IT12895: TPC UPGRADE IN 5.2.8 FAILS WITH ERROR: "BPCIN0258E THE LDAP CONFIGURATION EXPORT DID NOT SUCCEED.

IBM Spectrum Control V5.2.9 (February 2016)
IBM Spectrum Control V5.2.10 (May 2016)
IBM Spectrum Control V5.2.10.1 (July 2016)
IBM Spectrum Control V5.2.11 (August 2016)
IBM Spectrum Control V5.2.12 (November 2016)
IBM Spectrum Control V5.2.13 (March 2017)
IBM Spectrum Control V5.2.14 (May 2017)
IBM Spectrum Control V5.2.15 (August 2017)
IBM Spectrum Control V5.2.15.2 (November 2017)
IBM Spectrum Control V5.2.16 (March 2018)
IBM Spectrum Control V5.2.17 (May 2018)

APAR status

• Closed as program error.

Error description

• TPC upgrade from 5.2.7.0 to IBM Spectrum Control 5.2.8.0 failed
  with error:
  "BPCIN0258E The LDAP configuration export did not succeed. For
  more information, review the log files, and in the LDAP export
  command output, search for "exportLDAPRepositories"."
  
  In the install log, the following messages can be found:
  2015-12-16 14:17:48.301+0100 INFO TPCUtility
  exportLDAPRepositories52 cmd=[cmd.exe, /c,
  ""D:\Programs\IBM\TPC\ewas\profiles\WebServerProfile\bin\wsadmin
  .bat", -lang, jython, -username, XXXXXXXXXXX\tpcadmin,
  -password, ********, -f,
  "C:\528\TPC\scripts\tip\exportLDAPRepositories.py",
  "C:/Programs/IBM/TPC/config/ldap.conf",
  "C:\528/TPC/scripts/tip/""]
  2015-12-16 14:17:51.863+0100 INFO TPCUtility
  exportLDAPRepositories52 outputStream cmd result=WASX7023E:
  Error creating "SOAP" connection to host "localhost"; exception
  information:
  com.ibm.websphere.management.exception.ConnectorNotAvailableExce
  ption: [SOAPException: faultCode=SOAP-ENV:Client; msg=Error
  opening socket: java.io.IOException: Exception during
  sslSocket.startHandshake: Received fatal alert:
  certificate_expired;
  targetException=java.lang.IllegalArgumentException: Error
  opening socket: java.io.IOException: Exception during
  sslSocket.startHandshake: Received fatal alert:
  certificate_expired]
  
  TPC installer tries to run a wsadmin WAS specific command
  running a script to try to export any LDAP info. The command is
  run even if no LDAP.
  The command failed because the certificates are expired.
  

Local fix

• Renew security certificates for WAS server in TPC: WAS WebServer
  Open TPC Web GUI, e.g. https://<tpc_host_or_ip>:9569/srm
  and there go to Settings > User Management.
  On the User Management page, click Modify authentication
  mechanism. The WebSphere Integrated Solutions Console is
  displayed in a separate tab on the web browser.
  Then in WebSphere Integrated Solutions Console do the steps from
  the following link:
  http://www-01.ibm.com/support/knowledgecenter/SSAW57_8.5.5/com.i
  bm.websphere.nd.doc/ae/tsec_7renewcecacert.html?cp=SSAW57_8.5.5%
  2F1-8-2-33-4-1-3
  a) Security > SSL certificate and key management > Key stores
  and certificates > NodeDefaultKeyStore > Personal certificates
  
  b) Select the default chained certificate, and then click the
  renew button.
  
  c) Save the changes to the master configuration
  
  If those steps do not solve the expired certificate issue for
  WAS WebServer, it's possible that one of the following keystores
  still have certificates that are expired:
  <TPC_install_dir>\TPC\ewas\profiles\WebServerProfile\etc\key.p12
  <TPC_install_dir>\TPC\ewas\profiles\WebServerProfile\etc\trust.p
  12
  
  In that case, do a backup for those, and then copy the key.p12
  and trust.p12
  from
  <TPC_install_dir>\TPC\ewas\profiles\WebServerProfile\config\cell
  s\WebServerCell\nodes\WebServerNode
  
  to <TPC_install_dir>\TPC\ewas\profiles\WebServerProfile\etc
  
  and then restart WAS WebServer.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * TPC and Spectrum Control users upgrading when WAS WebServer  *
  * security certificates have expired.                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fix maintenance when available.                        *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is targeted for the following maintenance
  package:
  
  | refresh pack | 5.2-TIV-TPC-RP0010 - target May 2016
  
  Fixed in IBM Spectrum Control 5.2.10.
  
  http://www-01.ibm.com/support/docview.wss?&uid=swg21320822
  
  The target dates for future refresh packs do not represent a
  formal commitment by IBM. The dates are subject to change
  without notice.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• INSTALL
  

Fix information

• Fixed component name

  TPC ADVANCED

• Fixed component ID

  5608TPCA0

Applicable component levels

• R527 PSY

     UP

• R528 PSY

     UP

• R520 PSY

     UP