How do I upgrade Java and WebSphere for Tivoli Storage Productivity Center for Replication zOS post install?

Answer

With TPC for Replication for zOS 5.2.5 and later, users may upgrade the embedded WebSphere and Java if a new version was shipped with the product. The post-installation script has been updated to allow this to be done easily, while saving the existing configuration and data. This allows security updates to be deployed during upgrade installation of the product via the normal PTF lifecycle.

After installing the PTF through SMP/e, complete the following steps:

1. Make a backup of the TPC-R database using the procedure described here:
http://www-01.ibm.com/support/knowledgecenter/SSNE44_5.2.0/com.ibm.tpc_V52.doc/frg_r_cli_mkbackup.html

2. Stop IWNSRV started task (if not already stopped)

3. ** Edit IWNINSTL job
Update the embedded WebSphere and Java version by appending the following flag to the sample job "IWNINSTL"
FORCE_FULL_INSTALL=TRUE

e.g.

//IWNINSTL EXEC PGM=BPXBATCH //STDOUT DD PATH='-PathPrefix-/etc/install_RM.log', // PATHOPTS=(OCREAT,OTRUNC,OWRONLY), // PATHMODE=(SIRWXU), // PATHDISP=KEEP //STDERR DD PATH='-PathPrefix-/etc/install_RM_err.log', // PATHOPTS=(OCREAT,OTRUNC,OWRONLY), // PATHMODE=(SIRWXU), // PATHDISP=KEEP //STDPARM DD * SH -PathPrefix-/usr/lpp/Tivoli/RM/scripts/installRM.sh //STDENV DD * CLASSPATH=-PathPrefix-/usr/lpp/Tivoli/RM/scripts TPCR_USER=#tpcr_user TPCR_GRP=#tpcr_grp TPCR_InstallRoot=-PathPrefix-/usr/lpp/Tivoli/RM TPCR_ProductionRoot=-PathPrefix-/opt/Tivoli/RM TIME_ZONE=GMT CLIENT_PORT=9560 HA_PORT=9561 FORCE_FULL_INSTALL=TRUE /*

** NOTE Once this update is completed on TPC-R 5.2.5 or later, the TCP/IP communication over SSLv3 (the legacy protocol) is disabled. Therefore devices that require SSLv3 will no longer be able to communicate. If storage devices have not yet been updated to pick up these fixes customers may choose to wait to apply this parameter in IWNINSTL until all of the storage systems attached to TPC-R via TCP/IP have been updated. This will ensure there is no loss of connectivity and minimal disruption.

4. Submit IWNINSTL job in order to update the application and embedded WLP and Java. The existing configuration will be saved.

5. Start the IWNSRV started task


Troubleshooting loss of connection after upgrade
With TPC-R 5.2.5 and higher, storage systems that require the legacy protocol (SSLv3) will no longer be compatible, unless the legacy protocol is re-enabled or the storage device mircrocode is upgraded to a compatible level.

Tivoli Storage Productivity Center for Replication for zOS users will see the following error message when failing to connect to the HMC or Direct Connection types:

IWNH1650E : Failed to successfully connect to the HMC server HMC:<IP|DNS_NAME> with the reason: 4.

If the storage system does not support TLSv1, and you are unable to upgrade the device to a level that does, the following parameter can be added to re-enable legacy protocol settings within Tivoli Storage Productivity Center to communicate to the storage system. The effects of the script will persist until the parameter is removed. Once the affected storage systems have been upgraded, you should remove the parameter from the file.

- To enable SSLv3, users must
1) Edit the following file:
-PathPrefix-/opt/Tivoli/RM/wlp/usr/servers/replicationServer/jvm.options
2) Add the following line:
-Dcom.ibm.jsse2.disableSSLv3=false
3) Restart IWNSRV started task.

- To disable SSLv3, users must
1)Edit the following file:
-PathPrefix-/opt/Tivoli/RM/wlp/usr/servers/replicationServer/jvm.options
2) Remove the following line (if line is not already present, SSLv3 is already disabled by default):
-Dcom.ibm.jsse2.disableSSLv3=false
3) Restart IWNSRV started task.