IBM Support

Release Notes for IBM Workload Scheduler 10.2.7

Release Notes


Abstract

This document provides important information about IBM Workload Scheduler Version 10.2.7

Content

IBM Workload Scheduler version 10.2.7 Release Notes

Release date: April 24, 2026

This document provides important information about IBM® Workload Scheduler version 10.2.7.

You can obtain dynamic and up-to-date reports by browsing to Software Product Compatibility Reports and selecting the information you are interested in.

New Documentation Portal for IBM Workload Scheduler and IBM Z Workload Scheduler

Effective April 24, 2026, the official documentation for IBM Workload Scheduler and IBM Z Workload Scheduler has moved to a redesigned, dedicated portal. The new portal introduces several major improvements, including:

  • AI‑powered chat to search, navigate, and process information across the documentation set. Available starting from April, 30, 2026.
  • A new documentation template designed to improve clarity, readability, and overall usability.
  • An updated look and feel, offering a more modern, consistent, and intuitive user experience.

Please update your bookmarks for all releases: IBM Workload Automation.

APARs fixed in version 10.2.7

Table 1. Engine component - APARs fixed in this release
CodeDescription
IJ50261
Fixed an issue where the deploymentFrequency global option value of 0 was ignored.

Fixed an issue where setting the deploymentFrequency (or df) global option to 0 was incorrectly ignored. Previously, when this option was set to 0 to disable automatic deployment, changes to event rules were still deployed automatically. This bypassed the expected behavior, which requires users to manually run the planman deploy command to deploy changes when the frequency is set to 0

IJ53940
Fixed an issue where the resetFTA command failed to move target files.

Fixed an issue on Linux operating systems where the resetFTA command failed to move the target message files on a fault-tolerant agent to the temporary directory. Previously, running the command returned an AWSBHU165I success message, incorrectly indicating that all target files had been successfully moved, while the files actually remained in the TWSDATA directory instead of being moved to the TWA_home/TWS/tmp directory.

IJ56856
Fixed an issue where the scheduled time was missing from Oracle database audit records.

Fixed an issue where querying the AUDIT_STORE_RECORDS_V view in an Oracle database failed to display the scheduled time for job instances. This missing information occurred after upgrading the master domain manager, which prevented users from easily identifying specific job instances and generating accurate reports from the database. This issue was specific to Oracle databases and did not occur in DB2 environments.

IJ57247
Fixed an issue where jobs intermittently remained in a READY state.

Fixed an issue on fault-tolerant agents where jobs intermittently remained in a READY status and failed to execute after their predecessor completed successfully. Previously, the affected jobs would not progress until a JnextPlan operation was run on the master domain manager to restart the batchman process.

IJ57470
Fixed an issue where group names with spaces were not allowed when creating a service API key.

Fixed an issue where attempting to create a service API key from the Manage API Keys page in the Dynamic Workload Console failed if the specified group name contained a space. Previously, saving an API key with a space in the group name returned an AWSJOM013E error.

IJ57599
Fixed an issue with certificate renewal using the AgentCertificateDownloader.sh script.

Fixed an issue where errors occurred with a new set of certificates downloaded by the AgentCertificateDownloader.sh script. The issue occurred when the script was triggered on the master domain manager because the existing certificates were approaching their expiration date.

IJ57600
Fixed an issue where connections were exhausted on a dynamic domain manager connected to a Z controller.

Fixed an issue where the maximum number of connections was exhausted and never released when starting the application server (engineServer) on a dynamic domain manager connected to a Z controller. Previously, during startup or when switching between a primary and a backup dynamic domain manager, connections were not properly released, which caused rollback or commit operations to occur after the connections were already closed. The connection handling process has been updated to correctly manage and release connections.

IJ57622
Fixed an issue where the wa_pull_info script stopped responding on Windows operating systems.

Fixed an issue on Windows operating systems where the wa_pull_info diagnostic data collection script unexpectedly stopped responding and ran indefinitely. Previously, an unhandled exception during the file encryption phase caused the script to enter an infinite loop. The script has been updated with proper exception handling to ensure that data collection completes successfully without hanging.

KB0108710
Fixed an issue where access control list groups with spaces in their names were not allowed in composer.

Fixed an issue where the composer command line prevented users from adding access control list groups if the group name contained a space. Previously, attempting to add a group name with a space returned an AWSJDB820E error, even though the same operation was successful when performed from the Dynamic Workload Console.

KB0125121
Fixed an issue where File transfer jobs failed when transferring a large number of files.

Fixed an issue where File transfer jobs unexpectedly failed when transferring a large volume of files. Previously, attempting to upload multiple files caused the file transfer job executor to drop the connection prematurely, resulting in a session is down error. The file transfer job executor has been updated to correctly manage and maintain connection sessions, ensuring that large file transfers complete successfully without errors.

KB0127330
Fixed an issue where an event rule incorrectly submitted duplicate jobs.

Fixed an issue where an event rule configured to monitor file creation incorrectly submitted two instances of a job instead of one. This compatibility issue occurred when running event rules created in version 9.4 on IBM Workload Scheduler 10.2.x. The duplicate submission caused the event rule to fail and return an AWSJCS011E error because the second job attempted to process a file that the first job had already deleted.

KB0128221
Fixed an issue where the onoverlap enqueue option caused the maximum dependency limit to be exceeded.

Fixed an issue where configuring a job stream with the maximum of 40 dependencies alongside the onoverlap enqueue option caused performance degradation on the master domain manager and Dynamic Workload Console User's Guide, delayed job submissions, and caused the planman resync operation to hang. Previously, because the onoverlap enqueue option is internally implemented by adding a follows dependency on the previous job stream instance, subsequent runs exceeded the 40-dependency limit. The composer, Orchestration CLI, and Dynamic Workload Console components have been updated to properly restrict the maximum number of user-defined dependencies to 39 when the onoverlap enqueue option is selected.

KB0129377
Fixed an issue where the job stream identifier was missing from plan audit records.

Fixed an issue where the job stream identifier was not recorded in the plan audit log when a job stream was submitted using the Dynamic Workload Console. Previously, the identifier was correctly recorded only when the job stream was submitted using the conman command line.

KB0129570
Fixed an issue where the PostgreSQL connection string was missing from Kubernetes Helm charts.

Fixed an issue for Kubernetes-based installations where the PostgreSQL database connection string was missing from the Helm chart. Previously, although PostgreSQL was a supported database for IBM Workload Scheduler, users could not configure it during Kubernetes deployments because the connection string option was absent. The Helm chart has been updated to include the PostgreSQL connection string, allowing users to successfully deploy the product components with a PostgreSQL database in a Kubernetes environment.

WA-156350
Fixed an issue where selecting resource details for an SAP BusinessObjects BI job returned an error.

Fixed an issue where attempting to select resource details while creating or modifying an SAP BusinessObjects BI job failed and returned an AWKJDE232E error.

KB0129866
Fixed an issue where the dynamic domain manager and dynamic agents disconnected during a plan refresh.

Fixed an issue where the dynamic domain manager and all connected dynamic agents unexpectedly unlinked during a plan refresh. Previously, executing a plan refresh caused the dynamic domain manager to fail to link, resulting in an AWKTSA100E error indicating a java.lang.IndexOutOfBoundsException in the messages.log file and an ipc_get_n_bytes communication error in the TWSMERGE log. The plan refresh process has been updated to ensure the dynamic domain manager links immediately and maintains connections with dynamic agents, eliminating the need to manually restart the WebSphere Application Server Liberty service as a workaround.

IJ56917
Resolved failure in Standard Output (STDOUT) passing between jobs.

Fixed a regression where the Standard Output from a job was not being passed to subsequent jobs within the same job stream instance. Data flow between dependent jobs has been restored, enabling successor jobs to access the output of their predecessors upon completion.

Table 2. Installation process – APARs fixed in this release
CodeDescription
IJ53388
Fixed an issue where the configureDb.sh script failed if passwords contained a dollar sign.

Fixed an issue where running the configureDb.sh script failed if the database administrator password (--dbadminuserpw) or database user password (--dbpassword) contained a dollar sign ($). Previously, this caused the script to stop processing and return an error during the database configuration for the Dynamic Workload Console. The script has been updated to correctly process passwords containing this special character.

IJ54217
IBM i agent installation fails due to unexpected java -version output format.

A defect in the agent installation script caused the procedure to fail on IBM i environments because the script could not correctly parse the output of the java -version command.

IJ55550
During the upgrade, he twsinst script with the recovInstReg parameter enabled fails with error code 5.

A defect in the twsinst script caused the registry recovery operation (-recovInstReg true) to fail and return error code 5. When attempting to restore corrupted registry files, the twsinst script triggered an incorrect subroutine, resulting in the misleading error: "ERROR: TWS instance to enable for Cluster Installation is not a8.6.x.x/9.1.x.x version. Therefore no action will be performed."

IJ55711
Agent upgrade fails due to unsupported OpenSSL encryption algorithm, specifically RC2-40-CBC algorithm.

A defect in the agent upgrade process caused the installation to fail when attempting to process the P12 certificate file. The failure occurred because the bundled OpenSSL utility available on the agent encountered an unsupported encryption algorithm during the processing of the certificate file.

IJ55738
Uninstall fails to clean up non-root installation files. A defect in the uninstallation procedure caused the system to leave the $HOME/.cit/cit.ini file in place following the uninstallation of a non-root instance.

The uninstallation procedure failed to remove the cit.ini file after the uninstallation of a non-root instance. This configuration file retained an incorrect path to the common inventory technology (CIT) component, leading to configuration errors.

IJ56396 - KB0124632
A master domain manager at version 10.2.5 experienced an unexpected service interruption caused by Java heap memory exhaustion.

This issue typically occurred when a high number of dynamic agents were configured in the environment. The root cause was linked to the exhaustion of available HTTP connections.

IJ56788
Fixed an issue where an empty directory was unexpectedly created during a centralized agent update.

Fixed an issue where performing a centralized agent update unexpectedly created an empty /tmp/TWS directory. Previously, this folder was generated even when the default working directory parameter (-work_dir) was used, which should only target the $HOME/tmp directory. The update process has been corrected to prevent the creation of this unnecessary folder.

IJ57262
Fixed an issue where Windows z-centric agent installations incorrectly set the ddynamic domain manager port to 512.

Fixed an issue on Windows operating systems where new installations of the z-centric agent incorrectly assigned port 512 as the default dynamic domain manager port. Previously, this caused the agent to fill the logs with AWSITA081E errors because it continuously attempted to send resource information to an incorrect URL. The installation process has been updated to correctly set the port to 0 by default in the ResourceAdvisorUrl parameter of the JobManager.ini configuration file.

KB0095841
Agent update completed successfully despite critical disk space failure.

The upgrade of dynamic agents erroneously reported successful completion with message AWSFAB033I, even when the installation process failed due to critical disk space issues.

KB0121428
After installing a dynamic agent at version 10.2.4 on Windows and while running integrations, javaexecutor logs are missing.

After installing or updating a dynamic agent on Windows, the required directory for Java logs was not created, causing the loss of JavaExecutor logs.

KB0122083
Missing dbsslconnection parameter in installation scripts.

The –dbsslconnection parameter in the configuredb or serverinst commands was available only on UNIX operating systems.

KB0122703
Parallel upgrade fails with error AWKCLI102E due to an error in SSL password encryption.

A defect caused the installation of the backup master domain manager to fail during a parallel upgrade, returning the AWKCLI102E error. The underlying cause was a bug in the code which failed during the encryption of the password when the password string length was exactly 16 characters or a multiple of 16 (for example 32, 48).

KB0128070
Fixed an issue where dynamic agent installations incorrectly failed on Windows Server 2016.

Fixed an issue where installing a dynamic agent on Windows Server 2016 failed with a missing prerequisites error. Previously, the checkPrereq.json configuration file incorrectly omitted Windows Server 2016 from the list of supported operating systems, conflicting with the product documentation. The prerequisite check file has been updated to correctly recognize Windows Server 2016 as a supported operating system, allowing the installation to proceed successfully.

KB0129142
Fixed an issue where dynamic agents were incorrectly installed when only a fault-tolerant agent was requested.

Fixed an issue in the installation process where dynamic agents were automatically configured and started despite the user requesting only a fault-tolerant agent. Previously, when certificates were downloaded automatically during installation, the process bypassed the user's explicit parameter selection (the fta agent type) and defaulted to installing both agent types. This resulted in unintended dynamic agent proliferation in the database and the production plan for customers who did not intend to use dynamic scheduling features. The installation script has been updated to correctly process the user's parameter selection, ensuring that only the requested fault-tolerant agent is configured and started.

Table 3. Integrations – APARs fixed in this release
CodeDescription
IJ56920
Fixed an issue where the Job Stream Submission plug-in occasionally failed with an internal error.

Fixed an issue in the Job Stream Submission integration where job stream lookups occasionally failed. Previously, the integration constructed an incomplete Orchestration Query Language (OQL) key by omitting the job stream name, causing the engine to return no matches. This resulted in an internal null string exception (Cannot invoke "java.lang.String.length()" because "s" is null) and prevented the operation from completing. The integration has been updated to correctly build the complete three-segment key (workstation;internalId;jobStreamName), ensuring that job stream lookups are successfully processed without encountering errors.

IJ57250
Fixed an issue where remote command jobs using SSH could not be killed.

Fixed an issue where users were unable to terminate remote command jobs that connected via SSH. Previously, the kill functionality was inadvertently disabled for remote command jobs, preventing users from successfully stopping them once they had started executing. The system has been updated to correctly support and process kill requests for remote command jobs, allowing users to effectively stop their execution as needed.

KB0123774
Fixed an issue where the variable table plug-in failed to process double quotation marks.

Fixed an issue where the variable table plug-in failed to handle variable values containing double quotation marks. Previously, if a user provided a variable value (varListValue) that included double quotation marks, the system encountered an internal parsing error (StringIndexOutOfBoundsException) and the job failed to execute. The variable table plug-in has been updated to correctly parse and process double quotation marks, allowing users to successfully define and update variables containing these characters without encountering execution errors.

Table 4. Command-line component – APARs fixed in this release
CodeDescription
IJ56254
The users.exe -build command fails on Windows fault-tolerant agents.

Fixed an issue on Windows operating systems where running the users.exe -build command on a fault-tolerant agent connected to an IBM Z Workload Scheduler controller failed and returned an AWSDEG463E error

IJ56360
A file dependency on a fault-tolerant agent installed on a Windows operating system fails after upgrading to version 10.2.3.

A defect was introduced during the upgrade of the fault-tolerant agent installed on a Windows operating system, which caused file dependencies to fail resolution. The issue occurred on Windows Server 2016 when jobs defined to run on a dynamic pool utilized a file dependency pointing to a shared file system (UNC path). The internal file check mechanism erroneously failed to verify the existence of files, resulting in the unwanted nF (No File) status.

IJ57248 - KB0128443
Fixed an issue where the certman command incorrectly modified file permissions.

Fixed an issue where using the certman command to generate certificates incorrectly changed the permissions of all existing files to 644 recursively within the folder specified by the -outpath parameter. This failure could disrupt the IBM Workload Scheduler environment if the command was run in a non-empty directory.

KB0123031
OUTPUTCOND keyword was replaced with SUCCOUTPUTCOND during OCLI modification.

A defect in the scheduling object modification logic caused the OUTPUTCOND keyword to be erroneously replaced by the SUCCOUTPUTCOND keyword when an administrator used the OCLI (modify or add) commands.

KB0123997
CONSLOG file not deleted by JnextPlan and plan management scripts.

A defect prevents plan management scripts (including JnextPlan, MakePlan, SwitchPlan, UpdateStats, and CreatePostReports) from correctly deleting the CONSLOG file.

KB0124381
Fixed an issue where the wa_pull_info script generated an excessively large summary log file.

Fixed an issue where running the wa_pull_info data gathering script generated an excessively large datagather_summary.log file, which significantly inflated the size of the resulting archive.

KB0129847
Fixed a performance issue when filtering failed jobs using the Orchestration CLI.

Fixed an issue in the Orchestration CLI where running a comprehensive job search query took an excessively long time to complete. Previously, when a user executed the showjobs (sj) command to filter for all jobs in a FAIL state across all folders and workstations, the system experienced significant performance degradation and delayed the display of results. The Orchestration CLI has been updated to optimize query processing, allowing users to successfully retrieve extensive job status reports in a timely manner without encountering performance delays.

KB0129848
Fixed an issue where filtering for jobs in a waiting state caused an error in the Orchestration CLI.

Fixed an issue in the Orchestration CLI where searching for jobs within a specific folder failed if any of the jobs were in a waiting state. Previously, when a user executed the showjobs (sj) command with a folder filter, the system encountered an unexpected internal error if it processed jobs that were waiting to run, preventing the results from being displayed. The Orchestration CLI has been updated to correctly process all valid job states, allowing users to successfully retrieve and view job data regardless of their current execution status.

Table 5. Docker – APARs fixed in this release
CodeDescription
IJ56927
Fixed an issue where a duplicate SSL_PASSWORD error occurred during Helm chart deployments.

Fixed an issue where deploying the product components using Kubernetes Helm charts failed or incorrectly overwrote custom secrets. Previously, when using a custom Kubernetes secret containing SSL certificates and the SSL_PASSWORD environment variable, the deployment returned a duplicate name warning because the variable was defined twice in the dynamic agent's statefulSet.yaml configuration template. The Helm chart has been updated to remove the duplicate variable definition, ensuring that deployments complete successfully when using custom secrets.

IJ57363
Fixed an issue where the certificate rotation mechanism failed in Kubernetes environments.

Fixed an issue where the certificate rotation mechanism failed for the Dynamic Workload Console and the IBM Workload Scheduler engine in Kubernetes environments. Previously, if the useCustomizedCert parameter was set to true and the certDuration and certRenewBefore parameters were configured with values lower than the defaults, the certificates did not rotate automatically. This failure caused the connection between the Dynamic Workload Console and the engine to drop.

Table 6. dynamic domain manager (broker) – APARs fixed in this release
CodeDescription
IJ57395
Fixed an issue where jobs remained in a WAIT status after a database HADR switchover.

Fixed an issue where some jobs incorrectly remained stuck in a WAIT status after a database High Availability Disaster Recovery (HADR) switchover. Previously, if the database connection closed during the switchover, the job dispatcher failed to update the job properties and stopped progressing, returning AWKJDB802E and AWKJDE109E database connection errors.

IJ57691 - KB0129543
Fixed an issue where a deadlock occurred during certificate downloads from the dynamic domain manager.

Fixed an issue where the system stalled and entered a deadlock state when a certificate download was initiated by the dynamic domain manager. This failure occurred because the resource thread became incorrectly blocked while attempting to simultaneously install and verify the new certificates.

KB0123924
Fixed an issue where the dynamic domain manager experienced slowness during dynamic agentinitialization.
- IJ57545
Fixed an issue where submitting jobs to a dynamic domain manager sporadically failed.

Fixed an issue where submitting jobs from IBM Z Workload Scheduler to a dynamic domain manager sporadically failed. This failure occurred because the dynamic domain manager lost its JDBC connection to the database, which resulted in repeated transaction rollbacks and database unique constraint violations (AWKJDE102E and AWKJDB604E).

Table 7. IBM Z Workload Scheduler Agent (also known as z-centric agent)– APARs fixed in this release
CodeDescription
IJ57021
Fixed an issue where the task launcher failed to export the UNISON_DIR environment variable.

Fixed an issue on AIX operating systems where jobs failed after migrating from a fault-tolerant agent to a z-centric agent because the task launcher failed to export the UNISON_DIR environment variable. Previously, users had to implement a manual workaround by creating a .jobmanrc local configuration script to properly export the variable before running the job. The task launcher has been updated to automatically export this environment variable, ensuring jobs run successfully without requiring manual intervention.

IJ57405
Fixed an issue where the agent randomly crashed on AIX operating systems.

Fixed an issue on AIX operating systems where the agent randomly crashed and generated a core dump file due to resource allocation errors. Previously, when encountering thread creation or memory availability issues, the agent processes stopped unexpectedly. This caused the agent to log resource errors in the ita_trace.log file and return AWSITA112I, AWSITA111I, and AWSITA052I stopped messages in the JobManager_message.log file. The issue has been resolved to ensure the agent remains stable under these conditions.

IJ57927 - KB0129733
Fixed an issue where executable jobs failed when both standard output and standard error redirection were specified.

Fixed an issue where executable jobs failed to start when both standard output and standard error redirection were configured. Previously, specifying both redirection paths caused the job to fail and return an AWSITA028E error containing an AWSITA069E job monitor internal error (return code 8). Although the output log files were successfully created on the agent, the actual application script was prevented from running. The issue has been resolved so that configuring standard output and standard error redirection no longer interferes with script execution.

KB0128625
Fixed an issue where dynamic agents stopped sending job status updates to the master domain manager.

Fixed an issue where dynamic agents incorrectly stopped sending job status updates to the master domain manager during persistent connection issues. Previously, if a connection issue persisted, the agent logged AWSITA366E errors and stopped retrying to send updates after a maximum of one hour, bypassing the expected default behavior of retrying for up to 10 days. Consequently, the master domain manager displayed incorrect statuses for jobs executed on the affected dynamic agents.

 
Table 8. Mirroring – APARs fixed in this release
CodeDescription
KB0128592
Fixed an issue where the confirm operation incorrectly updated rerun instances of a job.

Fixed an issue where using the confirm command to change a job status to successful (SUCC) updated the incorrect job instance if the job had already been rerun. Previously, if a job had rerun instances (generated manually or automatically via a recovery option), the mirroring component incorrectly applied the status update to the most recent rerun instance instead of the explicitly selected job. As a result, the selected job retained its old status (such as ABEND), and AWSJSY404E and AWSBIN076E errors were written to the messages.log file. The mirroring component has been updated to ensure that status changes are accurately applied to the specific job instance selected.

Table 9. REST APIs – APARs fixed in this release
CodeDescription
KB0130043
Fixed an issue where the REST API failed to retrieve the task field for z/OS shadow jobs.

Fixed an issue in the REST API where retrieving a z/OS shadow job definition returned an incomplete payload. Previously, when a user performed a GET request to the /twsd/api/v2/model/jobdefinition endpoint for a z/OS shadow job, the system incorrectly omitted the task object from the response. This missing data caused subsequent updates via PUT requests to fail with an AWSJOM001E internal error, preventing users from modifying any fields of the shadow job. The API has been updated to correctly process and return the task object for z/OS shadow jobs, allowing users to successfully retrieve and update these job definitions without encountering errors.

Table 10. Documentation – APARs fixed in this release
CodeDescription
IJ56590
Fixed an issue where the documentation for analyzing job logs lacked specific job type requirements.

Fixed an issue where the product documentation did not specify the required job types for using the $this.stdlist variable to analyze job log content. Previously, the documentation stated that the variable could be used on dynamic agent workstations to evaluate the succoutputcond and outputcond parameters, but did not mention the limitations for standard UNIX and Windows jobs. The documentation has been updated to clarify that this variable is only supported when defining an executable job or a job type with advanced options, whereas standard UNIX and Windows job types support only the return code (RC) variable.

IJ56609
Fixed an issue where the enExpandedResources global option documentation was unclear.

Fixed an issue where the product documentation did not clearly explain the difference in behavior when the enExpandedResources (or er) global option was set to yes versus no. The documentation has been updated to clarify that a job or job stream can request a maximum of 1024 resource units, which are converted at run time into holders containing up to 32 units each. Setting the option to yes allows a maximum of 60 concurrent holders at a time, whereas setting it to no restricts the maximum to 32 concurrent holders.

IJ56794
Fixed an issue where the onoverlap donotstart documentation lacked usage limitations.

Fixed an issue where the product documentation did not specify that the onoverlap donotstart option must not be used if the job stream is defined on a , domain manager, dynamic agent, pool, or dynamic pool in a domain other than the master domain. Previously, using this option in lower-level domains could cause job stream instances to be incorrectly canceled after their jobs had already run, due to standard delays in status reporting across the network hierarchy. The documentation has been updated to clearly state this limitation.

IJ56818
Fixed an issue where job commands containing the && operator were truncated on Windows fault-tolerant agents.

Fixed an issue on Windows operating systems where submitting a job with multiple commands joined by the && operator incorrectly executed only the first command. Previously, any command following the && operator was truncated and ignored on a fault-tolerant agent. This issue was resolved by updating the jobmanrc.cmd standard configuration script to correctly process and execute the entire command string. This information was added in the documentation.

IJ56921
Fixed an issue where the workstation running metric name was incorrectly documented.

Fixed an issue where the product documentation incorrectly listed the metric name for running workstations. Previously, the documentation referred to the metric as application_wa_workstation_running instead of the correct name, application_wa_workstation_running_boolean. The documentation has been updated to reflect the actual metric name.

IJ57073
Added information about supported number of certificates in master domain manager upgrade documentation.

Added information in the documentation about the requirement that only one certificate must be present in the TWSServerKeyFile.p12 or TWSServerKeyFile.jks keystore before upgrading the master domain manager. Previously, if multiple certificates were present in the keystore when upgrading using the serverinst.sh script, the upgrade failed and returned WACOMM006E and WACERT052E errors. The documentation has been updated to include the prerequisite steps for preparing the keystore prior to an upgrade.

IJ57105
Fixed an issue where the dynamic agent service failed to start during Windows boot.

Fixed an issue on Windows operating systems where the IBM Common Platform Agent service failed to start during system boot. This failure occurred when the service was configured to run under a domain user account, because the network or domain controller was not yet available during startup. To resolve this issue, the service startup type has been changed from Automatic to Automatic (Delayed Start) and this information wads aded in the product documentation.

IJ57106
Added in the upgrade documentation Oracle database schema requirements for the Dynamic Workload Console.

Fixed an issue where the product documentation did not specify that the Dynamic Workload Console and the master domain manager must be installed in different Oracle database schemas. Previously, sharing the same schema during a Dynamic Workload Console upgrade caused the configureDb script to fail because it did not properly account for the existing master domain manager objects. The documentation has been updated to clearly state this limitation and recommend using separate schemas.

IJ57241
Fixed an issue where the interoperability table title in the release notes was incorrect.

Fixed an issue where the interoperability table in the Dynamic Workload Console release notes contained an incorrect title. The title previously stated that the table showed components compatible with previous Dynamic Workload Console versions. The documentation has been updated to correctly indicate that the table shows components compatible with previous master domain manager versions.

IJ57366
Fixed an issue where upgrading the master domain manager resulted in mismatched RESTful plug-in versions.

Fixed an issue where upgrading the master domain manager from version 10.2.5 to 10.2.6 resulted in mismatched versions of the RESTful plug-in files. Previously, if the plug-in had been manually updated before the upgrade, the installation process incorrectly downgraded the com.ibm.scheduling.agent.restful_*.jar file in the TWS/JavaExt/eclipse/plugins/ directory, while the correct, updated version was retained in the TWS/applicationJobPlugIn/ directory.

IJ57391
Fixed an issue where the run time format was incorrectly described in the Report 10B documentation.

Fixed an issue where the product documentation for Report 10B - Actual Production Detail incorrectly stated that the job run time was displayed in an hh:mm format. The documentation has been updated to correctly reflect that the run time is displayed in an mm:ss format.

IJ57672
Corrected an incorrect file name in the product documentation.

Fixed a discrepancy in the product documentation where the authentication_config.xml file was incorrectly referenced as authorization_config.xml. The documentation has been updated to display the correct file name.

IJ57688
Added missing documentation for automatic failover tuning parameters.

Fixed an issue where product documentation was missing for several automatic failover tuning parameters. The documentation has been updated to include the descriptions and tuning guidelines for the com.hcl.tws.failover.master.polling, com.hcl.tws.failover.master.treshold, com.hcl.tws.failover.event.polling, and com.hcl.tws.failover.event.treshold parameters configured in the TWSConfig.properties file.

Defects fixed in version 10.2.7

This section lists defects resolved in version 10.2.7, divided by component.

Table 11. Build – Defects fixed in this release
CodeDescription
  
WA-155160
ServiceNow integration version mismatch resolved.

Resolved an issue where an outdated version of the ServiceNow integration was included in the build. The current build now includes the correct, updated integration.

WA-159533
Fixed a defect which caused installation and upgrade to fail on Linux S390 workstations.

Fixed an issue where both fresh installations and upgrades to version 10.2.7 failed on Linux S390 operating systems.

Table 12. Command-line interface – Defects fixed in this release
CodeDescription
WA-154857
UpdateStats failure on PostgreSQL after upgrade.

Resolved an issue where the UpdateStats script failed on Linux environments after upgrading the master domain manager from version 10.2.5 to 10.2.6.

WA-155024
Resolved configureDb.vbs failure on Windows with MSSQL.

Fixed an issue where the configureDb.vbs script failed with error WAINST0246E (Return Code 98) during the database version check. This occurred specifically on Windows environments when configuring a master domain manager using an MSSQL database.

WA-155373
Resolved configureDb script error during certificate import.

Fixed an issue where the configureDb script failed while importing certificates from the master domain manager.

WA-158375
Fixed an issue where deleting dependencies or releasing job streams using Orchestration CLI returned an error.

Fixed an issue where running the ocli plan dds (delete dependency) or ocli plan rs (release job stream) commands failed and returned an AWSJOM011E out-of-range error if the target job stream was submitted with a job limit set to 0. Previously, these actions completed successfully only when using the conman command-line interface.

WA-158437
UNIX job fails when submitted from the command line.

A defect is fixed where a UNIX job failed after being submitted through the command line. This issue occurred when running a job with the ls / command.

WA-158773
Fixed an issue where listing an AWS job definition using Orchestration CLI returned an error.

Fixed an issue where running the ocli model list command to retrieve an Amazon Web Services (AWS) job definition failed and returned a 500 Internal Server Error. Previously, this action completed successfully only when using the composer command-line interface.

WA-158832
Fixed an issue where Orchestration CLI model commands incorrectly extracted master domain manager definitions.

Fixed an issue where extracting a master domain manager definition to a file using Orchestration CLI model commands resulted in an incorrect output. Previously, running the create command via the Orchestration CLI to extract a workstation definition produced an inaccurate result, whereas the same operation completed successfully when using the composer command-line program. The Orchestration CLI has been updated to correctly extract and format master domain manager definitions from the database.

WA-158945
When using ocli model mod to change a job definition from a database reference to an embedded one using the BUILTIN keyword, the change was not saved. Although no error appeared, reopening the job stream showed that the BUILTIN keyword had been removed from the job. This issue has been fixed. Now, the database reference is successfully replaced with the embedded job definition, retaining the BUILTIN keyword upon saving.
WA-159667
Fixed an issue where Orchestration CLI model commands failed when creating job streams with resource dependencies.

Fixed an issue where creating or parsing a job stream containing a resource dependency failed when using Orchestration CLI model commands. Previously, the Orchestration CLI incorrectly evaluated the lock context as null, causing the command to fail and return an AWSMSP001E error containing a Cannot invoke "com.hcl.wa.lib.commons.context.LockContext.getLock()" message. This issue occurred exclusively in the Orchestration CLI and did not affect the composer command-line program. The Orchestration CLI has been updated to correctly process job streams with resource dependencies without errors.

WA-159751
Fixed an issue where Orchestration CLI model commands failed when processing job streams.

Fixed an issue where running Orchestration CLI model commands on job streams failed with an internal null pointer exception. Previously, the Orchestration CLI incorrectly evaluated the job definition as null when checking if a job within the job stream was embedded, causing the command to fail and return a Cannot invoke "com.ibm.tws.objects.model.DistJobDefinition.isEmbedded()" error. This issue occurred exclusively in the Orchestration CLI and did not affect the composer command-line program. The Orchestration CLI has been updated to correctly retrieve job definitions and process job streams without errors.

Table 13. Docker – Defects fixed in this release
CodeDescription
WA-154729
Fixed an issue where a duplicate SSL_PASSWORD error occurred during Helm chart deployments.

Fixed an issue where deploying the product components using Kubernetes Helm charts failed or incorrectly overwrote custom secrets. Previously, when using a custom Kubernetes secret containing SSL certificates and the SSL_PASSWORD environment variable, the deployment returned a duplicate name warning because the variable was defined twice in the dynamic agent's statefulSet.yaml configuration template. The Helm chart has been updated to remove the duplicate variable definition, ensuring that deployments complete successfully when using custom secrets.

Table 14. Dynamic domain manager – Defects fixed in this release
CodeDescription
IJ57691
Deadlock during certificate download from the dynamic domain manager.

Fixed an issue where the system stopped responding when testing newly downloaded certificates. The deadlock occurred during a dynamic domain manager-driven download because the resource thread that requested the certificate test was blocked while waiting for the certificate installation to complete.

WA-147845
Fixed an issue where the movehistorydata command failed to run on Windows.

Fixed an issue on Windows operating systems where running the movehistorydata command from the dynamic domain manager folder failed to run, returning no output and resulting in a return code of 9009.

Table 15. Engine – Defects fixed in this release
CodeDescription
WA-143628
Resolved Oracle 23ai resource exhaustion (ORA-01000).

Fixed a defect where upgrading to Oracle Database 23ai caused error AWSJDB801E and ORA-01000 (maximum open cursors exceeded). The issue, which led to significant performance degradation, was caused by the application failing to properly release database cursors during operation.

WA-151465
Fixed an issue where deploying a job stream with an embedded job failed after changing its folder.

Fixed an issue in the Dynamic Workload Console where changing the folder of a job stream that contained an embedded file transfer job, and then attempting to deploy it from the graphical view, failed and returned an AWSJDB101E object not found error.

WA-154565
Resolved OCLI error AWSMSL027E during object submission.

Fixed an issue where running the plan submit or show commands in the OCLI resulted in error AWSMSL027E. This failure affected the submission of jobs, tasks, and job streams (workflows) into the plan.

WA-155416
Resolved securewrap failure during Linux upgrade from version 10.1 Fix Pack 6.

Fixed an issue where the Linux upgrade for the dynamic domain manager failed during the certificate wrapping process. The securewrap utility previously returned an Illegal option: PKCS12 error due to a compatibility conflict with the certificate format.

WA-155628
Fixed an issue where security token validation errors occurred after an upgrade.

Fixed an issue where upgrading the environment caused security token validation errors in the application server. Previously, the trace.log file incorrectly logged a CWWKS4001I error, indicating that the security token could not be validated because the token service that created the token was no longer available.

WA-155837
Resolved java.lang.UnsupportedOperationException during JnextPlan.

Fixed an issue where JnextPlan failed with a Java exception if the carryforward option was queried multiple times using optman prior to plan generation. This occurred specifically when the enCarryForward global option was enabled.

WA-156705
Fixed display issue for run cycle Cron expressions.

Resolved a defect where run cycles created via the REST API with Cron expressions appeared empty in the Dynamic Workload Console. Job stream run cycles now correctly display their configuration details when viewed or edited in the Dynamic Workload Console on distributed engines.

WA-157184
OCLI: Resolved error AWSMSP001E during job definition creation

Fixed an issue where creating a job definition with mandatory fields resulted in error AWSMSP001E. You can now create these definitions successfully without encountering errors related to variable resolution at runtime.

WA-157495
Fixed an issue where transaction rollbacks ran indefinitely when the database was unavailable.

Fixed an issue where transaction rollback processes failed to complete and ran indefinitely if the database went offline or became disconnected.

WA-158201
Fixed an issue where JSON Web Token validation failed in environments using an MSSQL database.

Fixed an issue on the master domain manager in environments using an MSSQL database where the MicroProfile JSON Web Token (JWT) feature encountered errors while creating or validating a token. Previously, using the mpJwtSubJWT configuration caused the application server to fail to retrieve the JSON Web Key (JWK), logging CWWKS6049E, CWWKS5524E, and CWWKS6029E errors in the messages.log file because a signing key could not be found.

WA-158705
Fixed an issue where submitting a job using the Orchestration CLI returned an exception.

Fixed an issue where running the ocli plan sbj command to submit a job failed and returned an AWSMSL027E exception.

WA-158804
Fixed an issue where shadow job property names were incorrectly displayed.

Fixed an issue where the property names of a distributed shadow job were not converted correctly when viewing the job properties after the job completed successfully.

WA-158826
Fixed an issue where submitting a job using the Orchestration CLI returned an exception.

Fixed an issue where running the ocli plan sbj command to submit a job failed and returned an AWSMSL027E exception.

WA-158834
Fixed an issue where calling the GET API for a job definition returned a 500 error.

Fixed an issue where calling the GET API (/twsd/api/v2/model/jobdefinition) to retrieve job definition details failed and returned a 500 Internal Server Error.

WA-158944
Fixed an issue where the Orchestration CLI failed to save embedded jobs in job streams.

Fixed an issue where modifying a job stream to change an existing job definition into an embedded job failed when using the Orchestration CLI. Previously, adding the BUILTIN statement to a job within a job stream definition and saving it resulted in the statement being silently discarded without an error message, and the job remained unchanged. The Orchestration CLI has been updated to correctly process and retain the BUILTIN statement, ensuring that job definitions are properly converted and saved as embedded jobs.

WA-158989
Fixed an issue where agents continuously attempted to download expired certificates.

Fixed an issue where an agent continuously attempted to download and import certificates every 2 minutes if a manual certificate rotation was performed using expired certificates placed in the ssl/depot folder. Previously, this failure only generated an output log in the JobManager_message.log file without halting the recurring download attempts.

WA-159068
Fixed an issue where the resource CLI failed to run on Linux dynamic agents.

Fixed an issue on Linux operating systems where running the resource.sh command on a workstation where only the dynamic agent was installed failed to run and returned a return code of 1.

WA-159469
Fixed an issue where job definition and variable table objects were not locked during GET API calls.

Fixed an issue where job definition and variable table objects were not locked as expected when calling the GET API with the lock parameter set to true.

WA-159997
Fixed an issue where shadow job variables were not resolved for successor jobs.

Fixed an issue where variables passed from a shadow job to a successor job were not correctly resolved. Previously, when a successor job referenced properties or variables exported by a shadow job, the variables remained unresolved in the job's stdlist output file. The evaluation process has been updated to correctly resolve and pass shadow job variables to subsequent jobs.

WA-160052
Fixed a security vulnerability in the Orchestration CLI.

Fixed a security vulnerability affecting the Orchestration CLI. Previously, the component was flagged as vulnerable because it was built using an outdated version of the Go programming language (version 1.26.1). The underlying Go programming language has been updated to version 1.26.2 to resolve this issue, ensuring that the Orchestration CLI binaries provided with IBM Workload Scheduler are secure and free of known vulnerabilities.

WA-160139
Fixed an issue where shadow job variables in the Extra Run Information section displayed incorrect values.

Fixed an issue where the variables displayed in the Extra Run Information section of a shadow job did not match the expected values. Previously, when running the showjobs command with the ;props argument on a shadow job, the extracted properties (such as the scheduled time, remote job name, remote job stream name, and remote workstation) were incorrect. The command has been updated to correctly retrieve and display these variable values.

Table 16. Installation – Defects fixed in this release
CodeDescription
WA-147915
Resolved Oracle 23ai validation error (WAINST0250E) for dynamic domain managers.

Fixed an issue where the installation of a dynamic domain manager failed when using Oracle 23ai. The configureDb.sh script incorrectly reported that the specified database (e.g., FREEPDB1) was not supported, returning error WAINST0250E. This was due to an incorrect validation check that has now been updated to support Oracle 23ai PDB instances.

WA-154637
Resolved configureDb Return Code 99 failure on Windows.

Fixed an issue where the configureDb.vbs script failed during the version check on Windows Server 2025. The operation resulted in an "Invalid object name" error for MDL.MPR_MODEL_PROPERTIES, preventing the successful configuration of the master domain manager on both MSSQL and Db2 databases.

WA-155015
Resolved configureDb.sh failure during fresh PostgreSQL installations.

Fixed an issue where the installation of the master domain manager failed when using a PostgreSQL database that did not yet exist. The configureDb.sh script previously returned an error during the test_connection_to_db action if the database or user were missing, preventing the installer from proceeding with database creation.

WA-155037
Resolved AIX syntax error in configureWlp.sh during installation.

Fixed a shell script syntax error that occurred when installing the master domain manager on AIX. The configureWlp.sh script previously failed with error 0403-057 Syntax error at line 702 : `'' is not matched, preventing the configuration of the WebSphere Application Server Liberty profile.

WA-155731
Resolved certificate management error during 10.1 FP6 to 10.2.7 upgrade.

Fixed an issue where the certman tool failed during the replacement phase when upgrading from version 10.1 FP6 to 10.2.7. The upgrade process now completes successfully without encountering the certman replace error.

WA-155844
Resolved configureDb.vbs failure on MSSQL (Return Code 98).

Fixed an issue where the configureDb.vbs script failed during the database version check on Windows systems using MSSQL. The operation previously failed with errors WAINST0249E and WAINST0246E (Return Code 98) while configuring the master domain manager.

WA-156347
Resolved misleading port conflict error during z-centric agent installation.

Fixed an issue where running the twsinst command to install a z-centric agent resulted in an incorrect error message: AWSFAB112E Port numbers provided with option "-gweifport" and option "-tdwbport" must be different. This error occurred even when those specific options were not provided, due to a conflict in default internal port assignments that has now been resolved.

WA-157629
Fixed an issue where installing a standalone fault-tolerant agent incorrectly created a dynamic agent.

Fixed an issue where installing a standalone fault-tolerant agent incorrectly created and registered a dynamic agent on the master domain manager. This failure occurred after restarting the agent if the twsinst installation script was initially run with the -wauser and -wapassword parameters to download certificates.

WA-158211
fault-tolerant agent uninstallation failure

Fixed an issue where the twsinst script failed to uninstall a fault-tolerant agent on UNIX and Linux systems. The uninstallation process would terminate with error AWSFAB035E because the script could not locate the ShutDownLwa utility due to an incorrect path reference. This failure occurred specifically in fault-tolerant agent-only deployments; environments with a dynamic agent or both components installed were unaffected. The fix ensures the script correctly identifies the utility path to allow for a clean uninstallation.

WA-158574
Fixed an issue where the agent installation failed during the certificate download phase.

Fixed an issue on Linux operating systems where the agent installation failed when attempting to download certificates from the master domain manager. When running the twsinst installation script, the call to the AgentCertificateDownloader.sh script failed and returned a 500 Internal Server Error (WAINST0243E and WAINST0246E).

WA-158716
Fixed an issue where uninstalling a standalone fault-tolerant agent failed.

Fixed an issue on Windows operating systems where running the twsinst.vbs -uninst command to uninstall a standalone fault-tolerant agent failed and returned an AWSFAB036E error. The failure occurred because the script incorrectly attempted to stop the dynamic agent process, which is not present or required in a fault-tolerant agent-only installation.

WA-159051
Fixed an issue where the configureWlp.sh script failed during server installation on AIX.

Fixed an issue on AIX operating systems where the installation process failed during the WebSphere Application Server Liberty configuration phase. The installation stopped returning an error when it attempted to execute the configureWlp.sh script.

WA-159074
Fixed an issue where the waPostConfigure.sh script failed during installation on AIX.

Fixed an issue on AIX operating systems where the waPostConfigure.sh post-configuration script failed during the test server connection phase of the server installation.

WA-159996
Updated the versions of several integrations.

The installation package has been updated to include newer versions of the Database, File transfer, Job Stream Submission, and RESTful integrations.

Table 17. Integrations – Defects fixed in this release
CodeDescription
IJ57555
Fixed an issue where submitting remote command jobs caused a file descriptor leak on dynamic agents.

Fixed an issue where submitting remote command jobs caused a progressive increase in open files related to the JobManager process on dynamic agents. Previously, these files were not released after the jobs were launched, which could eventually lead to memory saturation and cause dynamic agents to stop running.

WA-155123
Resolved composer new validation error for Snowflake integration.

Fixed an issue where running the composer new command to import a Snowflake job definition failed with the error: Enter the required field Input. "{0}". The validation logic has been corrected to properly identify required fields and allow the successful creation of Snowflake job objects.

WA-156565
Snowflake integration validation failure

Fixed a validation error that occurred when creating or importing a Snowflake job definition using the composer command line. During the composer new process, the JSDL (Job Specification Definition Language) validation failed with error AWSJCS025E, specifically returning the sub-error AWKSNW012E. This occurred because the validation logic incorrectly flagged the Username field as missing or empty, even when properly provided in the job definition. The fix ensures that input fields for the Snowflake application job integration are correctly parsed and validated by the composer command.

Table 18. REST APIs – Defects fixed in this release
CodeDescription
  
WA-154503
Resolved internal errors in Graphical Designer and OCLI.

Fixed a defect that caused internal server errors when managing job streams. Users previously encountered error AWSMAC023E when deploying workflows in the Graphical Designer and error AWSMRC020E (HTTP 500) when running the ocli model display js command. Both interfaces now correctly process job stream deployment and display requests.

WA-155850
Fixed compilation errors in REST API V2 generated Java clients.

Resolved a critical defect where Java code generated from the REST API V2 YAML failed to compile. The fix addresses missing dependencies for jakarta.ws.rs packages and resolves "symbol not found" errors for several model classes, including JobInPlanV2, WorkstationInPlanV2, and ResourceInfo. Developers can now successfully build and run automated clients using the updated YAML specification.

Table 19. IBM Z Workload Scheduler Agent (also known as z-centric agent)– Defects fixed in this release
CodeDescription
WA-155163
Resolved JobManager process crash on Linux dynamic agents.

Fixed a critical issue where the JobManager process on Linux dynamic agents crashed immediately following the submission of a native job. This failure resulted in jobs remaining in an indefinite WAIT status. The fix restores process stability and ensures successful job processing on Linux dynamic agents.

WA-155920
Resolved unexpected failures in Managed File Transfer jobs.

Fixed an issue where Managed File Transfer jobs using the SSH protocol failed with an unexpected error during the initialization phase. The fix ensures that jobs configured with remote password authentication and specific destination file permissions (for example 755) are processed correctly and reach a SUCC (Successful) state.

WA-159193
Fixed an issue where the enigma command incorrectly removed exclamation marks from encrypted passwords.

Fixed an issue on Windows operating systems where using the enigma command to encrypt a password containing an exclamation mark (!) incorrectly trimmed the character from the final encrypted value. This failure prevented file transfer jobs using FTPS or FTPES connections from authenticating and running successfully.

Table 20. Z connector – Defects fixed in this release
CodeDescription
WA-155896
Resolved indefinite loading in Dynamic Workload Console Test Connection page.

Fixed a defect in the Dynamic Workload Console where the Test Connection action hung indefinitely after updating both the console and the engine. This issue, specifically observed in Linux environments using an Oracle database, has been resolved to ensure that connection statuses are returned promptly.

WA-156111
Updated Z connector V2 API Swagger definition.

Resolved an issue where the zConn V2 API Swagger information was incomplete. The specification has been updated to include the missing JobStreamInPlan and JobInPlan sections, enabling developers to correctly reference and test endpoints related to job and workflow instances in the plan.

WA-158340
Fixed an issue where testing the connection to an IBM Z Workload Scheduler engine failed.

Fixed an issue where testing the connection to an IBM Z Workload Scheduler engine failed and returned an AWSJCO005E error from the WebSphere Application Server Liberty.

Resolved Common Vulnerabilities and Exposures (CVEs)

The following CVEs have been resolved:

Table 21. List of resolved vulnerabilities by severity
CVE IDSeverity
CVE-2026-33701Critical
CVE‑2025‑68121Critical
CVE‑2026‑33870Major
CVE‑2025‑61726Major
GHSA‑72hv‑8253‑57qqMajor
CVE-2026-1519Major
CVE-2025-68161Normal
CVE-2024-12798Normal
CVE‑2025‑14831Normal
CVE‑2026‑1002Normal
CVE-2025-11226Normal
CVE-2024-12801Normal
CVE-2026-33532Normal
CVE-2026-24001Normal
CVE-2025-9086Normal
CVE-2026-25679Normal

Interoperability tables

In the tables in this section the following acronyms are used:

Table 22. Acronym table
AcronymExtended form
DADynamic agent
DDMdynamic domain manager or backup dynamic domain manager
DMdomain manager
DWCDynamic Workload Console
FTAfault-tolerant agent
MDMmaster domain manager
BKMbackup master domain manager
ZWS agentIBM Z Workload Scheduler Agent

 

Compatibility is supported on the latest available release level for each IBM Workload Scheduler release listed in the table:

 

Table 23. Compatibility table for IBM Workload Scheduler
ComponentMDMDDMDMFTADAZWS agent
MDM 10.2.7 
  • 10.x.x
  • 9.5.0 .x (*)
  • 10.x.x
  • 9.5.0 .x (*)
  • 10.x.x
  • 9.5.0 .x (*)
  • 10.x.x
  • 9.5.0 .x (*)
  • 10.x.x
  • 9.5.0 .x (*)
DM 10.2.710.x.x  10.x.x  
FTA 10.2.710.x.x10.x.x10.x.x   
DA 10.2.710.x.x10.x.x10.x.x   
DDM 10.2.710.x.x  10.x.x10.x.x 

(*) Important information regarding agents at 9.5 version

If you currently have agents at 9.5 version, read the following information:

Table 24. Compatibility table for AIDA
ComponentMDMDDMDWC
AIDA 10.2.710.x.x10.x.x10.x.x

Compatibility scenarios and limitations

It is highly recommended to keep all IBM Workload Scheduler components updated to the latest version as part of regular maintenance. This not only maintains a consistent environment but also enables you to utilize new features introduced in each release.

Known limitations and workarounds

The following are software limitations and workarounds that affect IBM Workload Scheduler 10.2.7:

Mixed-version environment with a master domain manager at a version earlier than 9.5 FP4

Before you install a component at version 10.2.7 in an environment with a master domain manager at a version earlier than 9.5 FP4, install the fix for IJ47731 on the back-level master domain manager.

  • For version 9.4 FP7, the fix is available from IBM Fix Central.
  • For other product versions, contact Software Support.

.

Event-driven workload automation (EDWA) proxy does not support HTTPS connections

Event-driven workload automation (EDWA) proxy supports only HTTP connections. As a result, SSL communication is not supported.

The centralized update on a stand-alone fault-tolerant agent V10.2.1 is not supported

The centralized update on a fault-tolerant agent V10.2.1 is not supported, regardless of the operating system. For more information about upgrading from different versions, see Performing the centralized agent update on a stand-alone fault-tolerant agent.

Pool connection issues with CyberArk

If you are using a pool as a gateway to communicate with CyberArk and an agent within the pool loses connection to the CyberArk server, the job assigned to that specific agent fails. For instance, if an agent remains up and running but stops communicating with CyberArk, any jobs assigned to that agent that require a connection to CyberArk fails. This occurs because the pool lacks the ability to verify whether its agents are connected to the CyberArk server.

Folder filtering discrepancy in Command Line Interfaces

Filtering for jobs and job streams within folders with Orchestration CLI or REST APIs V2 using conman syntax might not work as expected, returning different results from the ones retrieved using conman.

Japanese characters might display incorrectly in job logs on Windows for Dynamic Workload Console and fault-tolerant agents

Job logs containing Japanese characters might appear garbled when viewed in the Dynamic Workload Console or when using the command line on fault-tolerant agents running on Windows operating systems.

Workaround

To resolve this issue, set a Windows environment variable that points to the IBM Workload Scheduler home directory, for example:

TWS_TISDIR=C:\FTA\TWS

Unresolved dependency state with shadow jobs and start of day setting

Successor jobs remain permanently in the HOLD state, even after the shadow job predecessors successfully complete. This happens specifically when the job stream execution crosses the customized Start of Day boundary due to the job rerun logic. The product correctly updates the final status of the shadow job to SUCC, but the dependency is not released when the related scheduling event occurs close to or across the startOfDay. The job is effectively orphaned in the queue, stuck in HOLD despite having met its only prerequisite.

ABENDPROMPT Failure to Suppress RERUN on AIX operating systems

On AIX operating systems, the presence of an ABENDPROMPT setting fails to correctly block the automatic execution of the RECOVERY RERUN action when a job terminates in the ABEND state.

The job manager fails to prioritize the prompt mechanism, which should transition the job to a waiting state and generate an immediate ASKED prompt, thereby overriding or delaying the automatic RERUN defined in the recovery policy.

This failure results in an uncontrolled automatic rerun, bypassing the required human intervention point defined by the ABENDPROMPT setting.

Certificate expiration date is not visible for dynamic agents connecting to dynamic domain managers

The certificate expiration date is not visible when a dynamic agent connects to a dynamic domain manager.

Database job connection tests to Microsoft SQL Server might fail with an SSL certificate error

A known limitation exists where testing the connection for a Database job to a Microsoft SQL Server database might fail. When this occurs, the system returns an AWKDBE023E error indicating that the database driver could not establish a secure connection using Secure Sockets Layer (SSL) encryption. This issue occurs when the encrypt connection property is set to true and the trustServerCertificate property is set to false, but the driver cannot find a valid certification path to the requested target.

Known limitations with prompt dependencies

Several known limitations exist regarding how prompt dependencies are displayed and handled across the Orchestration CLI and the Dynamic Workload Console:

  • Incorrect display of job streams in the READY state: When running the Orchestration CLI showprompts (or sp) command with the deps argument, the output incorrectly includes job streams that are in the READY state. The output should only display job streams with unsatisfied prompt dependencies, which are expected to be in the HOLD state.
  • Missing prompt names in the dependencies column: When running the Orchestration CLI showprompts command with the deps and info arguments, the prompt name associated with the job stream is incorrectly omitted from the dependencies column.
  • Missing error messages for jobless job streams: When running the Orchestration CLI showprompts command with the deps and keys arguments against a job stream that contains no jobs, the command returns an empty output. It should instead return an explicit error message stating that the output cannot be generated without a job inside the job stream.
  • Predefined prompts are overridden by ad-hoc prompts in the Orchestration Monitor: When submitting a job stream using the Orchestration CLI submit sched (or sbs) command with the prompt argument, any existing predefined prompt dependencies in the job stream are incorrectly hidden in the Dynamic Workload Console. When viewing the job stream's dependencies in the Orchestration Monitor, only the ad-hoc prompt is displayed, instead of both the predefined and ad-hoc prompts.

Jobs incorrectly display a Cancel Pending status after being unmarked as a No operation (UNNOP) and rerun

A known limitation exists where the Orchestration CLI incorrectly displays a job's internal status as Cancel Pending after the job has had its No operation (NOP) property removed and is rerun. When a user marks a job as a No operation (using the nop command), it is subsequently set to a Cancelled status. If the user then removes the NOP property (using the unnop command) and reruns the job (using the rerun or rr command), the job correctly executes but inaccurately retains a Cancel Pending internal status instead of updating to Success.

certman command might fail in non-English workstations

To work around this problem, change the Java language setting.

Successors are not displayed when submitting multiple job streams using an Oracle 19 database

When submitting multiple job streams in an environment configured with an Oracle 19 database, the successors of the submitted job streams are not displayed. To work around this problem, download the KB0130577 fix from IBM Fix Central.

Package structure

For a detailed list of available packages, see the 10.2.7 Quick Start Guide document available from IBM Fix Central.

Software requirements for WebSphere Application Server Liberty Base

WebSphere Application Server Liberty Base adopts a continuous delivery model where new versions are deployed on a monthly basis.

During formal testing, IBM Workload Scheduler and the Dynamic Workload Console were tested by using WebSphere Application Server Liberty Base 26.0.0.3.

For more information about which subsequent versions of WebSphere Application Server Liberty Base can be used in the future, see Recommended updates for WebSphere Application Server.

Installing and upgrading to version 10.2.7

This section describes how to install or upgrade to version 10.2.7.

Before installing the release, ensure you have installed the required prerequisite software. To obtain the latest information about system requirements, run the Detailed System Requirements report and browse to the relevant section.

Installation notes

  • If you use Oracle AI Database 26ai, you can improve performance by setting the parameters listed in the topic about Optimizing performance for Oracle AI Database 26ai in IBM Workload Scheduler: Planning and Installation.
  • Before performing an upgrade, check whether the ssl_config.xml file is present in the overrides folder. If the file is present, check the verifyHostname option in the twaSSLSettings section. The verifyHostname must be set to false, as shown in the following example:

    <ssl id="twaSSLSettings" keyStoreRef="twaKeyStore" trustStoreRef="twaTrustStore" 
    sslProtocol="TLSv1.2" clientAuthenticationSupported="true" verifyHostname="false"/>
  • Depending on the WebSphere Application Server Liberty version you are using, you might encounter the problems described in the following technotes:

Versions equal to or higher than 24.0.0.8

See Possible IWS compatibility issues with Liberty 24.0.0.8 or higher

Versions ranging from 24.0.0.3 to 24.0.0.8

See Dynamic Workload Console is not able to open "Monitor Event Rules" nor "Manage workload security" with OpenID authentication

Upgrade notes

Review the following points before upgrading.

MSSQL notes

If you are using MSSQL and are upgrading from a release earlier than 10.2.3, perform the steps listed below after upgrading to version 10.2.7. If you are using MSSQL and are upgrading from release 10.2.3 or a release later than 10.2.3, you can ignore the steps listed below.

  1. Browse to the datasource.xml template.
  2. Open the file with a text editor and perform the following changes:
    1. Add the lines listed below after the db.driver.path parameter:

      <variable name="db.encrypt" value="false"/>
      <variable name="db.trustServerCertificate" value="false"/>
    2. Append the following strings at the end of the value of the mssql.URL parameter:

      ;encrypt=${db.encrypt};trustServerCertificate=${db.trustServerCertificate}
    3. Add the lines listed below after the integratedSecurity parameter:

      encrypt="${db.encrypt}"
      trustServerCertificate="${db.trustServerCertificate}"

      The resulting file looks as follows. The modified sections are highlighted in bold:

      ...	
      	<variable name="db.driver.path" value="<db_driver_path>"/>
      	<variable name="db.encrypt" value="false"/>
      	<variable name="db.trustServerCertificate" value="false"/>
      	<variable name="mssql.URL" value="jdbc:sqlserver://${db.serverName}:${db.portNumber};databaseName=${db.databaseName}
             ;encrypt=${db.encrypt};trustServerCertificate=${db.trustServerCertificate}"/>
      
      	<jndiEntry value="MSSQL" jndiName="db.type" />
      ...
      		    integratedSecurity="false"
      		    encrypt="${db.encrypt}"
      		    trustServerCertificate="${db.trustServerCertificate}"
  3. Stop and restart WebSphere Application Server Liberty to make the changes effective.

Verify your Single Sign-On settings

When upgrading to Dynamic Workload Console version 10.2.5, if the previous environment is configured for Single Sign-On (SSO) using ltpa.keys, perform the following steps:

  1. Copy the ltpa.keys file either from the master domain manager to the workstation hosting the Dynamic Workload Console, or vice versa, depending on your configuration.
  2. After copying, restart the IBM Workload Scheduler processes on the component where the ltpa.keys file was updated to complete the SSO setup.

Check the alias of your custom certificate before upgrading

Before you upgrade the master domain manager or Dynamic Workload Console, verify the alias you use for your custom certificates. Failure to do so might cause the master domain manager and Dynamic Workload Console to fail at start time and return one of the following errors: CWPKI0024E: The server certificate alias is invalid. or CWPKI0024E: The server certificate alias specified by the attribute serverKeyAlias is either not found in KeyStore or it is invalid.

On UNIX operating systems, you can run the following example command to verify the alias:

            1. Browse to the following paths, depending on the component:

               master domain manager

              <TWA_DATA_DIR>/usr/servers/engineServer/resources/security

             Dynamic Workload Console

             <TWA_DATA_DIR>/usr/servers/dwcServer/resources/security

            2. Run the following command:

openssl pkcs12 -in TWSServerKeyFile.p12 -nokeys -info | grep server

On Windows operating systems, you can run the following example command to verify the alias:

               1. Browse to the following paths, depending on the component:

               master domain manager

              <TWA_home>\usr\servers\engineServer\resources\security

              Dynamic Workload Console

            <TWA_home>\usr\servers\dwcServer\resources\security

              2. Run the following command:

certutil -dump keyfile.p12

 

If a key with the alias server is present, no additional steps are required. The custom certificate with alias server is used by the master domain manager and Dynamic Workload Console.

If your custom certificates use aliases other than server, you can encounter the following situations:

Table 25. Defining the alias for custom certificates
Current status of ssl_config.xml fileSteps to be performed
You do not have a customized version of the ssl_config.xml file in the overrides folder.

On both master domain manager and Dynamic Workload Console, create a new file named serverkeyalias. xml in the overrides folder with the following content:

<server description="sslSettings_custom_serverkeyalias">
	<variable name="serverkeyalias" value="<your_alias>"/>
</server>
You already have a customized version of the ssl_config.xml file in the overrides folder.

On both master domain manager and Dynamic Workload Console, edit the ssl_config.xml file in the overrides folder as follows:

  1. Add the following entry:

    <variable name="serverkeyalias" value="server"/>
  2. Change the following entry

    <ssl id="twaSSLSettings" keyStoreRef="twaKeyStore" 
    trustStoreRef="twaTrustStore" sslProtocol="${sslprotocols}" 
    clientAuthenticationSupported="true" verifyHostname="false"/>

    to read as follows (changes highlighted in bold):

    <ssl id="twaSSLSettings" serverKeyAlias="${serverkeyalias}" 
    keyStoreRef="twaKeyStore" trustStoreRef="twaTrustStore" sslProtocol="${sslprotocols}" 
    clientAuthenticationSupported="true" verifyHostname="false"/>
    

You can now proceed with the upgrade.

Installation and upgrade procedures

You can install the release using the procedure described in Installing from the CLI.

You can upgrade to the current release using the procedure described in Upgrading from the CLI.

Disk space requirements

To obtain the latest information about permanent disk space requirements when installing on supported operating systems, run the Hardware requirements report and click on the relevant operating system link.

Performing the centralized agent update on a stand-alone fault-tolerant agent

Before performing a centralized update on fix packs or upgrade on releases on a stand-alone fault-tolerant agent to 10.2.7, there are procedures to follow according to the version of the fault-tolerant agent from which you want to upgrade.

Note: When upgrading a dynamic agent together with a fault-tolerant agent to 10.2.7, if you start the upgrade from the dynamic agent there are no further steps required. The same applies when performing an upgrade of the fault-tolerant agent starting from a dynamic agent.

The table below shows which procedure you must follow to perform the upgrade, according to the fault-tolerant agent version.

Table 26. Steps required before performing the centralized agent update on a stand-alone fault-tolerant agent
Stand-alone fault-tolerant agent versionRequired steps
V9.5 Fix Pack 4 up to V9.5 Fix Pack 6If not already enabled, enable the use of the HTTPS protocol to connect to the event processor server. For more information about enabling enEventProcessorHttpsProtocol | eh, see Global options - detailed description
V9.5 Fix Pack 7No steps required.
V10.1 up to V10.1 Fix Pack 3

If not already enabled, enable the use of the HTTPS protocol to connect to the event processor server. For more information about enabling enEventProcessorHttpsProtocol | eh, see Global options - detailed description.

Then, from the same workstation where the fault-tolerant agent

is installed, copy the TWSClientKeyStore files from TWA_DATA_DIR/ssl/GSKit to TWA_DATA_DIR/ITA/cpa/ita/cert.

Note: The owner of the new TWSClientKeyStore files and the permissions granted must be the same of the existing files.
V10.1 Fix Pack 4

If not already enabled, enable the use of the HTTPS protocol to connect to the event processor server. For more information about enabling enEventProcessorHttpsProtocol | eh, see Global options - detailed description.

Then, download the curl file from APAR IJ50967 and save it inside TWS/ITA/cpa/ita.

Note: The owner of the new curl file and the permissions granted must be the same of the existing curl file.
V10.2

If not already enabled, enable the use of the HTTPS protocol to connect to the event processor server. For more information about enabling enEventProcessorHttpsProtocol | eh, see Global options - detailed description.

Then, download the curl file from APAR IJ50967 and save it inside TWS/ITA/cpa/ita.

Note: The owner of the new curl file and the permissions granted must be the same of the existing curl file.
V10.2.1Not supported.
V10.2.2 and laterNo additional procedure required.

Documentation updates

Any additions or changes to the documentation as a result of this release have been integrated into the online product documentation available in IBM Workload Scheduler product information.

Contacting IBM Workload Scheduler Software Support

Before contacting IBM Software Support with a problem, refer to the IBM Software Support site by accessing the following Web address: https://www.ibm.com/support/home/

To access IBM support, click the IBM support link at the bottom right of the page.

If you want to contact IBM Software Support, see the IBM Software Support Handbook at the following Web site: http://techsupport.services.ibm.com/guides/handbook.html

The guide provides information about how to contact IBM Software Support, depending on the severity of your problem, and the following information:

  • Registration and eligibility.
  • Telephone numbers, depending on the country in which you are located.
  • Information you must have before contacting IBM Software Support.

Notices

This information was developed for products and services offered in the US. This material might be available from IBM Workload Scheduler in other languages. However, you may be required to own a copy of the product or product version in that language in order to access it.

IBM Workload Scheduler may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM Workload Scheduler representative for information on the products and services currently available in your area. Any reference to an IBM Workload Scheduler product, program, or service is not intended to state or imply that only that IBM Workload Scheduler product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM Workload Scheduler intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-IBM Workload Scheduler product, program, or service.

IBM Workload Scheduler may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not grant you any license to these patents. You can send license inquiries, in writing, to:

IBM Director of Licensing
IBM Corporation
North Castle Drive, MD-NC119
Armonk, NY 10504-1785
US
 

 

For license inquiries regarding double-byte character set (DBCS) information, contact the IBM Workload Scheduler Intellectual Property Department in your country or send inquiries, in writing, to:

Intellectual Property Licensing
Legal and Intellectual Property Law
IBM Japan Ltd.
19-21, Nihonbashi-Hakozakicho, Chuo-ku
Tokyo 103-8510, Japan

 

INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM Workload Scheduler may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice.

Any references in this information to non-IBM Workload Scheduler websites are provided for convenience only and do not in any manner serve as an endorsement of those websites. The materials at those websites are not part of the materials for this IBM Workload Scheduler product and use of those websites is at your own risk.

IBM Workload Scheduler may use or distribute any of the information you provide in any way it believes appropriate without incurring any obligation to you.

Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact:

IBM Director of Licensing
IBM Corporation
North Castle Drive, MD-NC119
Armonk, NY 10504-1785
US
 

 

Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee.

The licensed program described in this document and all licensed material available for it are provided by IBM Workload Scheduler under terms of the IBM Workload Scheduler Customer Agreement, IBM Workload Scheduler International Program License Agreement or any equivalent agreement between us.

The performance data discussed herein is presented as derived under specific operating conditions. Actual results may vary.

Information concerning non-IBM Workload Scheduler products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM Workload Scheduler has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM Workload Scheduler products. Questions on the capabilities of non-IBM Workload Scheduler products should be addressed to the suppliers of those products.

This information is for planning purposes only. The information herein is subject to change before the products described become available.

This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to actual people or business enterprises is entirely coincidental.

COPYRIGHT LICENSE:

This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM Workload Scheduler, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM Workload Scheduler, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. The sample programs are provided "AS IS", without warranty of any kind. IBM Workload Scheduler shall not be liable for any damages arising out of your use of the sample programs.

© IBM Workload
                              Scheduler 2006, 2016. All rights reserved. US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. © Copyright HCL Technologies Limited 2016, 2026.

Trademarks

IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.

Adobe™, the Adobe logo, PostScript™, and the PostScript logo are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States, and/or other countries.

IT Infrastructure Library™ is a Registered Trade Mark of AXELOS Limited.

Linear Tape-Open™, LTO™, the LTO Logo, Ultrium™, and the Ultrium logo are trademarks of HP, IBM Corp. and Quantum in the U.S. and other countries.

Intel™, Intel logo, Intel Inside™, Intel Inside logo, Intel Centrino™, Intel Centrino logo, Celeron™, Intel Xeon™, Intel SpeedStep™, Itanium™, and Pentium™ are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.

Linux™ is a registered trademark of Linus Torvalds in the United States, other countries, or both.

Microsoft™, Windows™, Windows NT™, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both.


Java Logo
 
Java™ and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates.

Cell Broadband Engine™ is a trademark of Sony Computer Entertainment, Inc. in the United States, other countries, or both and is used under license therefrom.

ITIL™ is a Registered Trade Mark of AXELOS Limited.

UNIX™ is a registered trademark of The Open Group in the United States and other countries.

Terms and conditions for product documentation

Permissions for the use of these publications are granted subject to the following terms and conditions.

Applicability

These terms and conditions are in addition to any terms of use for the IBM Workload Scheduler website.

Personal use

You may reproduce these publications for your personal, noncommercial use provided that all proprietary notices are preserved. You may not distribute, display or make derivative work of these publications, or any portion thereof, without the express consent of IBM Workload Scheduler.

Commercial use

You may reproduce, distribute and display these publications solely within your enterprise provided that all proprietary notices are preserved. You may not make derivative works of these publications, or reproduce, distribute or display these publications or any portion thereof outside your enterprise, without the express consent of IBM Workload Scheduler.

Rights

Except as expressly granted in this permission, no other permissions, licenses or rights are granted, either express or implied, to the publications or any information, data, software or other intellectual property contained therein.

IBM Workload Scheduler reserves the right to withdraw the permissions granted herein whenever, in its discretion, the use of the publications is detrimental to its interest or, as determined by IBM Workload Scheduler, the above instructions are not being properly followed.

You may not download, export or re-export this information except in full compliance with all applicable laws and regulations, including all United States export laws and regulations.

IBM Workload Scheduler MAKES NO GUARANTEE ABOUT THE CONTENT OF THESE PUBLICATIONS. THE PUBLICATIONS ARE PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE.

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSGSPN","label":"IBM Workload Scheduler"},"ARM Category":[{"code":"a8m3p000000UoZVAA0","label":"Continuous Delivery"}],"ARM Case Number":"","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"10.2.7"}]

Document Information

Modified date:
12 May 2026

UID

ibm17261550