IBM Support

DFHAC2002 when entering the modify command

Technote (troubleshooting)


You receive the following message from your CICS Transaction Server for z/OS (CICS TS) region when trying to enter a modify command:

DFHAC2002 to use this transaction CEMT you must sign on or have the right security level


Userid (UTOKEN) is not defined for console within the security manager.

Diagnosing the problem

The auxiliary trace shows the MODIFY command coming in:


TASK-TCP   KE_NUM-0015 TCB-QR   /00AF8680 RET-99A719CA
1-0000  00000000 440B0028 00000000 01030015
2-0000  19165498
3-0000  aaaaaaa bbbbbbbb
4-0000  cccccccc dddddddd eeeeeeee ffffffff

The pointer to the CIBXUTOK is in the first word of the second parameter.

Resolving the problem

Define a RACF OPERPARM STATEMENT for the extended MCS (EMCS) console within the security manager. Include a userid and length.

If you are running CA Top Secret, CA Support recommends the following command from the OPS LOG:


For further questions on setting this up with Top Secret, contact CA Technologies Support.

Related information


Product Alias/Synonym

CICS/TS CICS TS CICS Transaction Server

Document information

More support for: CICS Transaction Server

Software version: 3.1, 3.2, 4.1, 4.2

Operating system(s): z/OS

Reference #: 1306452

Modified date: 07 May 2012