| IZ56776 |
3 |
POTENTIAL DS8000 DEADLOCK AND ISOLATED KEY SERVER (IKS) |
APAR fixes included from Interim Fix 1A
| APAR No. |
Sev. |
Abstract |
| IZ56515 |
3 |
A POTENTIAL SECURITY VULNERABILITY IDENTIFIED ON TKLM V1 DISTRIBUTED PLATFORMS ONLY |
APAR fixes included from Fix Pack 1
| APAR No. |
Sev. |
Abstract |
| IZ42651 |
3 |
CURSOR NOT VISIBLE AFTER CLICKING IN ADD FUTURE WRITE CALENDAR |
| IZ43894 |
3 |
CATCH SQL EXCEPTION FOR Duplicate Certificate WITH WHITESPACE |
| IZ43916 |
3 |
INCONSISTENCY ASSIGNING CERTIFICATES TO JAG DEVICES |
| IZ43953 |
3 |
TKLMKEYSTORE.JCEKS KEYSTORE NOT DELETED ON FAILED MIGRATION |
| IZ43987 |
3 |
MIGRATION FAILS WHEN KEY IN BOTH SYMMKEYSET AND KEYGROUP |
| IZ43991 |
3 |
MIGRATED KEY IN SYMMKEYSET NOT IN DEFAULT GROUP |
| IZ44000 |
3 |
TKLM STOPS RESPONDING TO A DEVICE. |
| IZ44125 |
3 |
WORLD WIDE NUMBER ATTRIBUTE REMOVED FROM UI PANEL |
| IZ44128 |
3 |
ISSUES WITH THE TKLMDELETEKEYSTORE COMMAND |
| IZ44130 |
3 |
DS8K: TKLM RSA-1024 NOT RSA-2048 |
| IZ44138 |
3 |
THE KEY COUNT IS INCORRECT ON LTO ADMIN PANEL AFTER FAILED |
| IZ44139 |
3 |
JAG AND HOME PANELS SHOW DIFFERENT CERTIFICATE STATUS |
| IZ44141 |
3 |
WRONG KEY SERVING STATUS SHOWN FOR DS8K |
| IZ44145 |
3 |
ADD DEVICE SERIAL NUMBER TO AUDIT LOG FOR DELETED DEVICE |
| IZ44146 |
3 |
IMPORTING AN EXPIRED CERTIFICATE DOES NOT SHOW UP IN GUI UNTIL |
| IZ44147 |
3 |
TKLMKEYIMPORT FAILS TO IMPORT KEY FROM VALID PKCS12 FILE |
| IZ44153 |
3 |
MODIFYING THE DRIVE THROUGHT THE USER INTERFACE DOES NOT SET TH |
| IZ44155 |
3 |
NEW TKLM JAG DRIVE & LTO DRIVE REQUESTS ARE UNKNOWN |
| IZ44156 |
3 |
SHOW GMT WITH TIMESTAMP ON METADATA AND MIGRATED DATA |
| IZ44726 |
3 |
ADMINTASK.TKLMKEYEXPORT DOES NOT CLOSE OUTPUT STREAM |
| IZ44727 |
3 |
QUOTES IN DESCRIPTION FIELD CAUSES PROBLEMS WITH DELETE BACKUP |
| IZ44728 |
3 |
PASSWORD LENGTH VALIDATION IS NOT DONE FOR TKLMKEYSTOREUPDATE |
| IZ44844 |
2 |
EXPORTING SYMMETRIC KEYS FROM TKLM REQUIRES PRESENCE OF A |
| IZ45255 |
3 |
DOC CHANGES ASSOCIATED WITH TKLM CODE APAR IZ44844. TKLMKEYEXPO |
| IZ45436 |
3 |
DEVICE WORLD WIDE NAME CHANGES MIGRATION IN FP1 |
| IZ45439 |
3 |
SSL PORT FAILS TO STAY UP IF SSL CERT ALIAS IS MIXED CASE |
| IZ45478 |
3 |
DELAYED PERFORMANCE WHEN PERFORMING KEY-SERVING REQUEST AND GUI |
| IZ45509 |
3 |
FIRST TKLM RESTORE ATTEMPT FAILS, ALL CONSECUTIVE ATTEMPTS |
| IZ45522 |
3 |
ADD CHECK TO NOT ALLOW RESTORE FROM VERSION 1.0 TO 1.0.0.1 |
| IZ47216 |
2 |
RESTORE FAILS WHEN USING A TKLM BACKUP TAKEN BEFORE DST CHANGE |
| IZ47241 |
2 |
THE EXPORTING OF A PRIVATE KEY TO A PKCS12 KEYSTORE VIA TKLMKEYEXPORT, EXPORTS ONLY THE CERTIFICATE AND NOT THE KEY |
| IZ48192 |
3 |
TKLM DOCUMENTATION ERROR IN SECTION "DB2 PASSWORD SECURITY ISSUES ON WINDOWS SYSTEMS" |
| IZ49606 |
3 |
WHEN USING CLI YOU NEED TO ENCAPSULATE IN QUOTE, PARAMETERS THAT CONTAIN SPACES. THIS INFORMATION IS NOT IN THE DOCUMENTATION. |
| IZ49678 |
3 |
TKLMDEVICEUPDATE COMMAND DOES NOT UPDATE KEY ALIAS2 FOR 3592 |
| IZ49679 |
3 |
PROVIDE CORRECT ERROR MESSAGE WHEN RUN THE TKLMKEYIMPORT COMMAND TO IMPORT A SECRET KEY WITH WRONG PRIVATE KEY ALIAS. |
| IZ49680 |
3 |
TKLMKEYSTORELIST DOES NOT DISPLAY COMMAND SUCCESS MESSAGE |
| IZ49681 |
3 |
TKLMKEYIMPORT COMMAND IMPORTING A PRIVATE KEY WITHOUT SPECIFYING THE PASSWORD CAUSES MBEANEXCEPTION |
| IZ49684 |
3 |
CERT REMAINS AS SSL DEFAULT EVEN IF DELETED FROM THE KEYSTORE |
| IZ49686 |
3 |
FIX TKLMKEYEXPORT ERROR MSG WHEN PATH NOT RESOLVABLE |
| IZ49688 |
3 |
GROUPS W/ > 10% KEYS LEFT APPEAR ON HOME PAGE |
| IZ49750 |
3 |
MAY NOT SEE AN IMPORTED KEY USING EITHER THE GUI OR THE TKLMKEYLIST COMMAND |
Platform support
|
Platform Support.
| Supported with initial release installed |
| AIX 5.3 64-bit |
| AIX 6.1 64-bit |
| Red Hat Enterprise Linux AS Version 4 32-bit |
| Solaris 10 SPARC 64-bit |
| SuSE Linux Enterprise Server Version 9 32-bit |
| SuSE Linux Enterprise Server Version 10 32-bit |
| Windows Server 2003 R2 32-bit |
| Supported with Fix Pack 1 installed |
| Red Hat Enterprise Linux Version 5 32-bit |
| Red Hat Enterprise Linux Version 5 64-bit (32-bit mode application) |
| Solaris 9 SPARC 64-bit |
| SuSE Linux Enterprise Server 10 64-bit (32-bit mode application) |
| Windows Server 2003 64-bit (32-bit mode application). |
| Windows Server 2008 32-bit. |
| Windows Server 2008 64-bit (32-bit mode application). |
Change History
| Change Date |
Reason |
Modified by |
| 8 September 2010 |
Create initial 1.0.0-TIV-TKLM-FP0004 DCF |
sbh |
[{"INLabel":"1.0.0-TIV-TKLM-FP0004.README.html","INLang":"English","INSize":"109619","INURL":"http://www.ibm.com/support/fixcentral"}]
On
[{"DNLabel":"AIX","DNDate":"9/13/2010","DNLang":"English","DNSize":"154570686","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www.ibm.com/support/fixcentral","DNURL_FTP":" ","DDURL":null},{"DNLabel":"Linux-RedHat","DNDate":"9/13/2010","DNLang":"English","DNSize":"154570686","DNPlat":{"label":"Linux Red Hat - xSeries","code":""},"DNURL":"http://www.ibm.com/support/fixcentral","DNURL_FTP":" ","DDURL":null},{"DNLabel":"Linux-SUSE","DNDate":"9/13/2010","DNLang":"English","DNSize":"154570686","DNPlat":{"label":"Linux SUSE - xSeries","code":""},"DNURL":"http://www.ibm.com/support/fixcentral","DNURL_FTP":" ","DDURL":null},{"DNLabel":"Solaris","DNDate":"9/13/2010","DNLang":"English","DNSize":"154570686","DNPlat":{"label":"Solaris","code":"PF027"},"DNURL":"http://www.ibm.com/support/fixcentral","DNURL_FTP":" ","DDURL":null},{"DNLabel":"Windows-2003-Server","DNDate":"9/13/2010","DNLang":"English","DNSize":"155029452","DNPlat":{"label":"Windows 2003 server","code":""},"DNURL":"http://www.ibm.com/support/fixcentral","DNURL_FTP":" ","DDURL":null},{"DNLabel":"Windows-2008","DNDate":"9/13/2010","DNLang":"English","DNSize":"155029452","DNPlat":{"label":"Windows 2008","code":""},"DNURL":"http://www.ibm.com/support/fixcentral","DNURL_FTP":" ","DDURL":null}]
[{"Product":{"code":"SSWPVP","label":"IBM Security Key Lifecycle Manager"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Distributed","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"}],"Version":"1.0","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Problems (APARS) fixed
Problems (APARS) fixed
IZ81352;IZ84588;IZ84600;IZ84617;IZ84618;OA28879;OA30311;IZ58749;IZ53864;IZ59680;IZ59685;IZ59690;IZ59701;IZ59774;IZ60527;IZ60537;IZ60751;IZ54633;IZ60763;IZ61332;IZ61333;IZ61349;IZ61350;IZ61352;IZ61583;IZ56776;IZ56515;IZ42651;IZ41742;IZ43894;IZ43916;IZ43953;IZ43987;IZ43991;IZ44000;IZ44125;IZ44128;IZ44130;IZ44138;IZ44139;IZ44141;IZ44145;IZ44146;IZ44147;IZ44153;IZ44155;IZ44156;IZ44726;IZ44727;IZ44728;IZ44844;IZ45255;IZ45436;IZ45439;IZ45478;IZ45509;IZ45522;IZ47216;IZ47241;IZ48192;IZ49678;IZ49679;IZ49680;IZ49681;IZ49684;IZ49686;IZ49688;IZ49750