IBM Performance Management 8.1.3.0 Interim Fix 9 Readme IBM Application Performance Management 8.1.3.0 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-IPM-IF0009 Readme

IMPORTANT NOTE: To download this update, you must first login to IBM Fix Central. Once logged in, you may select from the individual download packages. When selecting fixes, ensure your download options are set to "Include requisites: Yes".
http://www.ibm.com/support/fixcentral/

Below is a list of components, platforms, and file names that apply to this Readme file.

General description
This is an interim fix for the IBM Performance Management family of products, Version 8.1.3 until the official maintenance release is made available.

It includes fixes for
- the IBM Monitoring Shared Libraries used by all monitoring agents to upgrade to 06.35.11.04 .
- the IBM GSKit Security Interface used by all monitoring agent to upgrade to 08.00.50.88
- the jre used by all monitoring agents to upgrade to 08.05.30.00.
- the server core framework directory to upgrade the IBM Monitoring Shared Libraries in AgentFrameworks directory to 06.35.11.04.
- the server core framework directory to upgrade IBM GSKit Security Interface in AgentFramework directory to 08.00.50.88
- the server core framework directory to upgrade the jre in AgentFrameworks directory to 08.05.30.00.

Platforms and prerequisites
The agent core framework, and server core framework are supported on all agent and server platforms documented here.

Prerequisites for this interim fix

The interim fix for the agent core framework is intended to be applied to computer systems where monitoring agents are installed for

IBM Monitoring, Version 8.1.3.0
IBM Application Diagnostics, Version 8.1.3.0
IBM Application Performance Monitoring, Version 8.1.3.0
IBM Application Performance Monitoring Advanced, Version 8.1.3.0

The interim fix for the server core framework component is intended to be applied to any of the following levels of Performance Management server software

IBM Application Diagnostics, Version 8.1.3.0
IBM Application Performance Monitoring, Version 8.1.3.0
IBM Application Performance Monitoring Advanced, Version 8.1.3.0
IBM Monitoring, Version 8.1.3.0
 

None

None

Prior to installation

Monitoring agents must be installed and running before applying the agent core framework interim fix.
Performance Management Server must be installed before applying the server core framework interim fix.

Installing

The agent core framework patch is installed on the computer systems where your monitoring agents are already installed. The server core framework patch is installed on the computer system where the Performance Management server is installed. The server core framework patch updates the core framework that is included in agent installation images. The rules below help you decide which type of patch to apply.

• If you want to create new agent installation packages that contain the core framework fixes so that the fixes are included when you install new agents then install the server core framework patch and run the scripts to create new agent installation packages.
• Otherwise, install the agent core framework patch on the computer systems where your monitoring agents are already installed to upgrade the core framework.

1. Download the patch bundle from Fix Central for each OS type where your agent is installed:
   • If the agent is installed on AIX, download 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-AIX-IF0009.tar
   • If the agent is installed on Linux, download 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-XLINUX-IF0009.tar
   • If the agent is installed on Windows 32-bit, download 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-WIN32-IF0009.zip
   • If the agent is installed on Windows 64-bit, download 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-WIN64-IF0009.zip
2. If you are installing the patch on AIX as a non-root user, you must clear unused shared libraries from the kernel and library memory before you install the patch by following these steps:
    
   • Stop the agent(s)
   • Login as root, and run the slibclean command
   • Login as the non-root user who installed the agent(s) and continue with the patch installation
3. Unpack the patch bundle on each computer system where the agent is already installed by using the tar utility on Linux/AIX or unzip on Windows.
   
   e.g.
   tar -xf 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-XLINUX-IF0009.tar
    
4. Enter the created directory


5. Run the apmpatch.sh/bat tool as the same user who installed the agent:
   
   Linux/AIX:
   ./apmpatch.sh [ <APM-AGENT-HOME> ]
   
   Windows:
   ./apmpatch.bat <APM-AGENT-HOME>
   
   where the <APM-AGENT-HOME> value specifies the directory where the agent is installed. This value is a required parameter for Windows. However, for Linux and AIX, it only needs to be provided if the agent is installed in a non-default directory.

1. Download the patch bundle 8.1.3.0-IBM-IPM-SERVER-IF0009.tar file.


2. Unpack it


3. Enter the created directory.


4. Run the apmpatch.sh tool:
   ./apmpatch.sh
    
5. Run the following scripts that are described at the following link in the APM 8.1.3 Knowledge Center:
   http://www.ibm.com/support/knowledgecenter/SSHLNR_8.1.3/com.ibm.pm.doc/install/install_agent_preconfig.htm
   • Run the <apm-server-home>/make_configuration_packages.sh script if you have not already created the configuration information for the agent installation packages.
   • Run the <apm-server-home>/configure_agent_images.sh script. Pass <apm-server-home>/ccm/AgentFrameworks as the value of the -a option.
     Note: The configure_agent_images.sh script updates your agent packages to include the patched agent core framework in <apm-server-home>/ccm/AgentFrameworks


6. Either use the configured agent packages to install new agents with the patched agent core framework or use the agent packages to upgrade the core framework for already installed agents. See these APM 8.1.3 Knowledge Center topics for more details on installing agents and upgrading agents
    
   • Installing agents on AIX systems
   • Installing agents on Linux systems
   • Installing agents on Windows systems
   • Upgrading your agents

Performing the necessary tasks after installation of the agent core framework update

A successful installation modifies the IBM Monitoring Shared Libraries version to 6.35.11.04, IBM GSKit Security Interface version to 08.00.50.88 and the IBM Monitoring JRE version to 8.05.30.00
On Linux or AIX:
- Ensure that the <APM-AGENT-HOME>/bin/cinfo -i output for the ax agent version is '06.35.11.04', gs version to 08.00.50.88 and the jr agent version is '08.05.30.00'.
- The agent interim fix installation logs are written to the <APM-AGENT-HOME>/logs/ directory.

On Windows:
- Ensure that the <APM-AGENT-HOME>\InstallITM\kincinfo -i output for the GL agent version is '06.35.11.04', gs version to 08.00.50.88 and the JM agent version is '08.05.30.00'.
- The agent interim fix installation logs are written to the <APM-AGENT-HOME>\INSTALLITM\ directory.

Troubleshooting installation problems from the Support site

For more detailed information, refer to the Troubleshooting and support Guide:
http://www-01.ibm.com/support/knowledgecenter/SSHLNR_8.1.3/com.ibm.pm.doc/install/trouble_intro.htm?lang=en-us

Uninstalling if necessary

This maintenance package cannot be rolled back. If necessary you can uninstall and reinstall the monitoring agent and all appropriate patches.

For detailed instructions to uninstall monitoring agents, please refer to the IBM Performance Management guide, here:
http://www-01.ibm.com/support/knowledgecenter/SSHLNR_8.1.3/com.ibm.pm.doc/install/uninstall_agents.htm?lang=en-us

The Secure Hash Algorithm 256 (SHA256) checksum of the images are as follows:
SHA256(8.1.3.0-IBM-IPM-CORE-FRAMEWORK-AIX-IF0009.tar) = a0cd38177ceca4960d5c10656e853472e82c524642e0f3c858f8f85e35d45f19
SHA256(8.1.3.0-IBM-IPM-CORE-FRAMEWORK-WIN32-IF0009.zip) = fe569299f4b07daf23963e5eaa8f2d8f37752aad6477747fe56f2634ab56b88b
SHA256(8.1.3.0-IBM-IPM-CORE-FRAMEWORK-WIN64-IF0009.zip) = 0b43601f4302e5d5a0ba96b3c42967138097258cd2ecc4937bbaf0f4f8ecde64
SHA256(8.1.3.0-IBM-IPM-CORE-FRAMEWORK-XLINUX-IF0009.tar) = e5174a3cf9c408ae2c261f4c0ef7e07ed8a0130de147bbdb0cdb934eaf82538f
SHA256(8.1.3.0-IBM-IPM-SERVER-IF0009.tar) = a34dd6c814e2aaac558826bd3fd883ac5872bdeddc869d9822300153af4ccd01

Image Contents
The following files implement this fix.
- 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-IF0009.readme.html - This README file

- 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-AIX-IF0009.tar

Extracting the above bundle (.tar) creates the following directory and patch files:

8.1.3.0-IBM-IPM-CORE-FRAMEWORK-AIX-IF0009/
|-- apmpatch.sh
|-- patches
|-- patch.properties

- 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-WIN32-IF0009.zip

Extracting the above bundle (.zip) creates the following directory and patch files:

8.1.3.0-IBM-IPM-CORE-FRAMEWORK-WIN32-IF0009/
|-- apmpatch.bat
|-- patches
|-- patch.properties

- 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-WIN64-IF0009.zip

Extracting the above bundle (.zip) creates the following directory and patch files:

8.1.3.0-IBM-IPM-CORE-FRAMEWORK-WIN64-IF0009/
|-- apmpatch.bat
|-- patches
|-- patch.properties

- 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-XLINUX-IF0009.tar

Extracting the above bundle (.tar) creates the following directory and patch files:

8.1.3.0-IBM-IPM-CORE-FRAMEWORK-XLINUX-IF0009/
|-- apmpatch.sh
|-- patches
|-- patch.properties

- 8.1.3.0-IBM-IPM-SERVER-IF0009.tar

Extracting the above bundle (.tar) creates the following directory and patch files:

8.1.3.0-IBM-IPM-SERVER-IF0009/
|-- apmpatch_functions
|-- apmpatch.bat
|-- msg
|-- nls_replace
|-- patches
|-- patch.properties
 

New Features

The following new features are included in IBM Performance Management 8.1.3.0 Core Framework Interim Fix 8:

• Defect fixes and other stability improvements

The following problems are addressed by this interim fix.

APARs

• None

• 135421: Uplift JRE packaged by agent installer to 8.0.5.30

• None.

• 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-IF0001.
• 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-IF0002.
• 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-IF0003.
• 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-IF0004.
• 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-IF0005.
• 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-IF0006.
• 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-IF0007.
• 8.1.3.0-IBM-IPM-CORE-FRAMEWORK-IF0008.

• 135227: Uplift JRE packaged by agent installer to 8.0.5.20
• IV86506: agent2server.bat fails to correctly reconfigure server connections for multi instance agents.
• IV94917:Resource monitoring data requests larger than 1MB should not be sent in multiple requests to the APM server
• IV96576: ITMAgents script does not have a kill logic if the command to stop an agent takes a long time
• IV98883: The agent2server.sh may start agents using the wrong user id.
• IJ00965: Failed to stop agent during upgrade
• IJ00973: Fix the agent installation isuue caused by special characters validation
• IJ01900: Kcirunas.cfg file should not be over-written
• 101154: Removal of vulnerability CVE-ID: CVE-2016-0729 in the TFE library used by the Monitoring Agent for WebSphere Applications, Monitoring Agent for WebSphere MQ, Monitoring Agent for Microsoft .NET, and Monitoring Agent for DataPower.
• 101824: Agents on Windows cannot be upgraded silently.
• 102913: Agent installation hangs on AIX if the agent VM uses LDAP for authentication
• 114617: Uplift the JRE packaged by agent installer to 8.0.4.1.
• 110368: Apache Xerces-C XML Parser library is vulnerable to a denial of service.
• 110964: GSKit Sweet32 Vulnerability Remediation in Basic Services.
• 117581:Addresses reported vulnerabilities in the Expat parser used by the agent core framework
• 118370: Fix problem where apmpatch.sh script may report that the directory path contains invalid characters
• 121911: Agents with the Agent Core Framework 8.1.3 IF02 or IF03 patches may crash when they are connected to an APM server that has been upgraded to 8.1.4.0.
• 122148: Uplift Java to 8.0.4.5
• 124187: Fix lock handling of private situation files to prevent agent from crashing and not updating the active private situation file
• 124264: OS-agent-specific ENV variable(s) passed to other agents on watchdog restart
• 125221: Uplift JRE packaged by agent installer to 8.0.4.10
• 129632: Uplift JRE packaged by agent installer to 8.0.5.5