Abstract -------- This document contains the readme for the IBM MQ Appliance Version 9.0.x releases. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ DESCRIPTION =========== This file describes product limitations and known problems. In addition to this file, you can find more information on the IBM MQ Appliance website: www.ibm.com/software/products/ibm-mq-appliance The SupportPac web page is here: http://www.ibm.com/support/docview.wss?rs=977&uid=swg27007205 For current information about known problems and available fixes, see IBM Support Portal: http://www.ibm.com/support/entry/portal/support Web documentation updates: The web-based IBM MQ Appliance documentation is available in IBM Knowledge Center: http://www.ibm.com/support/knowledgecenter/SS5K6E_9.0.0/WelcomePage/homepage.html Announcement letter The announcement letter for IBM MQ Appliance M2001 (US English) is available here: http://www.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_oc/9/760/ENUS5725-Z09/index.html&request_locale=en See the announcement letter for the following types of information: - Detailed product description - Product-positioning statement - Ordering details - Hardware and software requirements ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPDATE HISTORY 01 NOV 2017 - Updates for IBM MQ Appliance Version 9.0.4 22 MAY 2017 - Updates for IBM MQ Appliance Version 9.0.3 22 MAR 2017 - Add "JRE security vulnerabilities" entry for V9.0.1 and V9.0.2 18 MAR 2017 - Updates for IBM MQ Appliance Version 9.0.2 18 NOV 2016 - Updates for IBM MQ Appliance Version 9.0.1 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++ ++ ++ INSTALLATION INSTRUCTIONS ++ ++ ++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Installation instructions are available as part of the IBM MQ Appliance product documentation published in IBM Knowledge Center: http://www.ibm.com/support/knowledgecenter/SS5K6E_9.0.0/WelcomePage/homepage.html You should apply each firmware update as and when it becomes available. If you need support, patches are only provided for systems to which all available updates have been applied. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++ ++ ++ LIMITATIONS AND KNOWN PROBLEMS ++ ++ ++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ LIMITATIONS AND KNOWN PROBLEMS FOR VERSION 9.0.4 ================================================ Spurious error on startup after upgrading from Version 9.0.3 to Version 9.0.4 ----------------------------------------------------------------------------- You will encounter the following error when starting up after upgrading your appliance: [0x81000001][cli][error] : *** Unknown command or macro [0x81000223][cli][error] : (startup-config:521): engine-id-source Fixed You can prevent the error from occurring again by entering the following command: write mem Can now configure SNMP v1 or v2c communities using the Web UI --------------------------------------------------------------- The restriction that prevented the use of the Web UI for configuring SNMP v1 or v2c communities has now been resolved. LIMITATIONS AND KNOWN PROBLEMS FOR VERSION 9.0.3 ================================================ JRE security vulnerabilities and certificate keystore limitations resolved ----------------------------------------------------------------------------------------- The JRE security vulnerabilites listed under limitations and known problems for Version 9.0.2 have been resolved for Version 9.0.3. The certificate keystore limitations described under limitations and known problems for Version 9.0.2 have been resolved for Version 9.0.3. Cannot configure SNMP v1 or v2c communities using the Web UI ------------------------------------------------------------ You cannot use the Web UI to create SNMP v1 or v2c communities because an associated application domain is required, and there are no domains to select. The IBM MQ appliance does not support application domains, but the Web UI erroneously requires one. You can use the command line to configure communities instead. Spurious errors when upgrading an IBM MQ v8 appliance ----------------------------------------------------- After upgrading from version 8 to version 9.0.3, you might notice some errors in the system log when you start the appliance for the first time after upgrade. The errors relate to the certificate configuration for the DataPower Interoperability Test Service (iop-mgmt), which is not applicable to the IBM MQ appliance. These errors do not reoccur on subsequent restarts. LIMITATIONS AND KNOWN PROBLEMS FOR VERSION 9.0.2 ================================================ JRE security vulnerabilities ---------------------------- There are multiple vulnerabilities in IBM Runtime Environment Java Version 8 used by IBM MQ Appliance Version 9.0.2. Further details, including CVSS scoring and interim fix details, can be found here: http://www.ibm.com/support/docview.wss?uid=swg22000304 Cannot configure SNMP v1 or v2c communities using the Web UI ------------------------------------------------------------ You cannot use the Web UI to create SNMP v1 or v2c communities because an associated application domain is required, and there are no domains to select. The IBM MQ appliance does not support application domains, but the Web UI erroneously requires one. You can use the command line to configure communities instead. Certificate keystores might not open if they contain certificates ----------------------------------------------------------------- with serial numbers that have a leading zero -------------------------------------------- If you are using a JRE other than the one supplied in IBM MQ V9.0.2, note that recently released JRE maintenance levels that are supported by IBM MQ, including those provided by Oracle and by other IBM products, are known to fail to open certificate keystores if they contain certificates with serial numbers that have a leading zero in their encoding. This might impact product and application function. Further details can be found here: http://www.ibm.com/support/docview.wss?uid=swg22000235 LIMITATIONS AND KNOWN PROBLEMS FOR VERSION 9.0.1 ================================================ JRE security vulnerabilities ---------------------------- There are multiple vulnerabilities in IBM Runtime Environment Java Version 8 used by IBM MQ Appliance Version 9.0.1. Further details, including CVSS scoring and interim fix details, can be found here: http://www.ibm.com/support/docview.wss?uid=swg22000304 Abnormal terminations of SSH sessions ------------------------------------- You might experience that SSH sessions are abnormally terminated when disconnecting from the appliance. This issue might impact users who employ scripts to automate operations because ssh will complete with a non-zero return code. Cannot configure SNMP v1 or v2c communities using the Web UI ------------------------------------------------------------ You cannot use the Web UI to create SNMP v1 or v2c communities because an associated application domain is required, and there are no domains to select. The IBM MQ appliance does not support application domains, but the Web UI erroneously requires one. You can use the command line to configure communities instead. Spurious errors when upgrading an IBM MQ v8 appliance ----------------------------------------------------- After upgrading from version 8 to version 9.0.1, you might notice the some errors in the system log when you start the appliance for the first time after upgrade. The errors relate to the certificate configuration for the DataPower Interoperability Test Service (iop-mgmt), which is not applicable to the IBM MQ appliance. These errors do not reoccur on subsequent restarts. Unintended 'soft reboot' when using serial terminal -------------------------------------------------- If an administrator working in the serial terminal (or via Serial over LAN) attempts to interrupt mqcli commands (for example by hitting ctrl-c), this can interrupt the main system process and cause a 'soft reboot' of the appliance. To avoid this risk, it is recommended that MQ command line administration always be carried out in an SSH or remote MQSC session. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++ ++ ++ COPYRIGHT, NOTICES AND TRADEMARKS ++ ++ ++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ COPYRIGHT AND TRADEMARK INFORMATION This information was developed for products and services offered in the U.S.A. IBM may not offer the products, services, or features discussed in this information in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-IBM product, program, or service. IBM may have patents or pending patent applications covering subject matter described in this information. The furnishing of this information does not give you any license to these patents. You can send license inquiries, in writing, to: IBM Director of Licensing IBM Corporation North Castle Drive Armonk, NY 10504-1785 U.S.A. For license inquiries regarding double-byte character set (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to: Intellectual Property Licensing Legal and Intellectual Property Law IBM Japan, Ltd. 19-21, Nihonbashi-Hakozakicho, Chuo-ku Tokyo 103-8510, Japan The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you. This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the information. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this information at any time without notice. Any references in this information to non-IBM websites are provided for convenience only and do not in any manner serve as an endorsement of those websites. The materials at those websites are not part of the materials for this IBM product and use of those websites is at your own risk. IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you. Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact: IBM United Kingdom Laboratories, Mail Point 151, Hursley Park, Winchester, Hampshire, England SO21 2JN Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee. The licensed program described in this information and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Programming License Agreement, or any equivalent agreement between us. Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products. This information includes examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to the names and addresses used by an actual business enterprise is entirely coincidental. COPYRIGHT LICENSE: This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. You may copy, modify, and distribute these sample programs in any form without payment to IBM for the purposes of developing, using, marketing, or distributing application programs conforming to IBM's application programming interfaces. The following terms are trademarks of International Business Machines Corporation in the United States, other countries, or both: AIX, IBM, WebSphere, z/OS Windows is a trademark of Microsoft Corporation in the United States, other countries, or both. Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates. UNIX is a registered trademark of The Open Group in the United States and other countries. Linux is a trademark of Linus Torvalds in the United States, other countries, or both. Other company, product, or service names may be trademarks or service marks of others. For more information, see http://www.ibm.com/legal/copytrade.shtml