IBM Fix Central server outage canceled

May 15 2009

I haven't blogged before about the Java applets expiration issue for Domino servers.  Basically, as has been reported on many other Lotus community blogs, the security certificate for some Java applets expires on May 18, 2009.  Anyway, as per this technote, you can download the fixes from IBM Fix Central.  Some had noticed that Fix Central was scheduled for downtime this weekend due to a server relocation, but a smart-thinking colleague caught the potential conflict this morning and the scheduled outage has been cancelled.  I've just received this:

Earlier today, there was a notice on the IBM Fix Central web site indicating: "There is a planned server outage on Sun, 17 May 2009 from 1 a.m. to 10 a.m. Central Daylight Time (CST)." Due to the need for customers to download important fixes, most notably for the applet certificate issue documented in the following technote,

Title: Knowledge Collection: Re-signed Java applets for Lotus Domino, Sametime, Quickr, and QuickPlace (May 2009)
Doc #: 1386146
URL: http://www.ibm.com/support/docview.wss?rs=899&uid=swg21386146

The planned server outage has been cancelled. IBM Fix Central will remain up through the weekend and next week. The outage will be scheduled for some future date.

Thanks to several sharp-eyed bloggers for getting me back to my computer at 6 PM on a Friday to clear this up, and to Scott Vrusho for being at his computer when I needed the answer!

Ed Brill Highland Park, IL USA Category:  IBM  Add/View Comments [13]

Post a Comment

  1. 1  keith brooks http://lotustech.blogspot.com | 5/15/2009 5:39:58 PM

    thanks Ed!

  1. 2  Tim Lorge http://www.groupwarenews.com | 5/15/2009 5:49:52 PM

    What about Passport? That's still down.

  1. 3  Ed Brill http://www.edbrill.com | 5/15/2009 5:55:33 PM

    I can't do anything about the Passport Advantage outage at this point, but as far as getting the fixes needed for the Java applet issue, you can get them at Fix Central.

    Totally agree this was bad timing. The data center is being moved and, well, a decision was made not to put a temporary site up for all services. Hopefully the move will go fast.

  1. 4  Marie Scott http://www.bleedyellow.com/blogs/crashtestchix | 5/15/2009 5:59:55 PM

    Thanks Ed!

  1. 5  Jim Casale http://www.jimcasale.net | 5/15/2009 6:14:14 PM

    I wish I would have money on this one. I knew Ed would do something to help the situation.

    I think it is an example of IBM really listening and doing the right things in response to input.

  1. 6  Nathan T. Freeman http://nathan.lotus911.com | 5/15/2009 6:18:32 PM

    Good job unsucking, Ed. :-)

  1. 7  Carl Tyler http:\\www.iminstant.com | 5/15/2009 6:31:40 PM

    Thanks Ed and who ever the person was that spotted it.

    Out of interest why does IBM not have a backup systems that can be in place whilst they do upgrades etc?

    IBM knows how to do this, they charge companies millions to offer such services, why can't IBM do it for themselves and not give customers and partners this hassle?

  1. 8  Carl Tyler http:\\www.iminstant.com | 5/15/2009 6:37:23 PM

    Oh I don't expect you to answer, but perhaps the person in charge of this group could. It's a question that comes up again and again.

  1. 9  Charles Robinson http://www.cubert.net | 5/15/2009 11:01:52 PM

    So some IBM data center is moving and you have to shut down all the services for three days? Seriously? I'm sure I don't have to tell you how truly hysterical this is from out here in the peanut gallery. :-D

  1. 10  Tripp Black http://www.mindwatering.com | 5/15/2009 11:39:52 PM

    As for the "critical" fixes, we asked about was whether the affected jar files hit web mail (dwa) w/either firefox or ie. The answer is neither one. These are the "standard" java action & view applets. They are used in some of the base applications. They are not used in DWA/iNotes. As we don't use them in our custom applicatiosn, this quickly became a non-issue.

    We submitted a PMR (before the open mic was announced) and got a great response from Lotus support.

    I'll include the most important items here:

    1) This issue does not affect the DWA/iNotes databases in any way. iNotes does not make use of Java applets to present an interface to users. Instead, an ActiveX control (for IE) or .cab files (for Firefox) are downloaded into the browser. Since this issue only affects Java applets, your iNotes users will not see any changes when the applet security certificates expire on May 19th.

    2) There are only a few databases on your server that will be affected by this issue. For example, databases based on the following templates still make use of Java applets and users who try to access these databases over the web for the first time after May 19th will see the warning messages:

    > Discussion databases

    > Doc Library databases

    > Personal Journal databases

    > Teamroom databases

    > Public Address Book (names.nsf)

    > R6 Webmail (databases based on mail6.ntf accessed over the web [mail]) -- not DWA/iNotes

    3) If a user has accessed any of the above databases previously and accepted the digital signature of the applet then no action is required on your/their part. When the user downloaded the applet the first time, "Always trust content from this publisher" would have been checked by default and the certificate would have been saved in the Java certificate store to prevent future prompts. If they had unchecked this option, they would be prompted every single time they access the applet until they accept the certificate. You can verify that the certificate has been stored properly on their workstation by reviewing the security settings in the Java Control Panel (Start-->Settings-->Control Panel-->Java-->Security tab-->Certificates).

  1. 11  Ninke Westra http://woonjas.linuxnerd.org | 5/16/2009 2:53:12 AM

    How about the sametime integration in DWA/iNotes which is based on applets?

  1. 12  Darren Duke http://blog.darrenduke.net | 5/16/2009 3:47:43 AM

    @11, yes Sametime STLinks too. Also Quickr the Drag and Drop applet. Make sure to do Domino AND the product on top of Domino.

  1. 13  Erik Brooks  | 5/16/2009 5:21:51 AM

    Don't forget the editor applet -- that's in there too in case anybody is using that.