PJ40977: KEYSTORE VALUES IN KEYPOINT C PRODUCES STATE CHANGE DISABLED AT 1052
Closed as program error.
See Problem Summary.
APAR NUMBER: PJ40977 PRODUCT: z/TPF FUNCTIONAL AREA: Secure Key Management SHIPPED IN PUT: 10 ABSTRACT: To correct APAR PJ31450, issue disabled wait state console message during system restart for secure key management error conditions and issue warning message for ZKEYS KEYSENT command if there are not enough fixed file records defined in master keystore. PACKAGE CONTENTS: Source Segments: (C) base/rt/ckyr.asm (C) base/rt/cky9.asm Object Only Binaries: None. Configuration Independent Binaries: (C) base/load/CKY9.so (C) base/load/CKYR.so (C) base/obj/cky9.o (C) base/obj/ckyr.o Support Files: base/lst/cky9.lst base/lst/ckyr.lst base/lst/CKY9.map base/lst/CKYR.map OTHER BINARIES TO BUILD: NO None. COMMENTS: During system restart in program ckyr.asm, various error conditions from secure key management and public key infrastructure (PKI) processing cause the z/TPF system to go into a disabled wait state, but a disabled wait state console message is not sent to the prime cras when the condition occurs. The first indication of the disabled wait state condition may not occur until the ZCYCL command is entered to cycle the system above 1052 state. If the ZKEYS KEYSENT command is entered and the maximum number of entries in the memory keystore is currently equal to 0, the ZKEYS KEYSENT command processing enables the maximum number of entries in the memory keystore to be changed to a positive number even when there are not enough #IKEYS fixed file records defined in the master keystore.
SOLUTION: Error message KEYS0199E will now be issued out of program ckyr.asm whenever this program changes the system to a disabled wait state as a result of an error condition occurring out of secure key management or PKI processing during system restart. If a ZKEYS KEYSENT command is entered and the maximum number of entries in the memory keystore is currently equal to 0, the KEYSENT value will be changed, but warning message KEYS0169W will be issued when there are not enough #IKEYS fixed file records defined in the master keystore. COREQS: NO None. MIGRATION CONSIDERATIONS: YES Functional, automation, and operation changes: New messages: KEYS0169W and KEYS0199E. BUILD COMMANDS AND INSTRUCTIONS: YES #maketpf commands for linux maketpf -f CKY9 cky9.o maketpf -f CKYR ckyr.o maketpf CKY9 link maketpf CKYR link UPDATED INFORMATION UNITS: YES z/TPF Messages (Online, SQLCODEs, and errno Values) See your IBM representative if you need additional information. DOWNLOAD INSTRUCTIONS: http://www.ibm.com/software/htp/tpf/maint/maintztpf.html APAR URL: http://www.ibm.com/software/htp/tpf/ztpfmaint/put10/PJ40977.htm
Reported component name
Reported component ID
NoSpecatt / Xsystem
Last modified date
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fixed component name
Fixed component ID
Applicable component levels