IBM Security Identity Manager(ISIM) applets signing certificate expires on December 24, 2017

Content

IBM Security Identity Manager(ISIM) applets(Form Designer, Workflow Designer, and Join Directive) class files are signed with a code signing certificate that is expiring on December 24, 2017. The class files of these ISIM applets are signed to avoid JRE strict security policy from blocking invocation of the applets. When the signing certificate of the ISIM applet class files expires on December 24 2017, ISIM administrators will no longer be able to launch the ISIM Form Designer, Workflow Designer and Join Directive applets.

The expiration of the certificate does not impact end user functions like change password, request access, provisioning accounts, approving requests etc.

Example of Java/Browser dialog message from trying to run ISIM applet after the signing certificate expiration date.


To resolve the issue with the ISIM applets, re-signed applet code (jar files) are being provided for ISIM 6.x and ISIM 7.x versions effected. The updated ISIM applet jar files are signed with a renewed certificate that now expires in December 2020.

Note, this issue does not apply to ISIM 6.x versions older than Fixpack 4 and all ITIM 5.x versions. The older ITIM 5.x and earlier ISIM 6.x applet classes are not signed with a signing certificate.

For ISIM 6.x customers download the 6.0.0.0-ISS-SIM-RENEW-APPLET-JARS patch and readme from Fix Cental link below:
http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FTivoli+Identity+Manager&fixids=6.0.0.0-ISS-SIM-RENEW-APPLET-JARS&source=SAR


For ISIM 7.x customers download the 7.0.1.0-ISS-SIM-RENEW-APPLET-JARS patch and readme from Fix Central link below:
http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FTivoli+Identity+Manager&fixids=7.0.1.0-ISS-SIM-RENEW-APPLET-JARS&source=SAR