PQ74707: UPDATE CUSTOMIZATION TO CREATE HFS KEYSTORES FOR RACF CERTS | |||||||||||||||||||||||||||||||||||||||||||
![]() |
|||||||||||||||||||||||||||||||||||||||||||
![]() APAR status Closed as program error. Error description Network Deployment (ND) synchronization failure when security is enabled. The node agent keystores used in the configured JSSE repertoire cannot do a handshake with the Deployment Managers HTTP Key Store. This apar will address this issue.Local fix Turn off security prior to synchronizing updates made on the ND configuration.Problem summary **************************************************************** * USERS AFFECTED: All users of WebSphere Application Server * * V5.0 for z/OS * **************************************************************** * PROBLEM DESCRIPTION: Network Deployment (ND) synchronization * * failure can occur when security is * * enabled. * **************************************************************** * RECOMMENDATION: * **************************************************************** WebSphere V5.0 uses both System SSL and JSSE for secure communications. The jks keystores in the hfs need to contain the same certificates as are in RACF so that JSSE and System SSL can communicate with each other. The customer will see a "Certificate not found" message in SYSPRINT if the keystores and RACF Keyrings are not synchronized.Problem conclusion Support have been provided via 2 new shell scripts (bbowr2fa.sh and bbowr2fd.sh) to copy certificates from RACF to the WebSphere jks files. These scripts synchronize the keystores and RACF Keyrings. APAR PQ74707 is associated with SERVICE LEVEL W500101 of WebSphere Application Server V5.0 for z/OS.Temporary fix Comments
APAR is sysrouted FROM one or more of the following: APAR is sysrouted TO one or more of the following: Modules/Macros
Publications Referenced
|
Document Information |
Current web document: swg1PQ74707.html
Product categories: Software > Application Servers >
Distributed Application & Web Servers > WebSphere Application
Server for z/OS
Operating system(s):
Software version: 500
Software edition:
Reference #: PQ74707
IBM Group: Software Group
Modified date: Jul 3, 2003
(C) Copyright IBM Corporation 2000, 2009. All Rights Reserved.