PK75264: PUBLIC KEY IS MISSING FROM ASYMMETRIC ENCRYPTION GENERATOR TOKENS

Fixes are available

APAR status

Closed as program error.

Error description

Public key is missing from Asymmetric encryption generator
tokens

Local fix

Problem summary

****************************************************************
* USERS AFFECTED:  WebSphere Application Server version 7      *
*                  administrative console users                *
****************************************************************
* PROBLEM DESCRIPTION: WebSphere Application Server version 7  *
*                      administrative console users that       *
*                      configure a WS-Security asymmetric      *
*                      encryption generator token binding      *
*                      callback handler are missing the        *
*                      signer certificates for selected key    *
*                      stores.                                 *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
Create a key store that contains a signer certificate and a
personal certificate.

1. Navigate to Security > SSL certificate and key management >
   Key stores and certificates
2. Click on CellDefaultTrustStore
3. Click on Signer certificates
4. Select the checkbox next to the datapower certificate and
   click the Extract button
5. Type a file name, such as C:\temp\power.cer, and click OK.
6. Navigate back to Security > SSL certificate and key
   management > Key stores and certificates
7. Click the New button to create a new key store
8. Type in a name, such as "newKeyStore", a path, such as
   "temp", then type in a password and confirm password. Click
   Apply.
9. Click Signer certificates.
10. Delete any existing certificates, then click Add.
11. Type in the Alias "power"  and the file name used
   previously, "C:\temp\power.cer", then click OK.
12. Navigate back to Security > SSL certificate and key
   management > Key stores and certificates > newKeyStore
13. Click Personal certificates
14. Click Create > Self-signed Certificate...
15. Enter an alias, such as "personal", a common name, such as
   "personal" and click OK.

Navigate to an Asymmetric encryption generator token callback
handler
1. Navigate to Services > Policy sets > General provider
   policy set bindings
2. Click on the Provider sample binding
3. Click on the WS-Security policy type
4. Click on the Authentication and protection link
5. Click on the  gen_encx509token token in the Protection
   tokens table
6. Click on the Callback handler link
7. Select your key store in the Keystore
   dropdown. In this scenario that is the "newKeyStore" that
   was created previously.
8. The only certificate displayed is the "personal"
   self-signed personal certificate. The "power" signer
   certificate is missing.

Problem conclusion

Code was added to identify Asymmetric encryption generator,
Asymmetric generator, and Custom generator tokens so that both
the listSignerCertificates and the listPersonalCertificates
administration tasks are executed to generate the keystore
certificate list in the dropdown.

The fix for this APAR is currently targeted for inclusion in
fixpack 7.0.0.3.  Please refer to the Recommended Updates
page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Temporary fix

Comments

APAR Information

APAR number
PK75264
Reported component name
WEBSPHERE APP S
Reported component ID
5724J0800
Reported release
700
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2008-11-07
Closed date
2008-11-18
Last modified date
2008-11-18

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WEBSPHERE APP S
Fixed component ID
5724J0800

Applicable component levels

R700 PSY
UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
23 October 2021

Tips

PK75264: PUBLIC KEY IS MISSING FROM ASYMMETRIC ENCRYPTION GENERATOR TOKENS

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R700 PSY

Document Information

Share your feedback

Need support?