IO18137: CORRECTIONS NEEDED IN NIST INSTRUCTIONS PDF

APAR status

• Closed as documentation error.

Error description

• Corrections needed in NIST instructions PDF
  
  
  1.  The global properties should contain defaults.
  2.  The minimum requirements should be listed for JRE, not
  specifically
  sr10.
  
  3.  Instructions to download a new jre need to be changed.
  
  4.  How to determine the current jre should be added.
  5.  Steps to validate success should be added.
  
  
  Steps to Duplicate:
  Reading PDF and apply changes
  
  Desired Behavior: Use of use / clarification
  Environment:  New NIST updates in 7.x
  

Local fix

• 1802
  

Problem summary

• NIST PDF shipped with 7.1.1 FP2 needs to be modified.
  The following section will be newly added / modified.
  
  Verify NIST configuration.
  
  To confirm the new ciphers are being used.
  
  Modify the solution.properties file and add javax.net.debug=ssl
  Start the TDI server in daemon mode.
  Run the following command.   (The syntax below is based on the
  sample jks files and are placed in the installation directory.)
  
  tdisrvctl.bat -T "..\nist_testserver.jks" -W server -K
  "..\nist_testadmin.jks" -P administrator -op srvinfo
  
  Successful configuration of NIST will show SSL cipher data in
  the TDI server log.
   JsseJCE:  Using cipher AES/GCM/NoPadding from provider
  
  
  Minimum JRE required.
  For Tivoli Directory Integrator V7.1 and V7.1.1, verify the
  minimum JRE is IBM JRE 1.6 SR10.  See the section Upgrading JRE.
  The latest JRE can be requested to Level 2 support.
  
  Verify  Jre version
  
  Verify the Jre version by executing
  <TDI_Install_dir>\jvm\jre\bin\java -version command.
  

Problem conclusion

• The updated PDF document will be made available in
  7.1.1-TIV-TDI-FP0003.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels