According to security bulletins, Apache Axis is now EOL. Are there ways to disable this component as it is appearing within Service Desk Manager?
Release: 17.3 or higher
Component: CA Service Desk Manager
Although SDM now supports CXF based webservices as of RU18, some of the other components in the solution are still dependent on SDMs AXIS based webservices.
The components that rely on AXIS based webservices from Service Management solution are Service Catalog and ITAM. Future RU's will address the internal reliance on the AXIS based web services within Service Management
Other CA Products like ITCM, Spectrum, and ITPAM all require the SDM's AXIS based webservices to work. These products have been advised to move towards CXF.
If you are using Service Desk instance that is integrated with any other products outlined above, you will still need to retain the AXIS based SOAP webservices to be present and working.
If however, Service Desk is not integrated with any other product, then you may perform the following manual steps to stop AXIS web services working.
1. Stop the CA Service Desk Manager services
2. Navigate to NX_ROOT\bopcfg\www\CATALINA_BASE\shared\lib and remove AXIS.jar and AXIS-ant.jar
3. Delete the folder NX_ROOT\add-ons\AXIS folder
4. Start the CA Service Desk Manager Services.
Proceed with extreme caution as the integration with ServiceDesk will break for products requiring AXIS.
We recommend performing a backup of your environment and to test in a non-prod instance first. Please also check if your security software will be satisfied with the removal of the AXIS component as described above.