Tivoli Fed Id Mgr Business Gateway v6.2.0, iFix 12, 6.2.0-TIV-TFIMBG-IF0012

This interim fix corrects problems in IBM Tivoli Federated Identity Manager Business Gateway (Federated Identity Manager Business Gateway), Version 6.2.0. It requires that the IBM Tivoli Federated Identity Manager Business Gateway, Version 6.2.0, be installed, and the IBM Tivoli Federated Identity Manager Business Gateway 6.2.0 Fixpack 9 (6.2.0-TIV-TFIMBG-FP0009) be installed.

Interim fix contents and distribution

This interim fix package contains:

• The interim fix zip file
• This README.

This interim fix is distributed as an electronic download from the IBM Support Web Site.

Fix packs superseded by this interim fix

6.2.0-TIV-TFIMBG-FP0009

Interim fix structure

Federated Identity Manager Business Gateway consists of the following components that can be installed separately:

• Administration console
• Management service and runtime component
• Internet information services (IIS) Web plug-in
• Apache/IBM HTTP Server Web plug-in
• IBM Support Assistant plugin

This interim fix applies only to the administration console, and management service and runtime component (first two components listed above).

APARs and defects fixed
Problems fixed by interim fix 6.2.0-TIV-TFIMBG-IF0012

The following problems are corrected by this interim fix. For more information about the APARs listed here, refer to the Tivoli Federated Identity Manager Business Gateway support site.

APAR IV10801
SYMPTOM: Improve SAML Signature Conformance

APAR IV23431
SYMPTOM: Improve SAML signature conformance

APAR IV23445
SYMPTOM: Improve signature conformance

APAR IV23792
SYMPTOM: Enabling and disabling RelayState URL encoding and decoding in SAML 2.0 unsolicited authentication response.

APAR OA39921
SYMPTOM: NullPointerException is thrown when sending SAML 2.0 messages (e.g., Logout Request) with invalid IssueInstant attribute.

APAR IV24381
SYMPTOM: Improve XML Signature Conformance

APAR IV26034
SYMPTOM: The RelayState query string parameter provided to the IP-initiated SSO initial URL is used to populate the RelayState macro in the authentication response when the target query string parameter is empty or not provided. It should be ignored.

APAR IV26826
SYMPTOM: Update deployment descriptor for the Tivoli Federated Identity Manager Management Console servlets.

APAR IV26823
SYMPTOM: Update log traces in FSSO and STS.

You must have the following software installed to install this interim fix:

• IBM Tivoli Federated Identity Manager Business Gateway 6.2.0 Fixpack 9 (6.2.0-TIV-TFIMBG-FP0009) and its prerequisites

NOTE: Before installing this interim fix, ensure that you have reviewed the prerequisites in Before installing the interim fix.

Downloading the interim fix

To obtain the interim fix:
1. Go to the IBM Tivoli Federated Identity Manager Business Gateway Support Web site.
2. Click Download. The interim fix (6.2.0-TIV-TFIMBG-IF0012) is listed under Latest by date. If you do not see this interim fix listed, enter "6.2.0-TIV-TFIMBG-IF0012" in the Search field to access the link to the download window.
3. In the download window, scroll to the bottom of the window to view a listing of the download packages by platform.
4. Select the platform that corresponds to the target platform where you will apply the fixes. To ensure a secure download, select the DD (Download Director) option. If you have not used Download Director before, configure your browser to use Java security. Click What is DD? for configuration instructions.

Applying the interim fix
1. Unzip the file you downloaded in Downloading the interim fix.
2. Ensure that the WebSphere Application Server that hosts the Federated Identity Manager Business Gateway runtime and management service component is running.
3. Ensure that the WebSphere Application Server that hosts the Federated Identity Manager Business Gateway console component is running.
4. On the system on which the console component is installed, backup the following files

• com.tivoli.am.fim.common.jar in WAS_INSTALL_DIR/systemApps/isclite.ear/itfim-fimconsole-e.war/WEB-INF/lib
• com.tivoli.am.fim.management.jar in WAS_INSTALL_DIR/systemApps/isclite.ear/itfim-fimconsole-e.war/WEB-INF/lib
• web.xml in WAS_INSTALL_DIR/systemApps/isclite.ear/itfim-fimconsole-e.war/WEB-INF

5. Copy the following files from the interim fix to a location TMP_DIR in the system.

• com.tivoli.am.fim.common.jar
• com.tivoli.am.fim.management.jar
• web.xml

6. Launch the wsadmin tool.
7. Run the JACL command $AdminApp update isclite file {-operation addupdate -contents TMP_DIR/web.xml -contenturi itfim-fimconsole-e.war/WEB-INF/web.xml}
8. Run the JACL command $AdminApp update isclite file {-operation addupdate -contents TMP_DIR/com.tivoli.am.fim.common.jar -contenturi itfim-fimconsole-e.war/WEB-INF/lib/com.tivoli.am.fim.common.jar}
9. Run the JACL command $AdminApp update isclite file {-operation addupdate -contents TMP_DIR/com.tivoli.am.fim.management.jar -contenturi itfim-fimconsole-e.war/WEB-INF/lib/com.tivoli.am.fim.management.jar}
10. Run the JACL command $AdminConfig save
11. On the system on which the runtime and management service component is installed, backup the following files

• com.tivoli.am.fim.common.jar in WAS_INSTALL_DIR/profiles/PROFILE_NAME/installedApps/CELL_NAME/ITFIMManagementService.ear/

12. Copy the following files from the interim fix to a location TMP_DIR in the system.

• com.tivoli.am.fim.common.jar

13. Launch the wsadmin tool.
14. Run the JACL command $AdminApp update ITFIMManagementService file {-operation addupdate -contents TMP_DIR/com.tivoli.am.fim.common.jar -contenturi com.tivoli.am.fim.common.jar}
15. Run the JACL command $AdminConfig save
16. Backup the original files and replace the following files with the files from the interim fix

• com.tivoli.am.fim.common_6.2.0.0.jar
• com.tivoli.am.fim.kess_6.2.0.0.jar
• com.tivoli.am.fim.idservice_6.2.0.0.jar
• com.tivoli.am.fim.management_6.2.0.0.jar
• com.tivoli.am.fim.protocols_6.2.0.0.jar
• com.tivoli.am.fim.soap_6.2.0.0.jar
• com.tivoli.am.fim.sps.modules_6.2.0.0.jar
• com.tivoli.am.fim.sps_6.2.0.0.jar
• com.tivoli.am.fim.sts.modules_6.2.0.0.jar
• com.tivoli.am.fim.sts_6.2.0.0.jar

in FIM_INSTALL_DIR/plugins.
17. Log in to the administration console..
18. Select Domain Management -> Runtime Node Management
19. Click Publish Plug-ins.

NA