IC87277: (UTILS) WHEN UPGRADING FROM SSP 3.2 TO 3.4 THE IDMB.ENC IS NOT AUTOMATICALLY CONVERTED FROM IDMB2.ENC

APAR status

• Closed as program error.

Error description

• When upgrading from SSP 3.2 to 3.4.1.0 the idmb.enc file is not
  automatically upgraded to the new idmb2.enc version file, this
  results in the SSP being unable to start if configured to use
  an HSM device.
  

Local fix

• STRRTC - 350386
  MB/RJ
  
  Circumvention:
  There is manual work around to run the convertKey.sh script
  

Problem summary

• The new <installdir>/conf/system/idmb2.enc provides a greater
  encryption level, and without the new file, the system will not
  start when running an HSM device.  Without HSM, the idmb2.enc
  file is automatically created during the first system startup
  after the upgrade.
  

Problem conclusion

• Updated the InstallAnywhere upgrade logic to silently create the
  idmb2.enc file from the idmb.enc file during an upgrade.  If the
  file is created, it then goes on to update the self-bootstrap
  file sb.enc with the higher encryption level.
  

Temporary fix

• Run the bin/convertKey.sh script to create the idmb2.enc file
  and update the sb.enc file if it does not happen automatically
  during the upgrade.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR SECURE PROX

• Fixed component ID

  5725D0300

Applicable component levels

• R341 PSY

     UP