IV70425: SIGNEDDATAVERIFICATIONFAILURE ON ATTRIBUTE 'LASTLOGINTIME'

APAR status

• Closed as program error.

Error description

• Potential for race conditions to cause SignedDataVerification
  errors in attributes from the USERINFO table.
  
  There is a potential for race conditions when different fields
  in USERINFO are updated at the same time for a specific user.
  These can cause the SignedData stored for the user to be
  inconsistent  with the user's data. This would result in errors
  when the user  tries to log in or the data for that user needs
  to be updated and  SignedDataVerificationFailure errors written
  to the BESRelay.log.
  

Local fix

• Local Fix:
  If the customer is running a single Root Server environment, the
  following command has to be run to get the environment in a
  working state:
  
  BESAdmin.exe /resignSecurityData
  
  If the customer is running a DSA environment, the above command
  has to be run first on the primary server and then on the
  replica servers.
  In a DSA scenario it is suggested to turnoff the secondary
  server to prevent a replication.
  

Problem summary

• Fixed in IBM Endpoint Manager 9.2 (fixpack 5)
  
  General availability Beginning of Q3 2015 (release schedule
  subject to change).
  

Problem conclusion

• This is resolved in:
  IBM Endpoint Manager 9.2 (fixpack 5)
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TIV EP MGR SERV

• Fixed component ID

  5725C43SV

Applicable component levels

• R92W PSY

     UP