IBM Support

OA50592: DFSMSHSM NEW FUNCTION FOR DFSMS DATA SET ENCRYPTION

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as new function.

Error description

  • New Function    FIXCAT: ZOS0204C/K
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All users of DFSMShsm planning to use the    *
    *                 DFSMS z/OS data set encryption enhancement   *
    ****************************************************************
    * PROBLEM DESCRIPTION: New Function - Provides support for     *
    *                      the DFSMS z/OS data set encryption      *
    *                      enhancement shipped with DFSMS          *
    *                      APAR OA50569.                           *
    *                      The full function support is active     *
    *                      only when the enabling APAR OA50569     *
    *                      is applied.                             *
    *                      Refer to z/OS DFSMS Using Data Sets     *
    *                      for information on using z/OS data set  *
    *                      encryption which provides encryption    *
    *                      support for extended format data sets.  *
    *                                                              *
    *                      DFSMShsm specifics include:             *
    *                      -Processing encrypted files by all      *
    *                      DFSMShsm functions                      *
    *                      -Providing an encryption indicator in   *
    *                      the migration and backup DCOLLECT       *
    *                      records                                 *
    *                      -Supporting ABARS ALLOCATE listed data  *
    *                      sets during ARECOVER, where it is       *
    *                      allocated with its encryption           *
    *                      information defined for it when it      *
    *                      was processed by ABACKUP.               *
    *                                                              *
    *                      Additionally:                           *
    *                      -Providing an PDSE Version number       *
    *                      in the DCOLLECT migration and backup    *
    *                      records.                                *
    *                      -Providing an VSAM CA Reclaim           *
    *                      indicator provided in the DCOLLECT      *
    *                      migration record                        *
    *                      -Updated the sample REXX program,       *
    *                      DCOLREXX, to map out these new          *
    *                      fields.  Available in SYS1.SAMPLIB,     *
    *                      ARCTOOLS member.                        *
    ****************************************************************
    * RECOMMENDATION: This APAR introduces support for             *
    *                 z/OS data set encryption.  For full function *
    *                 support, install DFSMS APAR OA50569 which    *
    *                 brings in the support for all other z/OS     *
    *                 components.                                  *
    ****************************************************************
    

Problem conclusion

Temporary fix

Comments

  • DFSMShsm has been updated to support access method encrypted
    data sets.  R22COEXS/K  R23COEXS/K DSENCRYPT/K
    ZOS0202C/K
    ZOS0203C/K
    
    This new function APAR is for z/OS V2R1 and V2R2.
    Refer to APAR OA50569 for complete list of publications updated
    in support of this new function.
    To view the PDF documentation changes for this support refer to
    the following FTP website.
    http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf
    
    DFSMShsm specific documentation for this new function has been
    provided in the following publications.
     z/OS V2R1.0 MVS System Messages, Vol 2 (ARC-ASA) SA38-0669-03
     z/OS DFSMShsm Data Areas GC14-7504-02:
     z/OS DFSMS Access Method Services Commands SC23-6846-02
     z/OS DFSMShsm Storage Administration SC23-6871-03
    
    ===============================================================
    z/OS V2R1.0 MVS System Messages, Vol 2 (ARC-ASA) SA38-0669-03
    (added new message ARC6190E to z/OS V2R1)
    
    ARC6190E DATA SET data-set-name1 FROM THE ALLOCATE LIST
    CANNOT BE PROCESSED AS IT WAS FOUND TO BE ENCRYPTED.
    
    Explanation
    During aggregate recovery, verification processing determined
    that a data set from the allocate list cannot be processed as it
    was found to be encrypted.  When the data set was included in th
    allocate list during aggregate backup it was encrypted.  It can
    not be processed on a host that does not support creating
    encrypted data sets. The data set is not allocated.
    
        data-set-name1 is the name of the data set that received the
                       verification failure.
    
    System action
    DFSMShsm processing continues. Aggregate recovery continues to
    process the remaining data sets, but does not complete
    successfully.
    
    Programmer response
    Allocate the data set by other means.
    
    Source
    DFSMShsm
    
    ===============================================================
    z/OS DFSMShsm Data Areas GC14-7504-02:
    
    MCD-Migration Control Data Set Data Set Record
    Table. MCD-MCDS Data Set Record
    (added MCDF_ENCRYPT, MCD_PDSEV, MCDFLGS4 and
     MCDF_CA_RECLAIM_ELIGIBLE fields)
    
        Offsets
    Actual / FIXCDS   Type    Len Name        Description
    448(1C0) 384(180) BITSTRING 1 MCDFLGS3    This byte contains the
                                              following flags
                      .... ..1.   MCDF_CLOUD  When set to 1, Data
                                              set was migrated to
                                              the cloud
                      .... ...1   MCDF_ENCRYPT When set to 1, the
                                              data set was encrypted
                                              by the access method
    . . .
    
    455(1C7) 391(187) FIXED     1 MCD_PDSEV   PDSE Version number.
                                              N/A when the value
                                              is zero
    . . .
    496(1F0) 432(1B0) BITSTRING 1 MCDFLGS4    This byte contains the
    
                                              following flags:
                       1... ....  MCDF_CA_RECLAIM_ELIGIBLE
                                              When set to 1, the
                                              VSAM KSDS data set was
                                              eligible for CA
                                              reclaim processing
                                              when migrated
    MCD Data Area Cross-Reference
    Table. MCD Data Area Cross-Reference Table
    Name            Hex         Hex        Struct Level
                   Offset     Value
    MCDF_ENCRYPT    1C0         01         3
    . . .
    MCD_PDSEV       1C7                    2
    . . .
    MCDFLGS4        1F0                    2
    . . .
    MCDF_CA_RECLAIM_ELIGIBLE
                    1F0         80         3
    
    MCC-Backup Control Data Set Backup Version Record
    Table. MCC-BCDS Backup Version Record
    
    (added MCC_PDSEV and MCCF_ENCRYPT fields)
    
        Offsets
    Actual / FIXCDS   Type   Len     Name        Description
    365(16D) 301(12D) BIT(8)   1     MCCFLGS3    More Flags
                      .... ..1.      MCC_2TB     When set to 1,
                                                 Size exceeds 2TB
                      .... ...1      MCCF_ENCRYPT When set to 1,
                                                 the data set was
                                                 encrypted by the
                                                 access methods
    . . .
    370(172) 306(132) FIXED    1     MCC_PDSEV   PDSE Version number
                                                 N/A when the value
                                                 is zero
    371(173) 307(133) FIXED    1     *           Reserved
    
    MCC Data Area Cross-Reference
    Table. MCC Data Area Cross-Reference Table
    Name            Hex        Hex          Struct Level
                   Offset     Value
    MCCF_ENCRYPT    16D         01          3
    . . .
    MCC_PDSEV       172                     2
    
    UTILP-DFSMShsm Data Collection Interface
    The following table defines the mapping for migrated data set
    information (record type 'M').
    Table. ARCUTIL-Migrated Data Set Record
    
    MIGRATED DATA SET INFORMATION (RECORD TYPE "M")
    (added UMENCRP, UMPDSEV and UM_CA_RECLAIM_ELIG fields)
    
        Offsets
    Decimal(Hex) Type        Len   Name      Description
    160 (A0)     BITSTRING     1   UMFLAG2    INFORMATION FLAG 2
                 .... ...1         UMENCRP    IF SET TO 1, DATA SET
                                              IS ENCRYPTED
    161 (A1)     FIXED         1   UMPDSEV    PDSE Version number.
                                              N/A when value is zero
    . . .
    
    214 (D6)     BITSTRING     1   UMFLAG3    Information flag #3
                 .1.. ....         UM_CA_RECLAIM_FLAG
                                              ON, if the VSAM KSDS
                                              data set was eligible
                                              for CA reclaim
                                              processing when
                                              migrated
                 ..xx xxxx         *          Reserved
    
    ARCUTIL Data Area Cross-Reference
    Table. ARCUTIL Data Area Cross-Reference Table
    Name            Hex        Hex          Struct Level
                   Offset     Value
    UMENCRP          A0         01          3
    UMPDSEV          A1                     2
    . . .
    UM_CA_RECLAIM_FLAG
                     D6         40          3
    
    UTILP-DFSMShsm Data Collection Interface
    The following table defines the mapping for backup version
    information (record type 'B').
    Table. ARCUTIL-Backup Version Information Record
    
    BACKUP DATA SET INFORMATION (RECORD TYPE "B")
    (added UBENCRP, UBPDSEV fields)
        Offsets
    Decimal(Hex) Type      Len   Name        Description
    161 (A1)     BITSTRING   1   UBFLAG3     INFORMATION FLAG 3
                 .... 1...       UBENCRP     WHEN SET TO 1, DATA
                                             SET IS ENCRYPTED
                 .... .xxx       *           RESERVED
    . . .
    191 (BF)     FIXED       1   UBPDSEV     PDSE Version number.
                                             N/A when value is
                                             zero
    192 (C0)     CHARACTER   12  *           Reserved
    
    ARCUTIL Data Area Cross-Reference
    Table. ARCUTIL Data Area Cross-Reference Table
    Name            Hex        Hex          Struct Level
                   Offset     Value
    UBENCRP          A1          08          3
    UBPDSEV          BF                      2
    
    ===============================================================
    z/OS DFSMS Access Method Services Commands SC23-6846-02
    Appendix F. Interpreting DCOLLECT OUTPUT
    Table. DCOLLECT Output Record Structure
    
    MIGRATED DATA SET INFORMATION (RECORD TYPE "M")
    (Added UMPDSEV, UMENCRP and UM_CA_RECLAIM_ELIG fields. Others
    added to correct the documentation).
    Offset    Type      Len   Name         Description
    184 (B8)  BITSTRING   1   UMFLAG2      INFORMATION FLAG 2
              .... ...1       UMENCRP      IF SET TO 1, DATA SET
                                           IS ENCRYPTED
    185 (B9)  FIXED       1   UMPDSEV      PDSE Version number.
                                           N/A when the value is
                                           zero.
    . . .
    238 (EE)  BITSTRING   1   UMFLAG3      Information flag #3
              1... ....       UMEMPTY      On, if the set was
                                           empty at the time of
                                           migration
              .1.. ....       UM_CA_RECLAIM_ELIG
                                           ON, if the VSAM KSDS
                                           was eligible for CA
                                           reclaim processing
                                           when it was migrated
              ..xx xxxx          *         Reserved
    239 (EF)  BITSTRING   1   UMFLAG4      Information flag #4
              1... ....       UMALLSP_FMB  Mbyte flag for UMALLSP
              .1.. ....       UMUSESP_FMB  Mbtye flag for UMUSESP
              ..1. ....       UMRECSP_FMB  Mbyte flag for UMRECSP
              ...1 ....       UMDSIZE_FMB  Mbyte flag for UMDSIZE
    
    BACKUP DATA SET INFORMATION (RECORD TYPE "B")
    (Added UBPDSEV and UBENCRP fields).
    
    Offset    Type       Len   Name        Description
    185 (B9)  BITSTRING    1   UBFLAG3     INFORMATION FLAG 3
              .... 1...        UBENCRP     WHEN SET TO 1, DATA
                                           SET IS ENCRYPTED
              .... .xxx        *           RESERVED
    . . .
    215 (D7)  FIXED        1   UBPDSEV     PDSE Version number.
                                           N/A when the value
                                           is zero
    216 (D8)  CHARACTER    12   *          Reserved
    ===============================================================
    z/OS DFSMShsm Storage Administration SC23-6871-03:
    
    DFSMShsm Storage Administration Reference >
    SETSYS command: Establishing or changing the values of DFSMShsm
    control parameters >
    Optional parameters of the SETSYS command >
    > COMPACT ALL and NONE: Specifying whether to compact data sets
    Added Third note:
    Since encrypted data sets do not compress, they will not be
    compacted during migration or backup.
    
    > COMPACT DASDBACKUP and NODASDBACKUP: Specifying whether to
    compact data sets during backup to DASD
    Added Third note:
    Since encrypted data sets do not compress, they will not be
    compacted during backup to DASD.
    
    > COMPACT DASDMIGRATE and NODASDMIGRATE: Specifying whether to
    compact data sets during migration to DASD
    Added Fifth note:
    Since encrypted data sets do not compress, they will not be
    compacted during migration to DASD.
    
    > COMPACT TAPEBACKUP and NOTAPEBACKUP: Specifying whether to
    compact data sets during backup to tape
    Added Third note:
    Since encrypted data sets do not compress, they will not be
    compacted during backup to tape.
    
    > COMPACT TAPEMIGRATE and NOTAPEMIGRATE: Specifying whether to
    compact data sets during migration to tape
    Added Third note:
    Since encrypted data sets do not compress, they will not be
    compacted during migration to tape.
    
    > ZCOMPRESS (DASDBACKUP (NO | YES)) : Specifying whether to
    use zEDC Services for data sets during backup to DASD
    Added Third note:
    Since encrypted data sets do not compress, zEDC compression
    services will not be used during backup to DASD.
    
    > ZCOMPRESS (DASDMIGRATE (NO | YES)) : Specifying whether to
    use zEDC Services for data sets during migration to DASD
    Added Third note:
    Since encrypted data sets do not compress, zEDC compression
    services will not be used during migration to DASD.
    
    > ZCOMPRESS (TAPEBACKUP (NO | YES)) : Specifying whether to
    use zEDC Services for data sets during backup to tape
    Added Third note:
    Since encrypted data sets do not compress, zEDC compression
    services will not be used during backup to tape.
    
    > ZCOMPRESS (TAPEMIGRATE (NO | YES)) : Specifying whether to
    use zEDC Services for data sets during migration to tape
    Added Third note:
    Since encrypted data sets do not compress, zEDC compression
    services will not be used during migration to tape.
    
    > SMALLDATASETPACKING and NOSMALLDATASETPACKING: Specifying
    whether DFSMShsm should use small data set packing
    Add Sixth note:
    Encrypted files will not use the SDSP data sets at targets for
    migration to ML1 DASD
    

APAR Information

  • APAR number

    OA50592

  • Reported component name

    DFSMSHSM, ISMF

  • Reported component ID

    5695DF170

  • Reported release

    220

  • Status

    CLOSED UR1

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    YesSpecatt / New Function / Xsystem

  • Submitted date

    2016-05-26

  • Closed date

    2017-07-13

  • Last modified date

    2019-03-29

  • APAR is sysrouted FROM one or more of the following:

    OA50569

  • APAR is sysrouted TO one or more of the following:

    UA92671 UA92672

Modules/Macros

  • ARCBDSBC ARCBUDS  ARCCLUSZ ARCKBLDC ARCKWRTT
    ARCMDSN  ARCMDSUV ARCMPVF1 ARCMSDSP ARCMVDS  ARCNALLV ARCNCDSW
    ARCNLDSN ARCNOTR1 ARCNRDSI ARCNRDS1 ARCNVRFY ARCTOOLS ARCUDATA
    ARCUTILP ARCVVSC  ARCWLOC  ARCWMSGS ARCW99AL
    

Publications Referenced
SA38066903GC14750402SC23684602SC23687103 

Fix information

  • Fixed component name

    DFSMSHSM, ISMF

  • Fixed component ID

    5695DF170

Applicable component levels

  • R210 PSY UA92671

       UP17/08/07 P F708

  • R220 PSY UA92672

       UP17/08/07 P F708

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"220","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
29 March 2019