PH10210: ADMINISTRATIVE CONSOLE PRE-LOGIN BANNER IS NOT DISPLAYED WHEN CLIENT CERTIFICATE AUTHENTICATION IS ENABLED

9.0.5.1: WebSphere Application Server traditional Version 9.0.5 Fix Pack 1
9.0.5.2: WebSphere Application Server traditional Version 9.0.5 Fix Pack 2
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3

APAR status

• Closed as program error.

Error description

• If Client Certificate Authentication is enabled when the
  Administrative Console Pre-Login Banner is also enabled, the
  Pre-Login Banner will be bypassed and not displayed.
  This fix will enable both the Client Certificate Authentication
  and the Console Pre-Login Banner to be used concurrently when
  logging into the console using
  https://<host>:<port>/ibm/console on the browser.
  Requirement:
  In order for the fix to function the redirectURL in the
  WAS_HOME\systemApps\isclite.ear\config\console.properties file
  must be set to the default of
  https://<host>:<port>/ibm/console/logon.jsp
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server 9.0.                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: When the administrative console         *
  *                      pre-login banner is enabled together    *
  *                      with the client certificate             *
  *                      authentication, the pre-login banner    *
  *                      is not displayed.                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When the administrative console pre-login banner is enabled
  together with the client certificate authentication, the
  pre-login banner is not displayed.
  

Problem conclusion

• The code has been fixed to display the pre-login banner before
  logging into the administrative console with the client
  certificate.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 9.0.5.1.  Please refer to the
  Recommended
  Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R900 PSY

     UP