361 Lotus blogs updated hourly. Who will post next? Home | Downloads | Events | Pods | Blogs | Search | myPL | About 
Latest 7 Posts
IBM BPM - Deleting a Deployment Environment
Thu, Nov 27th 2014 38
IBM Business Monitor - some FAQs
Thu, Nov 27th 2014 40
IBM Integration Bus - Port Reporting
Thu, Nov 27th 2014 49
IBM HTTP Server - maintenance mode
Thu, Nov 27th 2014 129
Help - The Proxy Ate My Process Designer
Sat, Nov 22nd 2014 109
Lessons Learned - WebSphere MQ, Clustering and Message Driven Beans
Sat, Nov 22nd 2014 97
DB2 Buffer Pools - Automagically tuning
Fri, Nov 21st 2014 101
Top 10
Silently installing WebSphere Application Server Network Deployment 8.5 - no GUIs here
Wed, Oct 3rd 2012 583
java.security.cert.CertPathValidatorException: Certificate chaining error seen with IBM Business Process Manager v8
Mon, Dec 3rd 2012 569
WAS to DB2 - Null userid is not supported. ERRORCODE=-4461, SQLSTATE=42815
Wed, Aug 14th 2013 483
CWWIM4529E and SECJ0369E seen when authenticating a user in WebSphere Application Server
Tue, Apr 9th 2013 400
WAS - How to clear the WebSphere class caches
Mon, Feb 10th 2014 379
IBM Security Bulletins - Padding Oracle On Downgraded Legacy Encryption (POODLE)
Mon, Oct 20th 2014 350
VMware - Where the X is my X ?
Sat, Oct 18th 2014 337
SRVE0255E: A WebGroup/Virtual Host to handle / has not been defined.
Fri, Aug 16th 2013 326
Secure in my CUPS
Fri, Feb 8th 2013 319
Interim Fixes for 9.0.1.x IBM Notes, IBM Domino & IBM iNotes
Tue, Oct 21st 2014 297

IBM WebSphere Application Server - Plugin Personal Certificate will expire on April 26, 2012

Does this affect you ?


The personal certificate called "WebSphere Plugin Key" within the plugin-key.kdb that is shipped with the WebSphere Plugin install will expire on April 26, 2012.


When the plugin is first installed, it places a copy of the plugin-key.kdb file within the [Plugin_Home]/etc directory. When the plugin is configured to an installed web server, it will pull a copy of this file from the [Plugin_Home]/etc location and place it within the [Plugin_Home]/config/{webservername} directory.

This key file contains a personal certificate that is set to expire by April 26, 2012. Action may be required to maintain encryption between the plugin and application server(s). Please read this documentation carefully to determine if you are affected and what steps may be needed to correct this situation.

I'd strongly recommend that you check this Technote, if you use IBM WebSphere Application Server and the WebSphere Plugin.

In our environment, I used the GSK command, as the IKeyMan GUI was not available to me on my headless Linux boxes: -

$ /opt/IBM/HTTPServer/bin/gsk7cmd -cert -list -db /opt/IBM/HTTPServer/Plugins/config/webserver1/plugin-key.kdb -pw WebAS

This gave me my cell-level certificate e.g. CN=Portal, OU=Root Certificate, OU=PortalCell, OU=PortalNode, O=IBM, C=US  which I then checked for expiration as follows: -

Label: CN=Portal, OU=Root Certificate, OU=PortalCell, OU=PortalNode, O=IBM, C=US
Key Size: 1024 
Version: X509 V3 
Serial Number: 11 FA EF 15 F5 2F E1 18 
Issued by: CN=Portal, OU=Root Certificate, OU=PortalCell, OU=PortalNode, O=IBM, C=US
Subject: CN=Portal, OU=Root Certificate, OU=PortalCell, OU=PortalNode, O=IBM, C=US
Valid: From: Thursday, 20 January 2011 12:05:44 o'clock GMT To: Friday, 16 January 2026 12:05:44 o'clock GMT 
Fingerprint: AE:2A:DC:10:6C:4A:18:A3:A0:46:A3:FD:EB:6E:2E:D0:8A:D2:CE:66 
Signature Algorithm: SHA1withRSA (1.2.840.113549.1.1.5) 
Trust Status: enabled 

Just because my environment is OK does NOT mean that yours is …. go check, go check NOW

Apr 16, 2012
31 hits

Recent Blog Posts

IBM BPM - Deleting a Deployment Environment
Thu, Nov 27th 2014 11:46p   Dave Hay
Not sure why this happens but, when I'm trying to delete an IBM BPM 8.5.5 Deployment Environment: -/opt/IBM/WebSphere/AppServer/bin/BPMConfig.sh -delete -de ProcessServer -profile Dmgr01I get this: -Logging to file /opt/IBM/WebSphere/AppServer/logs/config/BPMConfig_20141128-063539.log.Do you want to delete deployment environment?1. yes2. noInput option number: 1Before executing command to delete a deployment environment, it must at least stop the deployment environment.Checking the state of dep [read] Keywords: ibm application applications profile websphere

IBM Business Monitor - some FAQs
Thu, Nov 27th 2014 1:25p   Dave Hay
Some great stuff here on dwAnswersCan I apply a IBM Cognos Fix Pack to IBM Business Monitor?How do I enable XSS and CSRF protection in IBM Cognos provided with IBM Business MonitorHow can I use SAML tokens with Business Monitor and Cognos?Deploying IBM Cognos Business Intelligence into an existing IBM Business Monitor installationIBM Business Monitor profile creation fails when database is Oracle-based? [read] Keywords: ibm database oracle profile

IBM Integration Bus - Port Reporting
Thu, Nov 27th 2014 9:05a   Dave Hay
Following on from this earlier post: -IBM Integration Bus and the WebSphere Application Server (WAS) PluginI'm working with a colleague to implement the same configuration in another environment.Again, we're using IBM HTTP Server in front of IBM Integration Bus, in order to allow requests ( SOAP over HTTP in this particular case ) to be routed to one of a number of Integration Nodes ( aka Brokers in the old tongue ).This is partly to improve performance ( more engines to servic [read] Keywords: admin connections ibm application integration java server websphere

IBM HTTP Server - maintenance mode
Thu, Nov 27th 2014 3:05a   Dave Hay
One of my colleagues was looking for some intel. on this earlier this week.The requirement is to have IBM HTTP Server (IHS) display a different banner page when WebSphere Application Server is placed into maintenance mode e.g. when the WAS cell is being shut down, recycled, upgraded etc.After a few iterations, and a read of this: -Configuring a temporary 'Site Down For Maintenance' page in IBM HTTP Serverthis is what I configured.In essence, we place a single file in the IHS DocumentRoot: -Doc [read] Keywords: connections ibm apple application server websphere

Help - The Proxy Ate My Process Designer
Sat, Nov 22nd 2014 12:25p   Dave Hay
This is a problem that I recently saw with a client, and was able to reproduce, and more importantly, fix on my own environment.But first some background, one of the IBM BPM's major features is the Eclipse-based development, Process Designer. This interacts directly with Process Center, and provides a collaborative rich-client integrated development environment.Unlike other development tools, Process Designer can NOT function with a constant connection to the Process Center run-time, and this c [read] Keywords: admin ibm apple application development eclipse java microsoft network password server virus websphere widget widgets workspace

Lessons Learned - WebSphere MQ, Clustering and Message Driven Beans
Sat, Nov 22nd 2014 3:05a   Dave Hay
ContextThe requirement is to create a clustered WebSphere MQ infrastructure, and then send messages to an application, known as a Message Driven Bean, deployed onto WebSphere Application Server.The next step will be to create a more sophisticated application that can send and receive messages to/from WebSphere MQ, most likely leveraging the JavaEE Service Component Architecture.In this scenario, I will create a pair of WMQ Queue Managers, each on a separate OS ( Red Hat VM ), one representing th [read] Keywords: ibm notes application enterprise integration java password red hat security server vm websphere xml

DB2 Buffer Pools - Automagically tuning
Fri, Nov 21st 2014 2:45p   Dave Hay
So I picked this nugget of wisdom up this week.One of my most excellent DB2 SME colleagues pointed out the wonderful db2top utility, specifically in the context of monitoring Buffer Pools.You see, ever since I learned to install IBM Operational Decision Manager (ODM), I've been creating a Buffer Pool, bp32k, as required by the documentation and, more importantly, the product: -db2 create bufferpool BP32K size 8000 pagesize 32 KThe DB2 SME, let's call him ... John, pointed out that a Buffer Poo [read] Keywords: ibm apple database db2 server sql

IBM Business Process Manager - Missing the Bus
Fri, Nov 21st 2014 8:06a   Dave Hay
I've just built a single cell, two node three cluster IBM BPM Advanced 8.5.5 environment, against a remote DB2 ESE server.So I was a little startled when, after starting the Deployment Environment, the Service Integration Bus (SIbus) failed to properly start.This is what I saw in one of my Cluster Member logs: -[21/11/14 13:17:03:719 GMT] 00000073 SibMessage I [BPM.ProcessServer.Bus:MECluster.000-BPM.ProcessServer.Bus] CWSIS1593I: The messaging engine, ME_UUID=E997A9EFA09498FC, IN [read] Keywords: ibm apple database db2 integration server

Book Review - Anti-Hacker Tool Kit, Fourth Edition, by Mike Shema
Fri, Nov 21st 2014 3:05a   Dave Hay
Again, following on from earlier posts: -Book Review - Testing Cloud Services:How to Test SaaS, Paas and IaaSBook Review - A Project In Your PocketBook Review - Introduction to Computation and Programming Using Python by John V Guttaghere's my latest book review, on which I am working in conjunction with the British Computer Society.Anti-Hacker Tool Kit, Fourth Edition, by Mike ShemaFrom their site: -Welcome to the fourth edition of the Anti-Hacker Tool Kit. This is a book about the tools that [read] Keywords: application development linux python security virtualization

DB2 - Still 8 characters after all these years ...
Thu, Nov 20th 2014 2:45p   Dave Hay
So I'm more than familiar with systems that are "limited" to 8 characters, but I didn't expect DB2 to have the same limitation, leastways not in 2014 :-)This came up using DB2 Enterprise Server Edition on AIX, but I've since recreated it using DB2 on Red Hat Enterprise Linux 6.6 as well.The problem occurs when I tried to create a DB2 instance against an Unix user ID that's 9 characters long.This is because I'm hosting 10 instances on one OS - db2inst1 through db2inst10.Therefore, [read] Keywords: ibm aix db2 enterprise linux red hat server

Created and Maintained by Yancy Lent - About - Blog Submission - Suggestions - Change Log - Blog Widget - Advertising - Mobile Edition