Enhanced Security supported sites?

Usage and Config Platform
1

Do all IBM provided sites support Enhanced Security?

In my test environment if I enable Enhanced Security Patching Support and BigFix Labs throw errors during gathering:
Tue, 16 Jun 2015 09:45:37 -0500 – Unexpected exception during gather of site Patching Support: Unexpected HTTP response: 404
Tue, 16 Jun 2015 09:46:02 -0500 – Unexpected exception during gather of site BigFix Labs: class NoAuthorizedSignature (class X509VerifyError<20>)

When I disable Enhanced Security the sites gather just fine.

Any ideas?

1 Like
2

I bet BigFix Labs does not support this, and I bet this is intentional because the BigFix Labs content is not at the same trust level as all of the other content IBM provides. The BigFix labs content is much more experimental and does not go through the same process of auditing and validation that all other content goes through.

3

It is not intentional and you should contact IBM Support.

1 Like
4

Thanks!

I’ve opened a PMR via partner world – we’ll see what they say!

1 Like
5

I got a response from PartnerWorld support that indicated I should rotate the server signing key using the besadmin tool.

That fixes the issue with patching support but I am still seeing the same error with bigfix labs… Will update when I have a response for that!

1 Like
6

Here is the response from IBM Support:

Hi,

We run a test in our environment. We enbaled the enhance security settings then do a gather and also encountered the same error in the gather DB logs.

As seen in the BigFix Labs site before enabling it, the Bigfix Labs is not part of any Tivoli Endpoint Manager product. Rather BigFix Labs content is part of the IBM Integrated Service Management Library ('ISM Library". As such, BigFix Labs is unsupported, and we are providing it “as-is”, without any warranties, under the license agreement for ISM Library.

However, we will still look into it and try to get it working. In this case, I would like to ask if we can lower the priority of the PMR then we will update you as to what we have found out.

Thank You very much.

So it looks like they reproduced the issue and might look into it.

1 Like
7

We are getting this for one or two sites, which are officially supported / subscribed sites.

Did you ever get any more information on this? So far we haven’t gotten much back from IBM Support.

1 Like
8

I setup a new lab environment to verify it wasn’t an issue with my prod environment and then IBM confirmed it was an issue with the public site. Hang tight and work with your support person – they should help you get to the bottom of it!

2 Likes