What You Need to Know about JAVA Security Certificate for IBM FileNet Products Expiration and Renewal

Why is this important?
IBM FileNet products require Java components to be downloaded to the browser. In order to guarantee the integrity of these files and to allow proper access to local system resources such as printers or file systems, these files are digitally signed.

The renewal of these digital Signatures is required every three (3) years. IBM FileNet’s current certificate will expire on October 30, 2009.

The behavior of modules with expired certificates varies based on the nature of the module and the resources it is using. In general, if the digital certificate expires, a Java message dialog is displayed advising the user that the certificate has expired. This dialog will continue to be displayed each time an applet requires access to local system resources until the patch/fixpack is applied.

All actions related to the renewal of these certificates MUST be completed prior to October 30, 2009 (expiration date).

What products are affected?

• IBM FileNet P8 Application Engine (AE)
• IBM FileNet P8 Process Engine (PE)
• IBM FileNet P8 Content Engine (CE)
• IBM FileNet IDM Desktop/Web Services
• IBM FileNet IDM Desktop/Open Client
• IBM FileNet eProcess
• IBM FileNet WorkPlace XT
• IBM FileNet ACSAP R3/J2EE
• IBM FileNet Image Service Resource Adapter (ISRA)

• ECM Technical Sales Specialists worldwide
• ECM Technical Sales managers
• IBM Coverage Teams (cSSRs, zSSRs, SWITAs, Client Reps, CITAs, and associated managers)
• ECM Lab Services Sales Representatives (LSSRs) and managers
• IBM FileNet Customers
• IBM FileNet Business Partners

• ECM Sales Specialists worldwide
• ECM Channel Reps worldwide
• ECM Sales and Channel managers

When will the resigned JAR file be available?
The process of signing and testing the resigned JAR file is already underway. For your planning purposes we will provide a schedule of availability dates for the resigned patches starting July 30, 2009, on the affected product support pages.

What are the actions and processes required to update my IBM FileNet installations?
To mitigate disruption to your IBM FileNet usage, we strongly recommend you begin planning for, and monitoring the release of your applicable security certificate renewal patch in advance of October 30, 2009 - Plan Now!

The processes for updating to the resigned patches are:

1. Determine which IBM FileNet components currently deployed in your environment would require an updated Java security certificate. No changes are needed for any IBM FileNet products not identified in the affected products listing. (See list of affected products above).
   
2. If you are using a IBM FileNet product which will requires a Java security certificate click here to learn about minimum patch/versions and the availability of resigned patches. Plan to update your installation to the minimum patch/version indicated while observing any dependencies. Next, monitor the availability of resigned patch releases, and download and install the resigned patches as they become available.