Readme file for IBM(R) TRIRIGA(R) Application Platform 3.4.2.1 fix pack. Date: September 16, 2015 IBM Corporation Copyright(C) International Business Machines Corporation 2015. All rights reserved. US Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. =============================================================================================== Table of Contents =============================================================================================== 1. Introduction 2. Information resources 3. Installation instructions 4. Roll back instructions 5. Resolved issues 6. Notices =============================================================================================== 1. Introduction =============================================================================================== This fix pack updates the TRIRIGA Application Platform product. ----------------------------------------------------------------------------------------------- Prerequisites and supported products ----------------------------------------------------------------------------------------------- To install this fix pack, you must already have IBM TRIRIGA Application Platform 3.4.2 installed. =============================================================================================== 2. Information resources =============================================================================================== Knowledge center URL: http://www-01.ibm.com/support/knowledgecenter/SSHEB3_3.4.2/com.ibm.tap.doc_3.4.2/product_landing.html Description: Access the information center to view the product documentation. Topics include product overviews; installation and configuration tasks; instructions for using, administering, and troubleshooting the product; and security information. Real Estate and Facilities Management community on Service Management Connect URL: https://www.ibm.com/developerworks/servicemanagement/rfm/ Description: Use Service Management Connect to access blogs, wikis, forums, and communities. In Service Management Connect you can review information such as best practices, performance and tuning, and product integrations. You can also collaborate with IBM experts and the broader user community. IBM TRIRIGA Application Platform support resources portal URL: http://www.ibm.com/support/entry/portal/overview/software/tivoli/ibm_tririga_application_platform Description: The IBM support resources portal provides access to tools and resources to keep your systems, software, and applications running smoothly. From the support resources portal you can find fixes, service requests, useful links and an enhanced search to help you find information quickly. =============================================================================================== 3. Installation instructions =============================================================================================== The fix pack file can be extracted into any directory. Before extracting and running the fix pack, back up the existing TRIRIGA files and make a backup copy of the database. NOTE: In the patch folder for the 3.4.2.1 fix pack, when the fix pack installer backs up the ibm-tririga.war file, the back-up .war file appears as the ibs-tririga.war.bak file. Follow these steps to apply this fix pack: 1 Ensure that no database configuration changes are pending. 2 Shut down all of your application and process servers. 3 Take a backup of the database and of the TRIRIGA install directory. 4 For IBM WebSphere Application Server, after the backup has been completed, restart WebSphere. 5 Download the 3.4.2-TIV-TAP-FP001 file. 6 Unzip the file and run the patch executable file (patch.exe or patch.bin). 7 In the Introduction panel, click Next. 8 In license agreement, accept the terms and click Next. (if you do not accept the terms, the patch will exit) 9 Choose the directory where TRIRIGA is installed. For example: c:\ibm\tririga\ Or /opt/ibm/tririga/ 10 Review the information, and click Next. 11 The fix pack process will patch the WAR file, run any platform database fix pack scripts, and redeploy the WAR file in Liberty. 12 For Oracle WebLogic Application Server, delete all the cache, tmp, and .wlnotdelete directories that may contain files left over from the previous application/war installation For example: C:\oracle\weblogic10\user_projects\domains\tririga10domain\servers\tririgaServer\cache C:\oracle\weblogic10\user_projects\domains\tririga10domain\servers\tririgaServer\tmp Or /opt/oracle/weblogic10/user_projects/domains/tririga10domain/servers/tririgaServer/cache /opt/oracle/weblogic10/user_projects/domains/tririga10domain/servers/tririgaServer/tmp 13 For Oracle WebLogic Application Server, the fix pack process will attempt to redeploy the WAR file into the managed Server. However because of conditions in the server environment outside of IBM TRIRIGA's control, it may be necessary to manually redeploy the WAR file. Restart the application server when the fix pack has completed, and check the build number in the IBM TRIRIGA Administrator Console. If the old .war file is still shown, redeploy the .war file following Oracle's instructions for deploying a .war application into the managed server. The WAR file is located in the root TRIRIGA install directory: For example: c:\ibm\tririga\tririga-ibs.war /opt/ibm/tririga/tririga-ibs.war 14 For IBM WebSphere Application Server Liberty Core profile, the WAR file should be deployed and the cache directories will be automatically removed. All that is required is to restart Liberty. 15 For WebSphere Application Server, the WAR file will be redeployed and started automatically. If it fails to deploy, you can try to manually. The WAR file is located in the root TRIRIGA install directory: For example: c:\ibm\tririga\ibm-tririga.war /opt/ibm/tririga/ibm-tririga.war ==================================================================================================== 4. Roll back instructions ==================================================================================================== In order to roll back the fix pack to the previous TRIRIGA Application Platform build, the following steps can be taken: 1. Restore the database with the database backup you took prior to the fix pack being applied. 2. Install the IBM TRIRIGA Platform to the base platform build. 3. Reinstall the fix pack that was running prior to the current fix pack being applied. ==================================================================================================== 5. Resolved issues ==================================================================================================== ---------------------------------------------------------------------------------------------------- The following issues were resolved in this fix pack. ---------------------------------------------------------------------------------------------------- ---------------- Security Issues: ---------------- IBM does not intend to provide vulnerability details that could enable someone to craft an exploit. IBM uses the Common Vulnerability Scoring System (CVSS) as a standard for communicating the impact of security vulnerabilities in IBM products and solutions. CVSS is an industry open standard for assessing the severity or impact of computer system security vulnerabilities. This standard attempts to establish a numeric measure that represents how much concern or attention the vulnerability warrants. The resulting CVSS score is based on an assessment of a series of metrics. The CVSS Base Score represents the intrinsic and fundamental characteristics of the vulnerability that are typically constant over time and across user environments.For more information, see http://www-03.ibm.com/security/secure-engineering/bulletins.html --------------------------------------------------------------------------------------------------- The following security issues were resolved in the TRIRIGA Application Platform 3.4.2.1 fix pack --------------------------------------------------------------------------------------------------- CVE ID: Title: Cross Site Request Vulnerability CVSS Base Score: CVSS Temporal Score: See http://xforce.iss.net/xforce/xfdb/ for the current score. ---------------------------------------------------------------------------------------------------- General Issues: ---------------------------------------------------------------------------------------------------- APAR #: IV62154 Defect: 187441 Description: When mapping objects in the Workflow Builder, the number of parameters that are sent in the URL from the client to the server has been reduced. Generally, at most two parameters are now sent for each object that is mapped, instead of 7 - 10 per object. --- APAR #: IV72045 Defect: 182743 Description: In an Action item, the User Action Item count and the Actual Record count are now the same. --- APAR #: IV73401 Defect: 175169, 177479 Description: Resolved an application custom class loader issue that occurred when the class Loader delegation was set to Parent-Last. --- APAR #: IV73796 Defect: 178217 Description: Date fields that are marked as relative now work correctly with a runtime equals filter. --- APAR #: IV74138 Defect: 178153 Description: In outgoing mail from the TRIRIGA application that contains reports or queries with date and date-time fields, the date and date-time fields are now formatted based on the formats in the user's My Profile. --- APAR #: IV74439 Defect: 183172 Description: When you compute a date time from a date, an issue was resolved that sometimes caused all day reservations to show up one day early on the calendar. --- APAR #: IV74860 Defect: 181983 Description: In the Security Manager, Report Manager access now includes a Read permission for My Reports. Users in groups where the most permissive access to My Reports is Read can only run reports, unless the report's Security tab has Edit selected, in which case users can edit the report. --- APAR #: IV75373 Defect: 185834 Description: In the Document Manager, trees will now adhere to the TREE_PAGING_SIZE value. If the value is set to a low number, the number of folders that are returned will be one more than the TREE_PAGING_SIZE value. If the TREE_PAGING_SIZE value is set to a high number and there are many records at one level in the tree, performance will be impacted. --- APAR #: IV75476 Defect: 186670 Description: Users in a group that has View access to a report in the report's Security tab now can see the report in their My Reports tab and run it. --- APAR #: IV75835 Defect: 186967 Description: In the Administration Console, an issue was resolved that caused the data in a session to clear and a timeout to occur quickly. --- APAR #: IV75838 Defect: 187246 Description: When you use the modify or create tasks in a workflow, formula mapping will now map data into Note fields. --- APAR #: IV75839 Defect: 188716 Description: In the Administrator Console, an issue was resolved in the Workflow Agent Manager that occurred when you set the run as user option for scheduled events. You can now enter a user name into a text field to run workflows for scheduled events. To leave the user name as default, enter DEFAULT into the text field, and workflows will run with the default configuration. --- APAR #: IV76021 Defect: 187616 Description: In the WebSphere Liberty server.xml configuration, two performance properties are missing when you use the Microsoft SQL server. The following properties can be found in the data source properties tag: sendStringParametersAsUnicode= prepareSQL=2 You can add the missing properties manually to the Liberty configuration. --- APAR #: IV76097 Defect: 187985 Description: On the Calendar tab of a record, you can now drill into a date and see details in a day, weekly, monthly, quarterly, and yearly view. --- APAR #: IV76120 Defect: 187909 Description: In the IBM TRIRIGA Application Platform, you can now send email with attachments included. --- APAR #: IV76176 Defect: 188448 Description: In Google Chrome, modal windows now display in the middle of the screen. --- APAR #: IV76293 Defect: 188946 Description: Scheduled events now start consistently when you run the Microsoft SQL Server. --- APAR #: IV76387 Defect: 189546 Description: In Chrome, data is now saved when you right-click to paste a value into a multi-text area. --- APAR #: IV76730 Defect: 190971 Description: In Graphics, resolved an issue where a floor name with a comma in it would not export in Chrome. --- APAR #: Defect: 176326 Description: In the Integration Object application, data maps now render when you use a DB2 data source in the DC to File scheme. --- APAR #: Defect: 176538 Description: Metric Report Data tab now loads on Internet Explorer 11. --- APAR #: Defect: 177573 Description: You can download IBM TRIRIGA BIRT plug-in. To install the plug-in from an application server, go to the Eclipse application, select Install New Software, and enter the following: app server url/eclipse. --- APAR #: Defect: 177915 Description: In the Workflow editor, you can now insert fields into a function. --- APAR #: Defect: 178085 Description: An issue was resolved on Metric Query reports where the Capture Period filters did not show all data if the filter value was set to Classification Root. --- APAR #: Defect: 180711 Description: In the Form Builder application, the Associated Query/Availability section now saves property values. --- APAR #: Defect: 180712 Description: In the Integration Object application, you can now use and select the DC_Project field in the File to DC scheme. --- APAR #: Defect: 181153 Description: In the WebSphere Server logs, MVC exception messages no longer occur. --- APAR #: Defect: 184771 Description: On the Notes & Documents tab of a record, uploads from the Related Documents section now load a tree structure in Chrome, Firefox, Internet Explorer 11, and Safari. --- APAR #: Defect: 185940 Description: When you upload a document, third-party security filters no longer block upload.js and upload.css from being sent to the browser. --- APAR #: Defect: 187424 Description: The IBM TRIRIGA BIRT plug-in now connects with the HTTPS SSL servers for downloading the plug-in and previewing reports. --- APAR #: Defect: 187620 Description: When you create a query and select the Advanced tab, there is no longer an exception. --- APAR #: Defect: 187780 Description: In the Calendar section, if the start date and end date are not specified, a print preview error no longer occurs. If you select print from a tab without a Calendar section, a default start date and end date will display. --- APAR #: Defect: 189020 Description: In a workflow, the expression editor now loads when the expression contains a value from a workflow task that no longer exists. --- APAR #: Defect: 189383 Description: Resolved an issue where the OSLC application did not export or import record data correctly by object migration if the record contained two properties with the same section name and field name. --- APAR #: Defect: 191415 Description: Setting the values of the padding-bottom, padding-left, padding-right, and padding-top properties in the Style Sheet Editor now works as expected. This change might affect your forms. If you want to change the properties for forms, go to Tools > Administration > Style Manager > Style Sheet Editor. --- ==================================================================================================== 6. Notices ==================================================================================================== This information was developed for products and services offered in the U.S.A. IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the users responsibility to evaluate and verify the operation of any non-IBM product, program, or service. IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not grant you any license to these patents. You can send license inquiries, in writing, to: IBM Director of Licensing IBM Corporation North Castle Drive Armonk, NY 10504-1785 U.S.A. For license inquiries regarding double-byte (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to: Intellectual Property Licensing Legal and Intellectual Property Law IBM Japan, Ltd. 19-21, Nihonbashi-Hakozakicho, Chuo-ku Tokyo 103-8510, Japan The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION AS IS WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you. This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice. Any references in this information to non-IBM Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk. IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you. Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact: IBM Corporation 2Z4A/101 11400 Burnet Road Austin, TX 78758 U.S.A. Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee. The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement or any equivalent agreement between us. Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products. All statements regarding IBMs future direction or intent are subject to change or withdrawal without notice, and represent goals and objectives only. This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to the names and addresses used by an actual business enterprise is entirely coincidental. If you are viewing this information softcopy, the photographs and color illustrations may not appear. Trademarks IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at www.ibm.com/legal/copytrade.shtml. Java and all Java-based trademarks and logos are trademarks of Oracle and/or its affiliates. Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both. Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both. Privacy Policy Considerations IBM Software products, including software as service solutions, (Software Offerings) may use cookies or other technologies to collect product usage information, to help improve the end user experience, to tailor interactions with the end user or for other purposes. In many cases no personally identifiable information is collected by the Software Offerings. Some of our Software Offerings can help enable you to collect personally identifiable information. If this Software Offering uses cookies to collect personally identifiable information, specific information about this offerings use of cookies is set forth below. This Software Offering does not use cookies or other technologies to collect personally identifiable information. If the configurations deployed for this Software Offering provide you as customer the ability to collect personally identifiable information from end users via cookies and other technologies, you should seek your own legal advice about any laws applicable to such data collection, including any requirements for notice and consent. For more information about the use of various technologies, including cookies, for these purposes, see IBMs Privacy Policy at www.ibm.com/privacy and IBMs Online Privacy Statement at www.ibm.com/privacy/details in the section entitled Cookies, Web Beacons and Other Technologies and the IBM Software Products and Software-as-a-Service Privacy Statement at www.ibm.com/software/info/product-privacy/.