TWS LTPA key update / exchange

Sometimes the LTPA (Lightweight Third-Party Authentication) key need to be updated for TWS / TDWC or exchanged between several TWS / TDWC servers in order to connect from any TDWC (tivoli Dynamic Workload Console) to any TWS / TDWC. Usually this exchange is done automatically (totally transparent for end user) but it some cases it doesn't work and manual exchange is needed.

To update or export / import LTPA key perform the following steps:

   
   1. Connect to TWS / TDWC WebSphere, administrative console:

Default path: https://:31124/ibm/console/logon.jsp?action=OK

   2. Log in using the administrative account and navigate to Security -- Global security -- Authentication -- LTPA

   3. To generate a new key press the Generate keys button from Key Generation menu or if you need to export / import the key in Cross-cell single sign-on menu add a Password / Confirm Password and a Fully qualified key file name and press Export Keys.

   4. To import the key, copy the exported key from step 3. on the target server, repeat steps 1 and 2 for the target and in Cross-cell single sign-on menu add a the  Password / Confirm Password from step 3. type the path and file name in Fully qualified key file name and press Import Keys.

   5. Save the changes are you are done (there is no need to restart the WebSphere).

DB connection update

In some cases the DB connection needs to be updated (e.g. new DB server, failure on primary on DB server, DR fail-over / validation).

To update the DB server connection perform the following steps:

   1. Stop TWS: 

On Linux / Unix:

./<TWS_home>/wastools/stopWas.sh -direct -user<TWS user> -password <TWS user password&gt

On Windows:

<TWS_home>\wastools\stopWas.bat -direct -user<TWS user> -password <TWS user password>

Note !!! "-direct" -- flag it is used in version 8.4 and above.


   2. Export the connection properties:

On Linux / Unix:

./<TWS_home>/wastools/showDataSourceProperties.sh > /tmp/DataSourceProps.new

On Windows:

<TWS_home>\wastools\showDataSourceProperties.bat > %TEMP%\DataSourceProps.new

   3. Edit the data file DataSourceProps.new and adjust the below values with the new ones:

Oracle (depending on the jdbc drivers you use):

OracleType2URL=jdbc:oracle:oci:@TWS_DB
OracleType2DatabaseName=TWS_DB
OracleType2PortNumber=1521
or
OracleType4URL=jdbc:oracle:thin:@//<db server name>:1521/TWS_DB
OracleType4DatabaseName=TWS_DB
OracleType4PortNumber=1521

DB2:

DB2Type4DatabaseName=TWS_DB
DB2Type4ServerName=<db server name>
DB2Type4PortNumber=50000

   4. Import the new connection properties:

On Linux / Unix:

./<TWS_home>/wastools/changeDataSourceProperties.sh /tmp/DataSourceProps.new

On Windows:

<TWS_home>\wastools\changeDataSourceProperties.bat %TEMP%\DataSourceProps.new

   5. Start TWS:

On Linux / Unix:

./<TWS_home>/wastools/startWas.sh

On Windows:

<TWS_home>\wastools\startWas.bat

   6. Validate the new set-up by running a composer command or use the GUI (TDWC) to display a DB object.

On Linux / Unix

./<TWS_home>/bin/composer di @#@FINAL@

On Windows:

<TWS_home>\bin\composer.exe di @#@FINAL@

TWS Licensing

TWS Licensing can be performed (based on the needs):

1. Using PVU (Processor Value Unit) licensing  - recommended for a high number of jobs.
2. Using per jobs licensing - recommended for a high number of servers where the jobs needs to run

   1. PVU (Processor Value Unit) licensing it is a unit of measure by which the program can be licensed. The number of PVU entitlements required is based on the processor technology defined by processor value, brand, type, and model number in other words it is based on the CPU cores available to the machine (server) physical / virtual where TWS is deployed and runs jobs, a detailed list can be found on IBM site in PVU table.
e.g. An AMD Opteron: 1 socket with 8 cores per socket has a PVU value of: 1 x 8 x 50 = 500
An Oracle/Sun SPARC M6: 8 sockets with 6 cores per socket has a PVU value of: 8 x 6  x 120 = 5760

Also TWS PVU Licensing supports Sub-Capacity (Virtual) Licensing, in some cases, which in short words you only need to license the cores assigned to a virtual machine rather then the whole cores of the physical one (more details can be found on IBM Passport Advantage Virtualization Capacity (Sub-capacity) Licensing page).
e.g. In you have a Linux farm of 64 physical cores and a virtual machine with 8 cores assigned and it is running TWS you can licence only 8 cores.

!!!!!! Important For Sub-Capacity (Virtual) Licensing iLMT (IBM License Metric Tool) needs to be deployed on each of the systems for which you want to apply the Sub-Capacity licensing.

!!!!!! Important For TWS For Applications the Sub-Capacity (Virtual) Licensing doesn't apply, always you need to license the physical cores on the machine (be careful where you deploy TWS for Apps)

   2. Per jobs licensing in other words you will licence the number of jobs ran (aka 10 MONTHLY JOBS License).
e.g.
Number of daily executed jobs: 500
Number of monthly executed jobs (multiply by 31 ): 15,500
Number of groups of 10 jobs: 1,550 (divide by 10 as the part is per 10 Monthly Jobs)
List price of IBM Workload Automation for 10 jobs equals: X
List price is calculated at 1,550 job packs of 10 jobs multiplied by X.


Additional details about Standby or backup systems — For programs running or resident on backup machines, IBM defines three types of situations: cold, warm and hot. In cold and warm situations, a separate entitlement for the copy on the backup machine is normally not required and typically no additional charge applies. In a hot backup situation, the customer needs to acquire other licenses or entitlements sufficient for that server.

• Cold: A copy of the program may reside, for backup purposes, on a machine as long as the program is not started. There is no additional charge for this copy. 
• Warm: A copy of the program may reside for backup purposes on a machine and is started, but is idling, and is not doing any work of any kind. There is no additional charge for this copy. 
• Hot: A copy of the program may reside for backup purposes on a machine, is started, and is doing work. The customer must acquire a license or entitlement(s) for this copy and there will generally be an additional charge. Doing work includes, for example, production, development, program maintenance, and testing. It also could include other activities such as mirroring of transactions, updating of files, synchronization of programs, data, or other resources (for example, active linking with another machine, program, database or other resource, and so on), or any activity or configurations that would allow an active hot switch or other synchronized switch-over between programs, databases, or other resources to occur. In the case of a program or system configuration that is designed to support a high availability environment by using various techniques (for example, duplexing, mirroring of files, or transactions, maintaining a heartbeat, active linking with another machine, program, database, or other resource), the program is considered to be doing work in the hot situation and a license or entitlement must be purchased. 

!!! Note: For TWS masters, if they run only TWS application jobs e.g. FINAL, the licence is not required.

Examples of calculation:
A TWS env. as in the picture below:

And the current price for both cases:

The licence calculation will be:
1. Using PVU licensing:

• ERP Server: Oracle/Sun SPARC M6: 8 sockets with 6 cores per socket PVU usage: 8 x 6 x 120 = 5,760
• Warehouse: AMD Opteron: 2 sockets with 8 cores per socket PVU usage: 2 x 8 x 50 = 800
• ETC: Intel Xeon 7500: 1 socket with 6 cores per socket  PVU usage: 1 x 6 x 120 = 720
• TWS Master doesn't run jobs no PVU usage.

For 1 year the TWS PVU licence and support will be: (5,760 + 800 + 720) x 40.5 = 294,840 USD

2. Using per jobs licensing:

• ERP Server: running 500 jobs / day, in a month 500 x 31 = 15,500, divide by 10 as the part is per 10 Monthly Jobs is 1,550 groups
• Warehouse: running 50 jobs / day, in a month 50 x 31 = 1,550, divide by 10 as the part is per 10 Monthly Jobs is 155 groups
• ETC: running 10 jobs / day, in a month 10 x 31 = 310, divide by 10 as the part is per 10 Monthly Jobs is 31 groups
• TWS Master doesn't run jobs no PVU usage.

For 1 year the TWS per job licence and support will be: (1,550 + 155 + 31) x 56.25 = 97,650 USD.

So in this particular case TWS per job licence will be the best fit as it costs ~67% less.