Drop-In ID: OPDM-11.03.00.08-008

Product: IBM® InfoSphere® Optim™ Runtime Services

Release: 11.3.0.8

Problem ID: IP24284

Date: September 28, 2020

Description: This iFix corrects the following problem with Optim Runtime Services.

• The SSL passwords and keystores are stored in plain text in the eclipse.ini file for Runtime Services. This is a Anthem security violation.

• After applying this iFix, the SSL related information will be managed by the HTTP Connection tab of the Optim Server Settings applet. The following lines in the eclipse.ini file for Runtime Services will no longer be used and can safely removed:
  
  -Djavax.net.ssl.keyStorePassword=
  -Djavax.net.ssl.trustStorePassword=
  -Djavax.net.ssl.keyStore=
  -Djavax.net.ssl.trustStore=
  -Dorg.eclipse.equinox.http.jetty.https.enabled=
  -Dorg.eclipse.equinox.http.jetty.ssl.keystore=
  -Dorg.eclipse.equinox.http.jetty.ssl.password=
  -Dorg.eclipse.equinox.http.jetty.ssl.keypassword=
  -Dorg.eclipse.equinox.http.jetty.ssl.keystoretype=

Prerequisites: IBM® InfoSphere® Optim™ Runtime Services 11.3.0.8.20191101_0839 with:

• IBM® Installation Manager 1.8.2 or later

Co-requisites: None

Supersedes: None

Special Notes: IBM Installation Manager 1.8.2 or later is required to install this iFix.

• Every Runtime Services 11.3.0.8 iFix recreates the base 11.3.0.8 eclipse.ini file. When you apply iFix OPDM-11.03.00.08-008, you may remove the SSL related entries (listed above) from Runtime Services's eclipse.ini file. If you do not want these entries in your eclipse.ini file, you will need to manually remove these entries each time you apply a Runtime Services iFix on top of OPDM-11.03.00.08-008.

OS Platforms: Windows, AIX, Linux

Corrective Actions:

Section I

If more than one iFix is found by Installation Manager, then all of them will be selected by default. Review each iFix and unselect any that you do not wish to install.

Ensure that all Optim components are not running before applying this iFix.

Continue through the Installation Manager Update wizard to apply this iFix.

How to uninstall this fix:

Ensure that all Optim components are not running before uninstalling any iFix.

Start IBM Installation Manager

Select the Uninstall option from the main Installation Manager window or menu.

Select the iFix you wish to uninstall.

Continue through the Installation Manager Uninstall wizard to remove this iFix.

This iFix will automatically be uninstalled if you upgrade to a new version.

Section II

If you have any questions about or problems with these procedures, contact IBM Optim Support.