PI90663: CPSM: CPSM, WEB USER INTERFACE (WUI) AND ATTLSAWARE SUPPORT

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• ATTLSAWARE support was introduced into CPSM at version 5.3.
  This support was added for CMCI connectivity only.  The CPSM
  WUI does not require ATTLSAWARE support, it only requires to be
  notified that AT-TLS is being used.  This limitation is because
  the WUI is using absolute URLs which include the http scheme
  header.
  .
  .
  .
  Additional Symptom(s) Search Keyword(s): KIXREVxxx
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICSPlex SM V4R2M0 users.                *
  ****************************************************************
  * PROBLEM DESCRIPTION: The CICSPlex SM Web User Interface      *
  *                      (CPSM WUI), does not adhere to the      *
  *                      correct application protocol when       *
  *                      running on an Application               *
  *                      Transparent Transport Layer Security    *
  *                      (AT-TLS) enabled port.                  *
  ****************************************************************
  * RECOMMENDATION: After applying the PTF that resolves this    *
  *                 APAR, restart all CPSM WUI servers in the    *
  *                 CICSPlex.                                    *
  ****************************************************************
  The CPSM WUI can use either the HTTP or HTTPS application
  protocols for sending and receiving data.
  When the CPSM WUI is configured to run on a port which has
  been enabled with Application Transparent Transport Layer
  Security, (AT-TLS), it is not possible for the CPSM WUI to
  determine that the HTTPS protocol is in use and therefore the
  CPSM WUI may generate a URL with the HTTP protocol when the
  client requires HTTPS to satisfy the connection.
  

Problem conclusion

• A new value of ATTLSBASIC for the optional EYUWUI parameter
  TCPIPSSL has been added which is used to cause the CPSM WUI
  server to run on ports that are configured to run as AT-TLS
  ports by z/OS.
  
  The following documentation changes have been made:
  The CICS Transaction Server Knowledge Server
   -> Installing
    -> Getting ready to run CICS
     -> Setting up a CICSPlexSM Web User Interface Server
      -> Web User Interface server initialization parameters
       -> Optional parameters for the WUI
        -> Additional TCP/IP options
  
  The TCPIPSSL option text has been changed to:
  
  TCPIPSSL(YES | NO | ATTLSBASIC)
  Indicates whether you require data encryption between your Web
  User Interface server and web browser.  If you select YES,
  specify the appropriate system initialization parameters to
  enable SSL support in the CICS® Web Interface.
  If you select ATTLSBASIC, you must specify a port via the
  TCPIPPORT EYUWUI which has been enabled for AT-TLS by the
  z/OS Communications Server.  For more information about
  AT-TLS, refer to the appropriate z/OS Knowledge Center,
  specifically the section:
  z/OS Communications Server -> z/OS Communications Server: IP
  Programmer's Guide and Reference -> Application Transparent
  Transport Layer Security (AT-TLS).
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PI94706 UI55319

Modules/Macros

• EYU0DVWI EYU0VCTS EYU0VSPI EYU0VWRN EYU0VWXI EYU0VWXP EYU9VCE
  EYUEVCTL EYUKVCTL EYUSVCTL EYUTVTJE EYUTVTJK EYUTVTJS
  

Fix information

• Fixed component name

  CICS TS Z/OS V4

• Fixed component ID

  5655S9700

Applicable component levels

• R70M PSY UI55319

     UP18/04/25 P F804

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.