This hotfix is cumulative. This is the third hotfix for TIBCO Managed File
Transfer (MFT) Command Center 8.4.2 and TIBCO Managed File Transfer (MFT)
Internet Server 8.4.2.

All supported environments

Hotfix TIB_mftccis_8.4.2_HF-003 can be downloaded from TIBCO Support Portal (https://support.tibco.com).  

You will need to provide your TIBCO Support Portal credentials.  Once logged in you can download the hotfix by selecting the “Downloads” -> “Hotfixes” option. Then go to “/AvailableDownloads/MFT/CommandCenter-InternetServer/8.4.2/” to download the hotfix.

The .zip file has the Readme file inside. Please unzip the file and review the Readme file for instructions on how to apply the hotfix.

================================================================================
Closed Issues in 8.4.2_HF-003 (This Release)

MFCC-7404
SFTP downloads from target SharePoint servers fail with the 
following error message: 
"Failed to read file".

MFCC-7392
If FileShare is disabled and Mailbox is enabled, user self-registration fails.

MFCC-7391
SFTP transfers are not restricted when the User definition "Client Protocols 
Allowed" parameter is set to "Platform Server".

MFCC-7385
When using a REST call to update a Transfer Service, the service parameters 
revert to default MFT configuration.

MFCC-7379
If any UNIX permissions are provided on the Transfer definition and 
the Azure Server definition authentication is set to "Active 
Directory" or "Manage Identity", transfers to Azure ADLS Gen2 fail.

MFCC-7360
jAdaptive Maverick Legacy Client and Server is upgraded to version 1.7.48.

MFCC-7352
Tomcat server is upgraded to version 9.0.68.

MFCC-7297
z/OS record delimiters are lost when sending RECFM=V(B) files from Platform
Server for z/OS to Internet Server to a target Platform Server for z/OS. 
To enable this capability, set the following parameters:
- Set "Transfer Definition > Client Permissions > 
Allow FTP Site/Platform Server Pass Through" to "Yes".
- Set this Platform Server for z/OS process parameter: MAINTAINRDW=YES.
- Ensure the transfer is a binary transfer with no delimiters specified.
Note: This only works when sending datasets with RECFM=V or RECFM=VB.
      Do not specify the MAINTAINRDW parameter when transferring RECFM=F
      or RECMF=FB files.

MFCC-7281
The Admin Command-Line Interface "Delete Protocol Public Key" fails to delete
the server public key.

MFCC-7280
The Admin Command-Line Interface "Get Protocol Key" action fails to return 
the Protocol public key.

MFCC-7237
If an error occurs while inserting the Audit record, retry the Audit insert 
request with a wait between each request. 
The following new web.xml parameter are added to define the number of 
tries and the retry interval:
AuditRetryCount    Valid Values: 1 to 10, Default=5 tries
AuditRetryWait     Valid Values: 1 to 10, Default=5 seconds

MFCC-7220
Create an environment variable for the Keystore Password that overrides the
"keystorePass" value in server.xml.
The following formats are supported:
--Encrypted password (using the MFT clouddbconfig utility)--
export COM_TIBCO_MFT_CE_KEYSTORE_PWD=wDzQ89Of30Q7csFEc4nTq8O7vgI=
export COM_TIBCO_MFT_CE_KEYSTORE_PWD=$PWD:wDzQ89Of30Q7csFEc4nTq8O7vgI=
--Base64 Encoded password--
export COM_TIBCO_MFT_CE_KEYSTORE_PWD=B64:Y2hhbmdlaXQ=
--Clear Text password--
export COM_TIBCO_MFT_CE_KEYSTORE_PWD=CLR:changeit

MFCC-7208
When the transfer definition Server File Name is defined as a UNC
(that is, starts with \\...), transfers to a Windows OpenSSH SFTP server 
fail. To enable transfers to a UNC, define the transfer definition Server 
File Name in the following format:
UNC://uncname/directory/file

MFCC-7205
Uploading Files with ".docx" extension to the Microsoft SharePoint server fails 
with the following error message:
"The upload session was not found. Error in uploading last chunk(s): File has 
not been uploaded completely".

MFCC-7202
Create an environment variable for the database password that overrides the
DBPass value in web.xml.
The following formats are supported:
--Encrypted password (using the MFT clouddbconfig utility)--
export COM_TIBCO_MFT_CE_DB_PWD=j3HT8p5ZuV3S9/Mnb12Qpnj3/Uo=
export COM_TIBCO_MFT_CE_DB_PWD=PWD:j3HT8p5ZuV3S9/Mnb12Qpnj3/Uo=
--Base64 Encoded password--
export COM_TIBCO_MFT_CE_DB_PWD=B64:YWJjMTIz
--Clear Text password--
export COM_TIBCO_MFT_CE_DB_PWD=CLR:abc123

MFCC-7189
When promotion requests are configured to use REST v4.1, these requests fail 
with the following error message:
"UnrecognizedPropertyException: unrecognized field "dateLastProcessed"".

MFCC-7174
The "Admin Changes" page does not track deleted PGP public keys or 
Protocol public keys.

MFCC-6918
When the user authentication option is set to certificate and password, 
the Audit details "Client Authentication Method" for Browser and FTPS clients 
are incorrectly displayed.

MFCC-4493
When the upload window is closed during a transfer, active transfers are not
visible when the upload window is reopened.

================================================================================
Closed Issues in 8.4.2_HF-002

MFCC-7224
After installing MFT Internet Server version 8.4, when a user downloads a file 
greater than 2GB from an SFTP server, the download fails.

MFCC-6843
An enhancement is made to the custom server to generate an error message when 
a transfer fails.

MFCC-6831
The Recaptcha settings can be bypassed for "Password Reset", "Self Register", 
and "Forgot User" requests.

MFCC-6830
The Password Reset emails are sent even when the Global "Allow User to Reset 
Password" parameter is set to "No".

MFCC-6736
When a Platform Server Transfer definition configures the Schedule Date, 
the date cannot be removed.

MFCC-4493
When the upload window is closed during an active upload transfer, users 
are experiencing issues on the browser transfer client.

================================================================================
Closed Issues in 8.4.2_HF-001

MFCC-6828
Add Transfer requests can fail with the following error message: 
"Unknown Column userDefinedData".

MFCC-6827
Department Admin is unable to view or create Scheduler Jobs or Calendars.

MFCC-6826
When a transfer to a target AS2 server is redirected, the transfer fails with
the following error message: "Proxy returned: HTTP protocol error. 302 Moved 
Temporarily, | Failed to transfer file".

MFCC-6761
Additional validation is added to the DB Reports servlet.

MFCC-6755
The following message is displayed many times in the Command Center 
catalina.out: "Internet Server Error: DBPwdEncrypt.decrypt - debug dnipwd, 
empty value, idx of 0x00: 0".

MFCC-6754
When Transfer definitions are created through the 8.2 or 8.3 CLI, updating 
the Transfer definitions through the Admin "Update Transfer" page fails with 
the following error message: 
"You entered an invalid Max Message Size".

MFCC-6748
File token #(HLQ) resolution changes from all but the last qualifier of the 
file name to only the first qualifier of the file name.

MFCC-6747
The Apache Xalan Java XSLT library is removed from the distribution.

MFCC-6746
When the Mailbox server attempts to delete a file from a Platform Server 
defined as TLS or Tunnel, the delete fails with either of the following error
messages: 
"You are trying to connect to secure port", 
"Error communicating with remote partner".

MFCC-6742
When a mailbox attachment file name contains an ampersand sign (&), the request 
fails with the following error: "Unable to connect to server".

MFCC-6740
Poi and poi-ooxml is upgraded to version 3.17.

MFCC-6737
When a network error occurs on an Internet transfer initiated by JMS or the 
Scheduler, the transfer can go into an infinite loop and utilize excessive CPU.

MFCC-6735
The Command Center "Activity > Internet Transfer > Active Transfer Details" 
page does not display a value for "Bytes/Second".

MFCC-6732
When an admin user is locked out from Internet Server, the same admin user 
cannot unlock the user from Command Center using ReleaseAllLocks.

MFCC-6726
If recaptcha is not configured, then the recaptcha javascript file is 
not downloaded from google.

MFCC-6719
Add and Update PGP public key rest calls fail when the PGP key does not contain 
any headers such as version or comment

MFCC-6717
When the desktop client was built and installed on a previous version of MFT, 
the desktop and desktop-install pages will hang when the "Install" button is
clicked after installing MFT hotfix 8.4.2_HF-001 or above
Note: Resolution of this issue requires manual intervention.  
There are two ways to resolve this:
1.  Follow the instructions to rebuild the desktop client
2.  Edit file: <MFT-Install>/server/webapps/cfcc/client/install.html
Change Line 10 to: (jquery version changed from 3.5.2 to 3.6.1)
<script type="text/javascript" 
src="../public/libs/jquery/jquery-3.6.1.min.js"></script>

MFCC-6716
The REST upload fails if both User and System trace levels are set to
"No Tracing" or left blank.

MFCC-6713
After installing MFT version 8.4, users are unable to update the "Usage" and 
"User Type" fields in the User definition.

MFCC-6708
When an LDAP user login fails, the error message is displayed in the 
login trace file.

MFCC-6704
Antivirus checking fails when using Sophos ICAP interface.

MFCC-6696
Spring framework is upgraded to version 5.3.21.

MFCC-6690
SSH and Platform Server client logins ignore the users defined in the 
web.xml DenyLoginIds parameter; users are locked out and and lockout 
emails are sent.

MFCC-6689
When upgrading MFT from version 8.2 and using Postgres, the column 
Files.Aux1 is incorrectly set to a 64-byte field instead of a 
256-byte field.

MFCC-6688
When the browser selects the Swedish language, dates are displayed in 
Portuguese.

MFCC-6684
When Command Center executes on Java 8 and Internet Server is running 
a very high volume of transfers, Command Center can get 
Out Of Memory exceptions.

MFCC-6676
The clouddbconfig script has a typographical error in valid values for 
driver type.

MFCC-6673
When the server definition is updated, the server cache is not updated.

MFCC-6667
When User Profile is updating through the CLI, the request terminates 
with an error.

MFCC-6666
On the FileShare Client, when the path is too long to display, the 
Paths drop-down box does not display the directory list.

MFCC-6664
jQuery-ui is upgraded to version 1.13.1.

MFCC-6661
When a user logs in and changes their password through FileShare/Mailbox 
client, after the user changes their password and presses "Home", they 
are incorrectly redirected to the Password Change page.

MFCC-6654
On the Manage Scheduler Jobs page, the mouseover for currently 
executing jobs does not work.

MFCC-6652 
The Change Password page on the Admin pages displays the following 
message: 
"Your password will expire in null days"

MFCC-6596
SAML logins do not check the token validation time.

MFCC-6593
When a Transfer Service (Platform, SSH, FTP) uses a Protocol System 
key name that contains an ampersand sign (&), the database config 
record is updated correctly, but the "Configure xxxxxxx Server" page 
shows the System key as "Use Default".

MFCC-6586
When Lockout Contention is set to "IS to IS" or "Both", Command Center 
does not display Internet Server lockouts.

MFCC-6553
When uploading large files to a target Sharepoint server, excessive 
memory is used.

MFCC-6486
Connectivity to third-party Amazon S3 compatible storage fails.

MFCC-6063
When the #(NoDrive) token is used to create a folder on a target 
SharePoint Server, upload transfers failed with the following error 
message: 
"Failed to transfer file: /NewFolder/filename; ERROR FROM PROXY SERVER. 
URI template of the newly created target must not be null..."

MFCC-4941
Admin REST calls do not include the capability to create, update, retrieve,
or delete Alerts.
Note: The Alert rest calls use REST version V4.2.
================================================================================

TIBCO Managed File Transfer Command Center/Internet Server 8.4.2 hotfix HF-003 is now available