IBM Tivoli Composite Application Manager for SOA 7.2 Interim Fix 8 README Tivoli Composite Application Manager for SOA 7.2.0.1 7.2.0.1-TIV-ITCAMSOA-IF0008 Readme

IMPORTANT NOTE: To download this update, you must first login to IBM Fix Central. Once logged in, you may select from the individual download packages. When selecting fixes, ensure your download options are set to "Include requisites: Yes". If you do not see the Java packages, click "Change download options".
http://www.ibm.com/support/fixcentral/

Below is a list of components, platforms, and file names that apply to this Readme file.

This upgrade for ITCAM for SOA supersedes 7.2.0.1 IF4 and may be applied to the following base versions.

• 7.2.0.1
• 7.2.0

THIS FIX DOES NOT SUPERSEDE 7.2-TIV-ITCAMSOA-IF0007
This fix is solely an update to the Java Runtime. It does not contain any additional fixes for ITCAM for SOA. You should apply 7.2-TIV-ITCAMSOA-IF0007 before applying this fix.

For up-to-date ITCAM for SOA v7.2.0.1 software prerequisites, please visit:
Software and Hardware Prerequisites

For additional download packages or ITM support information, visit the ITM support portal at:
http://www.ibm.com/support/entry/portal/Overview/Software/Tivoli/Tivoli_Monitoring_V6

None

None

Prior to installation

To update the Java Runtime you must shutdown the ITCAM for SOA agent and any DataPower Data Collector. You should also move the old JRE to a backup location.

For Windows:

1. Run the Windows Services application
2. Stop the ITCAM for SOA Primary service
3. Stop the ITCAM for SOA WebSphere DataPower Data Collector
4. Rename the folder ITM_HOME\TMAITM6\KD4\ibmjava to ibmjava_old
5. Create a replacement folder ITM_HOME\TMAITM6\KD4\ibmjava

For Linux and UNIX:

1. Stop the agent: ITM_HOME/bin/itmcmd agent stop d4
2. Stop the DataPower Data Collector: ITM_HOME/ARCH/d4/KD4/bin/KD4DPDCStartup.sh stop
3. Backup the previous Java: mv ITM_HOME/ARCH/d4/KD4/ibmjava ITM_HOME/ARCH/d4/KD4/ibmjava_old
4. Create a new Java directory: mkdir ITM_HOME/ARCH/d4/KD4/ibmjava

Installing

This maintenance package is applied directly to the KD4 Tivoli Enterprise Management Agent (TEMA).

For Windows:

1. Extract the files from the archive and copy the files to ITM_HOME\TMAITM6\KD4\ibmjava\
2. Confirm that this path is valid: ITM_HOME\TMAITM6\KD4\ibmjava\jre\bin\java.exe
3. Execute ITM_HOME\TMAITM6\KD4\ibmjava\jre\bin\java.exe -version
4. Confirm that the version output contains "(SR16 FP20)"

For Linux and UNIX:

1. Extract the files from the archive - e.g. tar -zxvf ibm-java-jre-6.0-16.20-linux-x86_64.tgz
2. Linux only: the required files are contained within an extra directory, change into that directory before copying - e.g. cd ibm-java-*-60
3. Copy the extracted files to ITM_HOME/ARCH/d4/KD4/ibmjava/ - e.g. cp * ITM_HOME/ARCH/d4/KD4/ibmjava/
4. Confirm that the Java executable is in the correct place - e.g. ls -l ITM_HOME/ARCH/d4/KD4/ibmjava/jre/bin/java
5. Execute ITM_HOME/ARCH/d4/KD4/ibmjava/jre/bin/java -version
6. Confirm that the version output contains "(SR16 FP20)"
7. Confirm the permissions and owner of the new files and directories match the ibmjava_old settings.

Performing the necessary tasks after installation

You can now start the ITCAM for SOA agent and any DataPower Data Collector.

For Windows:

1. Run the Windows Services application
2. Start the ITCAM for SOA Primary service
3. Start the ITCAM for SOA WebSphere DataPower Data Collector

For Linux and UNIX:

1. Start the agent: ITM_HOME/bin/itmcmd agent start d4
2. Start the DataPower Data Collector: ITM_HOME//d4/KD4/bin/KD4DPDCStartup.sh start

Troubleshooting installation problems from the Support site

For more detailed information, refer to the Installation and Configuration Guide:
http://www-01.ibm.com/support/knowledgecenter/SS3JRN_7.2.1/com.ibm.itcamfapps_soa.doc_7201/soa_troubleshooting_guide/problemsinstall.html?lang=en

Uninstalling if necessary

This maintenance package cannot be rolled back. If necessary you can revert the files with to a previously made manual backup (e.g. ibmjava_old), or uninstall and reinstall the product and all appropriate patches.

For detailed Windows instructions, please refer to the ITCAM for SOA guide, here:
http://www-01.ibm.com/support/knowledgecenter/SS3JRN_7.2.1/com.ibm.itcamfapps_soa.doc_7201/soa_install_guide/uninstall.html?lang=en
For detailed Linux and UNIX instructions, please refer to the ITCAM for SOA guide, here:
http://www-01.ibm.com/support/knowledgecenter/SS3JRN_7.2.1/com.ibm.itcamfapps_soa.doc_7201/soa_install_guide/uninstallunix.html?lang=en

None

New Features

The following new features are included in ITCAM for SOA 7.2.0.1 Interim Fix 8:

• Security Fixes - Security Bulletin: Multiple vulnerabilities in IBM Java Runtime (Jan 2016) - (CVE-2016-0466, CVE-2015-7575)

• Security Fixes - Security Bulletin: Multiple vulnerabilities in IBM Java Runtime (April 2015)
• Security Fixes - Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Tivoli Composite Application Manager for SOA (CVE-2015-4000)

• Security Fixes - Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Tivoli Composite Application Manager for SOA (CVE-2015-0138, CVE-2014-6593, CVE-2015-0410)
• Security Fixes - Security Bulletin: Vulnerability in RC4 stream cipher affects Tivoli Composite Application Manager for SOA (CVE-2015-2808)

A) APAR Content:

IV80997 Java January 2016 Update (+ SLOTH) (Java6 APAR's IV80583 and IV80331)

From superseded fixes:

IV71288 JAVA JANUARY 2015 UPDATE AND FREAK (Java6 APAR IV70681)
IV72286 RC4 'BAR MITZVAH' ATTACK FOR SSL/TLS (Java6 APAR IV71888)
IV73049 JAVA APRIL 2015 UPDATE (Java6 APAR's IV70681, IV71888, IV72245, IV72348 and IV72352)
IV74202 LogJam Vulnerability (Java6 APAR IV73934)

B) Additional Non APAR Defects:

None

From superseded fixes:

None
C) Enhancements

None
From superseded fixes:

None