Hotfix FX02003 can be downloaded from the TIBCO Support Managed File Transfer Server- mft.tibco.com.

Server name:     mft.tibco.com

Credentials:       Use your TSC (TIBCO Support Central website) login.

Browser:              https://mft.tibco.com 

FTP:                       port 21

SFTP:                     port 22

Once logged on you can find the hot fix under " /AvailableDownloads/MFT/CommandCenter-InternetServer/7.2.4/ "

The .zip file has the Readme file inside. Please unzip the file and review the Readme file for instructions on how to apply the hotfix.

FX02003 is a cumulative hotfix and includes the following fixes:

MFCC-2035 Resolves a problem with Internet Server downloads when the Virtual Alias has the characters "-T" in it.

MFCC-2025 Resolves a problem where the JMS server password is displayed in cleartext in trace file.

MFCC-2024 Resolves a compatibility issue with Business Works initiated Internet Transfers when Internet Server and Command Center are running at different hotfix or release levels.

Note: If you are using BW to initiate Internet Transfers, this fix MUST be applied on all MFT 7.2.4 Internet Servers and Command Centers. 

Note: If you are using BW to initiate Internet Transfers and you are running in a mixed mode environment with 7.2.4 and 7.3, then this hotfix must be applied to all 7.2.4 instances.

MFCC-2021 Resolves a problem where no users are able to login When using classes12.jar and ocrs12.jar Oracle jdbc drivers.

MFCC-2011 Resolves a problem where installing hotfix FX01999 fails with Error: 'PRIMARY_KEY_SQL_SERVER' is not a constraint. java.sql.SQLException: 'PRIMARY_KEY_SQL_SERVER' is not a constraint.

MFCC-2006 Generate 4096 bit private keys for SSH servers.

MFCC-1957 Resolves a problem where the responder port adds an empty space when trying to update a Platform transfer.

MFCC-1950 Resolves a problem where users do not get added to the group during the creation of the group

MFCC-1864 Change the Login LDAP Authentication to search the Authenticators in alphabetical order.

MFCC-1863 Resolves a problem where OnDemandTransferRight could not be assigned by a user with UpdateTransferUserRight.

MFCC-1668 Resolves a problem where importing a DSA SSH System key causes a null pointer error.

MFCC-1011 Add confirmation to the Sync all users function.

MFCC-721  Resolves a problem where the JMS Topic Subcriber resource fails when listening for an alert

The following fixes are included from FX01999:

MFCC-1969 Updated the SSH engine to resolve a possible Logjam CVE.

Note: The solution for the Logjam CVE for HTTPS and FTPS in MFT is to perform the following manual steps:

1.  Upgrade to JAVA 1.8

2.  Add the following JAVA parameter: "-Djdk.tls.ephemeralDHKeySize=2048" to the setenv.sh, setenv.bat or service.bat depending on how the server is started.  This parameter only works on JAVA 1.8

3.  Restrict the ciphers used in the following locations:

            - <MFT install>/server/conf/server.xml                      update the HTTPS connector to add the ciphers below

            - <MFT install>/server/webapps/cfcc/WEB-INF/web.xml         update the FTPCiphers parameter to add the ciphers below

ciphers:"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_GCM_SHA384”

MFCC-1922 Resolves a problem with directory downloads from Platform Server for z/OS using an FTP client. Downloads fail with system error: “PGTM7238E Activity Rxxxxxxxxx Data set not found".

MFCC-1854 Resolves the exception "Cannot find the declaration of element 'AuditResponse'" written to the catalina log of MFTCC when Command Center writes an AuditResponse record to JMS.

The following fixes are included from FX01992:

MFCC-1851 Resolves a problem where exception errors are reported in the trace file for PPA when no PPA information is defined.

MFCC-1811 Resolves a problem when MFT PS initiates a request to MFT IS and MFT IS receives a connection error from an FTP or SFTP Server. MFT IS previously reported a permanent error and now reports a temporary error.

MFCC-1786 Resolves a problem where filenames with special characters are not returned when using the Windows FTP commands "dir *" or "ls *".

MFCC-1781 Resolves a problem when MFT PS sends a file to MFT IS and data type of ASCII is specified. The file was incorrectly translated from EBCDIC to ASCII. This issue was introduced in MFT IS v7.2 hotfix FX01892.

MFCC-1758 Resolves a problem where the same files are received for each MFT PS DNI Scan when the request goes through MFT IS to a z/OS FTP server.

MFCC-1388 Resolves a problem when adding a transfer definition from the CLI and writing the output to an XML template file. If the transfer definition has no PPA, the PPA flag is incorrectly set in the template.  Also resolves an issue if the "ExpirationDate" parameter is not set, the AddTransfer would fail.  Now, if the "ExpirationDate" parameter is not set, it will assume no expiration.  

The following fixes are included from FX01991:

MFCC-1724 Resolves the following problem when installing FX01980 on MFT 7.2.4: "Error: ORA-00955: name is already used by an existing object".

MFCC-1680 Resolves a problem with the hotfix FX01980 upgrade to Tomcat 7.0.55.

MFCC-1706 Resolves an out of memory error when displaying Server Status if there are many(>1000) servers.

MFCC-764  Resolves a problem where downloading a zero byte file from an FTPS (FTP over SSL) client fails. Internet Server reports the download as successful with an Audit generated.

The following fixes are included from FX01980:

MFCC-1680 Upgraded Tomcat to v7.0.55.

MFCC-1673 Resolves a problem when a user with "UpdatePublicKey" right tries to delete a public key. The delete works but UI shows error while updating cache on other machine.

MFCC-1628 Resolves a problem where SFTP and MFT desktop clients display the current year for files and folders last modified in the prior year when connecting through MFT IS to a backend Linux FTP server.

MFCC-1618 Changed the default behavior of login.jsp to off based on html5 for added security

MFCC-1585 Resolves a problem where a directory listing from an FTP client to the Internet Server returns the whole path and filename instead of just the filename. The problem only occurred when listing the entire filename and did not occur when using a wildcard in the filename.

MFCC-1549 Resolves a problem where FTP Size command to MFTIS to PS with CW01978 and above fails when the filename has a special character.

MFCC-1441 Resolves a problem where the current date is returned instead of the last modified date on a directory listing from a backend Platform Server for z/OS.

MFCC-1436 Resolves a failure when attempting to download from a directory defined as a symbolic link.

MFCC-1430 Resolves a problem with the addTransfer API where the checkpoint restart flag is not defaulted correctly when it is not specified.

MFCC-1398 Resolves a problem where a user that does not have AdministratorRight cannot retrieve a Public SSH key from a remote SSH Server.

MFCC-1373 Resolves a problem where a delegated administrator cannot retrieve a Public SSH key from a server assigned to his department.

MFCC-1343 Resolves a problem where AUDIT record does not display data field for a successful PPA action when more than one PPA is defined.

MFCC-1341 Resolves a problem where upgrade stops at Step 6 "Allocating DBSetup object".

MFCC-1335 Resolves a problem where node port numbers get prefixed with a zero on the mainframe.

MFCC-1333 Resolves a problem where expired Ids still work when Platform Server initiates a transfer to Internet Server.

MFCC-1129 Resolves a problem where a user assigned "ViewPGPKeyRight" has the ability to go into the Manage PGP Public Key screen and replace the key.

The following fixes are included from FX01975:

MFCC-1348 Resolves a problem where MFT PS client DIR command caused incorrect trace information to be written to catalina.out.

MFCC-1345 Resolves a problem when Spanish characters are included in source file name, the target file name gets corrupted from IS to PS.

MFCC-1340 Resolves a problem where Alert Audit was incorrectly written to catalina.out when only Internet server is installed.

MFCC-1338 Resolves a problem where non-LDAP users with a "-" character in the user name caused an exception in the catalina.out file because the user was being synchronized.

MFCC-1337 Resolves a null pointer exception when no email server is configured.

MFCC-1336 Resolves a problem where transfers using PGP decryption fail because the file is not PGP encrypted and the Audit record reports success.

MFCC-1321 Resolves a problem When using the JMS xml to launch a PS to PS transfer that includes a PPA to run in the background, all the data before the ampersand will be dropped.

MFCC-916  Resolves a problem where performing a GET on a directory containing 100 1MB files via SFTP causes the LINUX SFTP client to time out

MFCC-906  Resolves a problem where a PS download to IS from a SSH server fails and a successful email is sent.