Hi Support,

After updating from 25 -> 26 which went well, we can't connect to the ILMT server for updating the shema, we use single sign-on. tried chrome and firefox as well as explained in the notification a few days ago.

[1/12/22 15:09:52:994 UTC] 00000028 com.ibm.ws.channel.ssl.internal.SSLHandshakeErrorTracker E CWWKO0801E: Unable to initialize SSL connection. Unauthorized access was

ied or security settings have expired. Exception is javax.net.ssl.SSLHandshakeException: no cipher suites in common

Looking forward to be hearing from you

[1/12/22 15:29:36:784 UTC] 00000045 com.ibm.ws.channel.ssl.internal.SSLHandshakeErrorTracker E CWWKO0801E: Unable to initialize SSL connection. Unauthorized access was denied or security settings have expired. Exception is javax.net.ssl.SSLHandshakeException: Client requested protocol TLSv1 is not enabled or supported in server context

at com.ibm.jsse2.g.a(g.java:28)

at com.ibm.jsse2.g.a(g.java:48)

at com.ibm.jsse2.bb.a(bb.java:33)

at com.ibm.jsse2.bb.a(bb.java:81)

at com.ibm.jsse2.bb.a(bb.java:187)

at com.ibm.jsse2.G$b.a(G$b.java:48)

at com.ibm.jsse2.G$b.a(G$b.java:19)

at com.ibm.jsse2.G$b.consume(G$b.java:40)

at com.ibm.jsse2.p.consume(p.java:58)

at com.ibm.jsse2.aa.a(aa.java:207)

at com.ibm.jsse2.bg$a$b.a(bg$a$b.java:6)

at com.ibm.jsse2.bg$a$b.run(bg$a$b.java:1)

at java.security.AccessController.doPrivileged(AccessController.java:774)

at com.ibm.jsse2.bg$a.run(bg$a.java:29)

at com.ibm.ws.channel.ssl.internal.SSLUtils.handleHandshake(SSLUtils.java:751)

at com.ibm.ws.channel.ssl.internal.SSLConnectionLink.readyInbound(SSLConnectionLink.java:589)

at com.ibm.ws.channel.ssl.internal.SSLConnectionLink.ready(SSLConnectionLink.java:336)

at com.ibm.ws.tcpchannel.internal.NewConnectionInitialReadCallback.sendToDiscriminators(NewConnectionInitialReadCallback.java:167)

at com.ibm.ws.tcpchannel.internal.NewConnectionInitialReadCallback.complete(NewConnectionInitialReadCallback.java:75)

at com.ibm.ws.tcpchannel.internal.WorkQueueManager.requestComplete(WorkQueueManager.java:504)

at com.ibm.ws.tcpchannel.internal.WorkQueueManager.attemptIO(WorkQueueManager.java:574)

at com.ibm.ws.tcpchannel.internal.WorkQueueManager.workerRun(WorkQueueManager.java:958)

at com.ibm.ws.tcpchannel.internal.WorkQueueManager$Worker.run(WorkQueueManager.java:1047)

at com.ibm.ws.threading.internal.ExecutorServiceImpl$RunnableWrapper.run(ExecutorServiceImpl.java:238)

at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)

at java.lang.Thread.run(Thread.java:825)

please see

https://www.ibm.com/docs/en/license-metric-tool?topic=support-troubleshooting-problems-related-enforcement-https-tls-12

If issue remains, please open a support case and upload the tema.log

logDirectory

Location of the server log file. By default, the log file is in the following directory.

• installation_directory/wlp/usr/servers/server1
• installation_directory\wlp\usr\servers\server1

Hi,

I actually opened a ticket and R.George told be to continue here, so I'm new and thought that they are stopping using the normal PMR system.

anyways:

the server has been working for over a year with single signon (and after the update to 9.2.26) it's not working anymore. we have a linux/db2 server and the update went fine.

so basically the problem is that the connection the the auth. server is broken - did anyone have this problem ?

Best Regards

Henrik

Hi, sorry if there has been any confusion. In my reply to the case, I advised you to use the Chatbot to find a solution. Just visit our https://ibm.biz/BdfSw9 and find it in the right corner. A button called “Chat with support”.

pcampbel (1) answer is the same as in the case.

ILMT version 9.2.26 introduced new security changes. See:

https://www.ibm.com/docs/en/license-metric-tool?topic=tool-whats-new

Now when you install or upgrade to version 9.2.26 License Metric Tool enforces using HTTPS with TLS 1.2.

See the following documentation to fix this issue:

https://www.ibm.com/docs/en/license-metric-tool?topic=support-troubleshooting-problems-related-enforcement-https-tls-12

If issue remains, please upload the tema.log to your current case.

logDirectory

Location of the server log file. By default, the log file is in the following directory.

•             installation_directory/wlp/usr/servers/server1

•             installation_directory\wlp\usr\servers\server1

Regards,