Dynamic Workload Console 10.1 Fix Pack 1 Readme File

Date
December 2, 2022
Fix Pack Name
10.1.0-IBMHCL-DWC-FP0001
Product
Engine 10.1.0.01-2022.11
General Description
IBMHCL Dynamic Workload Console Fix Pack 1 for Version 10.1.0

This readme file is the most current information for the fix pack and takes precedence over all other documentation for Dynamic Workload Console version 10.1.0.

The most up-to-date version of this readme can be accessed at the following URL: Fix Pack readmes.

This readme file provides important information about Fix Pack 1 for IBMHCL Dynamic Workload Console version 10.1.0.

HCL Dynamic Workload Console version 10.1.0 Fix Pack 1 supports all product versions indicated in the Dynamic Workload Console Version 10.1 Release Notes.

For the most up-to-date information about supported operating systems, software and hardware requirements, see Dynamic Workload Console Detailed System Requirements.

It is divided into the following sections:

Features introduced with Fix Pack 1

Changed features and feature capabilities

Resolved Common Vulnerabilities and Exposures (CVE)

APARs and defects fixed in Fix Pack 1

Known limitations and workarounds

Fix pack structure

Installing the Fix Pack

Documentation updates

Contacting HCL Software Support

Notices

Features introduced with Fix Pack 1

Self-Service Catalog enhancements

A new and improved version of the Self-Service Catalog is available. You can now launch your services quickly and easily and check on them at anytime by accessing the Self-Service Catalog from any device.

To use the Self-Service Catalog you do not need to be a Workload Automation expert, but you can leverage on services based on automation capabilities in no time, provided you are connected to the Dynamic Workload Console in Single Sign-On (SSO).

The HCL Workload Automation scheduler or application can now define services directly from the Workload Designer marking the job streams as services and specifying service parameters. As part of the job stream definition, the service definitions now can be easily transferred to a different environment

When creating and editing SSC-ready job streams, it is recommended you use the Dynamic Workload Console.

For more information about defining SSC-ready job streams, see the online help for job stream definitions and the section about job stream definition in User's Guide and Reference for editing the job stream from the command line.

Orchestration Query Language (OQL)
The Orchestration Query Language (OQL) is a new syntax that applies to REST API V2 and helps you monitoring your HCL Workload Automation production plan environment. Creating queries and retrieving items in your database is now quicker and easier than before thanks to the different intuitive OQL keywords at your service.For more information, see the section about Monitoring your environment in the Dynamic Workload Console User's Guide.
Enhancing authentication using API Keys

You can create both Personal and Service API Keys in the Dynamic Workload Console and easily assign them to either specific users or groups. A comprehensive API Keys monitoring tool gives you full control over every valid, expiring and expired API Key that have been associated with an engine. For more information, see the topic about authenticating the command-line client using API Keys in Dynamic Workload Console User's Guide

You can use API Keys to authenticate the command line. You can use an API Key to get authenticated when you launch composer, conman, wappman, and ocli commands, instead of having to provide username and password as in previous versions.

To use the API Key with these commands, you need to have a specific set of authorizations defined in the security file, so that you can generate and retrieve the key from the Dynamic Workload Console. To find out the required authorizations, see the topic about Object type - file in the Classic security model section of the Administration Guide.

To generate the key from the Dynamic Workload Console, perform the steps listed in the section about accessing HCL Workload Automation from the command-line client using API Keys in Dynamic Workload Console User's Guide.

After generating the token, you can either specify it in the command line with the -jwt parameter, or add it in the useropts file.

You can also use the API Key to authenticate the master domain manager when installing the agents. This authentication allows the product to download the JWT or the certificates to be used for secure communication between master domain manager and dynamic agents. If you provide the API Key (with the apikey parameter), you no longer need to specify username and password (wauser and wapassword parameters) as in previous versions.

Ensure there are no misalignments in date and time in your network nor significant network delays because this might prevent JWT from working.

HCL Workload Automation Observability for Splunk
By integrating with Splunk, one of the market leaders in the Observability space, HCL Workload Automation enhances the concept of Monitoring, enabling complete end-to-end visibility into your workload data, network, infrastructure, and more. HCL Workload Automation Observability for Splunk provides the following set of dashboards which are deployed on Splunk Enterprise and are reachable from the main Overview Dashboard:
Jobs and Job Streams
This dashboard shows the status of Jobs, Critical Jobs, and Job Streams.
KPIs and Workstations
This dashboard shows the HCL Workload Automation KPIs information for each engine and allows drill-down to view KPIs time series in a graphical representation.
Activity Monitoring
This dashboard shows workstation and audit information such as user actions. You can view audit information for a selected time range, user, and object.
Infra Monitoring
This dashboard provides infrastructure details of HCL Workload Automation deployment on Kubernetes cluster.
Alerts
This dashboard provides details about custom alerts created for HCL Workload Automation events. Some predefined alerts are already configured in the Observability Dashboard for Splunk as an example.

For details about deploying and customizing the HCL Workload Automation Observability for Splunk, see this readme file.

You can also read the following blog article: HCL Workload Automation Observability for Splunk.

HCL Workload Automation Observability for Dynatrace
By integrating with Dynatrace, one of the market leaders in the Observability space, HCL Workload Automation enhances the concept of Monitoring, enabling complete end-to-end visibility into your workload data, network, infrastructure, and more. HCL Workload Automation Observability for Dynatrace provides the following set of dashboards reachable from the main Overview Dashboard:
Jobs and Job Streams
This dashboard shows the status of Jobs, Critical Jobs, and Job Streams.
KPIs and Workstations
This dashboard shows the HCL Workload Automation KPIs information for each engine and allows drill-down to view KPIs time series in a graphical representation.
Auditing
This dashboard shows audit information such as user actions. You can view audit information for a selected time range, user, and object.
Infrastructure
This dashboard provides infrastructure details of HCL Workload Automation deployment on Kubernetes cluster.
Alerts
This dashboard provides details about custom alerts created for HCL Workload Automation events. Some predefined alerts are already configured in the Observability Dashboard for Dynatrace as an example.

For details about deploying and customizing the HCL Workload Automation Observability for Dynatrace, see this readme file.

Updated version of WebSphere Application Server Liberty Base
Fix pack 1 has been tested using WebSphere Application Server Liberty Base versions 22.0.0.10 and 22.0.0.11. The minimum required WebSphere Application Server Liberty Base version to successfully install the fixpack is 22.0.0.3 or later.

Changed features and feature capabilities

The following features have changed or have been introduced or removed since the General Availability version:
Higher security for job integrations
The Verify host name check box is selected by default in some integrations. Starting from version 10.1 Fix Pack 1, to increase the security standard provided by the product, this selection starts a check on the data contained in the keystore file. Ensure you provide the correct path and credentials to the keystore file in the Certificates section for the following integrations:
  • JSR 352 Java Batch
  • Restful
  • Job Management
  • Job Stream Submission
  • Variable Table
If the information in the Credentials section is not correct, this causes the job to fail with an error similar to the following:
AWKJMJ041E An error occurred during the Job submission. 
The error was "AWKSPI006E Keystore authentication failed. The error message is 
"No certificates provided, cannot verify the hostname."
If your integrations fail after upgrading to Fix Pack 1, you have the following options:
  • deselect the Verify host name check box.
  • provide the correct path and credentials to the keystore file.

Resolved Common Vulnerabilities and Exposures (CVE)

The CVEs have been resolved:
  • CVE-2020-36518
  • CVE-2022-42003
  • CVE-2022-42004
  • CVE-2022-36033

APARs and defects fixed in Fix Pack 1

This section lists APARs and internal defects resolved by Fix Pack 1.

Table 1. APARs addressed in Fix Pack 1
APAR ABSTRACT
IJ35672 RCG PREVIEW DISPLAY ISSUE
IJ37371 ANYTIME AN EXISTING RULE IS EDITED, THE OPTIONS ARE SPLITTED IN MANY BUTTONS INSTEAD OF HAVING THEM IN THE SAME MENU BUTTON
IJ37731 Import file is not updating in manage role page
IJ37988 WORKLOAD DESIGNER ONLY SHOW 250 ITEMS EVEN IF THE SEARCH RESULT SHOWS MORE THAN 250 FOUND RESULT
IJ38755 DWCSETTINGS EXPORTED FROM 9.4 CANNOT BE IMPORTED INTO 10.1
IJ38945 RUN CYCLE DISCREPANCY IN DWC WHEN CONNECTED TO Z ENGINE
IJ39288 REPEAT EVERY JOB TIME RESTRICTIONS ARE NOT BEING SAVED BY WORKLOAD DESIGNER
IJ39471 IF UNIQUENAME IS NULL? IT FAILS TO LIST THE PERSONALIZEDREPORT
IJ39599 WORKLOAD DESIGNER NOT SHOWING CORRECT RUN CYCLE RULE "REPEAT SCHEDULE" WHEN OPENING FOR VIEW OR EDIT
IJ39695 NOT ABLE TO ADD "MONTH BY MONTH DAY" RULES TO RULE CYCLE GROUP
IJ39751 CACHE CONTROL ATTRIBUTES NEED TO BE SET PROPERLY
IJ39712 REGULAR EXPRESSIONS DO NOT WORK IN REPORT'S FILTERS CRITERIA WITH 10.1 VERSION
IJ40165 PROBLEMS WITH SOME FUNCTIONALITIES OF THE DWC IN MANAGED PREDEFINED REPORTS IF LANGUAGE IS FRENCH
IJ40204 REPORT SHARING IS NOT PROVIDING A COMPLETE LIST OF AD GROUPS
IJ40335 JCL LINES STRING TOGETHER WHEN USING DESIGN -> MANAGE WORKLOAD DEFINITION
IJ40828 DWC "SUBMIT JOB STREAM INTO PLAN" OPTION DOESN'T SEEM TO TAKE INTO CONSIDERATION THE TIME AND RUNS IMMEDIATELY IN 10.1 VERSION
IJ41201 "SEARCH JOB STREAM" LIST DOES NOT DISPLAY THE SCHEDULED TIME FOR THE JOBSTREAMS IN THE CURRENT PLAN
IJ41323 DWC ENGINE CONFIGURATION PASSWORD VISIBLE FROM WEB BROWSER SOURCE PAGE INFORMATION
IJ42143 DWC JOBSTREAM EARLIEST START TIME SETTING IS SAVED INCORRECTL
IJ43339 EVENT RULE DAILY START AND DAILY END CANNOT BE EXACTLY 12 HOURS APART
IJ43383 REMOTE COMMAND "TEST CONNECTION" WITH INVALID IWS USER CAUSES BLANK BROWSER WHEN USING DWC 10.1.0.00
IJ44026 CVE-2022-42003, CVE-2022-42004: jackson-databind-2.13.4.jar
J44027 CVE-2022-36033: jsoup-1.14.2
IJ14744 AWSUI0779E COMMUNICATION FAILURE ON ADMINISTRATION ->" LIST WORKLOAD DEFINITIONS" IF "VALID TO IS UNCHECK ON DWC 9.4 DISPLAY
IJ31969 JOBSTREAM SUBMISSION IS ALLOWED ON DELETED RESOURCE WITHOUT ANY VALIDATION PERFORMED
IJ33717 JAVA.LANG.NULLPOINTEREXCEPTION ERROR WHEN ACCESSING ALL RESOURCES IN PLAN (DISTRIBUTED) IN DWC

Known limitations and workarounds

The following are software limitations and workarounds that affect Dynamic Workload Console version 10.1 Fix Pack 1. For a list of known problems and limitations documented for the V 10.1 General Availability release, refer to the Dynamic Workload Console Version 10.1 Release Notes.

10.1 Fix Pack 1

A service with promptable variables must have the Variable Table set
If you are using Dynamic Workload Console 10.1 Fix Pack 1, when you define a service that contains promptable variables, set a value in the Variable Table field.
Limitation in importing and exporting z/OS job streams
If you export a z/OS job stream that contains a service and then import the job stream, the service parameters are empty.

Fix pack structure

This section describes the structure of the images contained in this Fix pack.

Fix Pack files available for HCL Workload Automation by using HCL License Portal
Following is the structure of the Fix Pack on Flexnet:
Table 2. Readme file and WebSphere Liberty package
Name Description
HWA_10.1.0.1_ReadMeFirst_DWC Readme file with download instructions
WEBSPHERE_LIBERTY_BASE 22.0.0.11 WebSphere Liberty application server
Table 3. Linux components
Name Description
HCL Workload Automation 10.1.0.1 LINUX LINUX distribution
HWA_10.1.0.1_DWC_LINUX_X86_64 _2022.11 Dynamic Workload Console V10.1.0.1 for LINUX
Table 4. Linux components on Docker
Name Description
HCL Workload Automation 10.1.0.1 LINUX LINUX distribution
HWA_10.1.0.1_DOCKER_DWC_LINUX_X86_64_2022.11 Dynamic Workload Console V10.1.0.1 for LINUX on Docker
HWA_10.1.0.1_DOCKER_DWC_LINUX_S390_2022.11 Dynamic Workload Console V10.1.0.1 for Linux on IBM Z on Docker
Table 5. Windows components
Name Description
HCL Workload Automation 10.1.0.1 WINDOWS WINDOWS distribution
HWA_10.1.0.1_DWC_WINDOWS_X86_64 _2022.11 Dynamic Workload Console V10.1.0.1 for WINDOWS
Table 6. z/OS Components
Name Description
HCL Workload Automation V10.1.0.1 z/OS z/OS distribution
HWA_10.1.0.1_DWC_ZSYSTEM _2022.11 Dynamic Workload Console V10.1.0.1 for Z System
Table 7. DB2 components
Name Description
IBM_DB2_StandardEd_11.5.7_LNX IBM® DB2® Standard Edition - Restricted Use for Linux® 11.5 on AMD64 and Intel® EM64T systems (x64)
IBM_DB2_Activation_11.5.7 IBM® DB2® Standard Edition 11.5 - Restricted Use - Activation
IBM_DB2_StandardEd_11.5.7_WIN IBM® DB2® Standard Edition - Restricted Use 11.5 for Windows® on AMD64 and Intel® EM64T systems (x64)

Installing the Fix Pack

This section describes how to apply Fix Pack 1 to Dynamic Workload Console.

Before starting the installation, verify that:
  • The Dynamic Workload Console is active.
  • No user is connected to the Dynamic Workload Console to prevent the data related to their working session from being lost.
Installation notes
  • Before installing the Fix Pack, ensure you have installed the required prerequisite software. To obtain the latest information about software requirements for HCL Workload Automation, see Product Requirements.
  • Supported WebSphere Application Server Liberty Base versions
    The formal test phase was performed using WebSphere Liberty 22.0.0.10 and 22.0.0.11. The minimum required WebSphere Liberty version to successfully install the fixpack is 22.0.0.3 or later.
  • On UNIX systems only: Before installing either the Dynamic Workload Console version 9.5 or this Fix Pack, make sure that umask is set to 022. To verify that umask is set to the correct value, from a command prompt, run the umask command. If the value is different from 022, modify it by running the command:
    umask 022
  • If you plan to connect the Dynamic Workload Console version 9.5 Fix Pack 1 to a z/OS engine, ensure the following APAR for the z/OS platform is installed if you plan to use the two new columns in the DB2 reports (SUBSYSTEM NAME and WORKSTATON TYPE):
    PH12689
    Support for multiple controller for DB2 reporting and new keywords added to JOBREC statement.
Interoperability notes
Dynamic Workload Console version 10.1 Fix Pack 1 supports all product versions indicated in the Dynamic Workload Console version 10.1 Release Notes which can be accessed at the following link: Dynamic Workload Console Version 10.1 Release Notes.
Installation methods
When you install the Fix Pack, the installation path varies depending on the version level you have currently installed:

If necessary, you can also return to a previous product version level, as described in Returning the Dynamic Workload Console to a previous product version level.

Disk space requirements

Before starting the Fix Pack installation, ensure that you have the following space available in the file system. The values indicated in the table show the disk space required by the Dynamic Workload Console alone. For the disk space required by other components, see the relevant documentation.

For the most up-to-date information about disk space and memory requirements, see the Supported Hardware document in Product Requirements.

Table 8. Disk space requirements for installing a Dynamic Workload Console Fix Pack
Operating System Installation directory Temporary directory
AIX® 2 GB 800 MB
Linux s390x 2 GB 800 MB
Linux x86-64 2 GB 800 MB
Windows 64 2,5 GB 1 GB
Note: In addition to the above disk space, the installation requires further 579 MB on /usr file system.

If the installation fails because of lack of free disk space, you must stop the installation, free space on your disk, and start the installation again.

Documentation updates

Any additions or changes to the documentation as a result of this Fix Pack have been integrated into the online product documentation available in HCL Workload Automation documentation.

Contacting HCL Software Support

Refer to the HCL Workload Automation Support page: https://www.hcltech.com/products-and-platforms#support

Notices

This information was developed for products and services offered in the US. This material might be available from HCL in other languages. However, you may be required to own a copy of the product or product version in that language in order to access it.

HCL may not offer the products, services, or features discussed in this document in other countries. Consult your local HCL representative for information on the products and services currently available in your area. Any reference to an HCL product, program, or service is not intended to state or imply that only that HCL product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any HCL intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-HCL product, program, or service.

HCL may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not grant you any license to these patents. You can send license inquiries, in writing, to:

HCL
330 Potrero Ave.
Sunnyvale, CA 94085
USA
Attention: Office of the General Counsel

For license inquiries regarding double-byte character set (DBCS) information, contact the HCL Intellectual Property Department in your country or send inquiries, in writing, to:

HCL
330 Potrero Ave.
Sunnyvale, CA 94085
USA
Attention: Office of the General Counsel

HCL TECHNOLOGIES LTD. PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. HCL may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice.

Any references in this information to non-HCL websites are provided for convenience only and do not in any manner serve as an endorsement of those websites. The materials at those websites are not part of the materials for this HCL product and use of those websites is at your own risk.

HCL may use or distribute any of the information you provide in any way it believes appropriate without incurring any obligation to you.

Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact:

HCL
330 Potrero Ave.
Sunnyvale, CA 94085
USA
Attention: Office of the General Counsel

Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee.

The licensed program described in this document and all licensed material available for it are provided by HCL under terms of the HCL Customer Agreement, HCL International Program License Agreement or any equivalent agreement between us.

The performance data discussed herein is presented as derived under specific operating conditions. Actual results may vary.

Information concerning non-HCL products was obtained from the suppliers of those products, their published announcements or other publicly available sources. HCL has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-HCL products. Questions on the capabilities of non-HCL products should be addressed to the suppliers of those products.

This information is for planning purposes only. The information herein is subject to change before the products described become available.

This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to actual people or business enterprises is entirely coincidental.

COPYRIGHT LICENSE:

This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to HCL, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. HCL, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. The sample programs are provided "AS IS", without warranty of any kind. HCL shall not be liable for any damages arising out of your use of the sample programs.

© (HCL) (2022).
Portions of this code are derived from HCL Sample Programs.
© Copyright HCL Ltd. _2022_.

Trademarks

HCL, and other HCL graphics, logos, and service names including "hcltech.com" are trademarks of HCL. Except as specifically permitted herein, these Trademarks may not be used without the prior written permission from HCL. All other trademarks not owned by HCL that appear on this website are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored by HCL.

Adobe, the Adobe logo, PostScript, and the PostScript logo are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States, and/or other countries.

IT Infrastructure Library is a Registered Trade Mark of AXELOS Limited.

Linear Tape-Open, LTO, the LTO Logo, Ultrium, and the Ultrium logo are trademarks of HP, IBM® Corp. and Quantum in the U.S. and other countries.

Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.

Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both.

Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both.


Java Logo
Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates.

Cell Broadband Engine is a trademark of Sony Computer Entertainment, Inc. in the United States, other countries, or both and is used under license therefrom.

ITIL is a Registered Trade Mark of AXELOS Limited.

UNIX is a registered trademark of The Open Group in the United States and other countries.

Terms and conditions for product documentation
Permissions for the use of these publications are granted subject to the following terms and conditions.
Applicability
These terms and conditions are in addition to any terms of use for the HCL website.
Personal use
You may reproduce these publications for your personal, noncommercial use provided that all proprietary notices are preserved. You may not distribute, display or make derivative work of these publications, or any portion thereof, without the express consent of HCL.
Commercial use
You may reproduce, distribute and display these publications solely within your enterprise provided that all proprietary notices are preserved. You may not make derivative works of these publications, or reproduce, distribute or display these publications or any portion thereof outside your enterprise, without the express consent of HCL.
Rights

Except as expressly granted in this permission, no other permissions, licenses or rights are granted, either express or implied, to the publications or any information, data, software or other intellectual property contained therein.

HCL reserves the right to withdraw the permissions granted herein whenever, in its discretion, the use of the publications is detrimental to its interest or, as determined by HCL, the above instructions are not being properly followed.

You may not download, export or re-export this information except in full compliance with all applicable laws and regulations, including all United States export laws and regulations.

HCL MAKES NO GUARANTEE ABOUT THE CONTENT OF THESE PUBLICATIONS. THE PUBLICATIONS ARE PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE.