PH68795: CERTIFICATE UPDATES ARE NOT REFLECTED ON SOAP CONNECTIONS WITHOUT A RESTART

APAR status

• Closed as program error.

Error description

• After updating an SSL certificate alias in "SSL Certificate
  and Key Management > Manage Endpoint Security Configurations",
  SOAP and RMI ports fail to pick up the new certificate and
  continue using the old configuration.
  

Local fix

• restart
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: After updating SSL alias in Admin       *
  *                      Console, SOAP and RMI ports keep        *
  *                      using the old certificate instead of    *
  *                      the new one.                            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  After updating the SSL certificate alias, some services fail
  because the expected certificate is not used on the SOAP port,
  even though SSL-related configuration changes are supposed to
  be applied dynamically. The issue is resolved by restarting
  the Deployment Manager
  

Problem conclusion

• The fix for this APAR is targeted for inclusion in fix pack
  8.5.5.29 and 9.0.5.27. For more information,
  see 'Recommended Updates for
  WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

• Restart the server
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels