Preventive Service Planning
Effective October 14, 2016, certain digital certificates used with IBM Rational Team Concert (RTC) and Rational DOORS Next Generation (RDNG) are being revoked on Microsoft Windows 10.
The issues that are documented below are under further investigation. Additional updates will be made as new information is available.
(November 29, 2016) Added links to where the files will be available for Rational DOORS Next Generation
(October 28, 2016) Added additional details under the Rational DOORS Next Generation section.
(October 24, 2016) Added additional details under the Rational Team Concert Client section.
- Rational Team Concert Client
Due to a change in the digital certificate used to sign executable files in supported versions of the Rational Team Concert client, users may experience problems running eclipse.exe and scm.exe on a Microsoft Windows 10 machine.
The problem only occurs if the user is starting eclipse.exe and scm.exe with elevated permission (i.e. "Run as administrator") which is not a common use case. Normal invocation of starting the Rational Team Concert Thick Client by double-clicking or having a short-cut enabled to start the application will work without issue. Starting scm from the command line will also work without the issue.
If you right click on the eclipse.exe or scm.exe file and view the details of the certificate, you will see a message indicating that A certificate was explicitly revoked by its issuer.
Note that this problem is only exhibited for users who are running the application from the archive install (the simple unzip).
Users who install the Rational Team Concert Thick Client using the IBM Installation Manager will not experience any issues regardless of whether they start the application normally or with elevated permission.
Users may not see the problem on Windows 10 until the policy cache is updated to cross-reference the digital signing with the 3rd party vendor (Verisign) site.
Users who are behind a corporate firewall with no internet connectivity won't see the problem and the signed content will re-use the digital cache information local to the system as a fall-back.
Fix: Contact IBM Support to request a hot fix
- Rational DOORS Next Generation
Due to a change in the digital certificate used in supported versions of Rational DOORS Next Generation, users may experience problems installing or running the DOORS Next Generation graphical editor plugins on a Microsoft Windows 10 client machine.
These plugins are used for the following artifact formats: Business Process Diagram, Sketches, Storyboards, Screen Flows, Parts, and Use Case Diagrams. The problem users will experience is that the plugin will eventually fail making all these formats read only. Users will recognize that the plugin has failed when they try to edit one of these artifact formats. The browser will notify the user that the certificate on the plugin has been revoked, and will not allow the plugin to be loaded. Even though a plugin has failed, the above artifact formats can still be viewed, along with all comments and links, but any attempt to edit them will result in the same browser message.
Fix: Please go to Fix Central for the version of DOORS Next Generation that affects you:
Contact IBM Support for any further details
Additional information about this issue and about other IBM products that may have been impacted is available in IBM Security Notice Regarding Two Code Signing Certificates.
17 June 2018