Release Notes
Abstract
This document provides important information about IBM Workload Scheduler Version 10.2.7
Content
IBM Workload Scheduler version 10.2.7 Release Notes
Release date: April 24, 2026
This document provides important information about IBM® Workload Scheduler version 10.2.7.
You can obtain dynamic and up-to-date reports by browsing to Software Product Compatibility Reports and selecting the information you are interested in.
This document is divided into the following main sections:
- Features introduced with version 10.2.7
- APARs fixed in version 10.2.7
- Defects fixed in version 10.2.7
- Resolved Common Vulnerabilities and Exposures (CVEs)
- Interoperability tables
- Known limitations and workarounds
- Package structure
- Software requirements for WebSphere Application Server Liberty Base
- Installing and upgrading to version 10.2.7
- Performing the centralized agent update on a stand-alone fault-tolerant agent
- Documentation updates
- Contacting IBM Workload Scheduler Software Support
- Notices
New Documentation Portal for IBM Workload Scheduler and IBM Z Workload Scheduler
Effective April 24, 2026, the official documentation for IBM Workload Scheduler and IBM Z Workload Scheduler has moved to a redesigned, dedicated portal. The new portal introduces several major improvements, including:
- AI‑powered chat to search, navigate, and process information across the documentation set. Available starting from April, 30, 2026.
- A new documentation template designed to improve clarity, readability, and overall usability.
- An updated look and feel, offering a more modern, consistent, and intuitive user experience.
Please update your bookmarks for all releases: IBM Workload Automation.
Features introduced with version 10.2.7
IBM Workload Scheduler version 10.2.7 contains the following enhancements:
- Advanced reliability for File Transfer integration
- Automated database maintenance and optimization suite
- Stay in sync with workspace merge
- Run cycle preview: visualize your schedule
- Multiple job streams with dependencies submission
- Successors & nested job streams submission
- Run cycle based job stream submission
- Advanced operational oversight in Orchestration Monitor
- New Send Event action for ServiceNow integrations
- Enhanced shadow job integration
- Elevate your automation: the definitive guide to IBM® Workload Scheduler best practices
- Accelerate job resolution and improve job stream visibility in Orchestration CLI
- Changed features, improvements, and RFEs in version 10.2.7
Helpful videos demonstrating new features are available on Workload Automation YouTube channel.
APARs fixed in version 10.2.7
This section lists APARs resolved in version 10.2.7, divided by component.
- Table 1. Engine component - APARs fixed in this release
- Table 2. Installation process – APARs fixed in this release
- Table 3. Integrations – APARs fixed in this release
- Table 4. Command-line component – APARs fixed in this release
- Table 5. Docker – APARs fixed in this release
- Table 6. Dynamic domain manager (broker) – APARs fixed in this release
- Table 7. IBM Z Workload Scheduler Agent (also known as z-centric agent)– APARs fixed in this release
- Table 8. Mirroring – APARs fixed in this release
- Table 9. REST APIs – APARs fixed in this release
- Table 10. Documentation – APARs fixed in this release
| Code | Description |
|---|---|
| IJ50261 | Fixed an issue where the deploymentFrequency global option value of 0 was ignored.Fixed an issue where setting the deploymentFrequency (or df) global option to |
| IJ53940 | Fixed an issue where the resetFTA command failed to move target files.Fixed an issue on Linux operating systems where the resetFTA command failed to move the target message files on a fault-tolerant agent to the temporary directory. Previously, running the command returned an |
| IJ56856 | Fixed an issue where the scheduled time was missing from Oracle database audit records.Fixed an issue where querying the AUDIT_STORE_RECORDS_V view in an Oracle database failed to display the scheduled time for job instances. This missing information occurred after upgrading the master domain manager, which prevented users from easily identifying specific job instances and generating accurate reports from the database. This issue was specific to Oracle databases and did not occur in DB2 environments. |
| IJ57247 | Fixed an issue where jobs intermittently remained in a READY state.Fixed an issue on fault-tolerant agents where jobs intermittently remained in a READY status and failed to execute after their predecessor completed successfully. Previously, the affected jobs would not progress until a JnextPlan operation was run on the master domain manager to restart the batchman process. |
| IJ57470 | Fixed an issue where group names with spaces were not allowed when creating a service API key.Fixed an issue where attempting to create a service API key from the Manage API Keys page in the Dynamic Workload Console failed if the specified group name contained a space. Previously, saving an API key with a space in the group name returned an |
| IJ57599 | Fixed an issue with certificate renewal using the AgentCertificateDownloader.sh script.Fixed an issue where errors occurred with a new set of certificates downloaded by the AgentCertificateDownloader.sh script. The issue occurred when the script was triggered on the master domain manager because the existing certificates were approaching their expiration date. |
| IJ57600 | Fixed an issue where connections were exhausted on a dynamic domain manager connected to a Z controller.Fixed an issue where the maximum number of connections was exhausted and never released when starting the application server (engineServer) on a dynamic domain manager connected to a Z controller. Previously, during startup or when switching between a primary and a backup dynamic domain manager, connections were not properly released, which caused rollback or commit operations to occur after the connections were already closed. The connection handling process has been updated to correctly manage and release connections. |
| IJ57622 | Fixed an issue where the wa_pull_info script stopped responding on Windows operating systems.Fixed an issue on Windows operating systems where the wa_pull_info diagnostic data collection script unexpectedly stopped responding and ran indefinitely. Previously, an unhandled exception during the file encryption phase caused the script to enter an infinite loop. The script has been updated with proper exception handling to ensure that data collection completes successfully without hanging. |
| KB0108710 | Fixed an issue where access control list groups with spaces in their names were not allowed in composer.Fixed an issue where the composer command line prevented users from adding access control list groups if the group name contained a space. Previously, attempting to add a group name with a space returned an |
| KB0125121 | Fixed an issue where File transfer jobs failed when transferring a large number of files.Fixed an issue where File transfer jobs unexpectedly failed when transferring a large volume of files. Previously, attempting to upload multiple files caused the file transfer job executor to drop the connection prematurely, resulting in a |
| KB0127330 | Fixed an issue where an event rule incorrectly submitted duplicate jobs.Fixed an issue where an event rule configured to monitor file creation incorrectly submitted two instances of a job instead of one. This compatibility issue occurred when running event rules created in version 9.4 on IBM Workload Scheduler 10.2.x. The duplicate submission caused the event rule to fail and return an |
| KB0128221 | Fixed an issue where the onoverlap enqueue option caused the maximum dependency limit to be exceeded.Fixed an issue where configuring a job stream with the maximum of 40 dependencies alongside the onoverlap enqueue option caused performance degradation on the master domain manager and Dynamic Workload Console User's Guide, delayed job submissions, and caused the planman resync operation to hang. Previously, because the onoverlap enqueue option is internally implemented by adding a follows dependency on the previous job stream instance, subsequent runs exceeded the 40-dependency limit. The composer, Orchestration CLI, and Dynamic Workload Console components have been updated to properly restrict the maximum number of user-defined dependencies to 39 when the onoverlap enqueue option is selected. |
| KB0129377 | Fixed an issue where the job stream identifier was missing from plan audit records.Fixed an issue where the job stream identifier was not recorded in the plan audit log when a job stream was submitted using the Dynamic Workload Console. Previously, the identifier was correctly recorded only when the job stream was submitted using the conman command line. |
| KB0129570 | Fixed an issue where the PostgreSQL connection string was missing from Kubernetes Helm charts.Fixed an issue for Kubernetes-based installations where the PostgreSQL database connection string was missing from the Helm chart. Previously, although PostgreSQL was a supported database for IBM Workload Scheduler, users could not configure it during Kubernetes deployments because the connection string option was absent. The Helm chart has been updated to include the PostgreSQL connection string, allowing users to successfully deploy the product components with a PostgreSQL database in a Kubernetes environment. |
| WA-156350 | Fixed an issue where selecting resource details for an SAP BusinessObjects BI job returned an error.Fixed an issue where attempting to select resource details while creating or modifying an SAP BusinessObjects BI job failed and returned an |
| KB0129866 | Fixed an issue where the dynamic domain manager and dynamic agents disconnected during a plan refresh.Fixed an issue where the dynamic domain manager and all connected dynamic agents unexpectedly unlinked during a plan refresh. Previously, executing a plan refresh caused the dynamic domain manager to fail to link, resulting in an |
| IJ56917 | Resolved failure in Standard Output (STDOUT) passing between jobs.Fixed a regression where the Standard Output from a job was not being passed to subsequent jobs within the same job stream instance. Data flow between dependent jobs has been restored, enabling successor jobs to access the output of their predecessors upon completion. |
| Code | Description |
|---|---|
| IJ53388 | Fixed an issue where the configureDb.sh script failed if passwords contained a dollar sign.Fixed an issue where running the configureDb.sh script failed if the database administrator password (--dbadminuserpw) or database user password (--dbpassword) contained a dollar sign ( |
| IJ54217 | IBM i agent installation fails due to unexpected java -version output format.A defect in the agent installation script caused the procedure to fail on IBM i environments because the script could not correctly parse the output of the java -version command. |
| IJ55550 | During the upgrade, he twsinst script with the recovInstReg parameter enabled fails with error code 5.A defect in the twsinst script caused the registry recovery operation (-recovInstReg true) to fail and return error code 5. When attempting to restore corrupted registry files, the twsinst script triggered an incorrect subroutine, resulting in the misleading error: "ERROR: TWS instance to enable for Cluster Installation is not a8.6.x.x/9.1.x.x version. Therefore no action will be performed." |
| IJ55711 | Agent upgrade fails due to unsupported OpenSSL encryption algorithm, specifically RC2-40-CBC algorithm.A defect in the agent upgrade process caused the installation to fail when attempting to process the P12 certificate file. The failure occurred because the bundled OpenSSL utility available on the agent encountered an unsupported encryption algorithm during the processing of the certificate file. |
| IJ55738 | Uninstall fails to clean up non-root installation files. A defect in the uninstallation procedure caused the system to leave the $HOME/.cit/cit.ini file in place following the uninstallation of a non-root instance.The uninstallation procedure failed to remove the cit.ini file after the uninstallation of a non-root instance. This configuration file retained an incorrect path to the common inventory technology (CIT) component, leading to configuration errors. |
| IJ56396 - KB0124632 | A master domain manager at version 10.2.5 experienced an unexpected service interruption caused by Java heap memory exhaustion.This issue typically occurred when a high number of dynamic agents were configured in the environment. The root cause was linked to the exhaustion of available HTTP connections. |
| IJ56788 | Fixed an issue where an empty directory was unexpectedly created during a centralized agent update.Fixed an issue where performing a centralized agent update unexpectedly created an empty /tmp/TWS directory. Previously, this folder was generated even when the default working directory parameter (-work_dir) was used, which should only target the $HOME/tmp directory. The update process has been corrected to prevent the creation of this unnecessary folder. |
| IJ57262 | Fixed an issue where Windows z-centric agent installations incorrectly set the ddynamic domain manager port to 512.Fixed an issue on Windows operating systems where new installations of the z-centric agent incorrectly assigned port |
| KB0095841 | Agent update completed successfully despite critical disk space failure.The upgrade of dynamic agents erroneously reported successful completion with message AWSFAB033I, even when the installation process failed due to critical disk space issues. |
| KB0121428 | After installing a dynamic agent at version 10.2.4 on Windows and while running integrations, javaexecutor logs are missing.After installing or updating a dynamic agent on Windows, the required directory for Java logs was not created, causing the loss of JavaExecutor logs. |
| KB0122083 | Missing dbsslconnection parameter in installation scripts.The –dbsslconnection parameter in the configuredb or serverinst commands was available only on UNIX operating systems. |
| KB0122703 | Parallel upgrade fails with error AWKCLI102E due to an error in SSL password encryption.A defect caused the installation of the backup master domain manager to fail during a parallel upgrade, returning the AWKCLI102E error. The underlying cause was a bug in the code which failed during the encryption of the password when the password string length was exactly 16 characters or a multiple of 16 (for example 32, 48). |
| KB0128070 | Fixed an issue where dynamic agent installations incorrectly failed on Windows Server 2016.Fixed an issue where installing a dynamic agent on Windows Server 2016 failed with a missing prerequisites error. Previously, the checkPrereq.json configuration file incorrectly omitted Windows Server 2016 from the list of supported operating systems, conflicting with the product documentation. The prerequisite check file has been updated to correctly recognize Windows Server 2016 as a supported operating system, allowing the installation to proceed successfully. |
| KB0129142 | Fixed an issue where dynamic agents were incorrectly installed when only a fault-tolerant agent was requested.Fixed an issue in the installation process where dynamic agents were automatically configured and started despite the user requesting only a fault-tolerant agent. Previously, when certificates were downloaded automatically during installation, the process bypassed the user's explicit parameter selection (the |
| Code | Description |
|---|---|
| IJ56920 | Fixed an issue where the Job Stream Submission plug-in occasionally failed with an internal error.Fixed an issue in the Job Stream Submission integration where job stream lookups occasionally failed. Previously, the integration constructed an incomplete Orchestration Query Language (OQL) key by omitting the job stream name, causing the engine to return no matches. This resulted in an internal null string exception ( |
| IJ57250 | Fixed an issue where remote command jobs using SSH could not be killed.Fixed an issue where users were unable to terminate remote command jobs that connected via SSH. Previously, the kill functionality was inadvertently disabled for remote command jobs, preventing users from successfully stopping them once they had started executing. The system has been updated to correctly support and process kill requests for remote command jobs, allowing users to effectively stop their execution as needed. |
| KB0123774 | Fixed an issue where the variable table plug-in failed to process double quotation marks.Fixed an issue where the variable table plug-in failed to handle variable values containing double quotation marks. Previously, if a user provided a variable value ( |
| Code | Description |
|---|---|
| IJ56254 | The users.exe -build command fails on Windows fault-tolerant agents.Fixed an issue on Windows operating systems where running the users.exe -build command on a fault-tolerant agent connected to an IBM Z Workload Scheduler controller failed and returned an |
| IJ56360 | A file dependency on a fault-tolerant agent installed on a Windows operating system fails after upgrading to version 10.2.3.A defect was introduced during the upgrade of the fault-tolerant agent installed on a Windows operating system, which caused file dependencies to fail resolution. The issue occurred on Windows Server 2016 when jobs defined to run on a dynamic pool utilized a file dependency pointing to a shared file system (UNC path). The internal file check mechanism erroneously failed to verify the existence of files, resulting in the unwanted nF (No File) status. |
| IJ57248 - KB0128443 | Fixed an issue where the certman command incorrectly modified file permissions.Fixed an issue where using the certman command to generate certificates incorrectly changed the permissions of all existing files to 644 recursively within the folder specified by the -outpath parameter. This failure could disrupt the IBM Workload Scheduler environment if the command was run in a non-empty directory. |
| KB0123031 | OUTPUTCOND keyword was replaced with SUCCOUTPUTCOND during OCLI modification.A defect in the scheduling object modification logic caused the OUTPUTCOND keyword to be erroneously replaced by the SUCCOUTPUTCOND keyword when an administrator used the OCLI (modify or add) commands. |
| KB0123997 | CONSLOG file not deleted by JnextPlan and plan management scripts.A defect prevents plan management scripts (including JnextPlan, MakePlan, SwitchPlan, UpdateStats, and CreatePostReports) from correctly deleting the |
| KB0124381 | Fixed an issue where the wa_pull_info script generated an excessively large summary log file.Fixed an issue where running the wa_pull_info data gathering script generated an excessively large datagather_summary.log file, which significantly inflated the size of the resulting archive. |
| KB0129847 | Fixed a performance issue when filtering failed jobs using the Orchestration CLI.Fixed an issue in the Orchestration CLI where running a comprehensive job search query took an excessively long time to complete. Previously, when a user executed the |
| KB0129848 | Fixed an issue where filtering for jobs in a waiting state caused an error in the Orchestration CLI.Fixed an issue in the Orchestration CLI where searching for jobs within a specific folder failed if any of the jobs were in a waiting state. Previously, when a user executed the |
| Code | Description |
|---|---|
| IJ56927 | Fixed an issue where a duplicate SSL_PASSWORD error occurred during Helm chart deployments.Fixed an issue where deploying the product components using Kubernetes Helm charts failed or incorrectly overwrote custom secrets. Previously, when using a custom Kubernetes secret containing SSL certificates and the SSL_PASSWORD environment variable, the deployment returned a duplicate name warning because the variable was defined twice in the dynamic agent's statefulSet.yaml configuration template. The Helm chart has been updated to remove the duplicate variable definition, ensuring that deployments complete successfully when using custom secrets. |
| IJ57363 | Fixed an issue where the certificate rotation mechanism failed in Kubernetes environments.Fixed an issue where the certificate rotation mechanism failed for the Dynamic Workload Console and the IBM Workload Scheduler engine in Kubernetes environments. Previously, if the useCustomizedCert parameter was set to |
| Code | Description |
|---|---|
| IJ57395 | Fixed an issue where jobs remained in a WAIT status after a database HADR switchover.Fixed an issue where some jobs incorrectly remained stuck in a WAIT status after a database High Availability Disaster Recovery (HADR) switchover. Previously, if the database connection closed during the switchover, the job dispatcher failed to update the job properties and stopped progressing, returning |
| IJ57691 - KB0129543 | Fixed an issue where a deadlock occurred during certificate downloads from the dynamic domain manager.Fixed an issue where the system stalled and entered a deadlock state when a certificate download was initiated by the dynamic domain manager. This failure occurred because the resource thread became incorrectly blocked while attempting to simultaneously install and verify the new certificates. |
| KB0123924 | Fixed an issue where the dynamic domain manager experienced slowness during dynamic agentinitialization. |
| - IJ57545 | Fixed an issue where submitting jobs to a dynamic domain manager sporadically failed.Fixed an issue where submitting jobs from IBM Z Workload Scheduler to a dynamic domain manager sporadically failed. This failure occurred because the dynamic domain manager lost its JDBC connection to the database, which resulted in repeated transaction rollbacks and database unique constraint violations ( |
| Code | Description |
|---|---|
| IJ57021 | Fixed an issue where the task launcher failed to export the UNISON_DIR environment variable.Fixed an issue on AIX operating systems where jobs failed after migrating from a fault-tolerant agent to a z-centric agent because the task launcher failed to export the UNISON_DIR environment variable. Previously, users had to implement a manual workaround by creating a .jobmanrc local configuration script to properly export the variable before running the job. The task launcher has been updated to automatically export this environment variable, ensuring jobs run successfully without requiring manual intervention. |
| IJ57405 | Fixed an issue where the agent randomly crashed on AIX operating systems.Fixed an issue on AIX operating systems where the agent randomly crashed and generated a core dump file due to resource allocation errors. Previously, when encountering thread creation or memory availability issues, the agent processes stopped unexpectedly. This caused the agent to log resource errors in the ita_trace.log file and return |
| IJ57927 - KB0129733 | Fixed an issue where executable jobs failed when both standard output and standard error redirection were specified.Fixed an issue where executable jobs failed to start when both standard output and standard error redirection were configured. Previously, specifying both redirection paths caused the job to fail and return an |
| KB0128625 | Fixed an issue where dynamic agents stopped sending job status updates to the master domain manager.Fixed an issue where dynamic agents incorrectly stopped sending job status updates to the master domain manager during persistent connection issues. Previously, if a connection issue persisted, the agent logged |
| Code | Description |
|---|---|
| KB0128592 | Fixed an issue where the confirm operation incorrectly updated rerun instances of a job.Fixed an issue where using the confirm command to change a job status to successful ( |
| Code | Description |
|---|---|
| KB0130043 | Fixed an issue where the REST API failed to retrieve the task field for z/OS shadow jobs.Fixed an issue in the REST API where retrieving a z/OS shadow job definition returned an incomplete payload. Previously, when a user performed a GET request to the |
| Code | Description |
|---|---|
| IJ56590 | Fixed an issue where the documentation for analyzing job logs lacked specific job type requirements.Fixed an issue where the product documentation did not specify the required job types for using the $this.stdlist variable to analyze job log content. Previously, the documentation stated that the variable could be used on dynamic agent workstations to evaluate the succoutputcond and outputcond parameters, but did not mention the limitations for standard UNIX and Windows jobs. The documentation has been updated to clarify that this variable is only supported when defining an executable job or a job type with advanced options, whereas standard UNIX and Windows job types support only the return code (RC) variable. |
| IJ56609 | Fixed an issue where the enExpandedResources global option documentation was unclear.Fixed an issue where the product documentation did not clearly explain the difference in behavior when the enExpandedResources (or er) global option was set to |
| IJ56794 | Fixed an issue where the onoverlap donotstart documentation lacked usage limitations.Fixed an issue where the product documentation did not specify that the onoverlap donotstart option must not be used if the job stream is defined on a , domain manager, dynamic agent, pool, or dynamic pool in a domain other than the master domain. Previously, using this option in lower-level domains could cause job stream instances to be incorrectly canceled after their jobs had already run, due to standard delays in status reporting across the network hierarchy. The documentation has been updated to clearly state this limitation. |
| IJ56818 | Fixed an issue where job commands containing the |
| IJ56921 | Fixed an issue where the workstation running metric name was incorrectly documented.Fixed an issue where the product documentation incorrectly listed the metric name for running workstations. Previously, the documentation referred to the metric as application_wa_workstation_running instead of the correct name, application_wa_workstation_running_boolean. The documentation has been updated to reflect the actual metric name. |
| IJ57073 | Added information about supported number of certificates in master domain manager upgrade documentation.Added information in the documentation about the requirement that only one certificate must be present in the TWSServerKeyFile.p12 or TWSServerKeyFile.jks keystore before upgrading the master domain manager. Previously, if multiple certificates were present in the keystore when upgrading using the serverinst.sh script, the upgrade failed and returned |
| IJ57105 | Fixed an issue where the dynamic agent service failed to start during Windows boot.Fixed an issue on Windows operating systems where the IBM Common Platform Agent service failed to start during system boot. This failure occurred when the service was configured to run under a domain user account, because the network or domain controller was not yet available during startup. To resolve this issue, the service startup type has been changed from Automatic to Automatic (Delayed Start) and this information wads aded in the product documentation. |
| IJ57106 | Added in the upgrade documentation Oracle database schema requirements for the Dynamic Workload Console.Fixed an issue where the product documentation did not specify that the Dynamic Workload Console and the master domain manager must be installed in different Oracle database schemas. Previously, sharing the same schema during a Dynamic Workload Console upgrade caused the configureDb script to fail because it did not properly account for the existing master domain manager objects. The documentation has been updated to clearly state this limitation and recommend using separate schemas. |
| IJ57241 | Fixed an issue where the interoperability table title in the release notes was incorrect.Fixed an issue where the interoperability table in the Dynamic Workload Console release notes contained an incorrect title. The title previously stated that the table showed components compatible with previous Dynamic Workload Console versions. The documentation has been updated to correctly indicate that the table shows components compatible with previous master domain manager versions. |
| IJ57366 | Fixed an issue where upgrading the master domain manager resulted in mismatched RESTful plug-in versions.Fixed an issue where upgrading the master domain manager from version 10.2.5 to 10.2.6 resulted in mismatched versions of the RESTful plug-in files. Previously, if the plug-in had been manually updated before the upgrade, the installation process incorrectly downgraded the com.ibm.scheduling.agent.restful_*.jar file in the TWS/JavaExt/eclipse/plugins/ directory, while the correct, updated version was retained in the TWS/applicationJobPlugIn/ directory. |
| IJ57391 | Fixed an issue where the run time format was incorrectly described in the Report 10B documentation.Fixed an issue where the product documentation for Report 10B - Actual Production Detail incorrectly stated that the job run time was displayed in an |
| IJ57672 | Corrected an incorrect file name in the product documentation.Fixed a discrepancy in the product documentation where the authentication_config.xml file was incorrectly referenced as authorization_config.xml. The documentation has been updated to display the correct file name. |
| IJ57688 | Added missing documentation for automatic failover tuning parameters.Fixed an issue where product documentation was missing for several automatic failover tuning parameters. The documentation has been updated to include the descriptions and tuning guidelines for the com.hcl.tws.failover.master.polling, com.hcl.tws.failover.master.treshold, com.hcl.tws.failover.event.polling, and com.hcl.tws.failover.event.treshold parameters configured in the TWSConfig.properties file. |
Defects fixed in version 10.2.7
This section lists defects resolved in version 10.2.7, divided by component.
- Table 11. Build – Defects fixed in this release
- Table 12. Command-line interface – Defects fixed in this release
- Table 13. Docker – Defects fixed in this release
- Table 14. Dynamic domain manager – Defects fixed in this release
- Table 15. Engine – Defects fixed in this release
- Table 16. Installation – Defects fixed in this release
- Table 17. Integrations – Defects fixed in this release
- Table 18. REST APIs – Defects fixed in this release
- Table 19. IBM Z Workload Scheduler Agent (also known as z-centric agent)– Defects fixed in this release
- Table 20. Z connector – Defects fixed in this release
| Code | Description |
|---|---|
| WA-155160 | ServiceNow integration version mismatch resolved.Resolved an issue where an outdated version of the ServiceNow integration was included in the build. The current build now includes the correct, updated integration. |
| WA-159533 | Fixed a defect which caused installation and upgrade to fail on Linux S390 workstations.Fixed an issue where both fresh installations and upgrades to version 10.2.7 failed on Linux S390 operating systems. |
| Code | Description |
|---|---|
| WA-154857 |
|
| WA-155024 | Resolved |
| WA-155373 | Resolved |
| WA-158375 | Fixed an issue where deleting dependencies or releasing job streams using Orchestration CLI returned an error.Fixed an issue where running the ocli plan dds (delete dependency) or ocli plan rs (release job stream) commands failed and returned an |
| WA-158437 | UNIX job fails when submitted from the command line.A defect is fixed where a UNIX job failed after being submitted through the command line. This issue occurred when running a job with the ls / command. |
| WA-158773 | Fixed an issue where listing an AWS job definition using Orchestration CLI returned an error.Fixed an issue where running the ocli model list command to retrieve an Amazon Web Services (AWS) job definition failed and returned a 500 Internal Server Error. Previously, this action completed successfully only when using the composer command-line interface. |
| WA-158832 | Fixed an issue where Orchestration CLI model commands incorrectly extracted master domain manager definitions.Fixed an issue where extracting a master domain manager definition to a file using Orchestration CLI model commands resulted in an incorrect output. Previously, running the create command via the Orchestration CLI to extract a workstation definition produced an inaccurate result, whereas the same operation completed successfully when using the composer command-line program. The Orchestration CLI has been updated to correctly extract and format master domain manager definitions from the database. |
| WA-158945 | When using |
| WA-159667 | Fixed an issue where Orchestration CLI model commands failed when creating job streams with resource dependencies.Fixed an issue where creating or parsing a job stream containing a resource dependency failed when using Orchestration CLI model commands. Previously, the Orchestration CLI incorrectly evaluated the lock context as null, causing the command to fail and return an |
| WA-159751 | Fixed an issue where Orchestration CLI model commands failed when processing job streams.Fixed an issue where running Orchestration CLI model commands on job streams failed with an internal null pointer exception. Previously, the Orchestration CLI incorrectly evaluated the job definition as null when checking if a job within the job stream was embedded, causing the command to fail and return a |
| Code | Description |
|---|---|
| WA-154729 | Fixed an issue where a duplicate SSL_PASSWORD error occurred during Helm chart deployments.Fixed an issue where deploying the product components using Kubernetes Helm charts failed or incorrectly overwrote custom secrets. Previously, when using a custom Kubernetes secret containing SSL certificates and the SSL_PASSWORD environment variable, the deployment returned a duplicate name warning because the variable was defined twice in the dynamic agent's statefulSet.yaml configuration template. The Helm chart has been updated to remove the duplicate variable definition, ensuring that deployments complete successfully when using custom secrets. |
| Code | Description |
|---|---|
| IJ57691 | Deadlock during certificate download from the dynamic domain manager.Fixed an issue where the system stopped responding when testing newly downloaded certificates. The deadlock occurred during a dynamic domain manager-driven download because the resource thread that requested the certificate test was blocked while waiting for the certificate installation to complete. |
| WA-147845 | Fixed an issue where the movehistorydata command failed to run on Windows.Fixed an issue on Windows operating systems where running the movehistorydata command from the dynamic domain manager folder failed to run, returning no output and resulting in a return code of 9009. |
| Code | Description |
|---|---|
| WA-143628 | Resolved Oracle 23ai resource exhaustion (ORA-01000).Fixed a defect where upgrading to Oracle Database 23ai caused error AWSJDB801E and ORA-01000 (maximum open cursors exceeded). The issue, which led to significant performance degradation, was caused by the application failing to properly release database cursors during operation. |
| WA-151465 | Fixed an issue where deploying a job stream with an embedded job failed after changing its folder.Fixed an issue in the Dynamic Workload Console where changing the folder of a job stream that contained an embedded file transfer job, and then attempting to deploy it from the graphical view, failed and returned an |
| WA-154565 | Resolved OCLI error AWSMSL027E during object submission.Fixed an issue where running the plan submit or show commands in the OCLI resulted in error AWSMSL027E. This failure affected the submission of jobs, tasks, and job streams (workflows) into the plan. |
| WA-155416 | Resolved securewrap failure during Linux upgrade from version 10.1 Fix Pack 6.Fixed an issue where the Linux upgrade for the dynamic domain manager failed during the certificate wrapping process. The securewrap utility previously returned an Illegal option: PKCS12 error due to a compatibility conflict with the certificate format. |
| WA-155628 | Fixed an issue where security token validation errors occurred after an upgrade.Fixed an issue where upgrading the environment caused security token validation errors in the application server. Previously, the trace.log file incorrectly logged a |
| WA-155837 | Resolved |
| WA-156705 | Fixed display issue for run cycle Cron expressions.Resolved a defect where run cycles created via the REST API with Cron expressions appeared empty in the Dynamic Workload Console. Job stream run cycles now correctly display their configuration details when viewed or edited in the Dynamic Workload Console on distributed engines. |
| WA-157184 | OCLI: Resolved error AWSMSP001E during job definition creationFixed an issue where creating a job definition with mandatory fields resulted in error AWSMSP001E. You can now create these definitions successfully without encountering errors related to variable resolution at runtime. |
| WA-157495 | Fixed an issue where transaction rollbacks ran indefinitely when the database was unavailable.Fixed an issue where transaction rollback processes failed to complete and ran indefinitely if the database went offline or became disconnected. |
| WA-158201 | Fixed an issue where JSON Web Token validation failed in environments using an MSSQL database.Fixed an issue on the master domain manager in environments using an MSSQL database where the MicroProfile JSON Web Token (JWT) feature encountered errors while creating or validating a token. Previously, using the mpJwtSubJWT configuration caused the application server to fail to retrieve the JSON Web Key (JWK), logging |
| WA-158705 | Fixed an issue where submitting a job using the Orchestration CLI returned an exception.Fixed an issue where running the ocli plan sbj command to submit a job failed and returned an |
| WA-158804 | Fixed an issue where shadow job property names were incorrectly displayed.Fixed an issue where the property names of a distributed shadow job were not converted correctly when viewing the job properties after the job completed successfully. |
| WA-158826 | Fixed an issue where submitting a job using the Orchestration CLI returned an exception.Fixed an issue where running the ocli plan sbj command to submit a job failed and returned an |
| WA-158834 | Fixed an issue where calling the GET API for a job definition returned a 500 error.Fixed an issue where calling the GET API (/twsd/api/v2/model/jobdefinition) to retrieve job definition details failed and returned a 500 Internal Server Error. |
| WA-158944 | Fixed an issue where the Orchestration CLI failed to save embedded jobs in job streams.Fixed an issue where modifying a job stream to change an existing job definition into an embedded job failed when using the Orchestration CLI. Previously, adding the BUILTIN statement to a job within a job stream definition and saving it resulted in the statement being silently discarded without an error message, and the job remained unchanged. The Orchestration CLI has been updated to correctly process and retain the BUILTIN statement, ensuring that job definitions are properly converted and saved as embedded jobs. |
| WA-158989 | Fixed an issue where agents continuously attempted to download expired certificates.Fixed an issue where an agent continuously attempted to download and import certificates every 2 minutes if a manual certificate rotation was performed using expired certificates placed in the ssl/depot folder. Previously, this failure only generated an output log in the JobManager_message.log file without halting the recurring download attempts. |
| WA-159068 | Fixed an issue where the resource CLI failed to run on Linux dynamic agents.Fixed an issue on Linux operating systems where running the resource.sh command on a workstation where only the dynamic agent was installed failed to run and returned a return code of 1. |
| WA-159469 | Fixed an issue where job definition and variable table objects were not locked during GET API calls.Fixed an issue where job definition and variable table objects were not locked as expected when calling the GET API with the lock parameter set to true. |
| WA-159997 | Fixed an issue where shadow job variables were not resolved for successor jobs.Fixed an issue where variables passed from a shadow job to a successor job were not correctly resolved. Previously, when a successor job referenced properties or variables exported by a shadow job, the variables remained unresolved in the job's stdlist output file. The evaluation process has been updated to correctly resolve and pass shadow job variables to subsequent jobs. |
| WA-160052 | Fixed a security vulnerability in the Orchestration CLI.Fixed a security vulnerability affecting the Orchestration CLI. Previously, the component was flagged as vulnerable because it was built using an outdated version of the Go programming language (version 1.26.1). The underlying Go programming language has been updated to version 1.26.2 to resolve this issue, ensuring that the Orchestration CLI binaries provided with IBM Workload Scheduler are secure and free of known vulnerabilities. |
| WA-160139 | Fixed an issue where shadow job variables in the Extra Run Information section displayed incorrect values.Fixed an issue where the variables displayed in the Extra Run Information section of a shadow job did not match the expected values. Previously, when running the showjobs command with the ;props argument on a shadow job, the extracted properties (such as the scheduled time, remote job name, remote job stream name, and remote workstation) were incorrect. The command has been updated to correctly retrieve and display these variable values. |
| Code | Description |
|---|---|
| WA-147915 | Resolved Oracle 23ai validation error (WAINST0250E) for dynamic domain managers.Fixed an issue where the installation of a dynamic domain manager failed when using Oracle 23ai. The configureDb.sh script incorrectly reported that the specified database (e.g., |
| WA-154637 | Resolved |
| WA-155015 | Resolved |
| WA-155037 | Resolved AIX syntax error in |
| WA-155731 | Resolved certificate management error during 10.1 FP6 to 10.2.7 upgrade.Fixed an issue where the certman tool failed during the replacement phase when upgrading from version 10.1 FP6 to 10.2.7. The upgrade process now completes successfully without encountering the certman replace error. |
| WA-155844 | Resolved |
| WA-156347 | Resolved misleading port conflict error during z-centric agent installation.Fixed an issue where running the twsinst command to install a z-centric agent resulted in an incorrect error message: AWSFAB112E Port numbers provided with option "-gweifport" and option "-tdwbport" must be different. This error occurred even when those specific options were not provided, due to a conflict in default internal port assignments that has now been resolved. |
| WA-157629 | Fixed an issue where installing a standalone fault-tolerant agent incorrectly created a dynamic agent.Fixed an issue where installing a standalone fault-tolerant agent incorrectly created and registered a dynamic agent on the master domain manager. This failure occurred after restarting the agent if the twsinst installation script was initially run with the -wauser and -wapassword parameters to download certificates. |
| WA-158211 | fault-tolerant agent uninstallation failureFixed an issue where the twsinst script failed to uninstall a fault-tolerant agent on UNIX and Linux systems. The uninstallation process would terminate with error AWSFAB035E because the script could not locate the ShutDownLwa utility due to an incorrect path reference. This failure occurred specifically in fault-tolerant agent-only deployments; environments with a dynamic agent or both components installed were unaffected. The fix ensures the script correctly identifies the utility path to allow for a clean uninstallation. |
| WA-158574 | Fixed an issue where the agent installation failed during the certificate download phase.Fixed an issue on Linux operating systems where the agent installation failed when attempting to download certificates from the master domain manager. When running the twsinst installation script, the call to the AgentCertificateDownloader.sh script failed and returned a 500 Internal Server Error ( |
| WA-158716 | Fixed an issue where uninstalling a standalone fault-tolerant agent failed.Fixed an issue on Windows operating systems where running the twsinst.vbs -uninst command to uninstall a standalone fault-tolerant agent failed and returned an |
| WA-159051 | Fixed an issue where the configureWlp.sh script failed during server installation on AIX.Fixed an issue on AIX operating systems where the installation process failed during the WebSphere Application Server Liberty configuration phase. The installation stopped returning an error when it attempted to execute the configureWlp.sh script. |
| WA-159074 | Fixed an issue where the waPostConfigure.sh script failed during installation on AIX.Fixed an issue on AIX operating systems where the waPostConfigure.sh post-configuration script failed during the test server connection phase of the server installation. |
| WA-159996 | Updated the versions of several integrations.The installation package has been updated to include newer versions of the Database, File transfer, Job Stream Submission, and RESTful integrations. |
| Code | Description |
|---|---|
| IJ57555 | Fixed an issue where submitting remote command jobs caused a file descriptor leak on dynamic agents.Fixed an issue where submitting remote command jobs caused a progressive increase in open files related to the JobManager process on dynamic agents. Previously, these files were not released after the jobs were launched, which could eventually lead to memory saturation and cause dynamic agents to stop running. |
| WA-155123 | Resolved composer new validation error for Snowflake integration.Fixed an issue where running the composer new command to import a Snowflake job definition failed with the error: Enter the required field Input. "{0}". The validation logic has been corrected to properly identify required fields and allow the successful creation of Snowflake job objects. |
| WA-156565 | Snowflake integration validation failureFixed a validation error that occurred when creating or importing a Snowflake job definition using the composer command line. During the composer new process, the JSDL (Job Specification Definition Language) validation failed with error AWSJCS025E, specifically returning the sub-error AWKSNW012E. This occurred because the validation logic incorrectly flagged the Username field as missing or empty, even when properly provided in the job definition. The fix ensures that input fields for the Snowflake application job integration are correctly parsed and validated by the composer command. |
| Code | Description |
|---|---|
| WA-154503 | Resolved internal errors in Graphical Designer and OCLI.Fixed a defect that caused internal server errors when managing job streams. Users previously encountered error AWSMAC023E when deploying workflows in the Graphical Designer and error AWSMRC020E (HTTP 500) when running the ocli model display js command. Both interfaces now correctly process job stream deployment and display requests. |
| WA-155850 | Fixed compilation errors in REST API V2 generated Java clients.Resolved a critical defect where Java code generated from the REST API V2 YAML failed to compile. The fix addresses missing dependencies for |
| Code | Description |
|---|---|
| WA-155163 | Resolved |
| WA-155920 | Resolved unexpected failures in Managed File Transfer jobs.Fixed an issue where Managed File Transfer jobs using the |
| WA-159193 | Fixed an issue where the enigma command incorrectly removed exclamation marks from encrypted passwords.Fixed an issue on Windows operating systems where using the enigma command to encrypt a password containing an exclamation mark (!) incorrectly trimmed the character from the final encrypted value. This failure prevented file transfer jobs using FTPS or FTPES connections from authenticating and running successfully. |
| Code | Description |
|---|---|
| WA-155896 | Resolved indefinite loading in Dynamic Workload Console Test Connection page.Fixed a defect in the Dynamic Workload Console where the Test Connection action hung indefinitely after updating both the console and the engine. This issue, specifically observed in Linux environments using an Oracle database, has been resolved to ensure that connection statuses are returned promptly. |
| WA-156111 | Updated Z connector V2 API Swagger definition.Resolved an issue where the zConn V2 API Swagger information was incomplete. The specification has been updated to include the missing |
| WA-158340 | Fixed an issue where testing the connection to an IBM Z Workload Scheduler engine failed.Fixed an issue where testing the connection to an IBM Z Workload Scheduler engine failed and returned an |
Resolved Common Vulnerabilities and Exposures (CVEs)
The following CVEs have been resolved:
| CVE ID | Severity |
|---|---|
| CVE-2026-33701 | Critical |
| CVE‑2025‑68121 | Critical |
| CVE‑2026‑33870 | Major |
| CVE‑2025‑61726 | Major |
| GHSA‑72hv‑8253‑57qq | Major |
| CVE-2026-1519 | Major |
| CVE-2025-68161 | Normal |
| CVE-2024-12798 | Normal |
| CVE‑2025‑14831 | Normal |
| CVE‑2026‑1002 | Normal |
| CVE-2025-11226 | Normal |
| CVE-2024-12801 | Normal |
| CVE-2026-33532 | Normal |
| CVE-2026-24001 | Normal |
| CVE-2025-9086 | Normal |
| CVE-2026-25679 | Normal |
Interoperability tables
In the tables in this section the following acronyms are used:
| Acronym | Extended form |
|---|---|
| DA | Dynamic agent |
| DDM | dynamic domain manager or backup dynamic domain manager |
| DM | domain manager |
| DWC | Dynamic Workload Console |
| FTA | fault-tolerant agent |
| MDM | master domain manager |
| BKM | backup master domain manager |
| ZWS agent | IBM Z Workload Scheduler Agent |
Compatibility is supported on the latest available release level for each IBM Workload Scheduler release listed in the table:
| Component | MDM | DDM | DM | FTA | DA | ZWS agent |
|---|---|---|---|---|---|---|
| MDM 10.2.7 |
|
|
|
|
| |
| DM 10.2.7 | 10.x.x | 10.x.x | ||||
| FTA 10.2.7 | 10.x.x | 10.x.x | 10.x.x | |||
| DA 10.2.7 | 10.x.x | 10.x.x | 10.x.x | |||
| DDM 10.2.7 | 10.x.x | 10.x.x | 10.x.x |
(*) Important information regarding agents at 9.5 version
If you currently have agents at 9.5 version, read the following information:
- Support for 9.5 agents is limited to the upgrade period.
- The required upgrade approach is the top-down approach. For more information, see Choosing how to upgrade your network.
- The recommended upgrade procedure is a parallel upgrade. For more information, see Parallel upgrade from version 9.5.0.x or 10.x.x to version 10.2.7.
| Component | MDM | DDM | DWC |
|---|---|---|---|
| AIDA 10.2.7 | 10.x.x | 10.x.x | 10.x.x |
Compatibility scenarios and limitations
It is highly recommended to keep all IBM Workload Scheduler components updated to the latest version as part of regular maintenance. This not only maintains a consistent environment but also enables you to utilize new features introduced in each release.
Known limitations and workarounds
The following are software limitations and workarounds that affect IBM Workload Scheduler 10.2.7:
Mixed-version environment with a master domain manager at a version earlier than 9.5 FP4
Before you install a component at version 10.2.7 in an environment with a master domain manager at a version earlier than 9.5 FP4, install the fix for IJ47731 on the back-level master domain manager.
- For version 9.4 FP7, the fix is available from IBM Fix Central.
- For other product versions, contact Software Support.
.
Event-driven workload automation (EDWA) proxy does not support HTTPS connections
Event-driven workload automation (EDWA) proxy supports only HTTP connections. As a result, SSL communication is not supported.
The centralized update on a stand-alone fault-tolerant agent V10.2.1 is not supported
The centralized update on a fault-tolerant agent V10.2.1 is not supported, regardless of the operating system. For more information about upgrading from different versions, see Performing the centralized agent update on a stand-alone fault-tolerant agent.
Pool connection issues with CyberArk
If you are using a pool as a gateway to communicate with CyberArk and an agent within the pool loses connection to the CyberArk server, the job assigned to that specific agent fails. For instance, if an agent remains up and running but stops communicating with CyberArk, any jobs assigned to that agent that require a connection to CyberArk fails. This occurs because the pool lacks the ability to verify whether its agents are connected to the CyberArk server.
Folder filtering discrepancy in Command Line Interfaces
Filtering for jobs and job streams within folders with Orchestration CLI or REST APIs V2 using
conmansyntax might not work as expected, returning different results from the ones retrieved usingconman.Japanese characters might display incorrectly in job logs on Windows for Dynamic Workload Console and fault-tolerant agents
Job logs containing Japanese characters might appear garbled when viewed in the Dynamic Workload Console or when using the command line on fault-tolerant agents running on Windows operating systems.
Unresolved dependency state with shadow jobs and start of day setting
Successor jobs remain permanently in the HOLD state, even after the shadow job predecessors successfully complete. This happens specifically when the job stream execution crosses the customized Start of Day boundary due to the job rerun logic. The product correctly updates the final status of the shadow job to SUCC, but the dependency is not released when the related scheduling event occurs close to or across the
startOfDay. The job is effectively orphaned in the queue, stuck in HOLD despite having met its only prerequisite.ABENDPROMPT Failure to Suppress RERUN on AIX operating systems
On AIX operating systems, the presence of an
ABENDPROMPTsetting fails to correctly block the automatic execution of theRECOVERY RERUNaction when a job terminates in the ABEND state.The job manager fails to prioritize the prompt mechanism, which should transition the job to a waiting state and generate an immediate
ASKEDprompt, thereby overriding or delaying the automaticRERUNdefined in the recovery policy.This failure results in an uncontrolled automatic rerun, bypassing the required human intervention point defined by the
ABENDPROMPTsetting.Certificate expiration date is not visible for dynamic agents connecting to dynamic domain managers
The certificate expiration date is not visible when a dynamic agent connects to a dynamic domain manager.
Database job connection tests to Microsoft SQL Server might fail with an SSL certificate error
A known limitation exists where testing the connection for a Database job to a Microsoft SQL Server database might fail. When this occurs, the system returns an
AWKDBE023Eerror indicating that the database driver could not establish a secure connection using Secure Sockets Layer (SSL) encryption. This issue occurs when theencryptconnection property is set totrueand thetrustServerCertificateproperty is set tofalse, but the driver cannot find a valid certification path to the requested target.Known limitations with prompt dependencies
Several known limitations exist regarding how prompt dependencies are displayed and handled across the Orchestration CLI and the Dynamic Workload Console:
- Incorrect display of job streams in the READY state: When running the Orchestration CLI showprompts (or sp) command with the deps argument, the output incorrectly includes job streams that are in the
READYstate. The output should only display job streams with unsatisfied prompt dependencies, which are expected to be in theHOLDstate. - Missing prompt names in the dependencies column: When running the Orchestration CLI showprompts command with the deps and info arguments, the prompt name associated with the job stream is incorrectly omitted from the dependencies column.
- Missing error messages for jobless job streams: When running the Orchestration CLI showprompts command with the deps and keys arguments against a job stream that contains no jobs, the command returns an empty output. It should instead return an explicit error message stating that the output cannot be generated without a job inside the job stream.
- Predefined prompts are overridden by ad-hoc prompts in the Orchestration Monitor: When submitting a job stream using the Orchestration CLI submit sched (or sbs) command with the prompt argument, any existing predefined prompt dependencies in the job stream are incorrectly hidden in the Dynamic Workload Console. When viewing the job stream's dependencies in the Orchestration Monitor, only the ad-hoc prompt is displayed, instead of both the predefined and ad-hoc prompts.
- Incorrect display of job streams in the READY state: When running the Orchestration CLI showprompts (or sp) command with the deps argument, the output incorrectly includes job streams that are in the
Jobs incorrectly display a Cancel Pending status after being unmarked as a No operation (UNNOP) and rerun
A known limitation exists where the Orchestration CLI incorrectly displays a job's internal status as
Cancel Pendingafter the job has had its No operation (NOP) property removed and is rerun. When a user marks a job as a No operation (using the nop command), it is subsequently set to aCancelledstatus. If the user then removes theNOPproperty (using the unnop command) and reruns the job (using the rerun or rr command), the job correctly executes but inaccurately retains aCancel Pendinginternal status instead of updating toSuccess.certman command might fail in non-English workstations
To work around this problem, change the Java language setting.
Successors are not displayed when submitting multiple job streams using an Oracle 19 database
When submitting multiple job streams in an environment configured with an Oracle 19 database, the successors of the submitted job streams are not displayed. To work around this problem, download the KB0130577 fix from IBM Fix Central.
Package structure
For a detailed list of available packages, see the 10.2.7 Quick Start Guide document available from IBM Fix Central.
Software requirements for WebSphere Application Server Liberty Base
WebSphere Application Server Liberty Base adopts a continuous delivery model where new versions are deployed on a monthly basis.
During formal testing, IBM Workload Scheduler and the Dynamic Workload Console were tested by using WebSphere Application Server Liberty Base 26.0.0.3.
For more information about which subsequent versions of WebSphere Application Server Liberty Base can be used in the future, see Recommended updates for WebSphere Application Server.
Installing and upgrading to version 10.2.7
This section describes how to install or upgrade to version 10.2.7.
Before installing the release, ensure you have installed the required prerequisite software. To obtain the latest information about system requirements, run the Detailed System Requirements report and browse to the relevant section.
Installation notes
- If you use Oracle AI Database 26ai, you can improve performance by setting the parameters listed in the topic about Optimizing performance for Oracle AI Database 26ai in IBM Workload Scheduler: Planning and Installation.
Before performing an upgrade, check whether the ssl_config.xml file is present in the overrides folder. If the file is present, check the verifyHostname option in the twaSSLSettings section. The verifyHostname must be set to false, as shown in the following example:
<ssl id="twaSSLSettings" keyStoreRef="twaKeyStore" trustStoreRef="twaTrustStore" sslProtocol="TLSv1.2" clientAuthenticationSupported="true" verifyHostname="false"/>- Depending on the WebSphere Application Server Liberty version you are using, you might encounter the problems described in the following technotes:
Versions equal to or higher than 24.0.0.8
See Possible IWS compatibility issues with Liberty 24.0.0.8 or higher
Versions ranging from 24.0.0.3 to 24.0.0.8
Upgrade notes
Review the following points before upgrading.
MSSQL notes
If you are using MSSQL and are upgrading from a release earlier than 10.2.3, perform the steps listed below after upgrading to version 10.2.7. If you are using MSSQL and are upgrading from release 10.2.3 or a release later than 10.2.3, you can ignore the steps listed below.
- Browse to the datasource.xml template.
- Open the file with a text editor and perform the following changes:
Add the lines listed below after the db.driver.path parameter:
<variable name="db.encrypt" value="false"/> <variable name="db.trustServerCertificate" value="false"/>Append the following strings at the end of the value of the mssql.URL parameter:
;encrypt=${db.encrypt};trustServerCertificate=${db.trustServerCertificate}Add the lines listed below after the integratedSecurity parameter:
encrypt="${db.encrypt}" trustServerCertificate="${db.trustServerCertificate}"The resulting file looks as follows. The modified sections are highlighted in bold:
... <variable name="db.driver.path" value="<db_driver_path>"/> <variable name="db.encrypt" value="false"/> <variable name="db.trustServerCertificate" value="false"/> <variable name="mssql.URL" value="jdbc:sqlserver://${db.serverName}:${db.portNumber};databaseName=${db.databaseName} ;encrypt=${db.encrypt};trustServerCertificate=${db.trustServerCertificate}"/> <jndiEntry value="MSSQL" jndiName="db.type" /> ... integratedSecurity="false" encrypt="${db.encrypt}" trustServerCertificate="${db.trustServerCertificate}"
- Stop and restart WebSphere Application Server Liberty to make the changes effective.
Verify your Single Sign-On settings
When upgrading to Dynamic Workload Console version 10.2.5, if the previous environment is configured for Single Sign-On (SSO) using ltpa.keys, perform the following steps:
- Copy the
ltpa.keysfile either from the master domain manager to the workstation hosting the Dynamic Workload Console, or vice versa, depending on your configuration. - After copying, restart the IBM Workload Scheduler processes on the component where the
ltpa.keysfile was updated to complete the SSO setup.
Check the alias of your custom certificate before upgrading
Before you upgrade the master domain manager or Dynamic Workload Console, verify the alias you use for your custom certificates. Failure to do so might cause the master domain manager and Dynamic Workload Console to fail at start time and return one of the following errors: CWPKI0024E: The server certificate alias is invalid. or CWPKI0024E: The server certificate alias specified by the attribute serverKeyAlias is either not found in KeyStore or it is invalid.
On UNIX operating systems, you can run the following example command to verify the alias:
1. Browse to the following paths, depending on the component:
master domain manager
<TWA_DATA_DIR>/usr/servers/engineServer/resources/security
Dynamic Workload Console
<TWA_DATA_DIR>/usr/servers/dwcServer/resources/security
2. Run the following command:
openssl pkcs12 -in TWSServerKeyFile.p12 -nokeys -info | grep serverOn Windows operating systems, you can run the following example command to verify the alias:
1. Browse to the following paths, depending on the component:
master domain manager
<TWA_home>\usr\servers\engineServer\resources\security
Dynamic Workload Console
<TWA_home>\usr\servers\dwcServer\resources\security
2. Run the following command:
certutil -dump keyfile.p12
If a key with the alias server is present, no additional steps are required. The custom certificate with alias server is used by the master domain manager and Dynamic Workload Console.
If your custom certificates use aliases other than server, you can encounter the following situations:
Current status of ssl_config.xml file | Steps to be performed |
|---|---|
You do not have a customized version of the ssl_config.xml file in the overrides folder. | On both master domain manager and Dynamic Workload Console, create a new file named serverkeyalias. xml in the overrides folder with the following content: |
You already have a customized version of the ssl_config.xml file in the overrides folder. | On both master domain manager and Dynamic Workload Console, edit the
|
You can now proceed with the upgrade.
Installation and upgrade procedures
You can install the release using the procedure described in Installing from the CLI.
You can upgrade to the current release using the procedure described in Upgrading from the CLI.
Disk space requirements
To obtain the latest information about permanent disk space requirements when installing on supported operating systems, run the Hardware requirements report and click on the relevant operating system link.
Performing the centralized agent update on a stand-alone fault-tolerant agent
Before performing a centralized update on fix packs or upgrade on releases on a stand-alone fault-tolerant agent to 10.2.7, there are procedures to follow according to the version of the fault-tolerant agent from which you want to upgrade.
The table below shows which procedure you must follow to perform the upgrade, according to the fault-tolerant agent version.
| Stand-alone fault-tolerant agent version | Required steps |
|---|---|
| V9.5 Fix Pack 4 up to V9.5 Fix Pack 6 | If not already enabled, enable the use of the HTTPS protocol to connect to the event processor server. For more information about enabling enEventProcessorHttpsProtocol | eh, see Global options - detailed description |
| V9.5 Fix Pack 7 | No steps required. |
| V10.1 up to V10.1 Fix Pack 3 | If not already enabled, enable the use of the HTTPS protocol to connect to the event processor server. For more information about enabling enEventProcessorHttpsProtocol | eh, see Global options - detailed description. Then, from the same workstation where the fault-tolerant agent is installed, copy the TWSClientKeyStore files from TWA_DATA_DIR/ssl/GSKit to TWA_DATA_DIR/ITA/cpa/ita/cert. Note: The owner of the new TWSClientKeyStore files and the permissions granted must be the same of the existing files. |
| V10.1 Fix Pack 4 | If not already enabled, enable the use of the HTTPS protocol to connect to the event processor server. For more information about enabling enEventProcessorHttpsProtocol | eh, see Global options - detailed description. Then, download the curl file from APAR IJ50967 and save it inside TWS/ITA/cpa/ita. Note: The owner of the new curl file and the permissions granted must be the same of the existing curl file. |
| V10.2 | If not already enabled, enable the use of the HTTPS protocol to connect to the event processor server. For more information about enabling enEventProcessorHttpsProtocol | eh, see Global options - detailed description. Then, download the curl file from APAR IJ50967 and save it inside TWS/ITA/cpa/ita. Note: The owner of the new curl file and the permissions granted must be the same of the existing curl file. |
| V10.2.1 | Not supported. |
| V10.2.2 and later | No additional procedure required. |
Documentation updates
Any additions or changes to the documentation as a result of this release have been integrated into the online product documentation available in IBM Workload Scheduler product information.
Contacting IBM Workload Scheduler Software Support
Before contacting IBM Software Support with a problem, refer to the IBM Software Support site by accessing the following Web address: https://www.ibm.com/support/home/
To access IBM support, click the IBM support link at the bottom right of the page.
If you want to contact IBM Software Support, see the IBM Software Support Handbook at the following Web site: http://techsupport.services.ibm.com/guides/handbook.html
The guide provides information about how to contact IBM Software Support, depending on the severity of your problem, and the following information:
- Registration and eligibility.
- Telephone numbers, depending on the country in which you are located.
- Information you must have before contacting IBM Software Support.
Notices
This information was developed for products and services offered in the US. This material might be available from IBM Workload Scheduler in other languages. However, you may be required to own a copy of the product or product version in that language in order to access it.
IBM Workload Scheduler may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM Workload Scheduler representative for information on the products and services currently available in your area. Any reference to an IBM Workload Scheduler product, program, or service is not intended to state or imply that only that IBM Workload Scheduler product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM Workload Scheduler intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-IBM Workload Scheduler product, program, or service.
IBM Workload Scheduler may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not grant you any license to these patents. You can send license inquiries, in writing, to:
IBM Director of Licensing
IBM Corporation
North Castle Drive, MD-NC119
Armonk, NY 10504-1785
US
For license inquiries regarding double-byte character set (DBCS) information, contact the IBM Workload Scheduler Intellectual Property Department in your country or send inquiries, in writing, to:
Intellectual Property Licensing
Legal and Intellectual Property Law
IBM Japan Ltd.
19-21, Nihonbashi-Hakozakicho, Chuo-ku
Tokyo 103-8510, Japan
INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.
This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM Workload Scheduler may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice.
Any references in this information to non-IBM Workload Scheduler websites are provided for convenience only and do not in any manner serve as an endorsement of those websites. The materials at those websites are not part of the materials for this IBM Workload Scheduler product and use of those websites is at your own risk.
IBM Workload Scheduler may use or distribute any of the information you provide in any way it believes appropriate without incurring any obligation to you.
Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact:
IBM Director of Licensing
IBM Corporation
North Castle Drive, MD-NC119
Armonk, NY 10504-1785
US
Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee.
The licensed program described in this document and all licensed material available for it are provided by IBM Workload Scheduler under terms of the IBM Workload Scheduler Customer Agreement, IBM Workload Scheduler International Program License Agreement or any equivalent agreement between us.
The performance data discussed herein is presented as derived under specific operating conditions. Actual results may vary.
Information concerning non-IBM Workload Scheduler products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM Workload Scheduler has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM Workload Scheduler products. Questions on the capabilities of non-IBM Workload Scheduler products should be addressed to the suppliers of those products.
This information is for planning purposes only. The information herein is subject to change before the products described become available.
This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to actual people or business enterprises is entirely coincidental.
COPYRIGHT LICENSE:
This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM Workload Scheduler, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM Workload Scheduler, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. The sample programs are provided "AS IS", without warranty of any kind. IBM Workload Scheduler shall not be liable for any damages arising out of your use of the sample programs.
© IBM Workload
Scheduler 2006, 2016. All rights reserved. US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. © Copyright HCL Technologies Limited 2016, 2026.
Trademarks
IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.
Adobe™, the Adobe logo, PostScript™, and the PostScript logo are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States, and/or other countries.
IT Infrastructure Library™ is a Registered Trade Mark of AXELOS Limited.
Linear Tape-Open™, LTO™, the LTO Logo, Ultrium™, and the Ultrium logo are trademarks of HP, IBM Corp. and Quantum in the U.S. and other countries.
Intel™, Intel logo, Intel Inside™, Intel Inside logo, Intel Centrino™, Intel Centrino logo, Celeron™, Intel Xeon™, Intel SpeedStep™, Itanium™, and Pentium™ are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.
Linux™ is a registered trademark of Linus Torvalds in the United States, other countries, or both.
Microsoft™, Windows™, Windows NT™, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both.
![]() | Java™ and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates. |
Cell Broadband Engine™ is a trademark of Sony Computer Entertainment, Inc. in the United States, other countries, or both and is used under license therefrom.
ITIL™ is a Registered Trade Mark of AXELOS Limited.
UNIX™ is a registered trademark of The Open Group in the United States and other countries.
Terms and conditions for product documentation
Permissions for the use of these publications are granted subject to the following terms and conditions.
Applicability
These terms and conditions are in addition to any terms of use for the IBM Workload Scheduler website.
Personal use
You may reproduce these publications for your personal, noncommercial use provided that all proprietary notices are preserved. You may not distribute, display or make derivative work of these publications, or any portion thereof, without the express consent of IBM Workload Scheduler.
Commercial use
You may reproduce, distribute and display these publications solely within your enterprise provided that all proprietary notices are preserved. You may not make derivative works of these publications, or reproduce, distribute or display these publications or any portion thereof outside your enterprise, without the express consent of IBM Workload Scheduler.
Rights
Except as expressly granted in this permission, no other permissions, licenses or rights are granted, either express or implied, to the publications or any information, data, software or other intellectual property contained therein.
IBM Workload Scheduler reserves the right to withdraw the permissions granted herein whenever, in its discretion, the use of the publications is detrimental to its interest or, as determined by IBM Workload Scheduler, the above instructions are not being properly followed.
You may not download, export or re-export this information except in full compliance with all applicable laws and regulations, including all United States export laws and regulations.
IBM Workload Scheduler MAKES NO GUARANTEE ABOUT THE CONTENT OF THESE PUBLICATIONS. THE PUBLICATIONS ARE PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE.
Was this topic helpful?
Document Information
Modified date:
12 May 2026
UID
ibm17261550
