Control-M MFT PAAFP.9.0.22.025

BMC Software is releasing Control-M MFT patch PAAFP.9.0.22.025 to correct the following problems in Control-M MFT on UNIX and Windows.

Enhancements

The following table describes enhancements that are applied in Control-M MFT PAAFP.9.0.22.025.

Tracking number	Description
CTM-7809	You can now configure Control-M MFT to bypass proxy servers if you add FTP and SFTP target servers to the NonProxyHosts list in the com.bmc.aft.configurable.ccm.Proxy.NonProxyHosts parameter located in the aft_configurable.properties file, as described in Configuring Control-M MFT in the aft_configurable.properties File.

Corrected Problems

The following table describes the issues that have been corrected in Control-M MFT PAAFP.9.0.22.025.

Tracking number	Description
CTM-13247	Control-M MFT Enterprise Hub could not access the Control-M MFT Enterprise database and cannot synchronize with the ZooKeeper server in Control-M MFT Enterprise High Availability environments. The following error appears in the Control-M MFT Enterprise Configuration window: The database is inaccessible, Hub isn't synched with zookeeper server. If the problem continues after you install the patch, you must navigate to cm/AFT/data/hub_config.properties and update the following parameters in the hub_config.properties file: spring.jpa.properties.hibernate.cache.use_second_level_cache=false spring.jpa.properties.hibernate.cache.use_query_cache=false
CTM-13271	A hardcoded sensitive string vulnerability in Control-M MFT Hub.
CTM-13307	An injection vulnerability in Control-M MFT Hub API.
CTM-13417	A file permission bypass issue in the Control-M MFT Hub.
CTM-13416	A file existence disclosure issue in the Control-M MFT Hub.
CTM-13057	Control-M MFT misinterprets values that are in date pattern formats in the Source Path field of a File Transfer job.
CTM-13053	Control-M MFT does not complete the file upload process to Azure Data Lake Storage Gen2 correctly when you upload in parallel upload mode.
CTM-12956	Control-M MFT fails to list files on an FTP server that runs on an IBM z/VM Conversational Monitor System.
CTM-12844	A delay occurs in Control-M MFT Enterprise at the end of a large file transfer to a virtual folder over SFTP.
CTM-12779	Control-M MFT retries to transfer a file indefinitely if an error occurs during a file transfer.
CTM-12778	The PGP command output does not appear in the File Transfer job output.
CTM-12699	Control-M MFT tries to delete the destination file twice before it removes the file prefix or suffix. This occurs when you include a temporary file prefix or suffix and the destination path already has a file with the destination filename.
CTM-12680	Control-M MFT might not adhere to the settings you define to add or remove file extensions if you select Enforce PGP operation and define PGP operation in a File Transfer job.
CTM-12678	Control-M MFT might not save all Override SFTP Home Directories defined in the File Transfer Server settings and might shorten the displayed list of directories for long lists.
CTM-12676	An external user that tries to log in to Control-M MFT Enterprise from a blocked IP address can log in even when you toggle on Automatically block IP due to repeated failed logins.
CTM-13308	A File Transfer job ends with the following job output message when the Pattern Syntax is set to Regular Expression in the Advanced Options pane and the Source Connection Profile is configured to z/OS on an FTP server: No matching files for pattern To ensure the dot (.) character is treated as a regular expression character and not a literal dot, you must add another dot before it (..).
CTM-12556	The Control-M MFT File Transfer Server places the uploaded file in the parent directory of the specified destination path when MFT Enterprise is not enabled and you upload to the /b2bhome or any of its sub-directories.

Installing the Patch on UNIX

This procedure describes how to install Control-M MFT PAAFP.9.0.22.025 on UNIX.

Before You Begin

• Obtain the installation package via EPD, as described in Obtaining Control-M Installation Files.
• Verify that Control-M jobs are not running on the Control-M/Agent.
• Ensure that Control-M MFT version is 9.0.22.000 or higher is installed.
• If you utilize an AIX operating system, run the following command as a root user to remove unused libraries from the memory:
  /usr/sbin/slibclean
• If you install the patch on Red-Hat 8 or Oracle Linux 8, verify that libnsl.so.1 is installed before you install the patch. For more information, see KA 000404923.

Begin

1. Log in to the Control-M/Agent host where Control-M MFT is installed.
2. Run the following command to stop the Control-M/Agent:
   shut-ag
3. Navigate to the temporary folder where you downloaded the patch.
4. Run one of the following commands:
   Linux: PAAFT.9.0.22.025_Linux-x86_64_INSTALL.BIN
   AIX: PAAFT.9.0.22.025_AIX_INSTALL.BIN  
5. Run the following command to start the Control-M/Agent:
   start-ag

Installing the Patch on Windows

This procedure describes how to install Control-M MFT PAAFP.9.0.22.025 on Windows.

Before You Begin

• Obtain the installation package via EPD, as described in Obtaining Control-M Installation Files.
• Verify that Control-M jobs are not running on the Control-M/Agent.
• Ensure that Control-M MFT version is 9.0.22.000 or higher is installed.

Begin

1. Log in to the Control-M/Agent with administrator privileges.
2. Stop the Control-M/Agent in Windows Services.
3. From the Task Manager, stop the Control-M/Agent p_ctmam.exe process.
4. Run the following command to stop the Control-M MFT container:
   <Agent home dir>\cm\AFT\exe\ctmaftcontainer stop
5. Download and extract the PAAFP.9.0.22.025_windows_x86_64.zip file to a temporary directory.

6. From the temporary directory, run the following command
   PAAFP.9.0.22.025_windows_x86_64.exe

   Warning

   Note

   If UAC is enabled, you must run the executable As Administrator.

7. Start the Control-M/Agent in Windows Services.

Uninstalling the Patch from UNIX

This procedure describes how to uninstall Control-M MFT PAAFP.9.0.22.025 from UNIX.

Before You Begin

• Ensure that no jobs are running on the Control-M/Agent.
• If you utilize an AIX operating system, run the following command as a root user to remove unused libraries from the memory:
  /usr/sbin/slibclean

Begin

1. Log in to the Control-M/Agent host.
2. Run the following command to stop the Control-M/Agent:
   shut-ag
3. Run the following command:
   /{agent_folder}/ctm/patches/PAAFT.9.0.22.025/unInstall_PAAFT.9.0.22.025.sh
4. Run the following command to start the Control-M/Agent:
   start-ag

Uninstalling the Patch from Windows

This procedure describes how to uninstall Control-M MFT PAAFP.9.0.22.025 from Windows.

Before You Begin

• Ensure that no jobs are running on the Control-M/Agent.

Begin

1. Log in to the Control-M/Agent with administrator privileges.
2. Stop the Control-M/Agent in Windows Services.

3. From the Task Manager, stop the Control-M/Agent p_ctmam.exe process.

4. From the Control Panel, select Program and Features.
5. Select CONTROL-M Managed File Transfer 9.0.22.000 Patch 25 and click Uninstall.
6. Start the Control-M/Agent in Windows Services.