IBM Support

PH67417: WHEN COMPONENTS.ZSS.AGENT.HTTP.ATTLS IS PRESENT AND FALSE IN ZOWE.YAML, UMS MAY INCORRECTLY CONTACT ZSS.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • UMS processes various values from Zowe.yaml that specify whether
    or not ZSS is using TLS natively, or AT-TLS, or not at all. One
    of the tests was incorrect, when components.zss.agent.http.attls
    is false, it did not also check components.zss.tls value, and
    incorrectly tried to access ZSS insecurely. This APAR corrects
    that behavior.
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of the IBM Unified Management Server   *
    *                 for z/OS                                     *
    ****************************************************************
    * PROBLEM DESCRIPTION: When components.zss.agent.http.attls is *
    *                      present and set to false in zowe.yaml,  *
    *                      UMS may incorrectly contact ZSS.        *
    ****************************************************************
    UMS processes various values from Zowe.yaml that specify whether
    or not ZSS is using TLS natively, AT-TLS, or not at all.
    One of the checks was incorrect.
    
    When components.zss.agent.http.attls is false, it did not also
    check components.zss.tls value, and incorrectly tried to access
    ZSS insecurely. This APAR corrects that behavior.
    

Problem conclusion

  • Apply the PTF provided by this APAR
    

Temporary fix

Comments

APAR Information

  • APAR number

    PH67417

  • Reported component name

    UNIFIED MGMT SV

  • Reported component ID

    5698UM100

  • Reported release

    120

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2025-07-18

  • Closed date

    2025-10-13

  • Last modified date

    2025-11-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • IZPAUTAL IZPAUTDD IZPDISCP IZPEXPIN IZPGEN00 IZPIPLUG IZPIVP
    IZPMNFST IZPSERVE IZPSTEPL IZPUI    IZPUSRMD IZPYAML
    

Fix information

  • Fixed component name

    UNIFIED MGMT SV

  • Fixed component ID

    5698UM100

Applicable component levels

  • R120 PSY UO05306

       UP25/10/18 P F510

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU011","label":"Systems - zSystems software"},"Product":{"code":"SG19M"},"Platform":[{"code":"PF054","label":"z Systems"}],"Version":"120"}]

Document Information

Modified date:
03 November 2025