PJ40977: KEYSTORE VALUES IN KEYPOINT C PRODUCES STATE CHANGE DISABLED AT 1052

APAR status

• Closed as program error.

Error description

• See Problem Summary.
  

Local fix

Problem summary

• APAR NUMBER:  PJ40977
  PRODUCT:  z/TPF
  FUNCTIONAL AREA:  Secure Key Management
  SHIPPED IN PUT:  10
  
  ABSTRACT:
  To correct APAR PJ31450, issue disabled wait state console
  message during system restart for secure key management error
  conditions and issue warning message for ZKEYS KEYSENT command
  if there are not enough fixed file records defined in master
  keystore.
  
  PACKAGE CONTENTS:
  Source Segments:
  (C) base/rt/ckyr.asm
  (C) base/rt/cky9.asm
  
  Object Only Binaries:
  None.
  
  Configuration Independent Binaries:
  (C) base/load/CKY9.so
  (C) base/load/CKYR.so
  (C) base/obj/cky9.o
  (C) base/obj/ckyr.o
  
  Support Files:
  base/lst/cky9.lst
  base/lst/ckyr.lst
  base/lst/CKY9.map
  base/lst/CKYR.map
  
  OTHER BINARIES TO BUILD: NO
  None.
  
  COMMENTS:
  During system restart in program ckyr.asm, various error
  conditions from secure key management and public key
  infrastructure (PKI) processing cause the z/TPF system to go
  into a disabled wait state, but a disabled wait state console
  message is not sent to the prime cras when the condition
  occurs. The first indication of the disabled wait state
  condition may not occur until the ZCYCL command is entered to
  cycle the system above 1052 state.
  
  If the ZKEYS KEYSENT command is entered and the maximum number
  of entries in the memory keystore is currently equal to 0, the
  ZKEYS KEYSENT command processing enables the maximum number of
  entries in the memory keystore to be changed to a positive
  number even when there are not enough #IKEYS fixed file records
  defined in the master keystore.
  

Problem conclusion

• SOLUTION:
  Error message KEYS0199E will now be issued out of program
  ckyr.asm whenever this program changes the system to a disabled
  wait state as a result of an error condition occurring out of
  secure key management or PKI processing during system restart.
  
  If a ZKEYS KEYSENT command is entered and the maximum number of
  entries in the memory keystore is currently equal to 0, the
  KEYSENT value will be changed, but warning message KEYS0169W
  will be issued when there are not enough #IKEYS fixed file
  records defined in the master keystore.
  
  COREQS: NO
  None.
  
  MIGRATION CONSIDERATIONS: YES
  Functional, automation, and operation changes:
  New messages: KEYS0169W and KEYS0199E.
  
  
  
  BUILD COMMANDS AND INSTRUCTIONS: YES
  #maketpf commands for linux
  maketpf -f CKY9 cky9.o
  maketpf -f CKYR ckyr.o
  maketpf CKY9 link
  maketpf CKYR link
  
  UPDATED INFORMATION UNITS: YES
  z/TPF Messages (Online, SQLCODEs, and errno Values)
  
  See your IBM representative if you need additional information.
  
  DOWNLOAD INSTRUCTIONS:
  http://www.ibm.com/software/htp/tpf/maint/maintztpf.html
  
  APAR URL:
  http://www.ibm.com/software/htp/tpf/ztpfmaint/put10/PJ40977.htm
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Publications Referenced

SK2T8062

Fix information

• Fixed component name

  Z/TPF

• Fixed component ID

  5748T1501

Applicable component levels

• R110 PSY

     UP