IBM Support

PM16589; 7.0.0.11: reducing CPU usage during signing LTPAToken2.

Download


Abstract

This APAR improves the relative performance of the sign operation for LTPAToken2 (SSOToken).

Download Description

PM16589 resolves the following problem:

ERROR DESCRIPTION:
An operation of signing LTPAToken2 is very CPU intensive, thus if many LTPAToken2s are being constructed and signed simultaneously, this operation consumes too much CPU usage.

LOCAL FIX:
n/a

PROBLEM SUMMARY

USERS AFFECTED:
All users of IBM WebSphere Application Server's LTPA authentication mechanism

PROBLEM DESCRIPTION:
This APAR improves the relative performance of the sign operation for LTPAToken2 (SSOToken).

RECOMMENDATION:
None

The CPU utilization during the signing of an LTPAToken2 was excessive.

PROBLEM CONCLUSION:
WebSphere Application Server has been modified to improve performance during the signing of an LTPAToken2 (SSOToken) by implementing the CRT (Chinese Remainder Theorem) algorithm. This behavior can be enabled via a security custom property, com.ibm.ws.security.ltpa.useCRT, with a value of true.

The fix for this APAR is currently targeted for inclusion in fix pack 6.1.0.35 and 7.0.0.13. Refer to the
Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss?uid=swg27004980

Prerequisites

Download the UpdateInstaller below to install this fix.

[{"PRLabel":"UpdateInstaller","PRLang":"US English","PRSize":"7250000","PRPlat":{"label":"AIX","code":"PF002"},"PRURL":"http://www.ibm.com/support/docview.wss?uid=swg21205991"}]

Installation Instructions

Review the readme.txt for detailed installation instructions.

[{"INLabel":"Readme","INLang":"US English","INSize":"6176","INURL":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PM16589/readme.txt"}]
On
[{"DNLabel":"7.0.0.11-WS-WAS-IFPM16589","DNDate":"8/24/2010","DNLang":"US English","DNSize":"46704","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www.ibm.com/support/fixcentral/quickorder?fixids=7.0.0.11-WS-WAS-IFPM16589&product=ibm%2FWebSphere%2FWebSphere%20Application%20Server&source=dbluesearch","DNURL_FTP":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PM16589/7.0.0.11-WS-WAS-IFPM16589.pak","DDURL":"http://public.dhe.ibm.com:7618;sw_websphere;appserv/support/fixes/PM16589/7.0.0.11-WS-WAS-IFPM16589.pak"}]

Technical Support

Contact IBM Support using SR (http://www.ibm.com/software/support/probsub.html), visit the WebSphere Application Server support web site (http://www.ibm.com/support/entry/portal/Overview/Software/WebSphere/WebSphere_Application_Server), or contact 1-800-IBM-SERV (U.S. only).

[{"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Performance and High CPU Utilization","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"7.0.0.11","Edition":"Base;Express;Network Deployment","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
15 June 2018

UID

swg24027717

Page Feedback