Fw: IBM Lotus Domino may be impacted by certificate and license expirations - May 2006

Notes Domino Information <ndinfo@xxxxxxxxxx> 
05/20/2006 12:11 AM

To
rob@xxxxxxxxx
cc

Subject
IBM Lotus Domino may be impacted by certificate and license expirations - 
May 2006






This note contains links (URLs) to technical support documents (technotes) 
related to two separate issues potentially impacting IBM Lotus Domino 
customers. You are receiving this notification because you are a customer 
who has called us for technical support in the past year and a half. If 
you do not wish to receive notifications like this one on other topics in 
the future, please reply to this email and change the Subject field to: 
unsubscribe <e-mail address>, e.g. unsubscribe user@xxxxxxxxxxxxxxx This 
is a special mailing separate from regular Frequently Asked Questions 
(FAQ) mailings to urgently provide information about these two expiration 
situations.


Expiration of Domino applets security certificate

The certificate for some Java applets in IBM Lotus® Domino 6.x and Domino 
7.0.x expired on 18 May 2006. Starting on May 19, 2006, Web users may see 
a message stating that the certificate has expired, when Domino applets 
are loaded by the JVM or JRE in a Web browser. Please consult the 
following technote for more details:

Title: Security certificate expiration messages generated from Domino 
applets
Link: http://www.ibm.com/support/docview.wss?rs=463&uid=swg21238081

As long as the applet was signed when the certificate issued by the 
Certificate Authority was still valid, then the applet is valid according 
to the specification for signing Java applets. Domino system 
administrators have two options: (i) Explain to end users that the applets 
are still valid - The warning message is only to notify users that the 
certificate used to sign the applet has expired. The expiration does not 
affect the applets' security or functionality. In most cases the user can 
click to "Always Trust" content from IBM to stop the message from 
appearing in the future. (ii) Obtain re-signed applets from IBM Support by 
opening a PMR and requesting a hotfix, available for the following 
versions of Domino: 6.5.4, 6.5.5, and 7.0.1 (and all Fix Packs for each 
version). The certificate expiration is extended until 2009. 


Java Cryptography Extension (JCE) license expiration in WebSphere 
Application Server (WAS)

In WebSphere® Application Server versions 4.0 and 5.0, the IBM® JCE 
certificate expired on 18 May 2006 at 21:59:19 GMT as has been previously 
communicated. Using WebSphere security, SSL, J2C security or applications 
making calls to the IBM JSSE or IBM JCE may encounter failures after 18 
May 2006. This problem affects only IBM JVM 1.2 and 1.3.1 (dated prior to 
040219) and does not apply to IBM JVM 1.4.x or 1.5.x environments.

Title: WebSphere Application Server fix available: IBM Java Cryptography 
Extension (JCE) expires on 18 May 2006
Link: http://www.ibm.com/support/docview.wss?rs=688&uid=swg21236660

The WAS fixes are provided here:

Title: Interim Fix: IBM Java Cryptography Extension (JCE) expires on 18 
May 2006
Link: http://www.ibm.com/support/docview.wss?rs=180&uid=swg21236118

This issue applies to Domino 5.x and 6.x servers, which are configured to 
work with WebSphere Application Server (WAS) 4.0 and/or 5.0, or IBM 
WebSphere Portal for Multiplatforms server versions 4.1, 4.1.1, 4.1.2, 
4.1.3a, 4.1.3, 4.1.4, 4.1.5, 4.1.6, 4.2, 4.2.1, 4.2.2, 5.0, 5.0.1, 5.0.2, 
5.0.2.1, 5.0.2.2, 5.0.2.3. The problem does not affect WAS 5.0.2.5 and 
above, and it does not affect WebSphere Portal 5.1 and above.


General Self-Help Resources

Here are some ways that you can access IBM Lotus general self-help support 
information on the Web:

1. Register for My Support, which allows you to build a custom portal of 
support information and to subscribe to email notifications:
(This is a great service! Tens of thousands of subscribers have already 
signed up).
(Please consider subscribing to alerts for new content about the product 
you work with). 
http://www.ibm.com/software/support/einfo.html to learn more.

2. Visit the IBM Lotus Notes and Lotus Domino product support pages at:
http://www.ibm.com/software/lotus/support/notes/support.html [Lotus Notes]
http://www.ibm.com/software/lotus/support/domino/support.html [Lotus 
Domino]
http://www.ibm.com/software/lotus/support/dwa/support.html [Lotus Domino 
Web Access]
http://www.ibm.com/software/lotus/support/quickplace [Lotus Quickplace]
http://www.ibm.com/software/lotus/support/sametime/support.html [Lotus 
Sametime]

3. Determine what problems are fixed in each release by viewing the IBM 
Lotus Fix List databases:
http://www.lotus.com/ldd/r5fixlist.nsf [Lotus Notes/Domino]
http://www.lotus.com/ldd/stfixlist.nsf [Lotus Sametime]

4. Subscribe to the Lotus support RSS feeds:
http://www.ibm.com/software/support/rss/lotus/475.xml?rss=s475&ca=rsslotus 
[Lotus Notes]
http://www.ibm.com/software/support/rss/lotus/463.xml?rss=s463&ca=rsslotus 
[Lotus Domino]
http://www.ibm.com/software/support/rss/lotus/3024.xml?rss=s3024&ca=rsslotus 
[Lotus Domino Web Access]
http://www.ibm.com/software/support/rss/lotus/2338.xml?rss=s2338&ca=rsslotus 
[Lotus Quickplace]
http://www.ibm.com/software/support/rss/lotus/477.xml?rss=s477&ca=rsslotus 
[Lotus Sametime]
For help with RSS and for links to all the Lotus software RSS feeds, 
visit: http://www.ibm.com/software/support/rss/lotus/ [All Lotus products]

Kind Regards,

The IBM Workplace Portal and Collaboration Software team