DX NetOps Manager

Date: 28th February 2019

To:           CA Spectrum Customers

From:      The CA Technologies CA Spectrum Product Team

Subject:  OneClick Java Certificate Expiration

Dear CA Spectrum Users,

On behalf of CA Technologies, a Broadcom Company, we appreciate your business and the opportunity to provide you with high-quality, innovative software and services.

The Spectrum Product team would like to clarify options in regards to the JRE Certificate Expiration set for March 8, 2019.

As a Spectrum user, you have the following options based on your convenience or current patch level:

Option # 1

Starting with Spectrum release 10.1, all Spectrum versions from 10.1 and above have the Java® jar files time stamped to confirm validity.  This means that the certificate is still valid, and users can launch OneClick without issues even after the certificate expires (8^th Mar 2019). There is no additional configuration needed.  Also, since the certificate is valid there is no need to install any Java Certificate patches.        

Option # 2

If you have corporate level restrictions which will block applications from running with jars with expired certificates, then you will need to install one of the patches that we have provided.  Please refer to this technical document for detail:

https://comm.support.ca.com/kb/the-oneclick-java-jre-certificate-for-ca-spectrum-is-set-to-expire-on-march-8-2019/kb000127181

Additional info can be found here:

https://communities.ca.com/docs/DOC-231184460-spectrum-oneclick-java-certificate-expiry

Device Certification Pack

The certification packs have been rebuilt for those that have already installed the java certificate patch for 10.2.3 and 10.3.0.  If you are running a version between 10.1.0 and 10.2.2, or you are running 10.3.1, this does not apply to you.  Here is what you need to do depends upon your situation if you are running 10.2.3 or 10.3.0. 

1.        You do not need to install the JRE certificate patch and have not installed the Device Certification Pack but need to:
   1.        Only install the original device certification pack for the release you are on:

                            10.02.03.Cert_Pack_004

                            10.3.0.Cert_Pack_001*

                           *do not install this Device Certification pack on 10.3.1.

2.         You do not need to install the JRE certificate patch and have already installed the Device Certification Pack:
   1.       Do not install any patches. You do not need the updated JRE or device certification patch.
3.          You do need to install the JRE certificate patch and also need to install the Device Certification Pack:
   1.       Install the JRE certificate patch, then install the updated Device Certification pack noted below.
4.          You do need to install the JRE certificate patch and have already installed the original Device Certification Pack:
   1.       Install the JRE certificate patch, then install the updated Device Certification pack noted below.
5.          You have already installed the JRE certificate patch and had to remove jar files to allow the OneClick client to launch:
   1.       Install the updated Device Certification pack noted below.

The updated Device Certification pack based on the Spectrum version:

10.02.03.Cert_Pack_005

10.3.0.Cert_Pack_002*

     *do not install this Device Certification pack on 10.3.1.

The updated certification pack download information is provided in kb000127181.

**The updated certificate has been included in 10.3.1 out of the box.

Thank you again for your business.