Skip to Main Content
IBM Power Ideas Portal


This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Delivered
Workspace IBM i
Categories IBM i Access Family
Created by Guest
Created on Oct 24, 2019

Change or remove JRE 1.6 from ACS WAP

The current IBM Access Client Solutions Windows Application Package delivers JRE 1.6 for the use of the iKeyMan tool when installed. Being that 1.6 has been deprecated, this is now considered a critical security vulnerability for my company that I have no work around for. Please provide an updated WAP package which uses a current Java version, or the ability to point to any specific Java version we run. Or remove iKeyMan and migrate it away from Java.


Use Case:

The current IBM Access Client Solutions Windows Application Package delivers JRE 1.6 for the use of the iKeyMan tool when installed. Being that 1.6 has been deprecated, this is now considered a critical security vulnerability for my company that I have no work around for. Please provide an updated WAP package which uses a current Java version, or the ability to point to any specific Java version we run. Or remove iKeyMan and migrate it away from Java.


Idea priority High
  • Guest
    Reply
    |
    Mar 6, 2020

    JRE 6 has been removed from:
    5733-XJ1 Version: 1.1.0.23
    The ESS Distribution ID: LCD8-2011-13.

  • Guest
    Reply
    |
    Feb 14, 2020

    JRE 1.6 will be removed. This is planned for our February 2020 update.

  • Guest
    Reply
    |
    Nov 1, 2019

    Yes, this 64 bit package contains drivers for both 64 bit and 32 bit and both are installed automatically.
    Is it ok to assume this package meets your requirements?

  • Guest
    Reply
    |
    Oct 31, 2019

    Hi there. OK we can use the push to windows option to get the keys into the WAP side of things for ODBC secure connections. But the second piece was that the package you directed me to specifies 64 bit. Does it ONLY provide 64 bit iSeries drivers? Or does it still provide the 32 bit as well. Our application only uses the 32 bit as far as I know.

    RE: your request for my case #. It was: TS002918293

    Thank you.

  • Guest
    Reply
    |
    Oct 31, 2019

    keyman only provides a GUI for working with certificates in the keystore. It does not play any role when actually making the secure connection. IBM GSkit is used to secure ODBC connections.

    For importing certificates to the ACS Windows App Pkg kdb, you have two options:
    1. The command cwbcossl, which ships with the ACS Windows App Pkg, will bring up a GUI where you can import certificates from an IBM i.
    2. From the ACS base pkg main GUI, select Tools->Key Management. From there you can select a cert and the option to Push to Windows...

    Please provide the IBM ticket number you referenced as we would like to follow up our Service team.

  • Guest
    Reply
    |
    Oct 28, 2019

    I was told by the tech I worked with on a ticket that the 64 bit version does not contain keyman. We have customers who require secured client ODBC connections using certificates, and without keyman I'm assuming there's no way to secure the client connection. Also our client application is only a 32 bit version as of now, and hasn't been tested with the 64 bit driver. For those 2 reasons, we don't believe the 64 bit version of the WAP will work.

  • Guest
    Reply
    |
    Oct 28, 2019

    As indicated, the version of ACS Windows Application Package available on the Entitled Systems Support website (ESS) contains JRE 1.6. That version of the JRE also contains support for ikeyman. We also have a version of the ACS Windows Application Package that does not contain a JRE. It is currently available for 64 bit PCs and only for English. That version is available here:
    https://www-01.ibm.com/marketing/iwm/iwm/web/dispatcher.do?source=swg-ia

    In a future version of ACS, we will be removing the JRE from all versions of the Windows Application Package. A full replacement for ikeyman will not be provided as current JRE's already contain a command line tool (ie keytool) for certificate management. The ACS base package contains some certificate management support in the Key Management tool available from the main GUI under Tools.

    Does the 64bit English only version satisfy the requirement?