PM02965: ADMIN CONSOLE IS NOT DISPLAYING CERTIFICATES FOR A KEYSTORE JCECCARACFKS; "GET CERTIFICATE ALIASES" RETURNS NULL LIST.

Fixes are available

APAR status

Closed as program error.

Error description

Part of hardware crypto configuration in WebSphere Application
server is to create a keystore type JCECCARACFKS. This keystore
will point to a keying using safkeyringhw://KeyringName. Even
with correct keying setup, admin console is not displaying any
of the certificates on the keying when using this path:

Security > SSL certificate and key management > Key stores and
certificates > KeyStoreName > Personal Certificates/Signer
Certificates

In addition, when trying to define SSL configuration:
Security > SSL certificate and key management > SSL
configurations > SSLConfigName

The "Get certificate aliases" button returns a null list. This
prevents from choosing a server/client certificate alias which
is required in hardware crypto setup.

Note, this defect does not apply to V6.1

Local fix

Problem summary

****************************************************************
* USERS AFFECTED:  All users of IBM WebSphere Application Server
*                  V7.0                                        *
****************************************************************
* PROBLEM DESCRIPTION: The certificates for a hardware crypto  *
*                      keyring are not displayed in the        *
*                      administrative console.                 *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
When certificates are displayed in the administrative console, a
list of certificates defined for the control region started task
id is built, and another list is created for the certificates of
the servant region started task id. These two lists were not bei
merged correctly, resulting in an empty list.

Problem conclusion

The logic was corrected to correctly merge the two lists of
certificates, so that they are displayed correctly in the
administrative console.

APAR PM02965 is currently targeted for inclusion in Service
Level (Fix Pack) 7.0.0.9 of WebSphere Application Server V7.0.

Please refer to URL:
//www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
for Fix Pack availability.

Temporary fix

Comments

APAR Information

APAR number
PM02965
Reported component name
WEBSPHERE FOR Z
Reported component ID
5655I3500
Reported release
700
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2009-12-08
Closed date
2010-01-11
Last modified date
2010-04-03

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WEBSPHERE FOR Z
Fixed component ID
5655I3500

Applicable component levels

R700 PSY UK55155
UP10/03/26 P F003

Fix is available

Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
24 October 2021

Tips

PM02965: ADMIN CONSOLE IS NOT DISPLAYING CERTIFICATES FOR A KEYSTORE JCECCARACFKS; "GET CERTIFICATE ALIASES" RETURNS NULL LIST.

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R700 PSY UK55155

Fix is available

Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

Document Information

Share your feedback

Need support?