Problem Note 61795: Certain SAS® web applications might stop responding during invocation in SAS® 9.4 TS1M5 deployments when FIPS encryption is enabled
In SAS 9.4 TS1M5 deployments that have Federal Information Processing Standards (FIPS) enabled, some SAS web applications (for example, SAS® Studio) might stop responding during invocation. This problem can affect SAS 9.4 TS1M0 and later maintenance releases if you have applied SAS® Web Server hot fixes.
This issue might occur when FIPS mode is enabled for instances of SAS® Web Application Server. To determine whether FIPS mode is enabled for instances of SAS Web Application Server, view the server.xml file that is located in the SAS-configuration-directory/Web/WebAppServer/SASServerN/conf directory. In this path, SASServerN specifies the instance of SAS Web Application Server that you have installed (for example, SASServer1_1, SASServer2_1, and so on).
If FIPS mode is enabled, you should see a <Listener> tag similar to the following in the server.xml file:
<Listener SSLEngine="on" className="org.apache.catalina.core.AprLifecycleListener" FIPSMode="on"/>
To work around this problem, you need to disable FIPS mode, as follows:
- Stop all instances of SAS Web Application Server.
- Make backup copies of the server.xml files for all instances of SAS Web Application Server.
- In the original server.xml file (one for each instance of SAS Web Application Server that you have installed), remove the FIPSMode="on" parameter. After this change, the <Listener> tag should look like the following example:
<Listener SSLEngine="on" className="org.apache.catalina.core.AprLifecycleListener" />
- Restart all instances of SAS Web Application Server.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
SAS System | SAS Web Application Server | Microsoft® Windows® for x64 | 9.43 | | 9.4 TS1M4 | |
64-bit Enabled AIX | 9.43 | | 9.4 TS1M4 | |
64-bit Enabled Solaris | 9.43 | | 9.4 TS1M4 | |
HP-UX IPF | 9.43 | | 9.4 TS1M4 | |
Linux for x64 | 9.43 | | 9.4 TS1M4 | |
Solaris for x64 | 9.43 | | 9.4 TS1M4 | |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
This problem is likely to happen in SAS 9.4 TS1M5 deployments when FIPSMode is turned on in SAS Web Application Servers. The problem also happens in previous maintenance releases if you apply any SAS® Web Server hot fixes.
Type: | Problem Note |
Priority: | medium |
Date Modified: | 2018-06-08 16:36:05 |
Date Created: | 2018-02-01 12:57:26 |