When trying to implement SSL in MQMonitor Agent using TLS 1.2 cipherspec TLS_RSA_WITH_AES_128_CBC_SHA256 it fails with log messages "Reason Code: 2397 MQRC_JSSE_ERROR" and "Incorrect cipherSpec"

Document ID : KB000005279
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

When trying to implement SSL in MQMonitor Agent using TLS 1.2 cipherspec TLS_RSA_WITH_AES_128_CBC_SHA256 it is failing and these messages are visible in the agent log:

[WARN] [com.wily.powerpack.websphereMQ.agent.MQMonitor.trace.MQQMConnectionManager] MQQMConnectionManager.mqConnect(ConfigurationInstance, boolean) An MQException has occured. Reason Code: 2397 MQRC_JSSE_ERROR while trying to connect to configuration instance ...

[WARN] [com.wily.powerpack.websphereMQ.agent.MQMonitor.TracerDriverThread] Incorrect cipherSpec 

[WARN] [com.wily.powerpack.websphereMQ.agent.MQMonitor.trace.MQQMConnectionManager] MQQMConnectionManager.mqConnect(ConfigurationInstance, boolean) Incorrect cipherSpec for configuration instance ...

Environment:
APM 9.6, 9.7, 10.0, 10.1, 10.2, 10.3
Cause:

The MQMonitor agent does not support TLS 1.2 ciphers until the most recent release APM 10.5

Resolution:

The APM 10.5 MQMonitor agent can be installed to get the TLS 1.2 cipher support and is compatible with any 10.x Enterprise Manager cluster.