IO18137: CORRECTIONS NEEDED IN NIST INSTRUCTIONS PDF

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as documentation error.

Error description

  • Corrections needed in NIST instructions PDF
    
    
    1.  The global properties should contain defaults.
    2.  The minimum requirements should be listed for JRE, not
    specifically
    sr10.
    
    3.  Instructions to download a new jre need to be changed.
    
    4.  How to determine the current jre should be added.
    5.  Steps to validate success should be added.
    
    
    Steps to Duplicate:
    Reading PDF and apply changes
    
    Desired Behavior: Use of use / clarification
    Environment:  New NIST updates in 7.x
    

Local fix

  • 1802
    

Problem summary

  • NIST PDF shipped with 7.1.1 FP2 needs to be modified.
    The following section will be newly added / modified.
    
    Verify NIST configuration.
    
    To confirm the new ciphers are being used.
    
    Modify the solution.properties file and add javax.net.debug=ssl
    Start the TDI server in daemon mode.
    Run the following command.   (The syntax below is based on the
    sample jks files and are placed in the installation directory.)
    
    tdisrvctl.bat -T "..\nist_testserver.jks" -W server -K
    "..\nist_testadmin.jks" -P administrator -op srvinfo
    
    Successful configuration of NIST will show SSL cipher data in
    the TDI server log.
     JsseJCE:  Using cipher AES/GCM/NoPadding from provider
    
    
    Minimum JRE required.
    For Tivoli Directory Integrator V7.1 and V7.1.1, verify the
    minimum JRE is IBM JRE 1.6 SR10.  See the section Upgrading JRE.
    The latest JRE can be requested to Level 2 support.
    
    Verify  Jre version
    
    Verify the Jre version by executing
    <TDI_Install_dir>\jvm\jre\bin\java -version command.
    

Problem conclusion

  • The updated PDF document will be made available in
    7.1.1-TIV-TDI-FP0003.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IO18137

  • Reported component name

    ITDI MULTIPLATF

  • Reported component ID

    5724D9960

  • Reported release

    611

  • Status

    CLOSED DOC

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-02-13

  • Closed date

    2013-02-27

  • Last modified date

    2013-02-27

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels



Rate this page:

(0 users)Average rating

Document information


More support for:

IBM Security Directory Integrator
General

Software version:

611

Reference #:

IO18137

Modified date:

2013-02-27

Translate my page

Machine Translation

Content navigation