IBM Support

OA61188: NEW FUNCTION - SUPPORT FOR DECRYPT-ONLY ARCHIVED ENCRYPTION KEYS FOR NON-VSAM ENCRYPTED DATA SETS.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as new function.

Error description

  • New Function
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All users of non-VSAM encrypted data sets (extended format,  *
    * basic format, large format, PDSE) with archived encryption   *
    * keys.                                                        *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * New function support for decrypt-only archived encryption    *
    * keys for non-VSAM encrypted data sets.                       *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Apply PTF before exploiting new function.                    *
    ****************************************************************
    After installing PTFs for OA61188/OA61209, users can exploit the
    XFACILIT class resource, CSF.KDS.KEY.ARCHIVE.DATA.DECRYPT for
    non-VSAM encrypted data sets. This facility class indicates that
    archived encryption keys should only be used for decryption
    operations. If the resource is defined, attempting to open an
    encrypted non-VSAM data set with an archived encryption key for
    anything other than input will fail. Such an open will fail with
    IEC143I 213-9B. If defined, a call to IGGENC CONNECT will return
    an informational return code 4 and reason code 00000D5F
    00001611. An attempt to issue IGGENC ENCRYPT will fail with an
    error return code 8 and reason code 00000000 00001622
    

Problem conclusion

  • Non-VSAM support for decrypt-only archived encryption keys has
    been added.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA61188

  • Reported component name

    BASE ACCESS MET

  • Reported component ID

    5695DF102

  • Reported release

    250

  • Status

    CLOSED UR1

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    YesSpecatt / New Function / Xsystem

  • Submitted date

    2021-04-06

  • Closed date

    2021-08-04

  • Last modified date

    2021-09-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    OA61207 OA61208 OA61209 UJ06306

Modules/Macros

  • IGG0193W IGGENCPL IGGENCAM IGGENCPC IGG0193B IGG0194S
    

Fix information

  • Fixed component name

    BASE ACCESS MET

  • Fixed component ID

    5695DF102

Applicable component levels

  • R250 PSY UJ06306

       UP21/08/20 P F108  

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M"},"Platform":[{"code":"PF054","label":"z\/OS"}],"Version":"250"}]

Document Information

Modified date:
02 September 2021